last executing test programs: 3.19902554s ago: executing program 4 (id=4136): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r6, 0x111, 0x6, 0x0, &(0x7f0000000080)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 3.032398607s ago: executing program 4 (id=4139): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626ff96430000000001700000000d5001400010076657468305f746f5f7465616d00"], 0xec}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="200000000000000014001a80100004800c000980"], 0x34}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r4, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, 0x0, &(0x7f0000000080)) 2.857296114s ago: executing program 3 (id=4143): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2d0, 0x2c, 0x200, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x29c, 0x2, [@TCA_MATCHALL_ACT={0x298, 0x2, [@m_ife={0x54, 0x2001, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x3, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x118, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xb4, r3, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @multicast1}}}], 0x20}}], 0x1, 0x2400005c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) socket$caif_stream(0x25, 0x1, 0x0) (async) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8804) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01042dbd7000ffdbdf250a00000018000180140002007767310000000000000000000000000044372a6a01c72e4312ef53fb0afe1c6c9256ea013a8a0a23e874f055922bb321d09e03862ebc023e23ecff17e24d0870974596fdd4a702e524b4738095ce839935accf91586526dfd8f0ee437d998e6a5820787acb2eaf0b51fe4b4a6ef4b066afe4b8e509dfcde0e634b09bfdb9ac37f799e9befcd4345aa8807beaa869c8adeb9a50eaef181350e655888c06c6ab83dbc8a4ecf4352b8501d600713d44072d579ba68f91b1166f2913537ef1816ba544d897e68e2863c3ff86dccd09e45b4bee3a770f42e703b1aec1fe"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r12, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20008810) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r12, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20008810) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 2.599665511s ago: executing program 2 (id=4147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="000088f888a800000000aaaac5aaaaaa88a8a00081"], 0x72) sendfile(r2, r3, 0x0, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delroute={0x48, 0x19, 0x200, 0x70bd29, 0x25dfdbfc, {0xa, 0x10, 0x20, 0x4, 0xfc, 0x4, 0xc8, 0x8, 0x800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_IIF={0x8}, @RTA_IIF={0x8}, @RTA_OIF={0x8, 0x4, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x1, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x40000) 2.360194422s ago: executing program 3 (id=4150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x8, 0x0}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) 2.282569652s ago: executing program 3 (id=4151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x20, 0x700, 0x4, 0x9, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0xb, 0x1a, [@empty, @private=0xa010100]}]}}}}}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xa4, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'sit0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200048c4}, 0x20000001) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x67}, @exit], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, 0x0) socket(0x14, 0x1, 0x4) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000680)={0xe3e9, {{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x1, 0x7, [{{0xa, 0x4e23, 0xd2e, @private0, 0x6}}, {{0xa, 0x4e24, 0x8236, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}, {{0xa, 0x4e22, 0x3, @private2, 0x8}}, {{0xa, 0x4e21, 0x61f9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {{0xa, 0x4e21, 0x8, @loopback}}, {{0xa, 0x4e20, 0x0, @private0, 0xb}}]}, 0x410) 2.099709212s ago: executing program 4 (id=4154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r0}, 0x10) r1 = socket(0x21, 0x2, 0x10000000000002) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0000ea", @ANYRES16=r2, @ANYBLOB="000827bd7000fbdbdf250a00000008002b000300000005002a000100000008003a000200000005002d000000000008003100497f000008003c00434d0000"], 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x4000004) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x4154, @vifc_lcl_addr=@empty, @empty}, 0x10) recvmmsg(r1, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23e}]}}) 1.467829896s ago: executing program 0 (id=4157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000480)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.200387468s ago: executing program 0 (id=4159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) getsockopt(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000100)=""/130, &(0x7f0000000000)=0x82) 1.199964073s ago: executing program 2 (id=4160): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) 1.180234259s ago: executing program 1 (id=4161): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x20, 0x809, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{}, {}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="399a96fd0000000061108f000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="eb"], 0x30}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10007d80", @ANYRES32=r9, @ANYRESDEC=r8], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000006c0)={r8, @in={{0x2, 0x4e22, @local}}, 0x0, 0x5}, 0x90) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a01042adc9a5444e07200000000530c00000100000008000a40000000b36900020073797a32000000000900010073797a3000000000080005400001001f08000340000001692cab6dddcb733c4c330000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000005a1400000010000100000000000040e9066c7189558f5b5c094801436f04391ca804407ff09a78c7b769cd664787410340de90fa449f7400d15a59ea62dd3d1f90d3e56c6dad8581d1883c0ec958c87f1cf10892bc0f42c3748a6aad43fb4b4d709b11f6501302b1b700811db1958bdf0e4ff22e31b6388060e87d9f13625faaaf038f30304abbdbe8783e11a03b84e7c30fa67705d849403b8124e8d8977eba0dd3d9337a01351bf3c91c7ab274bf"], 0xb8}, 0x1, 0x0, 0x0, 0x200048d0}, 0x60) r12 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r12, &(0x7f0000000500)="ec55de55b41ee1f664c3e2853aeb6ed7b7dba5ead6466677be098b1a489e42325f30df8caf6d103a75f848b422012f642a35ed26f54564b46d3fc68a26b38b75357f210ef13893111d6e70e8e012da13fb779d120cf6fb4fd739053ae519900824bbedcb3e6d60430ab2521a2c990ff69e49ab9ea438c6ec2097e65bb992a2657666eb147f306c42434fae7d2eba84e9e3df10ba5748bf6560ff95d9cef9dc5ef78395763d2037bc3e109d0302ef4181f72ebaff4546bc9a47e51ee3c97f4473dfa1afd8c9492c34ec84a5616cfe3042c8834906217d32234c265b4394e97bce", 0xe0, 0x4, &(0x7f0000000600)={0x2, 0x0, @empty, 0x1}, 0x10) read(r4, &(0x7f00000007c0)=""/239, 0xef) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3fb, 0x800, 0x70bd2b, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) 1.11278201s ago: executing program 0 (id=4162): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r3) (async) close(r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x6a, 0x3, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x6a, 0x3, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38) 1.040327742s ago: executing program 4 (id=4163): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x3, 0x9, @mcast2, 0x9}], 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x20004}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x800000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x496a0}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x40010, r0, 0x660d8000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x29, 0x32, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 986.258889ms ago: executing program 4 (id=4164): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) syz_open_procfs$namespace(r1, &(0x7f0000001780)='ns/ipc\x00') syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/net\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r3, &(0x7f00000053c0)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r5, r2, 0x4, r2}, 0x10) socket(0xf, 0x6, 0xffd6) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x1000, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x5}, 0x0, {[0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r8, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r7}, 0x10) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000400)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 930.194472ms ago: executing program 0 (id=4165): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8}]}, 0x30}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1404, 0x1, 0x70bd2c, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}}, 0x20004018) r4 = socket$inet(0x2, 0x5, 0xa825eaa) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000500)={{0x2, 0x4e23, @broadcast}, {0x6, @remote}, 0x32, {0x2, 0x4e23, @private=0xa010101}, 'geneve0\x00'}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x16, @empty, 0x4e20, 0x3, 'lc\x00', 0x23, 0x3, 0x2b}, 0x2c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x60}, 0x1, 0x0, 0x0, 0x408d0}, 0x80) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)={0x14, r7, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80000d4}, 0x4088800) 818.867614ms ago: executing program 2 (id=4166): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x50, 0x1410, 0x8b7fbbc5948fecd9, 0x2070bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) 818.330002ms ago: executing program 3 (id=4167): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000002200)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) (async) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000240)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x54, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x54, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket(0x2000000015, 0x80005, 0x0) (async) r8 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x6, @empty, 0x3}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000080), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000000080), 0x4) r9 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r10 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r10, r6}}}, @rights={{0x18, 0x1, 0x1, [r9, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newae={0x1ec, 0x1e, 0x900, 0x70bd2c, 0x25dfdbfe, {{@in=@broadcast, 0x4d4, 0x2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x1, 0x3503}, [@sa={0xe4, 0x6, {{@in=@private=0xa010101, @in=@multicast2, 0x4e24, 0x4, 0x4e23, 0x0, 0x2, 0xb0, 0x20, 0x89, r3, r6}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x2, 0x1, 0x2, 0x7ff8000000000000, 0x1, 0x8, 0x100000001, 0x1}, {0x10000, 0x10, 0x3, 0x9}, {0x8, 0x1, 0xfff}, 0x70bd28, 0x3500, 0xa, 0x0, 0x8, 0xc2}}, @algo_auth={0x79, 0x1, {{'sha256-asm\x00'}, 0x188, "25b66ec3904d1bf0d70f6b5b4827c5d830648ccd4920ea99c4d656b47101600634aa7640d845f7257f38d1a2bbb1fcb87d"}}, @tfcpad={0x8}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2d, 0x70bd2b, 0x70bd29, 0x70bd26, 0xb, [0x1ff, 0xf369, 0x101, 0x6, 0xf14]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40004800}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newae={0x1ec, 0x1e, 0x900, 0x70bd2c, 0x25dfdbfe, {{@in=@broadcast, 0x4d4, 0x2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x1, 0x3503}, [@sa={0xe4, 0x6, {{@in=@private=0xa010101, @in=@multicast2, 0x4e24, 0x4, 0x4e23, 0x0, 0x2, 0xb0, 0x20, 0x89, r3, r6}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x2, 0x1, 0x2, 0x7ff8000000000000, 0x1, 0x8, 0x100000001, 0x1}, {0x10000, 0x10, 0x3, 0x9}, {0x8, 0x1, 0xfff}, 0x70bd28, 0x3500, 0xa, 0x0, 0x8, 0xc2}}, @algo_auth={0x79, 0x1, {{'sha256-asm\x00'}, 0x188, "25b66ec3904d1bf0d70f6b5b4827c5d830648ccd4920ea99c4d656b47101600634aa7640d845f7257f38d1a2bbb1fcb87d"}}, @tfcpad={0x8}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2d, 0x70bd2b, 0x70bd29, 0x70bd26, 0xb, [0x1ff, 0xf369, 0x101, 0x6, 0xf14]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40004800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 818.013776ms ago: executing program 0 (id=4168): socket$isdn(0x22, 0x2, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0x7ffffffe, 0x0, 0x1}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) 669.566126ms ago: executing program 0 (id=4169): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp', 0x5) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f0000000140)="7588dd637d4c709a8fea4c88fe3e"}, 0x20) 636.931504ms ago: executing program 3 (id=4170): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x11, 0x5, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x18, {0x1, 0x4, 0xe, 0x2, [0xfffffffffffffff7, 0x5]}}]}, 0x38) r1 = epoll_create1(0x80000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000040)={0x8}) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r3, 0x0, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = accept4(r0, &(0x7f0000000100)=@nfc_llcp, &(0x7f0000000180)=0x80, 0x80800) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1e4, 0x18, 0x4, 0x70bd27, 0x25dfdbfb, {0x4}, [@generic="2b90120a4a0d87655e35eb015c952769c0a41cd04efc929c6429675df2fe9ce0048a4951342a3e363a417cb34448ce829399957ca15c4b97a5d807772b46d4b07f0265e07b5f70c0abfdc0204d76a0a6958fadc9a65658944a279d6d6d384fe1aade987e6ed7c874c5c0b002ebb87695b9421d9a48f929b912ceb2ffc45b8bff99", @nested={0x14c, 0x5, 0x0, 0x1, [@typed={0x3d, 0x103, 0x0, 0x0, @binary="72f101172f71806beeaa8b546d22147fc6f7b069faeb975daea57f5c16f26fc09fd0317389b605d4ec50b3eaba0afc8219652452219ae65a4c"}, @nested={0x4, 0x114}, @generic="06aff464f4c025522216da2366f02c447cad2bd93ac678826a20de1e0c6a7a1c49134db8fc0e84b00fac92395082d9c3433e11185605e79d32fdeb76a9c7202855f8d58438b94ee3aabc86c7", @generic="857283f8c55177f52659d74a978f4b0329b58bd2780ba921bbefc0c8d0c2f0b7f07b1802b6fc8b46d5c8cf5fca47956b4607c865788951d9851a042e1e89ca45ea419b181af3c13558b3612805489d1cc358ef6ebfa9b5ebebb320f0a6449e551bceb5ee2e18457c19dc0e266fec479320ed48e6165b5f8dc489b6fdd562ca62f41c7e3db430817fed7361cd25341becb39ebd7107b3ec5ea47bd2e31d52bec1", @typed={0x14, 0x3c, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x25}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000480)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/32, 0x20}, {&(0x7f0000000540)=""/228, 0xe4}, {&(0x7f0000000640)=""/21, 0x15}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/38, 0x26}], 0x5, &(0x7f00000007c0)=""/138, 0x8a}, 0x40000000) r6 = accept4(r0, &(0x7f00000008c0), &(0x7f0000000940)=0x80, 0x80000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000980)={0x6, 'macsec0\x00', {0x6}, 0x4}) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000a00)={r6, r8}) bpf$LINK_DETACH(0x22, &(0x7f0000000a40)=r8, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000000ac0)=0x4) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40), r8) sendmsg$IPVS_CMD_DEL_DEST(r8, &(0x7f0000000d00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10c, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6972}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x140b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r6) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r11, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000f80)=0x2) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000fc0)={'macvtap0\x00', {0x2, 0x0, @multicast1}}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001040)={0x4, &(0x7f0000001000)=[{0x2, 0x3, 0x10, 0x7c15}, {0x3, 0x90, 0x6, 0x9}, {0x4, 0x2, 0x1}, {0x3, 0x6, 0x9, 0x80000000}]}) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r12, 0x29, 0x41, &(0x7f0000001080)={'filter\x00', 0x9, "a4e86b70c4b5d6d7ff"}, &(0x7f00000010c0)=0x2d) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) 634.962856ms ago: executing program 2 (id=4171): syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04c20c07400b6df4f5c024407c81fe8a3616b4bf3400006cc800"/38], 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0x3, 0x14, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x78) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x24c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0xe2, 0x45, "b02141e8be02a75faf7983835070f071aa0feaa02a13f2ea899716582880e86ade23aa89487f69f823b0009e80514627abcfcb021d5390ee9b7b5ea9f3d517bef2cecb666c35654371d6dd1389f89458b90d9a37ec7155e460550fc79e290a13229f2d82996356e92cf4553fcbf7104790d008a3f4746e643f2cf0fdcf8dbf8061bf20ab8a4fb9bdbfb90f90fc68a2c804ceda83d2ef1f66924b85ddb81c5f89019eac9947bc4302defc9c41eca927a4514664a15d12cff90401fa144d42af621f88220dbb7d6d7693537d6588d734a660af65de311beaf17054086ab136"}, @NL80211_ATTR_TESTDATA={0x91, 0x45, "31efe10edd8c2544fc922d50d3fef020bbcde05e6ac9a5804d58a81101c160a1606479539872873965c27d3b4fa4c22b6280cbd6ce23807cee5c50c5da2b8c3b795fcd937d123091e19e3fb1e61e07a59a62ce8898ef90c6c0b6e2d7b0b80b63af5ca9f97838fa85df47bbfbfd425200c8dffe4bce40774c7c0c50959b8cc5fdea9fde9a99a481e02b44ea9baa"}, @NL80211_ATTR_TESTDATA={0xb6, 0x45, "503548255c60197ac01f31cc0a774c797695b5618c0beeba78b47785643fd18610cfe5764857f6f624bf110ce50f3eb6942fcd7b3db942d75b28176d9501d46f4c92584884d951788b0de53f7088d0f83cabb83adf63f4e61dfb6e6b62b8f47b9b54c6f1ab4a834c8cd72299eb744e427c8577c626b99f8a336d651d89bb189a70787d7cdadb50307cd4754919f8bcce2012cc3be6e90b88520fc4257dd2726faa1efe15520bfc087fd877210b522c958035"}]}, 0x24c}, 0x1, 0x0, 0x0, 0x4040890}, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 512.225807ms ago: executing program 2 (id=4172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x7588, 0x8000}, &(0x7f00000001c0)=0x90) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x80000004}) write$tun(r1, &(0x7f0000000300)={@val={0x1c, 0x8848}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0xffff}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @loopback}, {{0x800, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x2, 0xd, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @fastopen={0x22, 0x8, "0e31e0cfdcd8"}, @fastopen={0x22, 0x12, "a611daaf1e074a83a73706dcf9fdd8cf"}]}}}}}}, 0x56) syz_genetlink_get_family_id$nbd(0x0, r0) 511.784516ms ago: executing program 3 (id=4173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000003c0), 0x4) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) ioctl$TUNSETNOCSUM(r1, 0xff0a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x12, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000300000018110006000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000048a8f4ff0800000018450000070000000000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x0, 0x71, 0x89, &(0x7f0000000540)="9f376e81486fc27e1f2f97b50891fd59e15a4c3ddbc0e1c24b148791da0b005a5faeb23ba3bb98e2b226843d483a5035f9a357a48d0a4cfafd7130843f9ba89e27c2549c3189298827790853d67819a87c0d4374e409ae93ad8ef3cde348c3102ac953e60c3d6fb369a5eaf3d8523f4cdd", &(0x7f00000005c0)=""/137, 0xfffffffc, 0x0, 0xd4, 0x63, &(0x7f00000006c0)="710093744733350225a1e7d96ec3ab4c88ff8577ff56152bdea99eb2fbbd3dec5b79c28d89e9339227a5eeca70675e8b1e86ad296a4dcc3971a3583a0722276e634dc2bb92efadd1e1f14c633c29215750214c459a739e065e7fc3117082efc9f32cc6097410f691fc8bb0696a9dbd69bc8781e66e5193ea2c27fbfb9aa223acc8c22818564d72d488c3ebaa5044e359a31f4b2e1b67ea0b0f29fb09f798a0f75a6f981985b778831c6a8ab8d0342be2d6da6d330c7506fa4013ed1859b958316037a3515c06c06508b0f4c87fbc81fcedfacf27", &(0x7f00000007c0)="3e5c67be3d6e49293b30060fbb34db20fe93c4f5cd666aac812678cf1c06a3f15f3a7beb391b2756519bde2865d41b97bce105c83443565bea0c8f0e484f4b4af01484b8c75fd949fecfe47ac8f48503580165b14af955fbc1dbf43444bee61a62a20d", 0x1, 0x0, 0xfff}, 0x50) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a80)={0x0, @empty, @broadcast}, &(0x7f0000000ac0)=0xc) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0xc0040000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x140, 0x12, 0x800, 0x70bd26, 0x25dfdbfd, {0xb, 0x6, 0x1, 0x7, {0x4e24, 0x4e22, [0x663, 0x7, 0x2, 0x8], [0x5, 0x7, 0xb, 0xc1], r6, [0x10000, 0x6]}, 0x45, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "ca9d2bbbb2738bbf084162989bbf9908d2341abd3f05132ec9d61e8a6a42c52e880d193f8d292eeff2b15ea18fbac94e0699a444f9e3b36be008c388d549f5d2d5a928dd760dfe59a16548e5a88e053566482e57740dcfd260fb59dfa4d1b31fa907ebb857b8d0c4d52f3e7028c991c8d5bbf57f822771c79655dca9786de244e3387a7c296aa35d2686a4c1d2f6368dac577c5fc9856e4856d9bb0b02ff7107a28b4bdc188dbc62f9bbfa69c08f5ee401d1b2f567d42dce201b06ca2ebe384952cbb9c074e28d279f1a35f9156740988e4cf5851bc4f8d201bfb4d24327f41ed989d59826bc7ad9f7d868bfb0"}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r8, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_PMKID={0x14, 0x55, "c2ccdc7a59238bc8080b4684b052a148"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}, @NL80211_ATTR_PMKID={0x14, 0x55, "0582262f88464a4247f4c643aef9f3b5"}, @NL80211_ATTR_PMK={0x14, 0xfe, "6e5ee9c3acae1ee5de6c06ff31cc2e60"}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e20, 0xe, 0x4e23, 0x6, 0xa, 0x80, 0x0, 0x3c, r7, r9}, {0x6, 0x6, 0xa000000000000000, 0x100000001, 0xfffffffffffffffb, 0xa, 0xbed, 0x93}, {0x7, 0x3, 0x7}, 0xb7c, 0x6e6bbc, 0x1, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d6, 0xff}, 0x2, @in6=@mcast2, 0x0, 0x3, 0x2, 0xf5, 0x9, 0x80fd, 0xfffffffa}}, 0xe8) 385.831259ms ago: executing program 2 (id=4174): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x800, 0x0, 0x7, 0x0, 0x0, 0x3, 0x7}, {0x0, 0x0, 0x3}}, [@tmpl={0x144, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x8}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@remote, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1fc}}, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r3, 0x0, 0xc, 0x0, &(0x7f0000000780)) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r4, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) (async) listen(r0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x292081, 0x0) ioctl$PPPIOCDISCONN(r5, 0x7439) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xcb5) accept4$unix(r0, 0x0, 0x0, 0x0) 262.678729ms ago: executing program 1 (id=4175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000150a010800000000000000000100000a090002002d0430e1f70827f108000340000000020b2b7c065f1daa990afea64853042e1dc9ba3347b808162e89695be9b35cd60a6ada3eb5f4f88124da382ef078300a60421db4025c1fbd1c7cd925b3958c048c"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x40010, 0xffffffffffffffff, 0xc252c000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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", @ANYBLOB="cc237013d2097cab601013b7a9860cca4b9536c293a2b3fe4200bc38a1b261c970b15b3962da507810e448e99d3d578789cc14b253618394d8e0a0861a6435055ed0bec85595f39ff72b2439556edc1f6b1cd9e29a1999480ba0af6b7f213acd708365ccc267b3dd84fce7b3e53a2ad2e09c608170b811feab6fb08d7593d5cb1f8ec70ed630c47c3a2220ccee628cb4319580eb1ddcc3850a4776e687eba09071af7827dc9f159384adf0", @ANYBLOB="cf4ebedc1dd35c8e7ca94499f641f25408eede3aca7e8064bf940698632c96ed1f59d2e26fb46d730a19f25398965dfe6aadb63c2796901a54c923d12eec69892bd4731e87044129"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="90e0284942a03882725773301bd24f8f33fc11cb2c6453eb6d23252832588e0df4139aa4ab3af4b93f1f92b66beef27580027b627536ff9809daa4c7dfadeec7a730cab0381a7b872381f34d132030aeca38ef1bbabd31892e4f85ad27f526dc4f58a38925c307401929b0abdf326558f85894b536404cc1b09c224d45c1cd8da5e32ad3c8f613d9a379329271b59cd11aeb21aa3d8c7f139aa4768bfb30a89c55d3ac18d6f6a40d0df029be438ae15b7128c7321d717a977fe40f", @ANYRESDEC=r1, @ANYRES64=r2, @ANYRESDEC, @ANYRES8=r1, @ANYRESDEC=r3, @ANYBLOB="f9aaee4e7f15eb952d781d8bdf2086add48f1fa3c001d3d0a7f807cc772d04a07058339c443215f3ab314febdf5567f0468fcb7dcd273bab5d536c35e54c03ae6c1d56bb1e0dc0c74a802da4f4980c72b0ffea7357e195e96b594101ecb862d684da9a85443baca43167fb31ccff73a065707ec432c3f5dbb5dd37324389f187bde8231fb927f8b551a201580ca726c811f6cfdd3b149014f8e3bdf8b740e77975e6b5a1f3d2794367afb9cb00a9553786e5c11de00bb46b48b4dd4bac36843927bcafd2a6e1bf7e0eee521a97"], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000080002000300000004000480080002000100000018000c8014000b8008000900000000abadf332c58b0008000a100800000004000880"], 0x44}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf251400000008001d00", @ANYRES32=r8, @ANYBLOB="08001d00", @ANYRES32, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0xc081}, 0x4004000) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x1000, 0x2}, 0x90) (async) socket$kcm(0x29, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) 152.314036ms ago: executing program 1 (id=4176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000006a0f900006cae82a2fa220000000000007110960000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r0}, 0x18) 151.948819ms ago: executing program 1 (id=4177): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) recvfrom(r2, 0x0, 0x0, 0x40000060, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 106.428995ms ago: executing program 1 (id=4178): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x10cc, 0x4) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x1, 'gretap0\x00', {}, 0x400}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000040)="8f9fe177a6c62c3168c4b477caaa1f152054eb47cbe5bc4a3201a5f5c3787709f77f03b441fd30cc3ed21074f09dd9ac", &(0x7f00000012c0)=""/241, &(0x7f0000001880)="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", &(0x7f00000013c0)="c38ebbbf28c1ca2048a7d3cebe957195a3aa70163b5d34f2225159304d1df6dd1d9ec21fa911692af8b3586407de7e0af5caa59adca61900d66a82441981a2637a0630e3dd3765f7792ecce6123a9daa0b3e7b35526e6c6740aa288df8f06878202df679edf47d919c8bab608227a9c2cc30c26bcc277b69a6d4da7c34475f9e6dba15c896b60142dc792406c7105ed0d9c5c9efe51daa8c4a805e42f6f21b57ff3c2368dd3fc92fa8597b81a2ce1766e3eb92c7293e7010f83fc9a5ad6061e3fb8d55e8a4ac6aa9ad55d338eb2a85579193945c7f4015ed93e4df6c128f1f4e533c3a1f504b654715", 0x9a, 0x1}, 0x38) 53.667673ms ago: executing program 1 (id=4179): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000040), 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket(0x1, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000540)=0xb5, 0x4) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x622280, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xfffffdb8, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_bt_hci(r2, 0x400448df, 0x0) 0s ago: executing program 4 (id=4180): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x8, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b3, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x80000001, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6c, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x7d3e, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x5288, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x7fff, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x2, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x100, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff9, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x6, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0x6, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0xfff, 0x2, 0x101, 0x5f502dc5, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x5, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$cgroup_ro(r3, &(0x7f0000000200)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x153a9a04, 0x5, 0x20200, r1, 0x3, '\x00', 0x0, r10, 0x3, 0x1, 0x2, 0x8}, 0x50) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r11, 0x84, 0x16, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket(0x2, 0x5, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r13, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x10}}], 0x10, 0x20000010}}], 0x1, 0x3400c0c4) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 308.921024][ T9508] net_ratelimit: 3 callbacks suppressed [ 308.921047][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.070937][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.180232][ T37] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.200457][T15881] netlink: 'syz.0.2790': attribute type 21 has an invalid length. [ 309.290003][ T37] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.411198][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.447982][T15899] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 309.473596][T15899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2794'. [ 309.485812][T15891] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 309.495865][T15891] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.507383][T15891] bond0: (slave team0): Enslaving as an active interface with an up link [ 309.521318][T15899] IPVS: set_ctl: invalid protocol: 46 100.1.1.1:20003 [ 309.538164][T15903] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 309.571048][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.651449][ T37] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.709265][T15914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.780446][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 309.828616][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 309.921067][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 310.001159][T15934] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 310.109736][T15366] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 310.144503][T15941] pim6reg1: entered promiscuous mode [ 310.172190][T15941] pim6reg1: entered allmulticast mode [ 310.229685][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 310.247891][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2809'. [ 310.598876][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 310.717747][T15965] syzkaller1: entered promiscuous mode [ 310.741094][T15965] syzkaller1: entered allmulticast mode [ 311.026206][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.039100][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.051467][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.061005][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.076420][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.091158][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.098644][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.117410][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.143319][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.154614][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.221859][T15971] wg1 speed is unknown, defaulting to 1000 [ 311.325537][T15971] hsr0 speed is unknown, defaulting to 1000 [ 311.392508][T15995] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2820'. [ 311.397094][T15989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2820'. [ 311.826305][T16006] tipc: Enabling of bearer rejected, failed to enable media [ 312.059945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 312.068108][ C1] lec:lec_tx_timeout: lec0 [ 312.074450][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 312.337164][T16034] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 312.472933][T16034] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 312.528079][T16042] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 312.711769][T15971] chnl_net:caif_netlink_parms(): no params data found [ 312.857159][T16058] team1: entered promiscuous mode [ 312.863783][T16058] team1: entered allmulticast mode [ 312.874886][ T9508] bridge_slave_0: left allmulticast mode [ 312.895063][ T9508] bridge_slave_0: left promiscuous mode [ 312.914870][ T9508] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.260369][ T5834] Bluetooth: hci5: command tx timeout [ 313.492341][ T9508] bond5 (unregistering): (slave gretap1): Releasing active interface [ 314.147962][ T9508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.162144][ T9508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.172936][ T9508] bond0 (unregistering): (slave team0): Releasing backup interface [ 314.184796][ T9508] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 314.195597][ T9508] bond0 (unregistering): Released all slaves [ 314.210788][ T9508] bond1 (unregistering): Released all slaves [ 314.365640][ T9508] bond2 (unregistering): (slave veth5): Releasing active interface [ 314.376981][ T9508] bond2 (unregistering): Released all slaves [ 314.499445][ T9508] bond3 (unregistering): Released all slaves [ 314.542240][T16096] __nla_validate_parse: 5 callbacks suppressed [ 314.542264][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2844'. [ 314.642536][ T9508] bond4 (unregistering): (slave veth9): Releasing backup interface [ 314.652030][ T9508] bond4 (unregistering): Released all slaves [ 314.667329][ T9508] bond5 (unregistering): Released all slaves [ 314.772397][ T9508] bond6 (unregistering): Released all slaves [ 314.882254][ T9508] bond7 (unregistering): Released all slaves [ 314.992090][ T9508] bond8 (unregistering): Released all slaves [ 315.007023][ T9508] bond9 (unregistering): Released all slaves [ 315.021940][ T9508] bond10 (unregistering): Released all slaves [ 315.069309][T16069] net_ratelimit: 11 callbacks suppressed [ 315.069333][T16069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.105565][T15369] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 315.207472][ T9508] : left promiscuous mode [ 315.341096][ T5834] Bluetooth: hci5: command tx timeout [ 315.520974][T16117] netlink: 'syz.4.2849': attribute type 8 has an invalid length. [ 315.526336][ T9508] tipc: Left network mode [ 315.536868][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.564658][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.573085][T15971] bridge_slave_0: entered allmulticast mode [ 315.581318][T15971] bridge_slave_0: entered promiscuous mode [ 315.635667][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.649810][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.697922][T15971] bridge_slave_1: entered allmulticast mode [ 315.716364][T15971] bridge_slave_1: entered promiscuous mode [ 315.750479][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2851'. [ 315.775560][T16129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2851'. [ 315.822165][T16129] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2851'. [ 315.842157][T16129] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2851'. [ 315.877936][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2853'. [ 315.950812][T15369] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 316.000409][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.058778][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.141440][T16142] bridge3: entered promiscuous mode [ 316.167247][T16146] netlink: 'syz.0.2856': attribute type 22 has an invalid length. [ 316.222272][T16142] bridge3: entered allmulticast mode [ 316.423084][T16163] Unknown options in mask b7f2 [ 316.524418][T15971] team0: Port device team_slave_0 added [ 316.540916][ T37] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 316.678084][T16169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2859'. [ 316.719754][T15366] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 316.771899][T15971] team0: Port device team_slave_1 added [ 316.778185][T16148] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 317.023166][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.048264][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.079618][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.134542][ T9508] hsr_slave_0: left promiscuous mode [ 317.156839][ T9508] hsr_slave_1: left promiscuous mode [ 317.169880][ T9508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.186959][ T9508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.225370][T16193] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2866'. [ 317.372152][T16199] netlink: 'syz.0.2867': attribute type 1 has an invalid length. [ 317.420722][ T5834] Bluetooth: hci5: command tx timeout [ 317.713746][ T9508] team0 (unregistering): Port device team_slave_1 removed [ 317.759865][ T9508] team0 (unregistering): Port device team_slave_0 removed [ 317.899557][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 317.907843][ C1] lec:lec_tx_timeout: lec0 [ 317.913743][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.500786][ T5834] Bluetooth: hci5: command tx timeout [ 319.826525][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.834751][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.861147][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.873014][T16188] syzkaller0: entered promiscuous mode [ 319.878533][T16188] syzkaller0: entered allmulticast mode [ 319.928769][T16199] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 320.070508][ T37] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.175250][T16212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 320.207097][T15971] hsr_slave_0: entered promiscuous mode [ 320.230953][T15971] hsr_slave_1: entered promiscuous mode [ 320.294018][ T1154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.324274][T16217] x_tables: duplicate underflow at hook 4 [ 320.539870][T16228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2875'. [ 320.600551][T15366] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.671992][T16237] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2875'. [ 320.682979][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2876'. [ 320.711656][T16237] netem: invalid attributes len -24 [ 320.719732][T15366] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 320.729670][T16236] nbd: must specify at least one socket [ 320.743147][T16236] block nbd2: not configured, cannot reconfigure [ 320.980741][ T9508] IPVS: stop unused estimator thread 0... [ 321.014920][T16249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.180158][T15369] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 321.320006][ T1154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 321.473138][T16279] netlink: 'syz.2.2889': attribute type 83 has an invalid length. [ 321.481948][T16279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2889'. [ 321.569624][ T1154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 321.759820][ T1154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 321.876316][T16296] x_tables: duplicate underflow at hook 1 [ 321.892564][T15971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.008084][T16300] syzkaller0: entered promiscuous mode [ 322.021651][T16300] syzkaller0: entered allmulticast mode [ 322.028329][T15971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.100097][T15971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.210949][T16321] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2902'. [ 322.877141][T16325] netlink: 'syz.0.2903': attribute type 21 has an invalid length. [ 322.930882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 322.939016][ C1] lec:lec_tx_timeout: lec0 [ 322.944850][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 323.692779][T16314] team0: Device gtp0 is of different type [ 323.721843][T15971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 323.759238][T16321] vlan2: entered allmulticast mode [ 323.793493][T16325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2903'. [ 323.890602][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 323.939110][T16340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 324.083484][T15971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.135085][T15971] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.163694][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.170971][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.213581][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.220871][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.508920][T16363] geneve5: entered promiscuous mode [ 324.530176][T16363] geneve5: entered allmulticast mode [ 324.556977][ T9505] netdevsim netdevsim2 netdevsim1: set [1, 3] type 2 family 0 port 6081 - 0 [ 324.587239][ T9505] netdevsim netdevsim2 netdevsim2: set [1, 3] type 2 family 0 port 6081 - 0 [ 324.637260][ T9505] netdevsim netdevsim2 netdevsim3: set [1, 3] type 2 family 0 port 6081 - 0 [ 324.767917][T15971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.926925][T15971] veth0_vlan: entered promiscuous mode [ 324.959352][T15971] veth1_vlan: entered promiscuous mode [ 325.050396][T15971] veth0_macvtap: entered promiscuous mode [ 325.091350][T15971] veth1_macvtap: entered promiscuous mode [ 325.192701][T16397] bridge_slave_1: left allmulticast mode [ 325.200480][T16397] bridge_slave_1: left promiscuous mode [ 325.207960][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.240955][T16400] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 325.306665][T16397] bridge_slave_0: left allmulticast mode [ 325.329360][T16397] bridge_slave_0: left promiscuous mode [ 325.338810][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.542040][ T9505] net_ratelimit: 7 callbacks suppressed [ 325.542061][ T9505] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 325.579418][T15971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.643734][T15971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.658657][T16417] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 325.676146][T16417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2933'. [ 325.701935][T16417] team0: Port device geneve0 added [ 325.710008][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 325.716263][T16417] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 325.727090][T16417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2933'. [ 325.754649][ T9508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.775056][ T9508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.899169][ T9508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.943444][ T1154] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 325.972231][ T9508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.112674][T16432] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2936'. [ 326.122886][T15366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.137101][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 326.151122][T15366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.169733][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.173244][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2937'. [ 326.246889][ T9505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.266726][ T9505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.306528][ T9505] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.429742][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.435219][T16440] netlink: 'syz.3.2939': attribute type 23 has an invalid length. [ 326.546037][ T9508] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.596879][T16440] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2939'. [ 326.712746][T16449] netlink: 163952 bytes leftover after parsing attributes in process `syz.1.2810'. [ 326.719876][ T9505] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.849961][ T9505] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 326.890717][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2940'. [ 326.922015][T16455] sctp: [Deprecated]: syz.2.2942 (pid 16455) Use of int in max_burst socket option. [ 326.922015][T16455] Use struct sctp_assoc_value instead [ 326.967997][T16455] tipc: Enabled bearer , priority 0 [ 326.993618][T16455] mac80211_hwsim hwsim24 syzkaller0: entered promiscuous mode [ 327.005652][T16455] mac80211_hwsim hwsim24 syzkaller0: entered allmulticast mode [ 327.014754][T16455] tipc: Resetting bearer [ 327.026742][T16459] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2944'. [ 327.044089][ T9505] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 327.261047][ T5834] Bluetooth: hci1: command tx timeout [ 327.264552][T16472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2948'. [ 327.442557][T16487] IPVS: set_ctl: invalid protocol: 22 172.20.20.58:20003 [ 327.933477][ T9508] tipc: Resetting bearer [ 327.959547][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 327.967662][ C1] lec:lec_tx_timeout: lec0 [ 327.973801][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.408004][T16546] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 328.543905][T16551] netlink: 'syz.1.2967': attribute type 30 has an invalid length. [ 329.113736][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.133290][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.159877][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.219785][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 329.230538][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 329.238742][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.247861][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 329.256499][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.293663][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.332733][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.360148][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.413432][T16577] wg1 speed is unknown, defaulting to 1000 [ 329.435000][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.446024][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.458389][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.479024][T16577] hsr0 speed is unknown, defaulting to 1000 [ 329.535772][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.546795][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 329.558460][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 330.328458][T16627] netlink: 'syz.3.2993': attribute type 7 has an invalid length. [ 330.445708][ T37] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 330.457155][ T37] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 330.467912][ T37] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - c2:20:98:78:b7:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 330.632694][ T37] bond12 (unregistering): (slave gretap2): Releasing active interface [ 330.693447][ T37] dvmrp0 (unregistering): left allmulticast mode [ 330.874194][ T37] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 331.240233][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.252300][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.263855][ T37] bond0 (unregistering): Released all slaves [ 331.341755][ T5834] Bluetooth: hci0: command tx timeout [ 331.377258][ T37] bond1 (unregistering): Released all slaves [ 331.391860][ T37] bond2 (unregistering): Released all slaves [ 331.496621][ T37] bond3 (unregistering): (slave veth5): Releasing active interface [ 331.507201][ T37] bond3 (unregistering): Released all slaves [ 331.523519][ T37] bond4 (unregistering): Released all slaves [ 331.630287][ T37] bond5 (unregistering): (slave dummy0): Releasing active interface [ 331.638742][ T37] dummy0: left promiscuous mode [ 331.645533][ T37] dummy0: left allmulticast mode [ 331.654943][ T37] bond5 (unregistering): Released all slaves [ 331.669699][ T37] bond6 (unregistering): Released all slaves [ 331.778082][ T37] bond7 (unregistering): Released all slaves [ 331.882995][ T37] bond8 (unregistering): (slave veth7): Releasing backup interface [ 331.892806][ T37] bond8 (unregistering): Released all slaves [ 331.992460][ T37] bond9 (unregistering): Released all slaves [ 332.098783][ T37] bond10 (unregistering): Released all slaves [ 332.200086][ T37] bond11 (unregistering): Released all slaves [ 332.215765][ T37] bond12 (unregistering): Released all slaves [ 332.320728][ T37] bond13 (unregistering): Released all slaves [ 332.507774][T16577] chnl_net:caif_netlink_parms(): no params data found [ 332.546388][T16636] __nla_validate_parse: 29 callbacks suppressed [ 332.546412][T16636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2996'. [ 332.616360][ T37] 9: left promiscuous mode [ 332.656140][T16641] netlink: 'syz.4.2997': attribute type 2 has an invalid length. [ 332.699225][T16640] netlink: 'syz.4.2997': attribute type 2 has an invalid length. [ 332.738770][ T37] : left promiscuous mode [ 332.918765][T16640] netem: incorrect ge model size [ 332.929411][T16640] netem: change failed [ 332.968843][ T37] tipc: Left network mode [ 332.989545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 332.997729][ C1] lec:lec_tx_timeout: lec0 [ 333.002381][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.008737][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 333.035261][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 333.312624][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.329871][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.353968][T16577] bridge_slave_0: entered allmulticast mode [ 333.371979][T16577] bridge_slave_0: entered promiscuous mode [ 333.399818][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.415923][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.425083][T16577] bridge_slave_1: entered allmulticast mode [ 333.433843][T16577] bridge_slave_1: entered promiscuous mode [ 333.441259][ T5834] Bluetooth: hci0: command tx timeout [ 333.484443][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3004'. [ 333.577632][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 333.703950][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.816899][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.820821][T16695] netlink: 'syz.1.3011': attribute type 6 has an invalid length. [ 333.903011][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'. [ 333.964177][ T37] hsr_slave_0: left promiscuous mode [ 333.974499][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'. [ 333.984656][ T37] hsr_slave_1: left promiscuous mode [ 333.995016][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.011209][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.032755][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.043631][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.078316][ T37] veth0_macvtap: left promiscuous mode [ 334.084606][ T37] veth1_vlan: left promiscuous mode [ 334.090688][ T37] veth0_vlan: left promiscuous mode [ 334.277274][T16713] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 334.759866][ T37] team0 (unregistering): Port device team_slave_1 removed [ 334.803632][ T37] team0 (unregistering): Port device team_slave_0 removed [ 335.262925][T16713] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 335.297492][T16577] team0: Port device team_slave_0 added [ 335.338792][T16577] team0: Port device team_slave_1 added [ 335.512001][ T5834] Bluetooth: hci0: command tx timeout [ 335.553091][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.563119][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.594420][T16732] x_tables: duplicate underflow at hook 3 [ 335.604852][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.627993][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.638811][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.714623][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.866095][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 335.885538][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 335.942725][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 336.076907][T16577] hsr_slave_0: entered promiscuous mode [ 336.087228][T16577] hsr_slave_1: entered promiscuous mode [ 336.103061][T16577] debugfs: 'hsr0' already exists in 'hsr' [ 336.109056][T16577] Cannot create hsr debugfs directory [ 336.240973][ T37] IPVS: stop unused estimator thread 0... [ 336.266199][T16771] netlink: 'syz.1.3032': attribute type 10 has an invalid length. [ 336.294983][T16771] bridge0: port 3(team0) entered blocking state [ 336.303366][T16771] bridge0: port 3(team0) entered disabled state [ 336.313316][T16771] team0: entered allmulticast mode [ 336.319132][T16771] team_slave_0: entered allmulticast mode [ 336.331030][T16771] team_slave_1: entered allmulticast mode [ 336.341480][T16771] team0: entered promiscuous mode [ 336.346758][T16771] team_slave_0: entered promiscuous mode [ 336.353527][T16771] team_slave_1: entered promiscuous mode [ 336.361982][T16771] bridge0: port 3(team0) entered blocking state [ 336.368457][T16771] bridge0: port 3(team0) entered forwarding state [ 336.437935][T16775] netlink: 'syz.2.3033': attribute type 29 has an invalid length. [ 336.607756][T16782] : renamed from bridge_slave_0 (while UP) [ 336.624348][T16782] Cannot find set identified by id 0 to match [ 336.927624][T16801] netlink: 'syz.3.3042': attribute type 1 has an invalid length. [ 337.024686][T16801] bond7: (slave gretap1): making interface the new active one [ 337.038267][T16801] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 337.438168][T16577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.469033][T16577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 337.507850][T16577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 337.541012][T16577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 337.580302][ T5834] Bluetooth: hci0: command tx timeout [ 337.637310][T16835] __nla_validate_parse: 228 callbacks suppressed [ 337.637335][T16835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 337.654132][T16835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3051'. [ 337.685448][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 337.737095][T16836] syzkaller0: create flow: hash 513773915 index 2 [ 337.829077][T16825] syzkaller0: delete flow: hash 513773915 index 2 [ 338.020794][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 338.028874][ C1] lec:lec_tx_timeout: lec0 [ 338.034208][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.054400][T16855] xt_hashlimit: overflow, try lower: 3/0 [ 339.553488][T16865] tipc: Enabling of bearer rejected, already enabled [ 339.563796][T16866] tipc: Resetting bearer [ 339.577073][T16866] mac80211_hwsim hwsim24 syzkaller0: left promiscuous mode [ 339.608327][T16870] tipc: Resetting bearer [ 339.856993][T16887] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3060'. [ 339.964498][T16577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.036575][T16577] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.082537][T15366] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.089856][T15366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.104708][T16893] bond0: Device is already in use. [ 340.120871][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.128154][ T9505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.185820][T16897] bridge0: entered allmulticast mode [ 340.237273][T16897] bridge_slave_1: left allmulticast mode [ 340.252325][T16897] bridge_slave_1: left promiscuous mode [ 340.258208][T16897] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.296496][T16897] bridge_slave_0: left allmulticast mode [ 340.302471][T16897] bridge_slave_0: left promiscuous mode [ 340.308387][T16897] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.353927][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 340.577592][T16916] netlink: 348 bytes leftover after parsing attributes in process `syz.2.3069'. [ 340.645401][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'. [ 340.718445][T16920] bridge0: entered promiscuous mode [ 340.745298][T16920] macsec2: entered promiscuous mode [ 340.751818][T16920] macsec2: entered allmulticast mode [ 340.757430][T16920] bridge0: entered allmulticast mode [ 340.765907][T16920] bridge0: port 4(macsec2) entered blocking state [ 340.773879][T16920] bridge0: port 4(macsec2) entered disabled state [ 340.821314][T16920] bridge0: left allmulticast mode [ 340.839303][T16920] bridge0: left promiscuous mode [ 340.974786][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.065443][T16936] net_ratelimit: 20 callbacks suppressed [ 341.065463][T16936] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 341.104585][T16577] veth0_vlan: entered promiscuous mode [ 341.158378][T16577] veth1_vlan: entered promiscuous mode [ 341.262488][T16577] veth0_macvtap: entered promiscuous mode [ 341.283971][T16577] veth1_macvtap: entered promiscuous mode [ 341.290097][T16948] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3076'. [ 341.322496][T16577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.351197][T16913] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 341.365297][T16577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.438693][T15366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.489662][T15366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.571043][T15366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.584619][T16963] netlink: 'syz.3.3079': attribute type 4 has an invalid length. [ 341.617401][T15366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.842965][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3079'. [ 341.867074][T16978] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3084'. [ 342.112567][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.143896][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.245072][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.287632][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.356004][T16998] tipc: Enabling of bearer rejected, failed to enable media [ 342.371965][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.439786][T16998] block nbd3: not configured, cannot reconfigure [ 343.044511][T17026] __nla_validate_parse: 7 callbacks suppressed [ 343.044535][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 343.049886][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.067938][ C1] lec:lec_tx_timeout: lec0 [ 343.072587][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 343.141204][T17027] nbd1: detected capacity change from 0 to 127 [ 343.154500][ T5834] block nbd1: Receive control failed (result -32) [ 343.158777][T14280] block nbd1: Send control failed (result -32) [ 343.250050][T14280] block nbd1: Request send failed, requeueing [ 343.285614][T17030] pim6reg1: entered promiscuous mode [ 343.302480][T14280] block nbd1: Dead connection, failed to find a fallback [ 343.317087][T17030] pim6reg1: entered allmulticast mode [ 343.343409][ T57] block nbd1: Dead connection, failed to find a fallback [ 343.351578][ T57] schedule_timeout: wrong timeout value ffffffffffffff38 [ 343.358982][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 343.359012][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.359029][ T57] Workqueue: kblockd blk_mq_requeue_work [ 343.359072][ T57] Call Trace: [ 343.359082][ T57] [ 343.359091][ T57] dump_stack_lvl+0x189/0x250 [ 343.359129][ T57] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.359161][ T57] ? __pfx__printk+0x10/0x10 [ 343.359200][ T57] schedule_timeout+0x1e1/0x270 [ 343.359229][ T57] ? __pfx_schedule_timeout+0x10/0x10 [ 343.359271][ T57] ? prepare_to_wait_event+0x437/0x480 [ 343.359315][ T57] nbd_queue_rq+0x662/0xf10 [ 343.359356][ T57] ? __pfx_nbd_queue_rq+0x10/0x10 [ 343.359380][ T57] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.359429][ T57] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 343.359469][ T57] ? sbitmap_find_bit+0x47f/0x520 [ 343.359518][ T57] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 343.359551][ T57] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 343.359591][ T57] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 343.359653][ T57] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 343.359711][ T57] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 343.359753][ T57] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 343.359791][ T57] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 343.359820][ T57] blk_mq_run_hw_queue+0x348/0x4f0 [ 343.359857][ T57] blk_mq_run_hw_queues+0x33e/0x430 [ 343.359888][ T57] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 343.359918][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.359948][ T57] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.359984][ T57] blk_mq_requeue_work+0x717/0x760 [ 343.360015][ T57] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 343.360045][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.360074][ T57] ? process_scheduled_works+0x9ef/0x17b0 [ 343.360098][ T57] ? process_scheduled_works+0x9ef/0x17b0 [ 343.360125][ T57] process_scheduled_works+0xae1/0x17b0 [ 343.360186][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.360232][ T57] worker_thread+0x8a0/0xda0 [ 343.360262][ T57] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 343.360303][ T57] ? __kthread_parkme+0x7b/0x200 [ 343.360343][ T57] kthread+0x711/0x8a0 [ 343.360377][ T57] ? __pfx_worker_thread+0x10/0x10 [ 343.360402][ T57] ? __pfx_kthread+0x10/0x10 [ 343.360435][ T57] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.360464][ T57] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.360493][ T57] ? __pfx_kthread+0x10/0x10 [ 343.360525][ T57] ret_from_fork+0x4bc/0x870 [ 343.360553][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 343.360586][ T57] ? __switch_to_asm+0x39/0x70 [ 343.360604][ T57] ? __switch_to_asm+0x33/0x70 [ 343.360621][ T57] ? __pfx_kthread+0x10/0x10 [ 343.360652][ T57] ret_from_fork_asm+0x1a/0x30 [ 343.360700][ T57] [ 343.642201][T14280] schedule_timeout: wrong timeout value ffffffffffffff38 [ 343.649729][T14280] CPU: 0 UID: 0 PID: 14280 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 343.649760][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 343.649774][T14280] Call Trace: [ 343.649783][T14280] [ 343.649793][T14280] dump_stack_lvl+0x189/0x250 [ 343.649833][T14280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.649862][T14280] ? __pfx__printk+0x10/0x10 [ 343.649900][T14280] schedule_timeout+0x1e1/0x270 [ 343.649929][T14280] ? __pfx_schedule_timeout+0x10/0x10 [ 343.649970][T14280] ? prepare_to_wait_event+0x437/0x480 [ 343.650013][T14280] nbd_queue_rq+0x662/0xf10 [ 343.650055][T14280] ? __pfx_nbd_queue_rq+0x10/0x10 [ 343.650079][T14280] ? __pfx_autoremove_wake_function+0x10/0x10 [ 343.650128][T14280] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 343.650164][T14280] ? sbitmap_find_bit+0x47f/0x520 [ 343.650216][T14280] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 343.650251][T14280] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 343.650294][T14280] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 343.650356][T14280] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 343.650405][T14280] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 343.650447][T14280] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 343.650485][T14280] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 343.650514][T14280] blk_mq_run_hw_queue+0x348/0x4f0 [ 343.650550][T14280] blk_mq_dispatch_list+0xd0c/0xe00 [ 343.650584][T14280] ? bdev_count_inflight+0x1cf/0x210 [ 343.650610][T14280] ? blk_mq_dispatch_list+0x1e0/0xe00 [ 343.650660][T14280] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 343.650701][T14280] ? rcu_is_watching+0x15/0xb0 [ 343.650731][T14280] blk_mq_flush_plug_list+0x469/0x550 [ 343.650765][T14280] ? blk_add_rq_to_plug+0x300/0x450 [ 343.650802][T14280] ? blk_mq_submit_bio+0x1a65/0x25b0 [ 343.650836][T14280] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 343.650885][T14280] __blk_flush_plug+0x3d3/0x4b0 [ 343.650927][T14280] ? __pfx___blk_flush_plug+0x10/0x10 [ 343.650975][T14280] __submit_bio+0x2d3/0x5a0 [ 343.651001][T14280] ? __pfx___submit_bio+0x10/0x10 [ 343.651020][T14280] ? blk_cgroup_bio_start+0x59d/0x640 [ 343.651066][T14280] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 343.651100][T14280] ? bio_associate_blkg+0x6d/0x230 [ 343.651127][T14280] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 343.651167][T14280] ? submit_bio_noacct+0xe0c/0x1b80 [ 343.651215][T14280] block_read_full_folio+0x599/0x830 [ 343.651252][T14280] ? __pfx_blkdev_get_block+0x10/0x10 [ 343.651280][T14280] filemap_read_folio+0x117/0x380 [ 343.651304][T14280] ? __pfx_blkdev_read_folio+0x10/0x10 [ 343.651327][T14280] ? __pfx_filemap_read_folio+0x10/0x10 [ 343.651351][T14280] ? filemap_add_folio+0x35f/0x540 [ 343.651392][T14280] do_read_cache_folio+0x350/0x590 [ 343.651419][T14280] ? __pfx_blkdev_read_folio+0x10/0x10 [ 343.651447][T14280] read_part_sector+0xb6/0x2b0 [ 343.651484][T14280] adfspart_check_ICS+0xa4/0xa50 [ 343.651519][T14280] ? snprintf+0xda/0x120 [ 343.651552][T14280] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 343.651603][T14280] bdev_disk_changed+0x75f/0x14b0 [ 343.651666][T14280] ? __pfx_bdev_disk_changed+0x10/0x10 [ 343.651696][T14280] ? wait_on_inode+0xc0/0x230 [ 343.651730][T14280] blkdev_get_whole+0x380/0x510 [ 343.651773][T14280] bdev_open+0x31e/0xd30 [ 343.651820][T14280] blkdev_open+0x457/0x600 [ 343.651849][T14280] ? __pfx_blkdev_open+0x10/0x10 [ 343.651869][T14280] do_dentry_open+0x953/0x13f0 [ 343.651914][T14280] vfs_open+0x3b/0x340 [ 343.651935][T14280] ? path_openat+0x2ecd/0x3830 [ 343.651967][T14280] path_openat+0x2ee5/0x3830 [ 343.652040][T14280] ? __pfx_path_openat+0x10/0x10 [ 343.652094][T14280] do_filp_open+0x1fa/0x410 [ 343.652121][T14280] ? __lock_acquire+0xab9/0xd20 [ 343.652145][T14280] ? __pfx_do_filp_open+0x10/0x10 [ 343.652203][T14280] ? _raw_spin_unlock+0x28/0x50 [ 343.652231][T14280] ? alloc_fd+0x64c/0x6c0 [ 343.652279][T14280] do_sys_openat2+0x121/0x1c0 [ 343.652310][T14280] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.652356][T14280] __x64_sys_openat+0x138/0x170 [ 343.652390][T14280] do_syscall_64+0xfa/0xfa0 [ 343.652424][T14280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.652455][T14280] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.652478][T14280] ? clear_bhb_loop+0x60/0xb0 [ 343.652506][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.652528][T14280] RIP: 0033:0x7f4015ca7407 [ 343.652549][T14280] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 343.652568][T14280] RSP: 002b:00007ffc272e6e10 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 343.652592][T14280] RAX: ffffffffffffffda RBX: 00007f4016498880 RCX: 00007f4015ca7407 [ 343.652608][T14280] RDX: 00000000000a0800 RSI: 0000559b8b133920 RDI: ffffffffffffff9c [ 343.652623][T14280] RBP: 0000559b8b10b910 R08: 0000000000000000 R09: 0000000000000000 [ 343.652636][T14280] R10: 0000000000000000 R11: 0000000000000202 R12: 0000559b8b123e00 [ 343.652656][T14280] R13: 0000559b8b119190 R14: 0000000000000000 R15: 0000559b8b123e00 [ 343.652695][T14280] [ 343.652716][T14280] block nbd1: shutting down sockets [ 343.720576][T17037] netlink: 'syz.3.3099': attribute type 2 has an invalid length. [ 343.721505][T14280] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.866169][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.871006][T14280] Buffer I/O error on dev nbd1, logical block 1, async page read [ 343.902128][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.905235][T14280] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.965366][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.972347][ T57] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.988461][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.991099][ T57] Buffer I/O error on dev nbd1, logical block 0, async page read [ 344.024988][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.035001][T14280] Buffer I/O error on dev nbd1, logical block 2, async page read [ 344.261763][T14280] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.270967][T14280] Buffer I/O error on dev nbd1, logical block 3, async page read [ 344.278972][T14280] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.288998][T14280] Buffer I/O error on dev nbd1, logical block 0, async page read [ 344.289186][T17035] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 344.297061][T14280] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.297097][T14280] Buffer I/O error on dev nbd1, logical block 1, async page read [ 344.297240][T14280] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.297267][T14280] Buffer I/O error on dev nbd1, logical block 2, async page read [ 344.297413][T14280] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.355531][T14280] Buffer I/O error on dev nbd1, logical block 3, async page read [ 344.365836][T14280] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.366644][T17037] : entered promiscuous mode [ 344.376411][T14280] Buffer I/O error on dev nbd1, logical block 0, async page read [ 344.416101][T14280] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.456221][T14280] Buffer I/O error on dev nbd1, logical block 1, async page read [ 344.492665][T14280] ldm_validate_partition_table(): Disk read failed. [ 344.516936][T14280] Dev nbd1: unable to read RDB block 0 [ 344.541543][T14280] nbd1: unable to read partition table [ 344.572311][T14280] ldm_validate_partition_table(): Disk read failed. [ 344.602075][T14280] Dev nbd1: unable to read RDB block 0 [ 344.626058][T14280] nbd1: unable to read partition table [ 344.699303][T17053] veth3: entered promiscuous mode [ 344.782239][T17036] wg1 speed is unknown, defaulting to 1000 [ 344.811088][T17036] hsr0 speed is unknown, defaulting to 1000 [ 344.847804][T17056] netlink: 'syz.4.3104': attribute type 11 has an invalid length. [ 344.861441][T17060] pim6reg: entered allmulticast mode [ 344.974621][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3109'. [ 345.126437][T17071] xt_hashlimit: size too large, truncated to 1048576 [ 345.191020][T17073] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3112'. [ 345.210902][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3112'. [ 345.261597][T17073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3112'. [ 345.340600][T17076] batadv1: entered allmulticast mode [ 345.443647][T17036] chnl_net:caif_netlink_parms(): no params data found [ 345.573348][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 345.648670][T17090] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 345.657665][T17097] netlink: 'syz.0.3116': attribute type 10 has an invalid length. [ 345.666721][T17090] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.667353][T17097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3116'. [ 345.678791][T17090] gretap2: entered promiscuous mode [ 345.689045][T17090] gretap2: entered allmulticast mode [ 345.726267][T17097] team0: Port device geneve0 added [ 346.016782][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.034968][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.065646][T17036] bridge_slave_0: entered allmulticast mode [ 346.083212][T17036] bridge_slave_0: entered promiscuous mode [ 346.103658][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.118138][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.134173][T17036] bridge_slave_1: entered allmulticast mode [ 346.141315][ T53] Bluetooth: hci1: command tx timeout [ 346.152076][T17036] bridge_slave_1: entered promiscuous mode [ 346.180314][T17115] netlink: 'syz.4.3119': attribute type 7 has an invalid length. [ 346.236176][T17115] netlink: 'syz.4.3119': attribute type 7 has an invalid length. [ 346.317018][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.353561][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.449031][T17036] team0: Port device team_slave_0 added [ 346.474018][T17036] team0: Port device team_slave_1 added [ 346.608538][T17136] --map-set only usable from mangle table [ 346.630376][T17142] netlink: 'syz.3.3126': attribute type 21 has an invalid length. [ 346.638472][T17142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3126'. [ 346.670323][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.678127][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.706571][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.734316][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.750032][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.801907][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.944071][T17036] hsr_slave_0: entered promiscuous mode [ 346.965134][T17036] hsr_slave_1: entered promiscuous mode [ 346.975961][T17036] debugfs: 'hsr0' already exists in 'hsr' [ 346.983089][T17036] Cannot create hsr debugfs directory [ 347.092681][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3130'. [ 347.794549][T17036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.820637][T17036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 347.842013][T17189] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 347.850288][T17036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 347.871572][T17036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 347.890097][T17036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 348.038821][T17193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3137'. [ 348.079532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 348.087609][ C1] lec:lec_tx_timeout: lec0 [ 348.092642][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 348.115123][T17191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.128792][T17191] bond8: (slave bond9): making interface the new active one [ 348.137205][T17191] bond8: (slave bond9): Enslaving as an active interface with an up link [ 348.160643][T17181] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 348.187912][T17193] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.219754][ T53] Bluetooth: hci1: command tx timeout [ 348.234193][T17189] vlan0: entered promiscuous mode [ 348.255267][T17189] bond8: entered promiscuous mode [ 348.271294][T17189] bond9: entered promiscuous mode [ 348.347459][T17036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.358546][T17036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 348.370461][T17036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.405202][T17036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 348.420017][T17036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 348.521617][T17036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.533146][T17036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 348.548470][T17036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 348.561099][T17036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 348.577341][T17220] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3145'. [ 348.629925][T17036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 348.649710][T17220] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 349.195693][T17250] xt_l2tp: v2 doesn't support IP mode [ 349.257542][T17036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 349.287411][T17036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 349.342324][T17036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 349.354108][T17257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3156'. [ 349.367358][T17036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 349.545874][T17036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.575998][T17036] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.604803][T15366] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.612095][T15366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.645695][T15366] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.652990][T15366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.763590][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 349.776531][T17280] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.233216][T17304] openvswitch: netlink: Flow key attribute not present in set flow. [ 350.238290][T17303] Cannot find set identified by id 0 to match [ 350.247149][T17036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.300493][ T53] Bluetooth: hci1: command tx timeout [ 350.374386][T17309] xt_TPROXY: Can be used only with -p tcp or -p udp [ 350.415065][T17036] veth0_vlan: entered promiscuous mode [ 350.443442][T17036] veth1_vlan: entered promiscuous mode [ 350.537930][T17036] veth0_macvtap: entered promiscuous mode [ 350.557074][T17036] veth1_macvtap: entered promiscuous mode [ 350.587704][T17036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.610884][T17036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.655454][ T9505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.679170][ T9505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.709705][ T9505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.743633][ T9505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.787582][T17325] tipc: Started in network mode [ 350.794058][T17325] tipc: Node identity 7ef801c1c3ac, cluster identity 4711 [ 350.802682][T17325] tipc: Enabled bearer , priority 0 [ 350.936431][T17325] syzkaller0: entered promiscuous mode [ 350.951773][T17325] syzkaller0: entered allmulticast mode [ 350.969005][T17325] tipc: Resetting bearer [ 351.042111][T17323] tipc: Resetting bearer [ 351.208690][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3181'. [ 352.380666][ T53] Bluetooth: hci1: command tx timeout [ 352.802016][T17323] tipc: Disabling bearer [ 352.812529][T17330] tc_dump_action: action bad kind [ 352.844370][ T24] tipc: Node number set to 3176399297 [ 352.861809][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3184'. [ 352.879775][T17359] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3184'. [ 352.922532][T15369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.945154][T15369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.080648][ T9505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.101755][ T9505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.147642][T17371] openvswitch: netlink: nsh attribute has 996 unknown bytes. [ 353.177122][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.287929][T17382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3093'. [ 353.480360][T17387] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 353.538400][T17390] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3196'. [ 353.571404][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 353.623260][T17393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3196'. [ 353.669876][T17393] netlink: 'syz.2.3196': attribute type 7 has an invalid length. [ 353.679928][T17393] netlink: 'syz.2.3196': attribute type 8 has an invalid length. [ 353.687715][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3196'. [ 353.756984][T17393] erspan0: entered promiscuous mode [ 353.763979][T17393] batadv_slave_1: entered promiscuous mode [ 353.770217][T17393] batadv_slave_1: left promiscuous mode [ 353.787938][T17393] erspan0: left promiscuous mode [ 354.156948][T17409] xt_cluster: node mask cannot exceed total number of nodes [ 354.170801][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 354.183989][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 354.186151][T17412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3204'. [ 354.193863][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 354.202274][T17414] sctp: [Deprecated]: syz.4.3202 (pid 17414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.202274][T17414] Use struct sctp_sack_info instead [ 354.209587][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 354.231993][T17417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3203'. [ 354.236360][T17414] sctp: [Deprecated]: syz.4.3202 (pid 17414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.236360][T17414] Use struct sctp_sack_info instead [ 354.262155][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 354.309523][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6220 ms [ 354.317672][ C1] lec:lec_tx_timeout: lec0 [ 354.490393][T17426] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 354.505209][T17426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 354.526073][T17413] wg1 speed is unknown, defaulting to 1000 [ 354.541972][T17413] hsr0 speed is unknown, defaulting to 1000 [ 354.577845][T17427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3208'. [ 354.616393][T17427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3208'. [ 354.746591][T17429] syz.2.3207: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 354.774111][T17429] CPU: 0 UID: 0 PID: 17429 Comm: syz.2.3207 Not tainted syzkaller #0 PREEMPT(full) [ 354.774143][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.774156][T17429] Call Trace: [ 354.774165][T17429] [ 354.774174][T17429] dump_stack_lvl+0x189/0x250 [ 354.774214][T17429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.774244][T17429] ? __pfx__printk+0x10/0x10 [ 354.774268][T17429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.774299][T17429] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 354.774331][T17429] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 354.774364][T17429] warn_alloc+0x214/0x310 [ 354.774406][T17429] ? __pfx_warn_alloc+0x10/0x10 [ 354.774449][T17429] ? __get_vm_area_node+0x28f/0x300 [ 354.774481][T17429] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 354.774520][T17429] __vmalloc_node_range_noprof+0x690/0x12d0 [ 354.774586][T17429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.774618][T17429] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 354.774645][T17429] ? rcu_is_watching+0x15/0xb0 [ 354.774669][T17429] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 354.774693][T17429] __kvmalloc_node_noprof+0x674/0x910 [ 354.774727][T17429] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 354.774748][T17429] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 354.774778][T17429] ? kfree+0x19a/0x6d0 [ 354.774801][T17429] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 354.774830][T17429] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 354.774871][T17429] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 354.774892][T17429] ? __fget_files+0x2a/0x420 [ 354.774916][T17429] ? __fget_files+0x2a/0x420 [ 354.774936][T17429] ? __fget_files+0x2a/0x420 [ 354.774961][T17429] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 354.774994][T17429] link_create+0x673/0x850 [ 354.775023][T17429] __sys_bpf+0x6be/0x860 [ 354.775047][T17429] ? __pfx___sys_bpf+0x10/0x10 [ 354.775065][T17429] ? count_memcg_event_mm+0x21/0x260 [ 354.775108][T17429] ? rcu_is_watching+0x15/0xb0 [ 354.775136][T17429] __x64_sys_bpf+0x7c/0x90 [ 354.775164][T17429] do_syscall_64+0xfa/0xfa0 [ 354.775191][T17429] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.775216][T17429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.775232][T17429] ? clear_bhb_loop+0x60/0xb0 [ 354.775253][T17429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.775272][T17429] RIP: 0033:0x7fa4bfd8f749 [ 354.775289][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.775304][T17429] RSP: 002b:00007fa4c0cdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.775323][T17429] RAX: ffffffffffffffda RBX: 00007fa4bffe5fa0 RCX: 00007fa4bfd8f749 [ 354.775337][T17429] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 354.775349][T17429] RBP: 00007fa4bfe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.775361][T17429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.775371][T17429] R13: 00007fa4bffe6038 R14: 00007fa4bffe5fa0 R15: 00007ffc96c1bc58 [ 354.775401][T17429] [ 354.787421][T17429] Mem-Info: [ 354.923363][T17447] Bluetooth: MGMT ver 1.23 [ 354.942162][T17429] active_anon:4744 inactive_anon:0 isolated_anon:0 [ 354.942162][T17429] active_file:3023 inactive_file:39989 isolated_file:0 [ 354.942162][T17429] unevictable:768 dirty:78 writeback:0 [ 354.942162][T17429] slab_reclaimable:11881 slab_unreclaimable:214364 [ 354.942162][T17429] mapped:29303 shmem:1364 pagetables:1009 [ 354.942162][T17429] sec_pagetables:0 bounce:0 [ 354.942162][T17429] kernel_misc_reclaimable:0 [ 354.942162][T17429] free:1211965 free_pcp:14988 free_cma:0 [ 355.147056][T17429] Node 0 active_anon:19264kB inactive_anon:0kB active_file:12092kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132320kB dirty:312kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14204kB pagetables:3984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.185432][T17429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.236003][T17429] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.341652][T17429] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 355.347531][T17429] Node 0 DMA32 free:941624kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19264kB inactive_anon:0kB active_file:12092kB inactive_file:159752kB unevictable:1536kB writepending:312kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:37384kB local_pcp:16628kB free_cma:0kB [ 355.403224][T17448] tipc: Enabled bearer , priority 0 [ 355.453639][T17429] lowmem_reserve[]: 0 0 0 0 0 [ 355.473234][T17456] tipc: Resetting bearer [ 355.478861][T17429] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.546963][T17451] syzkaller0: entered promiscuous mode [ 355.553057][T17451] syzkaller0: entered allmulticast mode [ 355.562914][T17429] lowmem_reserve[]: 0 0 0 0 0 [ 355.575393][T17440] tipc: Resetting bearer [ 355.587495][T17429] Node 1 Normal free:3890816kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21616kB local_pcp:11880kB free_cma:0kB [ 355.620937][T17429] lowmem_reserve[]: 0 0 0 0 0 [ 355.625809][T17429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.638914][T17429] Node 0 DMA32: 636*4kB (UME) 109*8kB (ME) 246*16kB (ME) 184*32kB (UME) 72*64kB (ME) 25*128kB (ME) 65*256kB (UM) 70*512kB (UM) 38*1024kB (UM) 10*2048kB (UM) 197*4096kB (UM) = 939832kB [ 355.658739][T17429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 355.672425][T17429] Node 1 Normal: 230*4kB (UE) 59*8kB (UME) 45*16kB (UME) 78*32kB (UME) 28*64kB (UME) 5*128kB (UME) 5*256kB (UM) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3890816kB [ 355.693277][T17429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.703024][T17429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.712565][T17429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.722766][T17429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.732393][T17429] 44373 total pagecache pages [ 355.750149][T17429] 0 pages in swap cache [ 355.754402][T17429] Free swap = 124996kB [ 355.758863][T17429] Total swap = 124996kB [ 355.763356][T17429] 2097051 pages RAM [ 355.767272][T17429] 0 pages HighMem/MovableOnly [ 355.775879][T17429] 424122 pages reserved [ 355.780648][T17429] 0 pages cma reserved [ 356.299982][ T5834] Bluetooth: hci3: command tx timeout [ 357.654390][T17440] tipc: Disabling bearer [ 357.685708][T17477] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 357.699930][T17477] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 357.902662][T17488] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3218'. [ 358.100002][ T9513] bridge_slave_1: left allmulticast mode [ 358.105770][ T9513] bridge_slave_1: left promiscuous mode [ 358.136871][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.186288][ T9513] bridge_slave_0: left allmulticast mode [ 358.200719][ T9513] bridge_slave_0: left promiscuous mode [ 358.218160][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.235501][T17507] netlink: 'syz.0.3226': attribute type 1 has an invalid length. [ 358.260013][T17507] netlink: 'syz.0.3226': attribute type 3 has an invalid length. [ 358.267813][T17507] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3226'. [ 358.394776][ T5834] Bluetooth: hci3: command tx timeout [ 358.419110][ T9513] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 358.565451][ T9513] bond7 (unregistering): (slave gretap1): Releasing active interface [ 358.599406][ T9513] bond8 (unregistering): (slave gretap3): Releasing backup interface [ 359.141323][ T9513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.154289][ T9513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.165008][ T9513] bond0 (unregistering): Released all slaves [ 359.294389][ T9513] bond1 (unregistering): (slave veth3): Releasing backup interface [ 359.303405][ T9513] bond1 (unregistering): Released all slaves [ 359.420404][ T9513] bond2 (unregistering): Released all slaves [ 359.529268][ T9513] bond3 (unregistering): Released all slaves [ 359.645086][ T9513] bond4 (unregistering): Released all slaves [ 359.662124][ T9513] bond5 (unregistering): Released all slaves [ 359.774610][ T9513] bond6 (unregistering): Released all slaves [ 359.788991][ T9513] bond7 (unregistering): Released all slaves [ 359.901811][ T9513] bond8 (unregistering): (slave bond9): Releasing backup interface [ 359.909931][ T9513] bond9 (unregistering): left promiscuous mode [ 359.916876][ T9513] bond8 (unregistering): Released all slaves [ 360.023496][ T9513] bond9 (unregistering): Released all slaves [ 360.043146][T17413] chnl_net:caif_netlink_parms(): no params data found [ 360.233775][ T9513] : left promiscuous mode [ 360.319607][ T9513] : left promiscuous mode [ 360.357816][T17531] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3232'. [ 360.463544][ T5834] Bluetooth: hci3: command tx timeout [ 360.510665][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 360.534229][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3235'. [ 360.561356][ T9513] tipc: Disabling bearer [ 360.570314][ T9513] tipc: Left network mode [ 360.571652][T17413] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.599700][T17413] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.607294][T17413] bridge_slave_0: entered allmulticast mode [ 360.618901][T17413] bridge_slave_0: entered promiscuous mode [ 360.652786][T17413] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.663763][T17413] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.674640][T17413] bridge_slave_1: entered allmulticast mode [ 360.686449][T17413] bridge_slave_1: entered promiscuous mode [ 360.915006][T17413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.949576][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 360.994000][T17413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.202847][T17413] team0: Port device team_slave_0 added [ 361.233010][T17413] team0: Port device team_slave_1 added [ 361.372557][T17413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.401706][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.432753][T17413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.456941][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 361.512156][T17587] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3247'. [ 361.515691][T17413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.528268][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.569111][T17413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.860296][T17413] hsr_slave_0: entered promiscuous mode [ 361.867826][T17413] hsr_slave_1: entered promiscuous mode [ 361.874689][T17413] debugfs: 'hsr0' already exists in 'hsr' [ 361.881480][T17413] Cannot create hsr debugfs directory [ 361.890981][T17607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3253'. [ 362.168563][T17609] wg1 speed is unknown, defaulting to 1000 [ 362.233031][T17614] syzkaller0: entered promiscuous mode [ 362.238946][T17614] syzkaller0: entered allmulticast mode [ 362.255869][T17609] hsr0 speed is unknown, defaulting to 1000 [ 362.276826][T17622] netlink: 'syz.0.3259': attribute type 21 has an invalid length. [ 362.285079][T17622] netlink: 'syz.0.3259': attribute type 22 has an invalid length. [ 362.293949][T17622] netlink: 'syz.0.3259': attribute type 23 has an invalid length. [ 362.308916][T17622] netlink: 'syz.0.3259': attribute type 25 has an invalid length. [ 362.317275][T17622] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3259'. [ 362.540527][ T5834] Bluetooth: hci3: command tx timeout [ 362.593759][T17633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3261'. [ 363.924382][ T9513] hsr_slave_0: left promiscuous mode [ 363.930869][ T9513] hsr_slave_1: left promiscuous mode [ 364.013017][ T9513] pim6reg527 (unregistering): left allmulticast mode [ 364.039769][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 364.317208][ T9513] team0 (unregistering): Port device C removed [ 364.505068][ T9513] smc: removing net device wg2 with user defined pnetid SYZ1 [ 364.626502][ T5834] Bluetooth: hci3: command tx timeout [ 364.919046][T17628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.066153][T17628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.298402][T17628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.427444][T17628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.587359][ T1154] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.663032][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.712669][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.738337][ T1154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.015539][T17413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 366.049124][T17413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 366.095701][T17413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 366.177765][T17413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 366.215587][T17674] __nla_validate_parse: 1 callbacks suppressed [ 366.215605][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3275'. [ 366.280046][ T1154] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.289233][ T1154] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.624858][T17413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.676570][T17413] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.718480][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.725767][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.769532][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.776836][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.907159][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3282'. [ 366.907225][T17708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3282'. [ 366.926329][T17707] openvswitch: netlink: Flow key attr not present in new flow. [ 366.990297][T17708] openvswitch: netlink: Flow key attr not present in new flow. [ 367.174094][T17715] x_tables: duplicate underflow at hook 1 [ 367.180153][T17717] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 367.200035][T17720] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3284'. [ 367.243773][T17720] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3284'. [ 367.295215][T17721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 367.361703][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3284'. [ 367.383153][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3288'. [ 367.394290][T17721] geneve2: entered promiscuous mode [ 367.394485][T17729] netlink: 'syz.4.3288': attribute type 7 has an invalid length. [ 367.402670][T17721] geneve2: entered allmulticast mode [ 367.412970][T17729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 367.446885][T17413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.498511][T17731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3289'. [ 367.548053][T17413] veth0_vlan: entered promiscuous mode [ 367.572906][T17413] veth1_vlan: entered promiscuous mode [ 367.658847][ T30] audit: type=1804 audit(1763717366.266:4): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3291" name="/newroot/27/cgroup.controllers" dev="tmpfs" ino=156 res=1 errno=0 [ 367.681563][T17413] veth0_macvtap: entered promiscuous mode [ 367.687344][T17413] veth1_macvtap: entered promiscuous mode [ 367.770576][ T30] audit: type=1800 audit(1763717366.306:5): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3291" name="cgroup.controllers" dev="tmpfs" ino=156 res=0 errno=0 [ 367.782005][T17413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.881458][T17413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.945628][ T6294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.965622][ T6294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.998779][ T6294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.058145][ T6294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.288327][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.307282][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.400679][T15369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.423314][T15369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.488950][T17772] veth1_to_bond: entered allmulticast mode [ 368.518915][T17771] veth1_to_bond: left allmulticast mode [ 368.532439][T17775] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 368.812917][T17786] netlink: 'syz.0.3308': attribute type 29 has an invalid length. [ 368.847243][T17786] netlink: 'syz.0.3308': attribute type 29 has an invalid length. [ 368.857796][T17787] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 368.937040][T17790] sit1: entered promiscuous mode [ 368.949180][T17790] sit1: entered allmulticast mode [ 369.208654][T17799] hsr0 speed is unknown, defaulting to 1000 [ 369.616338][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.627050][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.636850][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.645338][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.667638][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.727761][T17811] hsr0 speed is unknown, defaulting to 1000 [ 370.088425][T17838] netlink: 'syz.1.3322': attribute type 11 has an invalid length. [ 370.114156][T17838] netlink: 'syz.1.3322': attribute type 11 has an invalid length. [ 370.331866][T17857] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 370.640132][T17811] chnl_net:caif_netlink_parms(): no params data found [ 371.746775][ T5834] Bluetooth: hci2: command tx timeout [ 373.256251][T17883] __nla_validate_parse: 10 callbacks suppressed [ 373.256272][T17883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 373.360885][T17884] tipc: Started in network mode [ 373.365879][T17884] tipc: Node identity ac14140f, cluster identity 4711 [ 373.396085][T17884] tipc: Enabling of bearer rejected, failed to enable media [ 373.583775][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.599792][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.614358][T17811] bridge_slave_0: entered allmulticast mode [ 373.626713][T17811] bridge_slave_0: entered promiscuous mode [ 373.647836][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.671499][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.678854][T17811] bridge_slave_1: entered allmulticast mode [ 373.703058][T17811] bridge_slave_1: entered promiscuous mode [ 373.820550][ T5834] Bluetooth: hci2: command tx timeout [ 373.884060][T17923] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 373.930794][T17926] netlink: 'syz.0.3343': attribute type 1 has an invalid length. [ 373.952206][T17811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.977088][T17927] veth3: entered promiscuous mode [ 374.007948][T17811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.109071][T17811] team0: Port device team_slave_0 added [ 374.128555][T17811] team0: Port device team_slave_1 added [ 374.226036][T17936] netlink: 'syz.1.3346': attribute type 1 has an invalid length. [ 374.236407][T17811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.243756][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.271013][T17811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.343923][T17936] bond2: entered promiscuous mode [ 374.351441][T17936] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.361751][T17811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.368984][T17811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.406715][T17811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.416671][T17946] netlink: ct family unspecified [ 374.431427][T17946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.484674][T17949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3349'. [ 374.497922][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 374.535971][T17950] IPv6: sit1: Disabled Multicast RS [ 374.566319][T17811] hsr_slave_0: entered promiscuous mode [ 374.576339][T17811] hsr_slave_1: entered promiscuous mode [ 374.584200][T17811] debugfs: 'hsr0' already exists in 'hsr' [ 374.590661][T17811] Cannot create hsr debugfs directory [ 374.598301][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 374.623570][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 374.685178][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 374.977104][T17811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.999782][T17811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.086681][T17946] infiniband syz2: set active [ 375.093053][ T44] vxcan1 speed is unknown, defaulting to 1000 [ 375.132519][T17946] infiniband syz2: added vxcan1 [ 375.142949][T17811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.155000][T17811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.224656][T17946] RDS/IB: syz2: added [ 375.233327][T17946] smc: adding ib device syz2 with port count 1 [ 375.243591][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3355'. [ 375.288362][T17946] smc: ib device syz2 port 1 has no pnetid [ 375.334400][T17974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3358'. [ 375.336740][T17811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.355797][T17811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.384140][T12350] vxcan1 speed is unknown, defaulting to 1000 [ 375.428098][T17974] macvtap1: entered promiscuous mode [ 375.436418][T17974] vlan0: entered promiscuous mode [ 375.443424][T17974] macvtap1: entered allmulticast mode [ 375.448930][T17974] vlan0: entered allmulticast mode [ 375.454554][T17974] veth0_vlan: entered allmulticast mode [ 375.465423][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 375.504853][T17811] bond0: (slave netdevsim0): Releasing backup interface [ 375.776709][T17811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.794935][T17811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.826682][T17811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.883125][T17811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.899818][ T5834] Bluetooth: hci2: command tx timeout [ 375.983057][ T5899] IPVS: starting estimator thread 0... [ 376.085270][T17811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.093068][T17998] IPVS: using max 23 ests per chain, 55200 per kthread [ 376.142735][T17811] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.155504][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 376.167951][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.175238][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.206943][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.214333][ T9508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.351567][T18004] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3364'. [ 376.532335][T18013] syzkaller0: entered promiscuous mode [ 376.537979][T18013] syzkaller0: entered allmulticast mode [ 376.637658][T17811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.715674][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 377.303636][T17811] veth0_vlan: entered promiscuous mode [ 377.336223][T17811] veth1_vlan: entered promiscuous mode [ 377.704522][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 377.773567][T18068] netlink: 'syz.1.3379': attribute type 1 has an invalid length. [ 377.832965][T18063] IPv6: syztnl0: Disabled Multicast RS [ 377.946528][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 377.985523][T18075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3379'. [ 378.009859][ T5834] Bluetooth: hci2: command tx timeout [ 378.039260][T18068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.283716][T18081] bond1: option lp_interval: invalid value (0) [ 378.292116][T18085] sctp: [Deprecated]: syz.2.3382 (pid 18085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.292116][T18085] Use struct sctp_sack_info instead [ 378.313685][T18081] bond1: option lp_interval: allowed values 1 - 2147483647 [ 378.325174][T18081] bond1 (unregistering): Released all slaves [ 378.357561][T17811] veth0_macvtap: entered promiscuous mode [ 378.373626][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 378.393194][T18086] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 378.415184][T17811] veth1_macvtap: entered promiscuous mode [ 378.461755][T17811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.503175][T17811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.559210][T15366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.605184][T15366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.654695][T15366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.679571][T15366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.808775][T18090] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3383'. [ 378.824147][T18089] syzkaller0: entered promiscuous mode [ 378.829805][T18089] syzkaller0: entered allmulticast mode [ 378.881374][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 380.863606][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 380.948860][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.967038][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.040810][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.048956][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.114597][T18110] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 381.388570][T17946] vxcan1 speed is unknown, defaulting to 1000 [ 381.737990][T18085] lo speed is unknown, defaulting to 1000 [ 381.754694][T18085] lo speed is unknown, defaulting to 1000 [ 381.774094][T18085] lo speed is unknown, defaulting to 1000 [ 381.875670][T18147] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 382.155170][T18143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.413869][T18085] infiniband sz1: set active [ 382.418712][ T24] lo speed is unknown, defaulting to 1000 [ 382.430478][T18085] infiniband sz1: added lo [ 382.440882][T18085] sz1: rxe_create_cq: returned err = -12 [ 382.466334][T18085] infiniband sz1: Couldn't create ib_mad CQ [ 382.473275][T18085] infiniband sz1: Couldn't open port 1 [ 382.548543][T18085] RDS/IB: sz1: added [ 382.570128][T18085] smc: adding ib device sz1 with port count 1 [ 382.576389][T18085] smc: ib device sz1 port 1 has no pnetid [ 382.590906][ T5899] lo speed is unknown, defaulting to 1000 [ 382.597923][T18085] lo speed is unknown, defaulting to 1000 [ 382.645714][T18161] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 382.783580][T18169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3400'. [ 382.822327][T18171] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 382.884111][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 383.211056][T18085] lo speed is unknown, defaulting to 1000 [ 383.361640][T18200] syzkaller0: entered promiscuous mode [ 383.367713][T18200] syzkaller0: entered allmulticast mode [ 383.411348][T18200] bridge0: port 3(batadv1) entered blocking state [ 383.418116][T18200] bridge0: port 3(batadv1) entered disabled state [ 383.431053][T18200] batadv1: entered allmulticast mode [ 383.438836][T18200] batadv1: entered promiscuous mode [ 383.600829][T18207] netlink: 'syz.3.3411': attribute type 4 has an invalid length. [ 383.640480][T18085] lo speed is unknown, defaulting to 1000 [ 383.753518][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 383.844560][T18183] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 383.891202][T18183] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 383.900382][ T1154] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 383.910557][ T1154] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 383.919785][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3414'. [ 384.203852][T18183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.230846][T18183] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 384.417064][T18183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 384.425157][T18183] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 384.440022][T18085] lo speed is unknown, defaulting to 1000 [ 384.515846][T18183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.522128][T18240] netlink: 'syz.1.3418': attribute type 25 has an invalid length. [ 384.529543][T18183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 384.541592][T18240] netlink: 'syz.1.3418': attribute type 7 has an invalid length. [ 384.630117][T18245] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3420'. [ 384.975318][T18085] lo speed is unknown, defaulting to 1000 [ 385.165409][T18267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.171031][T18265] pim6reg1: entered promiscuous mode [ 385.189606][T18265] pim6reg1: entered allmulticast mode [ 385.217328][T18265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3427'. [ 385.338050][T18269] openvswitch: netlink: IP tunnel dst address not specified [ 385.373587][T18085] lo speed is unknown, defaulting to 1000 [ 385.442158][T18273] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3429'. [ 385.456531][T18273] netlink: 'syz.4.3429': attribute type 6 has an invalid length. [ 385.490917][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3429'. [ 385.883490][T18085] lo speed is unknown, defaulting to 1000 [ 385.943166][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3434'. [ 385.963048][T18300] C: renamed from team_slave_0 (while UP) [ 385.994088][T18300] netlink: 'syz.0.3435': attribute type 1 has an invalid length. [ 386.010356][T18300] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 386.112796][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 386.556717][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 386.605241][T18085] lo speed is unknown, defaulting to 1000 [ 386.702884][T18326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 387.057681][T18350] netlink: 'syz.0.3450': attribute type 12 has an invalid length. [ 387.200102][T18356] openvswitch: netlink: Message has 4 unknown bytes. [ 387.393808][T18371] netlink: 'syz.0.3459': attribute type 58 has an invalid length. [ 387.403286][T18371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3459'. [ 387.625115][T18388] sch_fq: defrate 0 ignored. [ 388.048004][T18420] netlink: 'syz.0.3475': attribute type 16 has an invalid length. [ 388.139305][T18422] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 388.168626][T18422] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 388.181121][T18422] gretap1: entered promiscuous mode [ 388.188142][T18422] gretap1: entered allmulticast mode [ 388.323408][T18430] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 388.337218][T18430] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 388.349071][T18430] gretap1: entered promiscuous mode [ 388.356472][T18430] gretap1: entered allmulticast mode [ 388.860447][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 388.868679][ C1] lec:lec_tx_timeout: lec0 [ 388.982495][T18458] __nla_validate_parse: 8 callbacks suppressed [ 388.982520][T18458] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3487'. [ 389.194300][T18469] delete_channel: no stack [ 389.210130][T18470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 389.559187][T18490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 389.714243][T18503] dvmrp0: entered allmulticast mode [ 389.723381][T18503] dvmrp0: left allmulticast mode [ 389.782561][T18490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3501'. [ 389.977069][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.093163][T18520] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3511'. [ 390.109173][T18520] TC_ACT_REPEAT abuse ? [ 390.327827][T18536] netlink: 'syz.1.3515': attribute type 24 has an invalid length. [ 390.685950][T18561] hsr0 speed is unknown, defaulting to 1000 [ 390.695397][T18561] vxcan1 speed is unknown, defaulting to 1000 [ 390.808978][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 390.829032][T18568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 390.910066][T18570] syzkaller1: entered promiscuous mode [ 390.915704][T18570] syzkaller1: entered allmulticast mode [ 391.053007][T18574] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3527'. [ 391.098795][T18561] lo speed is unknown, defaulting to 1000 [ 391.680421][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 391.719053][T18607] netlink: 'syz.3.3535': attribute type 21 has an invalid length. [ 391.749616][T18607] IPv6: NLM_F_CREATE should be specified when creating new route [ 391.858501][T18618] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 391.917304][T18622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3538'. [ 392.016979][T18618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.103178][T18634] netlink: 'syz.4.3542': attribute type 21 has an invalid length. [ 392.117281][T18628] tipc: Enabled bearer , priority 0 [ 392.146231][T18628] tipc: Resetting bearer [ 392.182776][T18626] tipc: Disabling bearer [ 392.345779][T18641] tipc: Started in network mode [ 392.358508][T18641] tipc: Node identity c29f0aa9d6e4, cluster identity 4711 [ 392.366886][T18641] tipc: Enabled bearer , priority 0 [ 392.389773][T18648] syzkaller0: entered promiscuous mode [ 392.395323][T18648] syzkaller0: entered allmulticast mode [ 392.529664][T12349] IPVS: starting estimator thread 0... [ 392.590713][T18641] tipc: Resetting bearer [ 392.619650][T18657] IPVS: using max 26 ests per chain, 62400 per kthread [ 392.636079][T18641] tipc: Disabling bearer [ 392.685935][T18659] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.719137][T18659] bond2: (slave lo): Enslaving as a backup interface with an up link [ 392.734586][T18659] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 392.751759][T18660] gre0: entered promiscuous mode [ 392.929726][T18672] netlink: 'syz.3.3552': attribute type 83 has an invalid length. [ 392.973420][T18672] netlink: 'syz.3.3552': attribute type 83 has an invalid length. [ 392.993167][T18672] netlink: 'syz.3.3552': attribute type 83 has an invalid length. [ 393.015861][T18672] netlink: 'syz.3.3552': attribute type 83 has an invalid length. [ 393.035001][T18675] C: renamed from lo (while UP) [ 393.059107][T18678] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 393.619937][T18712] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 393.651890][T18712] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 394.056894][T18731] sctp: [Deprecated]: syz.2.3569 (pid 18731) Use of int in maxseg socket option. [ 394.056894][T18731] Use struct sctp_assoc_value instead [ 394.087281][T18734] netlink: 'syz.1.3570': attribute type 1 has an invalid length. [ 394.153756][T18739] syzkaller1: entered promiscuous mode [ 394.154189][T18737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 394.159286][T18739] syzkaller1: entered allmulticast mode [ 394.172317][T18737] IPv6: NLM_F_CREATE should be set when creating new route [ 394.190112][T18744] netlink: 'syz.3.3571': attribute type 5 has an invalid length. [ 394.816287][T18772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.823255][T18775] openvswitch: netlink: IP tunnel dst address not specified [ 395.007850][T18785] nbd: must specify at least one socket [ 395.031224][T18791] nbd: must specify at least one socket [ 395.112762][T18789] bond2: (slave ip6gretap1): making interface the new active one [ 395.123944][T18789] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 395.392199][T18809] __nla_validate_parse: 9 callbacks suppressed [ 395.392222][T18809] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3594'. [ 395.418176][T18814] validate_nla: 3 callbacks suppressed [ 395.418196][T18814] netlink: 'syz.3.3590': attribute type 10 has an invalid length. [ 395.433744][T18814] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3590'. [ 395.735729][T18833] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3599'. [ 396.063912][ T30] audit: type=1804 audit(1763717394.676:6): pid=18857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3606" name="/newroot/50/cgroup.controllers" dev="tmpfs" ino=273 res=1 errno=0 [ 396.093577][ T30] audit: type=1800 audit(1763717394.706:7): pid=18857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3606" name="cgroup.controllers" dev="tmpfs" ino=273 res=0 errno=0 [ 396.268973][T18866] tipc: Started in network mode [ 396.293934][T18866] tipc: Node identity 968a9a7d4122, cluster identity 4711 [ 396.303979][T18866] tipc: Enabled bearer , priority 0 [ 396.319322][T18866] syzkaller0: entered promiscuous mode [ 396.342785][T18866] syzkaller0: entered allmulticast mode [ 396.378978][T18866] tipc: Resetting bearer [ 396.402520][T18864] tipc: Resetting bearer [ 396.423607][T18864] tipc: Disabling bearer [ 396.435103][T18868] syzkaller1: entered promiscuous mode [ 396.442191][T18868] syzkaller1: entered allmulticast mode [ 396.450444][T18875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3612'. [ 396.466315][T18868] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 396.507419][ T24] C speed is unknown, defaulting to 1000 [ 396.609671][T18879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3614'. [ 396.643854][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3614'. [ 396.672767][T18880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3614'. [ 396.673262][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3614'. [ 396.856307][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3617'. [ 397.193410][T18905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'. [ 397.465234][T18919] xt_hashlimit: size too large, truncated to 1048576 [ 397.558852][T18928] netlink: 'syz.3.3628': attribute type 1 has an invalid length. [ 398.016672][T18955] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 398.121963][T18942] syzkaller0: entered promiscuous mode [ 398.129205][T18942] syzkaller0: entered allmulticast mode [ 400.335577][T18999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.494866][T18999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.683057][T18999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.841814][T18999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.861288][T19033] __nla_validate_parse: 1 callbacks suppressed [ 400.861308][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3655'. [ 400.872149][T19027] xt_CT: No such helper "syz1" [ 400.975189][T19029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3652'. [ 401.034754][T19042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3657'. [ 401.144720][T19044] syzkaller0: entered promiscuous mode [ 401.160097][T19044] syzkaller0: entered allmulticast mode [ 401.222601][T19049] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3659'. [ 401.259406][T15366] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.323474][T19049] vlan2: entered allmulticast mode [ 401.330324][T19049] gretap0: entered allmulticast mode [ 401.367143][T15366] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.398674][T15366] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.452946][T15366] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.567661][T19061] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3662'. [ 401.588014][T19063] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3663'. [ 401.601822][T19061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3662'. [ 401.616027][T19061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3662'. [ 401.634657][T19063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3663'. [ 402.353722][T19104] netlink: 'syz.0.3675': attribute type 1 has an invalid length. [ 402.386079][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 402.464496][T19113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.477846][T19107] netem: invalid attributes len -24 [ 402.502980][T19107] netem: change failed [ 402.525144][T19114] gtp0: entered promiscuous mode [ 402.725455][T19121] xt_TCPMSS: Only works on TCP SYN packets [ 402.746719][T19125] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20004 [ 402.764542][T19124] syzkaller1: entered promiscuous mode [ 402.781464][T19124] syzkaller1: entered allmulticast mode [ 402.852313][T19126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.961885][T19133] netlink: 'syz.0.3684': attribute type 13 has an invalid length. [ 403.570415][T19133] veth3: left promiscuous mode [ 403.577544][T19133] sit1: left promiscuous mode [ 403.584712][T19133] sit1: left allmulticast mode [ 403.594196][T19133] gretap1: left promiscuous mode [ 403.599301][T19133] gretap1: left allmulticast mode [ 403.764716][T19175] xt_hashlimit: size too large, truncated to 1048576 [ 405.697831][T19191] 8021q: VLANs not supported on ip6_vti0 [ 405.755027][T19183] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 406.039856][T19219] __nla_validate_parse: 5 callbacks suppressed [ 406.039881][T19219] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3703'. [ 406.145752][T19227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'. [ 406.155974][T19227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 406.329421][T19219] bond5 (unregistering): Released all slaves [ 406.585013][T19259] netlink: 'syz.4.3711': attribute type 10 has an invalid length. [ 406.586506][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3713'. [ 406.609574][T19259] team0: Port device dummy0 added [ 406.624283][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'. [ 406.793673][T19274] x_tables: duplicate underflow at hook 1 [ 406.800908][T19274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3715'. [ 407.460719][T19270] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 429.214745][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 429.448866][ T10] IPVS: starting estimator thread 0... [ 429.487256][T19300] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3724'. [ 429.560285][T19297] IPVS: using max 27 ests per chain, 64800 per kthread [ 429.581442][T19300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.627894][T19300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.662754][T19300] bond0 (unregistering): Released all slaves [ 429.854815][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3719'. [ 430.217065][T19323] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 430.307773][T19335] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.363035][T19335] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 430.386472][T19335] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 430.448696][T19347] netlink: 'syz.0.3732': attribute type 21 has an invalid length. [ 430.511894][T19323] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 430.538914][T19323] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 430.617785][T19356] netlink: 'syz.3.3738': attribute type 11 has an invalid length. [ 430.631153][T19356] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3738'. [ 430.654432][T19347] netlink: 'syz.0.3732': attribute type 1 has an invalid length. [ 430.733417][T19355] ip6t_REJECT: ECHOREPLY is not supported [ 430.840330][T19363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3741'. [ 430.904658][T19365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3742'. [ 430.928409][T19365] gretap2: entered promiscuous mode [ 430.970782][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 430.983618][T19375] Cannot find add_set index 0 as target [ 431.008931][T19365] netlink: 'syz.0.3742': attribute type 2 has an invalid length. [ 431.072525][T19380] Cannot find add_set index 0 as target [ 431.113235][T19378] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 431.140314][T19378] bridge0: entered allmulticast mode [ 431.148811][T19378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3745'. [ 445.185910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 445.186683][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 450.859571][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 450.867623][ C1] lec:lec_tx_timeout: lec0 [ 455.201197][T19394] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3749'. [ 455.357498][T19390] syzkaller0: entered promiscuous mode [ 455.375603][T19390] syzkaller0: entered allmulticast mode [ 455.393424][T19397] set match dimension is over the limit! [ 455.773304][T19421] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 455.953316][T19424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3757'. [ 456.016488][T19425] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3757'. [ 456.803585][T19434] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3759'. [ 457.589290][T19421] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 457.591857][T19422] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 457.875370][T19451] ip6gre1: entered allmulticast mode [ 457.976755][T19457] syzkaller0: entered promiscuous mode [ 457.994662][T19457] syzkaller0: entered allmulticast mode [ 458.027614][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 458.050202][T19457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 458.061713][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 458.088932][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 458.091487][T19459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3767'. [ 458.118855][T19457] netlink: 'syz.1.3766': attribute type 6 has an invalid length. [ 458.180262][ T6294] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.189076][ T6294] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.216580][ T6294] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.260111][ T6294] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.398721][T19477] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 458.522374][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 458.762208][T19498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.038130][T19516] tipc: Enabled bearer , priority 0 [ 459.162641][T19516] tipc: Disabling bearer [ 459.187533][T19529] netlink: 'syz.3.3789': attribute type 11 has an invalid length. [ 459.285563][T19535] netlink: 'syz.2.3791': attribute type 11 has an invalid length. [ 459.509010][T19547] netlink: 'syz.0.3796': attribute type 2 has an invalid length. [ 459.535527][T19547] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 459.790830][T19544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.804530][T19567] netlink: 'syz.0.3799': attribute type 21 has an invalid length. [ 460.658282][T19617] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 460.706653][T19617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.726593][T19621] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 461.519764][T19666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 461.533500][ T5834] block nbd2: Receive control failed (result -32) [ 461.757796][T19671] netlink: 'syz.0.3825': attribute type 1 has an invalid length. [ 461.798006][T19671] netlink: 'syz.0.3825': attribute type 1 has an invalid length. [ 461.889282][T19640] __nla_validate_parse: 10 callbacks suppressed [ 461.889306][T19640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3822'. [ 461.921047][T19640] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 461.951129][T19683] netlink: 'syz.3.3827': attribute type 11 has an invalid length. [ 461.959143][T19683] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3827'. [ 461.993199][T19680] netlink: 'syz.4.3828': attribute type 4 has an invalid length. [ 462.251618][T19690] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 462.290545][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3830'. [ 462.376763][T19698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.408054][T19701] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3835'. [ 462.507198][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.516087][T19705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.531985][T19705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.561246][T19705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.844363][T19723] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 462.915249][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3843'. [ 463.157825][T19746] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3847'. [ 463.340511][T19758] netlink: 'syz.4.3851': attribute type 1 has an invalid length. [ 463.373890][T19760] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3852'. [ 463.399139][T19762] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 463.527243][T19767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3855'. [ 463.548812][T19770] team0: No ports can be present during mode change [ 463.641614][T19776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3858'. [ 463.654764][T19777] netlink: 'syz.4.3859': attribute type 6 has an invalid length. [ 463.774689][T19788] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3862'. [ 463.820499][T19790] tipc: Enabling of bearer rejected, failed to enable media [ 463.890174][T19792] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 463.899295][T19792] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 464.616864][T19843] sit1: entered promiscuous mode [ 464.623413][T19843] sit1: entered allmulticast mode [ 464.635672][T19845] netlink: 'syz.1.3879': attribute type 10 has an invalid length. [ 465.129296][T19870] syzkaller0: entered promiscuous mode [ 465.137666][T19870] syzkaller0: entered allmulticast mode [ 467.241194][T19893] xt_cluster: node mask cannot exceed total number of nodes [ 467.329287][T19896] wg1: entered promiscuous mode [ 467.334493][T19896] wg1: entered allmulticast mode [ 467.361555][T19899] netlink: 'syz.2.3895': attribute type 9 has an invalid length. [ 467.491421][T19905] __nla_validate_parse: 5 callbacks suppressed [ 467.491445][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3899'. [ 467.718578][T19923] IPVS: set_ctl: invalid protocol: 108 10.1.1.2:20001 [ 468.115582][T19951] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3, id = 0 [ 468.249999][T19957] netlink: 'syz.3.3913': attribute type 10 has an invalid length. [ 468.257919][T19957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3913'. [ 468.267168][T19957] dummy0: entered promiscuous mode [ 468.276498][T19957] bridge0: port 3(dummy0) entered blocking state [ 468.283436][T19957] bridge0: port 3(dummy0) entered disabled state [ 468.290561][T19957] dummy0: entered allmulticast mode [ 468.298865][T19957] bridge0: port 3(dummy0) entered blocking state [ 468.305510][T19957] bridge0: port 3(dummy0) entered forwarding state [ 468.638972][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 468.655117][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3923'. [ 470.019656][T20031] netlink: 'syz.3.3933': attribute type 3 has an invalid length. [ 470.251395][T20044] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 470.314156][T20044] netlink: 'syz.1.3937': attribute type 1 has an invalid length. [ 470.422438][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'. [ 470.661316][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3944'. [ 470.710389][T20076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3942'. [ 470.760949][T20077] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 471.416539][T20113] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 471.429934][T20113] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3957'. [ 473.485358][T20138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3965'. [ 473.637806][T20150] netlink: 'syz.0.3966': attribute type 12 has an invalid length. [ 473.651837][T20151] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 473.673811][T20151] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 473.712824][T20150] bond3: option primary_reselect: invalid value (255) [ 473.731906][T20150] bond3 (unregistering): Released all slaves [ 474.013743][T20174] netlink: 'syz.2.3973': attribute type 12 has an invalid length. [ 474.025021][T20174] netlink: 'syz.2.3973': attribute type 29 has an invalid length. [ 474.033751][T20174] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3973'. [ 474.043563][T20174] netlink: 'syz.2.3973': attribute type 1 has an invalid length. [ 474.076631][T20174] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3973'. [ 474.284571][T20190] xt_ecn: cannot match TCP bits for non-tcp packets [ 474.457915][ T9508] tipc: Subscription rejected, illegal request [ 474.492566][T20200] openvswitch: netlink: Missing key (keys=40, expected=80) [ 475.122300][T20242] tap0: tun_chr_ioctl cmd 2148553947 [ 475.240160][T20242] syzkaller0: entered promiscuous mode [ 475.246073][T20242] syzkaller0: entered allmulticast mode [ 475.254126][T20253] tipc: Enabling of bearer rejected, failed to enable media [ 477.958097][T20319] syzkaller0: entered promiscuous mode [ 477.965084][T20319] syzkaller0: entered allmulticast mode [ 478.565300][T20349] netlink: 'syz.2.4021': attribute type 3 has an invalid length. [ 479.158032][T20378] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4029'. [ 479.252890][T20377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4030'. [ 479.268312][T20385] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 479.614922][T20402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.739788][T20415] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4041'. [ 479.903673][T20424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4044'. [ 480.071102][T20431] netlink: 'syz.2.4047': attribute type 39 has an invalid length. [ 480.549108][T20454] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 481.147331][T20498] ipt_REJECT: TCP_RESET invalid for non-tcp [ 481.221961][T20504] nbd: couldn't find device at index 204 [ 481.235354][T20506] nbd: couldn't find device at index 204 [ 481.331908][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 481.348710][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4072'. [ 481.399207][T20517] netlink: 'syz.1.4075': attribute type 3 has an invalid length. [ 481.408344][T20517] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4075'. [ 481.934309][T20553] syzkaller1: entered promiscuous mode [ 481.940011][T20553] syzkaller1: entered allmulticast mode [ 481.988218][T20556] netlink: 'syz.2.4087': attribute type 13 has an invalid length. [ 481.998867][T20556] veth0_macvtap: left promiscuous mode [ 482.005762][T20556] macvtap0: entered allmulticast mode [ 482.020910][T20556] macvtap0: refused to change device tx_queue_len [ 482.118808][T20562] netlink: 'syz.2.4089': attribute type 3 has an invalid length. [ 482.315570][T20571] syzkaller0: entered promiscuous mode [ 482.322999][T20571] syzkaller0: entered allmulticast mode [ 482.453756][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4096'. [ 482.705406][T20593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4098'. [ 483.076118][T20613] lo: entered promiscuous mode [ 483.106159][T20613] netlink: 'syz.1.4104': attribute type 2 has an invalid length. [ 483.133883][T20613] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.175989][T20619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4106'. [ 483.724048][T20632] tipc: New replicast peer: 0.0.0.0 [ 483.751180][T20632] tipc: Enabled bearer , priority 10 [ 483.784140][T20632] netlink: 'syz.4.4113': attribute type 7 has an invalid length. [ 483.792649][T20632] netlink: 'syz.4.4113': attribute type 8 has an invalid length. [ 484.177971][T20656] __nla_validate_parse: 4 callbacks suppressed [ 484.177993][T20656] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4115'. [ 484.393535][T20662] syzkaller1: entered promiscuous mode [ 484.399277][T20662] syzkaller1: entered allmulticast mode [ 484.560854][T20684] netlink: 'syz.1.4124': attribute type 11 has an invalid length. [ 484.568986][T20684] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4124'. [ 484.603963][T20684] siw: device registration error -23 [ 484.872629][T12352] tipc: Node number set to 343607977 [ 485.130513][T20714] netlink: 'syz.0.4134': attribute type 1 has an invalid length. [ 485.146696][T20714] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4134'. [ 485.158962][T20714] netlink: 'syz.0.4134': attribute type 1 has an invalid length. [ 485.431328][T20726] Bluetooth: MGMT ver 1.23 [ 485.632946][T20731] tipc: Started in network mode [ 485.641692][T20731] tipc: Node identity 0acd744682ce, cluster identity 4711 [ 485.649121][T20731] tipc: Enabled bearer , priority 0 [ 485.687896][T20731] syzkaller0: entered promiscuous mode [ 485.700823][T20731] syzkaller0: entered allmulticast mode [ 485.720535][T20731] tipc: Resetting bearer [ 485.756465][T20730] tipc: Resetting bearer [ 485.756652][T20743] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 485.771342][T20743] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 485.779114][T20743] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 485.787963][T20743] netlink: 'syz.2.4142': attribute type 2 has an invalid length. [ 485.799372][T20743] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4142'. [ 485.812970][T20730] tipc: Disabling bearer [ 486.036315][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4145'. [ 486.048529][T20751] netlink: 'syz.1.4145': attribute type 21 has an invalid length. [ 486.056562][T20751] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4145'. [ 486.065928][T20751] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4145'. [ 486.297372][T20763] tipc: Enabling of bearer rejected, failed to enable media [ 486.439253][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4151'. [ 486.871551][T20784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 487.350258][T20799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4158'. [ 487.738603][T20816] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 487.867919][T20823] delete_channel: no stack [ 487.874237][T20818] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 488.626671][T20859] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 488.638555][T20859] [ 488.640966][T20859] ====================================================== [ 488.648008][T20859] WARNING: possible circular locking dependency detected [ 488.655067][T20859] syzkaller #0 Not tainted [ 488.659515][T20859] ------------------------------------------------------ [ 488.666561][T20859] syz.1.4179/20859 is trying to acquire lock: [ 488.672658][T20859] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 488.682034][T20859] [ 488.682034][T20859] but task is already holding lock: [ 488.689428][T20859] ffff88804eb15d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 488.698799][T20859] [ 488.698799][T20859] which lock already depends on the new lock. [ 488.698799][T20859] [ 488.709215][T20859] [ 488.709215][T20859] the existing dependency chain (in reverse order) is: [ 488.718236][T20859] [ 488.718236][T20859] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 488.726257][T20859] lock_acquire+0x120/0x360 [ 488.731294][T20859] _raw_spin_lock_bh+0x36/0x50 [ 488.736599][T20859] nr_rt_device_down+0x12a/0x720 [ 488.742074][T20859] nr_device_event+0x137/0x150 [ 488.747383][T20859] notifier_call_chain+0x1b6/0x3e0 [ 488.753030][T20859] __dev_notify_flags+0x18d/0x2e0 [ 488.758589][T20859] netif_change_flags+0xe8/0x1a0 [ 488.764080][T20859] dev_change_flags+0x130/0x260 [ 488.769485][T20859] dev_ioctl+0x7b4/0x1150 [ 488.774367][T20859] sock_do_ioctl+0x22c/0x300 [ 488.779504][T20859] sock_ioctl+0x576/0x790 [ 488.784375][T20859] __se_sys_ioctl+0xfc/0x170 [ 488.789525][T20859] do_syscall_64+0xfa/0xfa0 [ 488.794607][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.801037][T20859] [ 488.801037][T20859] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 488.808868][T20859] lock_acquire+0x120/0x360 [ 488.813985][T20859] _raw_spin_lock_bh+0x36/0x50 [ 488.819301][T20859] nr_rt_device_down+0xa9/0x720 [ 488.824689][T20859] nr_device_event+0x137/0x150 [ 488.829988][T20859] notifier_call_chain+0x1b6/0x3e0 [ 488.835634][T20859] __dev_notify_flags+0x18d/0x2e0 [ 488.841191][T20859] netif_change_flags+0xe8/0x1a0 [ 488.846668][T20859] dev_change_flags+0x130/0x260 [ 488.852067][T20859] dev_ioctl+0x7b4/0x1150 [ 488.856940][T20859] sock_do_ioctl+0x22c/0x300 [ 488.862068][T20859] sock_ioctl+0x576/0x790 [ 488.866931][T20859] __se_sys_ioctl+0xfc/0x170 [ 488.872059][T20859] do_syscall_64+0xfa/0xfa0 [ 488.877102][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.883544][T20859] [ 488.883544][T20859] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 488.891483][T20859] validate_chain+0xb9b/0x2140 [ 488.896791][T20859] __lock_acquire+0xab9/0xd20 [ 488.901998][T20859] lock_acquire+0x120/0x360 [ 488.907031][T20859] _raw_spin_lock_bh+0x36/0x50 [ 488.912335][T20859] nr_remove_neigh+0x25/0xe0 [ 488.917462][T20859] nr_add_node+0x1d9f/0x2570 [ 488.922589][T20859] nr_rt_ioctl+0xc12/0xd50 [ 488.927542][T20859] sock_do_ioctl+0xdc/0x300 [ 488.932682][T20859] sock_ioctl+0x576/0x790 [ 488.937633][T20859] __se_sys_ioctl+0xfc/0x170 [ 488.942757][T20859] do_syscall_64+0xfa/0xfa0 [ 488.947832][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.954269][T20859] [ 488.954269][T20859] other info that might help us debug this: [ 488.954269][T20859] [ 488.964516][T20859] Chain exists of: [ 488.964516][T20859] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 488.964516][T20859] [ 488.978360][T20859] Possible unsafe locking scenario: [ 488.978360][T20859] [ 488.985831][T20859] CPU0 CPU1 [ 488.991231][T20859] ---- ---- [ 488.996617][T20859] lock(&nr_node->node_lock); [ 489.001405][T20859] lock(nr_node_list_lock); [ 489.008616][T20859] lock(&nr_node->node_lock); [ 489.015914][T20859] lock(nr_neigh_list_lock); [ 489.020602][T20859] [ 489.020602][T20859] *** DEADLOCK *** [ 489.020602][T20859] [ 489.028751][T20859] 1 lock held by syz.1.4179/20859: [ 489.033870][T20859] #0: ffff88804eb15d70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 489.043658][T20859] [ 489.043658][T20859] stack backtrace: [ 489.049579][T20859] CPU: 0 UID: 0 PID: 20859 Comm: syz.1.4179 Not tainted syzkaller #0 PREEMPT(full) [ 489.049604][T20859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.049620][T20859] Call Trace: [ 489.049629][T20859] [ 489.049638][T20859] dump_stack_lvl+0x189/0x250 [ 489.049670][T20859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.049695][T20859] ? __pfx__printk+0x10/0x10 [ 489.049711][T20859] ? stack_trace_save+0x9c/0xe0 [ 489.049760][T20859] print_circular_bug+0x2ee/0x310 [ 489.049786][T20859] check_noncircular+0x134/0x160 [ 489.049811][T20859] validate_chain+0xb9b/0x2140 [ 489.049845][T20859] __lock_acquire+0xab9/0xd20 [ 489.049865][T20859] ? nr_remove_neigh+0x25/0xe0 [ 489.049889][T20859] lock_acquire+0x120/0x360 [ 489.049905][T20859] ? nr_remove_neigh+0x25/0xe0 [ 489.049932][T20859] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.049957][T20859] ? nr_remove_neigh+0x25/0xe0 [ 489.049980][T20859] _raw_spin_lock_bh+0x36/0x50 [ 489.050003][T20859] ? nr_remove_neigh+0x25/0xe0 [ 489.050025][T20859] nr_remove_neigh+0x25/0xe0 [ 489.050049][T20859] nr_add_node+0x1d9f/0x2570 [ 489.050073][T20859] ? dev_get_by_name+0x21/0x200 [ 489.050096][T20859] ? dev_get_by_name+0x21/0x200 [ 489.050122][T20859] ? dev_get_by_name+0x21/0x200 [ 489.050143][T20859] ? nr_call_to_digi+0x136/0x1b0 [ 489.050167][T20859] nr_rt_ioctl+0xc12/0xd50 [ 489.050195][T20859] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 489.050215][T20859] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.050246][T20859] ? apparmor_capable+0x137/0x1b0 [ 489.050270][T20859] ? capable+0x89/0xe0 [ 489.050289][T20859] ? nr_ioctl+0x1b1/0x3b0 [ 489.050307][T20859] sock_do_ioctl+0xdc/0x300 [ 489.050332][T20859] ? __pfx_sock_do_ioctl+0x10/0x10 [ 489.050365][T20859] sock_ioctl+0x576/0x790 [ 489.050388][T20859] ? __pfx_sock_ioctl+0x10/0x10 [ 489.050411][T20859] ? __fget_files+0x3a0/0x420 [ 489.050428][T20859] ? __fget_files+0x2a/0x420 [ 489.050445][T20859] ? bpf_lsm_file_ioctl+0x9/0x20 [ 489.050465][T20859] ? __pfx_sock_ioctl+0x10/0x10 [ 489.050486][T20859] __se_sys_ioctl+0xfc/0x170 [ 489.050510][T20859] do_syscall_64+0xfa/0xfa0 [ 489.050537][T20859] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.050561][T20859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.050579][T20859] ? clear_bhb_loop+0x60/0xb0 [ 489.050598][T20859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.050621][T20859] RIP: 0033:0x7fbe9c58f749 [ 489.050638][T20859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.050655][T20859] RSP: 002b:00007fbe9d377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.050674][T20859] RAX: ffffffffffffffda RBX: 00007fbe9c7e5fa0 RCX: 00007fbe9c58f749 [ 489.050688][T20859] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 489.050700][T20859] RBP: 00007fbe9c613f91 R08: 0000000000000000 R09: 0000000000000000 [ 489.050711][T20859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.050722][T20859] R13: 00007fbe9c7e6038 R14: 00007fbe9c7e5fa0 R15: 00007fff6a069ea8 [ 489.050745][T20859] [ 489.407573][T20858] base_sock_release(ffff88805ae0e1c0) sk=ffff8880333fe000