last executing test programs: 5.121994875s ago: executing program 4 (id=1956): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000680)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80000001, '\x00', r0, r3, 0x3, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r7], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a400000001c0a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}}, 0x0) ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f0000000000)) recvmsg(r7, &(0x7f0000000980)={&(0x7f00000007c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000840)=""/201, 0xc9}], 0x1}, 0x10060) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.975916501s ago: executing program 4 (id=1960): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}}, &(0x7f00000003c0)=0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xc8}}, 0x4004) 4.865527434s ago: executing program 4 (id=1962): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0xd0, 0x0, @remote}, 0x10) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff0269ef259700000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x128}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a00000000e6ff000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, 0x0, 0x0) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/193, 0xc1}, 0x8}], 0x1, 0x2, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000d00)={0x0, 0x6}) (async) setsockopt$sock_int(r8, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x81b21000) (async) write$cgroup_int(r7, 0x0, 0x0) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r10, 0x10e, 0x3, &(0x7f00000004c0)=""/192, &(0x7f0000000100)=0xc0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.432354143s ago: executing program 4 (id=1966): syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/950], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00", 0xa}], 0x1}, 0x5) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x38, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 4.431277471s ago: executing program 0 (id=1968): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0x1f, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x4b, 0x7, 0x1ff, "fac16a590b17"}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.18169658s ago: executing program 0 (id=1973): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@dellink={0x34, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}]}, 0x34}}, 0x0) 4.072268916s ago: executing program 0 (id=1975): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r4, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x803, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x8004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.57455846s ago: executing program 0 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000040)="f0", &(0x7f0000000080)=""/13}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='ip6_vti0\x00') 2.476832759s ago: executing program 4 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x8001}}, 0x2, 0x1ff, 0x9, 0x55, 0x4}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x6}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b005dafb92714001a80080002800400018008000280040001803d15c144ff7dc07269fffeea3d345e244e061f7293d7c84de0db3537536b6ac8596e7813d5ab7cd486ba659f"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 2.466445818s ago: executing program 0 (id=1981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="58e98cc90e030300000000000000000200ffff080001000100000000ea4eea6494a8ba49d70c3c3eca0705ba29fa7cd713662289330b650fa6a679ed79919995e40316e675194cb605ba73a60c63c0b8c28b170a3354834b04793e5544e53eb2953321cd461a1c517bb3a90a98c347b6413e14f6de18eadb062ef2fbe5d53c184370"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000203010400000700000000000000000019"], 0x14}}, 0x0) close(0x4) unshare(0x40000000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000400)='vegas', 0x5) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000440)={{0x4, 0x9}, 0x100, './file0\x00'}) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00', 0x0, [0xc, 0xcf9e, 0x5, 0x7, 0x400]}, &(0x7f00000001c0)=0x54) 2.276342639s ago: executing program 4 (id=1984): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000bc0)="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", 0x118}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="e3", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) recvfrom$phonet(r1, 0x0, 0x0, 0x11001, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x9, [@union={0x1, 0x1, 0x0, 0x5, 0x1, 0xfffffffa, [{0xb, 0x2, 0x100}]}, @ptr={0xd}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @typedef={0xa, 0x0, 0x0, 0x8, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @enum64={0xf, 0x4, 0x0, 0x13, 0x0, 0x2, [{0xe, 0xb6e, 0x7}, {0x8, 0x34ce, 0x6}, {0xe, 0xc, 0x5}, {0x3, 0x1, 0xd6}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x0, 0x5f, 0x20]}}, &(0x7f0000000000)=""/55, 0xb1, 0x37, 0x1, 0x4}, 0x28) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x3, 0x400, 0x1, 0x5d820, 0x1, 0x101, '\x00', 0x0, r1, 0x4, 0x3, 0x5, 0x0, @value=r3, @void, @value=r4}, 0x50) 1.637381241s ago: executing program 3 (id=1993): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xfffffffd}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c) 1.524368414s ago: executing program 3 (id=1994): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="200008000a000100aaaaaaaaaabb000005000c000400000008000f0001"], 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008001640e626bc85"], 0x64}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socketpair(0xb, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRESDEC, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 1.164796583s ago: executing program 1 (id=1999): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000740)=""/4096, 0x1000, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c080) r3 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x800) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000380), 0x4) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r10, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[@ANYBLOB="d4277bde5d3dcb24d1aa4491c9a29795e3270de9318518aac23d"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 749.784597ms ago: executing program 1 (id=2001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (rerun: 32) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @ipv6=@generic={0x3, 0x6, "ba1852", 0xae, 0x3b, 0x1, @empty, @empty, {[@dstopts={0x3c, 0x11, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @generic={0x2, 0x66, "3192f9f91dc26e155c3508fee4fa11602115295a40c6bd854e233bf142172499d3f880d78cba818f733be536fe8b62ffa664933c283e0ea61615de9df544c72b81afc6ed2cca01e6ba448423c1b63632660c8005f0c41d9864981928115d8dc388bf53563a85"}, @pad1, @enc_lim, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x7}]}], "99849f0725bb7542cfdc66f34bb772a9365f2160daca"}}}, 0xd6) (async) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xffffffff}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0]}}, {{0x19, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff60}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c}, {0x4}}, {{0x1c}, {0x4}}]}]}, 0x148}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000000)=0x2, 0xfcc0) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x1c) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f00000000c0)=0x19, 0x4) (async) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0x6, 0x34, @random='@d'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc810}, 0xc040) 616.26296ms ago: executing program 1 (id=2003): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000100)=0x3, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f00000002c0)="aa5672a704aab7fe26f3f277d71bee2f1e7575adcaa98263b11fcd5ccfe5f704cf7e4e87c25dc07d388b4a6779aa2adb9624317cf44464918776b5e8e59f8e455daec23f500094ef5d62baa2f12acec270729eb2706da451ef761dc958b18921e090d30e09e4578ce90d3cb9366b13be64a8422e41dd5947be7657b71e77af9b67b5b9f36b9e3e8ea0bdf432f1de4ef3738da84ef3e9f5bb33f8204f42d21c651c0272a126c7929c7a6950bfa8e85d09a8f6d14c1053358bfe57e61a3da80d97ce", &(0x7f00000003c0)=""/4096}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) 614.925619ms ago: executing program 2 (id=2004): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xfffffff7, 0x4) r1 = socket$inet6(0xa, 0xa, 0x9) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) (async) socket(0x15, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 571.44168ms ago: executing program 1 (id=2005): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x1, 0x0, 0x0, {0x22}}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_COST={0x8, 0x3, 0xec}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 527.510561ms ago: executing program 0 (id=2006): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)='.', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000060041000500000000000000", @ANYRES32=0x0, @ANYBLOB="1800000000000040840000000500000030000000aa0000000bc7f6cab09d959d9ce4c1c15657ca3480284ee9997d59ed56ef2daf4df040ce08c22957d4ffc458a5e10355aaae2b3cf86ba514112825a96a490455d34a3d20de7d0aa9e478bde76007d06df5b1021db10fa122aca1ab0e003ea69b70f71612b4724f8a2a23533474bd0400fa85b05d49d30b4c90b53ca8a65c3e20a90331165b6d9de2befe6a7c35e741138ae1d019"], 0x38, 0x4048800}, 0x10) 480.715768ms ago: executing program 3 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x1c0, 0x30, 0x1, 0x0, 0x0, {}, [{0x1ac, 0x1, [@m_simple={0x1a8, 0x1a, 0x0, 0x0, {{0xb}, {0xa8, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xe3b, 0x3, 0x4, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x4, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0xfffff073, 0x6, 0x33}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x8, 0x7, 0xfffffffa}}, @TCA_DEF_DATA={0x9, 0x3, 'mpls\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'veth1_vlan\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'rpfilter\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x10000, 0x6, 0x10000, 0x7}}]}, {0xd5, 0x6, "7306e674e30833367679e3a981c5c722f446e3d8eec4e2d083181a6ef0df5aa32152d79d4d55540edb6f443611747b2f2a520acf390e791035a2760730adb21df804a1291f5150fdc450fbbee6a368f596273e4625b6292a91d845de58687214336eb6596a43d2e6efc66b84e83f571f901472b527ae7e32625e21300c1040d4f8c1ea8b8df55357a12e3a5f99779a85a9aeafe73e2618a94bd97806cdbfc360d191845bb80ebe0549e74ba57803758ffc007724c6e069c2cd5b7bdd364d8e0d74c24b685753bcc03fcb88f5e733e443c8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x1c0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000003500000000000000950000000000000018100000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149}, 0x94) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000380)=r5) close(r4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x90, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x60000014}, 0x40010) 478.698857ms ago: executing program 2 (id=2008): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) (async) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r2, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r0, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) 368.444287ms ago: executing program 1 (id=2009): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) (async) pipe(&(0x7f0000000180)) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (rerun: 32) 366.503823ms ago: executing program 2 (id=2010): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x8008) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24048000) 308.646114ms ago: executing program 3 (id=2011): r0 = socket(0x11, 0x2, 0x100001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) close(0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x3, 0x8000000000000010, 0x8}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r3, 0x1) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7f}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x89}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 216.9589ms ago: executing program 2 (id=2012): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) (async) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c00d) (async) sendmsg$inet(r1, &(0x7f0000001980)={&(0x7f0000001140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001840)=[{&(0x7f0000001180)="8552e32fc75a4c023510432234894d68cbef313e076abcf9925771463d5958312ba971a13e4c2d6ae766496afcf46a98425245df9a6ff6a429f3e53414ae8710b99b37c038f5fd88786a", 0x4a}, {&(0x7f0000001740)="da351557080d0ea6f05dba200f02ab73a8b41e4cf61a2c85b1e410964796c72ad2f5083c2a03eb44bc92b0ef5f863434a8b645ca8ae11b90a0f82edba8c3d262ef2627bbe74a3c48de879d3d2a768b08864b6285fad09d5670ee44253e9ab26d3bf46948b52d26a25e8ebb81002acdbef6750ead38a93dfb644093edbed7fa29204688cb48d9b6c3f846f52ed7915aaf32d642f11efec7bef370426f35e1bd1a9e73cffb", 0xa4}, {&(0x7f0000001200)="edc96e82", 0x4}, {&(0x7f0000001800)="1c03db4d012926fde0dba8762b8d06c3fd6bb6e5004d89241e", 0x19}], 0x4, &(0x7f0000001880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff7fff}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x44, 0x6, "4a1f5b65"}, @cipso={0x86, 0x18, 0x2, [{0x5, 0xf, "fef85c675fabf3dc1a9f0a7ac8"}, {0x1, 0x3, "19"}]}, @timestamp_addr={0x44, 0x3c, 0x1b, 0x1, 0x7, [{@multicast2, 0x90}, {@broadcast, 0x2}, {@broadcast, 0x5}, {@local, 0xf4b0}, {@rand_addr=0x64010101, 0x9}, {@multicast2, 0x3}, {@multicast2, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xe8}, 0x10) shutdown(r1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 216.613706ms ago: executing program 3 (id=2013): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000000a80)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000b80)=""/76, 0x4c}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/231, 0xe7}, {&(0x7f00000007c0)=""/178, 0xb2}, {&(0x7f0000000880)=""/107, 0x6b}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}], 0x2, 0x2103, &(0x7f0000000b00)={0x77359400}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f00000001c0), 0x10) bind$can_raw(r2, &(0x7f0000000000), 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x9, 0x81, 0xd4, 0x7, 0x27a5, 0x100, 0xf4e9, 0x5}}}}]}, 0x58}}, 0x20040084) 156.628249ms ago: executing program 2 (id=2014): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000003}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) epoll_create1(0x80000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="070000000001010200000000f7ff28fa"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) (async, rerun: 32) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="311d5a7a52", 0x5) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async, rerun: 64) r6 = accept4(r3, 0x0, 0x0, 0x40000) (rerun: 64) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) (async) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x1) 84.133066ms ago: executing program 2 (id=2015): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f00000004c0)={@remote, @broadcast, 0xffffffffffffffff, "d4a7cf97b59749f978992d443ec28a7ae3c769d15b14f4fd86384406b4557a12", 0x5, 0x4, 0xd, 0x3}, 0x3c) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x27, 0x80000, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000009200102001a000900020073797a2100000000050001000700000004000780000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8a, @mcast2, 0x596}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000f80)="849d721861bd2dcc5e7064345f024a7a72ba717362c0cfc49199dd238b3ec15e", 0x20}], 0x1, 0x0, 0x0, 0x11000000}, 0x40000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffffd8, @local, 0xb, 0x2}, 0x20) r6 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000009f300000004c00000002000000100000000000000e01000000010000000300000000000010040000000c000000000000100c0000000100000002bf0084080000000200000004000000040000000a00000000000000001000000000bc08ac5033741526d09d9b2d66796add4f3cbd95eab9cf893cb202393befcf70dcb6b94dd5932150941ee7d77a34e72eef2b80fe77a8b525bfebda610693f27e026b159a30379b9e0fa80d59f732453de3ccf33b41c84e639b9cb0b0806a025fdb10b713afb9e952be74c1c068770d57813df5c875bacf5c17e45098d2"], &(0x7f0000000680)=""/231, 0x66, 0xe7, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0xfffffffc, 0x71, 0x10, 0x62}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd0, &(0x7f0000000880)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000000600), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getsockname(r4, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 504.905µs ago: executing program 3 (id=2016): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x1, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendto$l2tp6(r1, &(0x7f0000000040)="6eaccfe127bb8d4e55c34bf9e72c69c45c245dc25d83c5dec55aa912fb81fa5b43202ea0186a0548d3c68dc302043dd2bc1329d01bc5be56d98f6d3266a62d44ede99aa68361ad51f6a5eb9b33fd1f", 0x4f, 0x8040, &(0x7f0000000180)={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff5}, 0x20) accept4(r0, 0x0, 0x0, 0x800) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) 0s ago: executing program 1 (id=2017): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3a, 0x0, &(0x7f00000000c0)) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@delqdisc={0x150, 0x25, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xfff2, 0x1}, {0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x78, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4c8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5c050f0c}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x401}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x140000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x5, 0xa, 0x7, 0x1, 0xb, 0xd, 0x7, 0xc, 0x5, 0x4, 0x2, 0x2, 0x6, 0xd, 0xb, 0x5], 0x1, [0xa4, 0x34b8, 0x6, 0x1ff, 0x9, 0x1, 0x6d, 0x0, 0xffff, 0x3, 0x6, 0x1000, 0x2, 0xbb, 0x52e, 0x3], [0xfffc, 0x3fc, 0x5, 0x100, 0xc, 0xf, 0x1, 0x1847, 0x6, 0x7, 0x0, 0x8, 0x7, 0x2, 0x9, 0xa90]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xe}]}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xda}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfff}]}, 0x150}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r4, 0x0, 0xc, 0x0, &(0x7f0000000780)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000080)=0x26, 0xffffffffffffff34) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) recvmmsg$unix(r5, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): promiscuous mode [ 88.099553][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 88.105296][ T5838] Cannot create hsr debugfs directory [ 88.153995][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.161332][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.187457][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.214027][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.221052][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.247408][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.364964][ T5837] hsr_slave_0: entered promiscuous mode [ 88.371577][ T5837] hsr_slave_1: entered promiscuous mode [ 88.378008][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 88.383736][ T5837] Cannot create hsr debugfs directory [ 88.497181][ T5840] hsr_slave_0: entered promiscuous mode [ 88.504168][ T5840] hsr_slave_1: entered promiscuous mode [ 88.510429][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.516183][ T5840] Cannot create hsr debugfs directory [ 88.799993][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.838226][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.857757][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.883270][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.949603][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.962275][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.977870][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.998339][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.078154][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.092966][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.105269][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.127666][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.240904][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.255494][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.280130][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.309114][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.368111][ T5842] Bluetooth: hci1: command tx timeout [ 89.382694][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.433324][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.441282][ T5842] Bluetooth: hci3: command tx timeout [ 89.441291][ T5846] Bluetooth: hci0: command tx timeout [ 89.458926][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.468376][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.490865][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.504368][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.516796][ T5842] Bluetooth: hci4: command tx timeout [ 89.517032][ T5846] Bluetooth: hci2: command tx timeout [ 89.554077][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.585847][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.593083][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.608857][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.626094][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.633227][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.665343][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.672487][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.693770][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.718830][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.726000][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.781082][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.808114][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.815208][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.862333][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.869472][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.888893][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.973323][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.014145][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.021398][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.067814][ T4098] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.075006][ T4098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.194007][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.311041][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.350934][ T4098] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.358168][ T4098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.423687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.430945][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.481885][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.569295][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.647036][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.741716][ T5829] veth0_vlan: entered promiscuous mode [ 90.784778][ T5828] veth0_vlan: entered promiscuous mode [ 90.801300][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.818401][ T5829] veth1_vlan: entered promiscuous mode [ 90.844611][ T5828] veth1_vlan: entered promiscuous mode [ 90.904038][ T5838] veth0_vlan: entered promiscuous mode [ 90.943594][ T5838] veth1_vlan: entered promiscuous mode [ 90.969936][ T5828] veth0_macvtap: entered promiscuous mode [ 90.994100][ T5828] veth1_macvtap: entered promiscuous mode [ 91.003532][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.030987][ T5829] veth0_macvtap: entered promiscuous mode [ 91.073140][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.090613][ T5829] veth1_macvtap: entered promiscuous mode [ 91.119422][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.144314][ T5837] veth0_vlan: entered promiscuous mode [ 91.171620][ T5838] veth0_macvtap: entered promiscuous mode [ 91.202807][ T4098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212723][ T4098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.230662][ T4098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.242309][ T4098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254000][ T5838] veth1_macvtap: entered promiscuous mode [ 91.263022][ T5837] veth1_vlan: entered promiscuous mode [ 91.290870][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.305206][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.354004][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372278][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.386110][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.404050][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.419447][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.437065][ T5846] Bluetooth: hci1: command tx timeout [ 91.461685][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.517019][ T5846] Bluetooth: hci0: command tx timeout [ 91.518170][ T5842] Bluetooth: hci3: command tx timeout [ 91.531539][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.539464][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.541079][ T5837] veth0_macvtap: entered promiscuous mode [ 91.553040][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.565217][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.575010][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.596986][ T5842] Bluetooth: hci4: command tx timeout [ 91.597352][ T5846] Bluetooth: hci2: command tx timeout [ 91.611748][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.647580][ T5837] veth1_macvtap: entered promiscuous mode [ 91.670430][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.684375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.799476][ T5840] veth0_vlan: entered promiscuous mode [ 91.818375][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.828685][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.836443][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.848159][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.875886][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.897003][ T3731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.905486][ T3731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.915212][ T5840] veth1_vlan: entered promiscuous mode [ 91.928713][ T10] cfg80211: failed to load regulatory.db [ 91.971200][ T1327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.987282][ T1327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.033165][ T1327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.042164][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.061431][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.080147][ T1327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.110382][ T4098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.122583][ T4098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.255069][ T5840] veth0_macvtap: entered promiscuous mode [ 92.349290][ T5840] veth1_macvtap: entered promiscuous mode [ 92.375551][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.416402][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.503296][ T5956] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 92.517786][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.525308][ T307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.535659][ T307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.552492][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.566951][ T5959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.668962][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.681393][ T5961] syzkaller0: entered promiscuous mode [ 92.688978][ T5961] syzkaller0: entered allmulticast mode [ 92.758878][ T4098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799246][ T4098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.894715][ T4098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.905009][ T4098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.956112][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.093696][ T5974] netlink: 'syz.2.12': attribute type 3 has an invalid length. [ 93.123675][ T5976] lo: entered promiscuous mode [ 93.131298][ T5976] tunl0: entered promiscuous mode [ 93.139325][ T5976] gre0: entered promiscuous mode [ 93.153843][ T5976] gretap0: entered promiscuous mode [ 93.165265][ T5976] erspan0: entered promiscuous mode [ 93.176616][ T5976] ip_vti0: entered promiscuous mode [ 93.348647][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.375096][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.411633][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.421905][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.518845][ T5846] Bluetooth: hci1: command tx timeout [ 93.588516][ T5984] veth3: entered allmulticast mode [ 93.598596][ T5846] Bluetooth: hci3: command tx timeout [ 93.598638][ T5842] Bluetooth: hci0: command tx timeout [ 93.608297][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.618906][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.640264][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.640415][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.650487][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.657916][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.672548][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.684169][ T5842] Bluetooth: hci2: command tx timeout [ 93.686821][ T5842] Bluetooth: hci4: command tx timeout [ 93.692417][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.705756][ T5984] Zero length message leads to an empty skb [ 111.900177][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.955642][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 111.968431][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 112.006863][ T5995] nbd0: detected capacity change from 0 to 127 [ 112.009695][ T6004] openvswitch: netlink: Flow key attr not present in new flow. [ 112.017280][ T5842] block nbd0: Receive control failed (result -32) [ 112.023171][ T5991] block nbd0: Send control failed (result -32) [ 112.038813][ T6003] openvswitch: netlink: Flow key attr not present in new flow. [ 112.060165][ T5991] block nbd0: Request send failed, requeueing [ 112.116846][ T11] block nbd0: Dead connection, failed to find a fallback [ 112.125330][ T11] block nbd0: shutting down sockets [ 112.132665][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.142940][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.157271][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.185247][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.195797][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.205297][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.220377][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.239778][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.252621][ T6017] netlink: 'syz.4.19': attribute type 1 has an invalid length. [ 112.257166][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.288064][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.299525][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.309251][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.320314][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.346331][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.354320][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.374872][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.396146][ T5991] ldm_validate_partition_table(): Disk read failed. [ 112.416452][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.449853][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.512288][ T5991] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.540508][ T5991] Buffer I/O error on dev nbd0, logical block 0, async page read [ 112.554008][ T5991] Dev nbd0: unable to read RDB block 0 [ 112.561743][ T5991] nbd0: unable to read partition table [ 112.602261][ T6014] ldm_validate_partition_table(): Disk read failed. [ 112.607626][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 112.634531][ T6014] Dev nbd0: unable to read RDB block 0 [ 112.688535][ T6014] nbd0: unable to read partition table [ 112.741787][ T6014] ldm_validate_partition_table(): Disk read failed. [ 112.781276][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'. [ 112.781498][ T6014] Dev nbd0: unable to read RDB block 0 [ 112.819052][ T6014] nbd0: unable to read partition table [ 112.848283][ T6038] xt_bpf: check failed: parse error [ 112.860175][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 112.882990][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 112.966822][ T6043] SET target dimension over the limit! [ 112.972627][ T6043] SET target dimension over the limit! [ 112.991037][ T6043] SET target dimension over the limit! [ 113.003347][ T6043] SET target dimension over the limit! [ 113.025487][ T6042] syzkaller0: entered promiscuous mode [ 113.031503][ T6043] SET target dimension over the limit! [ 113.054442][ T6042] syzkaller0: entered allmulticast mode [ 113.064841][ T6043] SET target dimension over the limit! [ 113.085495][ T6049] netem: change failed [ 113.092286][ T6043] SET target dimension over the limit! [ 113.101519][ T6043] SET target dimension over the limit! [ 113.136726][ T6043] SET target dimension over the limit! [ 113.154997][ T6043] SET target dimension over the limit! [ 113.458690][ T6065] netlink: 88 bytes leftover after parsing attributes in process `syz.1.34'. [ 113.497035][ T6063] netlink: 72 bytes leftover after parsing attributes in process `syz.3.32'. [ 113.955896][ T6091] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 114.134331][ T6099] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 114.326204][ T6110] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 114.334234][ T6110] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 114.354284][ T6110] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 114.411077][ T6110] netlink: 'syz.0.47': attribute type 2 has an invalid length. [ 114.680438][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 114.735038][ T6125] gtp0: entered promiscuous mode [ 114.741126][ T6125] gtp0: entered allmulticast mode [ 115.020630][ T6137] IPVS: length: 35 != 2504 [ 115.057128][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 115.347891][ T6151] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 115.504072][ T6157] netlink: 'syz.4.67': attribute type 2 has an invalid length. [ 115.656494][ T6159] syz.1.68 (6159) used greatest stack depth: 16696 bytes left [ 116.089991][ T6184] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 116.322438][ T6194] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 116.331323][ T6194] netlink: 'syz.3.79': attribute type 29 has an invalid length. [ 116.522309][ T6201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.579814][ T6205] netlink: 'syz.2.82': attribute type 11 has an invalid length. [ 116.645545][ T6204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.659225][ T6204] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.735696][ T6212] geneve2: entered promiscuous mode [ 116.757334][ T6212] geneve2: entered allmulticast mode [ 116.907077][ T65] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 55538 - 0 [ 116.924106][ T65] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 55538 - 0 [ 116.940471][ T65] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 55538 - 0 [ 117.009863][ T6204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.020968][ T6204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.031639][ T6204] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55538 - 0 [ 117.066548][ T5953] IPVS: starting estimator thread 0... [ 117.131337][ T6204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.142433][ T6204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.154254][ T6204] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55538 - 0 [ 117.164988][ T6223] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.257265][ T6227] validate_nla: 6 callbacks suppressed [ 117.257286][ T6227] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 117.261776][ T6204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.286815][ T6204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.330269][ T6204] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55538 - 0 [ 117.345740][ T6232] netlink: 'syz.2.88': attribute type 8 has an invalid length. [ 117.354804][ T6232] __nla_validate_parse: 8 callbacks suppressed [ 117.354820][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 117.414402][ T6232] bond0: entered promiscuous mode [ 117.419776][ T6232] bond_slave_0: entered promiscuous mode [ 117.425960][ T6232] bond_slave_1: entered promiscuous mode [ 117.443938][ T6232] ip6gretap0: entered promiscuous mode [ 117.451215][ T6232] gretap0: entered promiscuous mode [ 117.458203][ T6232] hsr1: entered promiscuous mode [ 117.476118][ T6235] netlink: 'syz.3.89': attribute type 3 has an invalid length. [ 117.504760][ T6235] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 117.666987][ T6243] lok: renamed from lo (while UP) [ 117.767680][ T4098] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.795630][ T4098] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 55538 - 0 [ 117.806110][ T6250] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'. [ 117.837253][ T4098] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 117.857269][ T6250] netlink: 43 bytes leftover after parsing attributes in process `syz.3.92'. [ 117.866766][ T6250] netlink: 'syz.3.92': attribute type 6 has an invalid length. [ 117.898487][ T4098] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.917338][ T6250] netlink: 'syz.3.92': attribute type 5 has an invalid length. [ 117.935158][ T5842] Bluetooth: hci4: command tx timeout [ 117.941391][ T4098] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 55538 - 0 [ 117.966465][ T6250] netlink: 43 bytes leftover after parsing attributes in process `syz.3.92'. [ 117.980429][ T4098] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.201451][ T6253] syzkaller0: entered promiscuous mode [ 118.226632][ T6253] syzkaller0: entered allmulticast mode [ 118.233185][ T6259] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.264986][ T6259] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 55538 - 0 [ 118.285287][ T6259] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.331513][ T6275] netlink: 'syz.1.97': attribute type 10 has an invalid length. [ 118.340048][ T3662] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.351780][ T6275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 118.360958][ T3662] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 55538 - 0 [ 118.386369][ T3662] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 118.398998][ T6275] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 118.665043][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.668064][ T6292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.733940][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 119.009771][ T6308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.105'. [ 119.225180][ T6311] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 120.195594][ T6323] tipc: Enabling of bearer rejected, failed to enable media [ 120.271591][ T6324] tipc: Started in network mode [ 120.279039][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 120.302163][ T6324] tipc: Node identity ae6d53164698, cluster identity 4711 [ 120.311689][ T6324] tipc: Enabled bearer , priority 0 [ 120.376863][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.113'. [ 120.405320][ T6335] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 120.413383][ T6328] netlink: 'syz.4.112': attribute type 23 has an invalid length. [ 120.413809][ T6331] syzkaller0: entered promiscuous mode [ 120.433705][ T6331] syzkaller0: entered allmulticast mode [ 120.500230][ T6324] tipc: Resetting bearer [ 120.556812][ T6322] tipc: Resetting bearer [ 120.643056][ T6322] tipc: Disabling bearer [ 120.897478][ T6350] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 120.944173][ T6350] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 121.343817][ T6373] syzkaller0: entered promiscuous mode [ 121.371443][ T6373] syzkaller0: entered allmulticast mode [ 121.676908][ T6389] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.734611][ T6392] xt_l2tp: unknown flags: 10 [ 122.016159][ T6406] netlink: 'syz.3.140': attribute type 11 has an invalid length. [ 122.026952][ T6406] netlink: 'syz.3.140': attribute type 11 has an invalid length. [ 122.375774][ T6425] tipc: Enabling of bearer rejected, failed to enable media [ 122.395535][ T6425] tipc: Enabling of bearer rejected, failed to enable media [ 122.445091][ T6429] __nla_validate_parse: 5 callbacks suppressed [ 122.445112][ T6429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.148'. [ 122.514873][ T6431] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 122.525241][ T6431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.538781][ T6433] openvswitch: netlink: Invalid MD length 60718 for MD type 0 [ 122.547183][ T6433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.667226][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 122.678373][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 122.754173][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.763582][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.770888][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.946947][ T6448] syzkaller0: entered promiscuous mode [ 122.952592][ T6448] syzkaller0: entered allmulticast mode [ 123.029501][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 123.067024][ T6459] netlink: 'syz.0.159': attribute type 10 has an invalid length. [ 123.071902][ T6457] team1: entered promiscuous mode [ 123.080753][ T5842] block nbd1: Receive control failed (result -32) [ 123.083151][ T6457] team1: entered allmulticast mode [ 123.093582][ T6459] bridge0: port 3(team0) entered blocking state [ 123.114989][ T6459] bridge0: port 3(team0) entered disabled state [ 123.127690][ T6459] team0: entered allmulticast mode [ 123.136801][ T6459] team_slave_0: entered allmulticast mode [ 123.142647][ T6459] team_slave_1: entered allmulticast mode [ 123.165144][ T6459] team0: entered promiscuous mode [ 123.172345][ T6459] team_slave_0: entered promiscuous mode [ 123.178889][ T6459] team_slave_1: entered promiscuous mode [ 123.185763][ T6459] bridge0: port 3(team0) entered blocking state [ 123.192183][ T6459] bridge0: port 3(team0) entered forwarding state [ 123.604599][ T6479] netlink: 232 bytes leftover after parsing attributes in process `syz.3.164'. [ 123.649568][ T6482] netlink: 260 bytes leftover after parsing attributes in process `syz.0.165'. [ 123.734996][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 123.761646][ T6486] unsupported nlmsg_type 40 [ 123.868151][ T6488] set match dimension is over the limit! [ 123.903937][ T6488] netlink: 'syz.0.169': attribute type 21 has an invalid length. [ 123.936400][ T6488] netlink: 128 bytes leftover after parsing attributes in process `syz.0.169'. [ 123.971119][ T6488] netlink: 3 bytes leftover after parsing attributes in process `syz.0.169'. [ 124.124789][ T6501] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 124.172707][ T6502] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 124.260135][ T6507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 124.584857][ T6525] netlink: 'syz.1.181': attribute type 21 has an invalid length. [ 124.614669][ T6525] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 125.580779][ T6588] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 125.673039][ T6588] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 125.901841][ T6605] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 126.009489][ T6605] bond2: entered promiscuous mode [ 126.015109][ T6605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.130899][ T6614] bond2: (slave bridge1): making interface the new active one [ 126.162815][ T6614] bridge1: entered promiscuous mode [ 126.183837][ T6614] bridge1: left promiscuous mode [ 126.370046][ T6626] caif0: mtu less than device minimum [ 126.670722][ T6633] syzkaller0: entered promiscuous mode [ 126.678311][ T6633] syzkaller0: entered allmulticast mode [ 126.879275][ T6655] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 126.931544][ T6655] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 127.409703][ T6683] IPVS: Unknown mcast interface: vcan0 [ 127.452255][ T6679] pimreg: entered allmulticast mode [ 127.474897][ T6679] __nla_validate_parse: 10 callbacks suppressed [ 127.474915][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'. [ 127.544885][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz.3.225'. [ 127.701800][ T6696] tipc: Started in network mode [ 127.718311][ T6696] tipc: Node identity 3ee7da882e36, cluster identity 4711 [ 127.725659][ T6696] tipc: Enabled bearer , priority 0 [ 127.749501][ T6701] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 127.803841][ T6696] syzkaller0: entered promiscuous mode [ 127.832711][ T6696] syzkaller0: entered allmulticast mode [ 127.878900][ T6710] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 127.893578][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.232'. [ 127.952249][ T6696] tipc: Resetting bearer [ 127.987856][ T6692] tipc: Resetting bearer [ 128.096028][ T6692] tipc: Disabling bearer [ 128.191560][ T6725] !: renamed from bond_slave_0 (while UP) [ 128.239899][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 128.286920][ T6731] x_tables: duplicate underflow at hook 1 [ 128.518250][ T6738] vlan2: entered allmulticast mode [ 128.523453][ T6738] hsr0: entered allmulticast mode [ 128.540166][ T6738] hsr_slave_0: entered allmulticast mode [ 128.557389][ T6738] hsr_slave_1: entered allmulticast mode [ 128.610532][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.244'. [ 128.819279][ T6754] netlink: 68 bytes leftover after parsing attributes in process `syz.3.247'. [ 128.858180][ T6758] netlink: 76 bytes leftover after parsing attributes in process `syz.4.249'. [ 128.907800][ T6757] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.250'. [ 128.939446][ T6762] netlink: 'syz.0.251': attribute type 3 has an invalid length. [ 128.957664][ T6762] netlink: 32 bytes leftover after parsing attributes in process `syz.0.251'. [ 129.267207][ T6780] netlink: 'syz.4.257': attribute type 3 has an invalid length. [ 129.361736][ T6785] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.420287][ T6778] can: request_module (can-proto-0) failed. [ 129.429411][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.259'. [ 130.003246][ T6815] netlink: 'syz.1.267': attribute type 83 has an invalid length. [ 130.071133][ T6815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.092310][ T6815] bond0: (slave rose0): Enslaving as an active interface with an up link [ 130.518826][ T6833] Bluetooth: MGMT ver 1.23 [ 130.806489][ T6845] netlink: 'syz.2.274': attribute type 5 has an invalid length. [ 130.814201][ T6845] netlink: 'syz.2.274': attribute type 6 has an invalid length. [ 131.007320][ T6862] delete_channel: no stack [ 131.235858][ T6871] openvswitch: netlink: IP tunnel TTL not specified. [ 131.824012][ T6899] syzkaller0: entered promiscuous mode [ 131.850182][ T6899] syzkaller0: entered allmulticast mode [ 132.067247][ T6910] tipc: Started in network mode [ 132.072293][ T6910] tipc: Node identity 12b11304cccb, cluster identity 4711 [ 132.080503][ T6910] tipc: Enabled bearer , priority 0 [ 132.118342][ T6910] syzkaller0: entered promiscuous mode [ 132.146541][ T6910] syzkaller0: entered allmulticast mode [ 132.197612][ T6910] tipc: Resetting bearer [ 132.272949][ T6920] xt_ecn: cannot match TCP bits for non-tcp packets [ 132.351431][ T6922] tipc: Resetting bearer [ 132.425292][ T6922] tipc: Disabling bearer [ 132.901554][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.908503][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.977051][ T6953] __nla_validate_parse: 12 callbacks suppressed [ 132.977073][ T6953] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.302'. [ 133.047225][ T6956] syz.2.303 uses old SIOCAX25GETINFO [ 133.187335][ T6959] syzkaller0: entered promiscuous mode [ 133.202140][ T6959] syzkaller0: entered allmulticast mode [ 133.260141][ T6969] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 133.287603][ T6969] netlink: 228 bytes leftover after parsing attributes in process `syz.2.305'. [ 133.308763][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 133.375625][ T6969] netlink: 'syz.2.305': attribute type 1 has an invalid length. [ 133.397069][ T6969] netlink: 228 bytes leftover after parsing attributes in process `syz.2.305'. [ 133.407644][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 133.665147][ T6981] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 133.734327][ T6981] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 133.756397][ T6985] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 135.321226][ T7003] geneve2: entered promiscuous mode [ 135.479053][ T7011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.313'. [ 135.633991][ T7024] netlink: 696 bytes leftover after parsing attributes in process `syz.0.317'. [ 135.938387][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 136.159448][ T7052] validate_nla: 1 callbacks suppressed [ 136.159468][ T7052] netlink: 'syz.2.325': attribute type 33 has an invalid length. [ 136.169384][ T7050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.198586][ T7052] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 136.210505][ T7043] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.211991][ T7052] bond1 (unregistering): Released all slaves [ 136.270048][ T7057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 136.706636][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.328'. [ 137.625611][ T7111] bond1: entered promiscuous mode [ 137.631995][ T7111] bond1: entered allmulticast mode [ 137.647690][ T7111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.406185][ T7147] netlink: 'syz.4.353': attribute type 16 has an invalid length. [ 138.416406][ T7147] netlink: 'syz.4.353': attribute type 3 has an invalid length. [ 138.435034][ T7161] __nla_validate_parse: 65 callbacks suppressed [ 138.435053][ T7161] netlink: 116 bytes leftover after parsing attributes in process `syz.0.357'. [ 138.436534][ T7147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.353'. [ 138.534019][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 138.547539][ T7167] netlink: 80 bytes leftover after parsing attributes in process `syz.3.358'. [ 138.576341][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 138.642540][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.358'. [ 138.785259][ T7181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.986785][ T7181] nbd2: detected capacity change from 0 to 127 [ 138.994227][ T5842] block nbd2: Receive control failed (result -32) [ 139.005052][ T6014] block nbd2: Dead connection, failed to find a fallback [ 139.295259][ T7212] syzkaller0: entered promiscuous mode [ 139.305228][ T7212] syzkaller0: entered allmulticast mode [ 139.322478][ T7212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 139.491481][ T7218] blkio.reset_stats is deprecated [ 139.961695][ T7236] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 140.070372][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 140.142772][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 140.165721][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'. [ 140.204146][ T7247] netlink: 'syz.1.384': attribute type 26 has an invalid length. [ 140.242582][ T7248] netlink: 'syz.2.382': attribute type 9 has an invalid length. [ 140.261967][ T7248] netlink: 'syz.2.382': attribute type 11 has an invalid length. [ 140.278474][ T7248] netlink: 'syz.2.382': attribute type 12 has an invalid length. [ 140.602595][ T7265] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 140.664250][ T7265] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 140.832492][ T7265] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.874170][ T7265] bond2: (slave bond3): making interface the new active one [ 140.899875][ T7265] bond2: (slave bond3): Enslaving as an active interface with an up link [ 141.117918][ T7275] xt_TCPMSS: Only works on TCP SYN packets [ 141.160354][ T7275] bridge_slave_0: default FDB implementation only supports local addresses [ 141.292927][ T7289] netlink: 'syz.1.396': attribute type 5 has an invalid length. [ 141.341418][ T7293] openvswitch: netlink: IP tunnel dst address not specified [ 141.359117][ T7292] openvswitch: netlink: IP tunnel dst address not specified [ 141.705120][ T7316] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 141.740508][ T7316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.756855][ T7318] netlink: 'syz.0.404': attribute type 39 has an invalid length. [ 142.008307][ T7330] tipc: Enabling of bearer rejected, media not registered [ 142.182989][ T7339] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 142.277708][ T7335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.561199][ T7355] vlan3: entered promiscuous mode [ 142.567702][ T7355] bridge0: entered promiscuous mode [ 142.631577][ T7359] ip6gre1: entered allmulticast mode [ 142.702597][ T7335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.873291][ T7335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.923667][ T7379] trusted_key: syz.3.422 sent an empty control message without MSG_MORE. [ 142.933401][ T7382] nbd: must specify a size in bytes for the device [ 143.004244][ T7335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.103339][ T7385] netlink: 'syz.0.424': attribute type 3 has an invalid length. [ 143.327184][ T1148] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.405229][ T6259] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.429580][ T7410] Bluetooth: MGMT ver 1.23 [ 143.447783][ T6259] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.472493][ T5988] IPVS: starting estimator thread 0... [ 143.504299][ T7414] __nla_validate_parse: 15 callbacks suppressed [ 143.504318][ T7414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.431'. [ 143.545548][ T6284] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.587678][ T7413] IPVS: using max 28 ests per chain, 67200 per kthread [ 143.716394][ T30] audit: type=1107 audit(1765205448.488:2): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 143.835710][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 143.838917][ T7428] netlink: 'syz.2.435': attribute type 32 has an invalid length. [ 143.845114][ T7427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 143.854024][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 144.016147][ T7428] bond1: Setting coupled_control to off (0) [ 144.042159][ T7438] xt_ecn: cannot match TCP bits for non-tcp packets [ 144.311420][ T7453] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 144.458479][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 144.494835][ T7446] bond2: (slave gretap1): making interface the new active one [ 144.503594][ T7446] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 144.533373][ T7461] netlink: 20 bytes leftover after parsing attributes in process `syz.4.445'. [ 144.923826][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 144.992170][ T7484] tipc: Started in network mode [ 144.998208][ T7484] tipc: Node identity 0a97c555058b, cluster identity 4711 [ 145.005659][ T7484] tipc: Enabled bearer , priority 0 [ 145.019291][ T7485] netlink: 'syz.4.452': attribute type 10 has an invalid length. [ 145.105497][ T7484] syzkaller0: entered promiscuous mode [ 145.111198][ T7484] syzkaller0: entered allmulticast mode [ 145.117984][ T7484] tipc: Resetting bearer [ 145.132159][ T7483] tipc: Resetting bearer [ 146.180342][ T7483] tipc: Disabling bearer [ 146.190270][ T5843] tipc: Node number set to 253543765 [ 163.884256][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 163.895079][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.454'. [ 163.905713][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 164.235688][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 164.390581][ T7538] netlink: 160 bytes leftover after parsing attributes in process `syz.0.466'. [ 164.712920][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 164.805368][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 164.824846][ T7554] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.878071][ T7561] netlink: 'syz.3.473': attribute type 1 has an invalid length. [ 165.252830][ T7580] netlink: 'syz.2.478': attribute type 3 has an invalid length. [ 165.264227][ T7580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.478'. [ 165.298537][ T7588] syzkaller0: entered promiscuous mode [ 165.315397][ T7588] syzkaller0: entered allmulticast mode [ 165.447507][ T7598] netlink: 'syz.0.476': attribute type 10 has an invalid length. [ 165.468932][ T7598] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 166.033841][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 166.101432][ T7624] netlink: 'syz.3.488': attribute type 6 has an invalid length. [ 166.246925][ T7630] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 166.353649][ T7630] bond1: entered promiscuous mode [ 166.367637][ T7630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.382831][ T7632] tipc: Enabling of bearer rejected, failed to enable media [ 166.402236][ T7636] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 166.489524][ T7650] netlink: 104 bytes leftover after parsing attributes in process `syz.1.496'. [ 166.862403][ T7667] netlink: 'syz.0.501': attribute type 16 has an invalid length. [ 166.871581][ T7667] netlink: 'syz.0.501': attribute type 3 has an invalid length. [ 167.050085][ T7674] syzkaller0: entered promiscuous mode [ 167.061288][ T7674] syzkaller0: entered allmulticast mode [ 167.120675][ T7674] tipc: Enabled bearer , priority 0 [ 167.148819][ T7672] tipc: Resetting bearer [ 167.253632][ T7672] tipc: Disabling bearer [ 168.326795][ T7752] openvswitch: netlink: IP tunnel dst address not specified [ 168.473250][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 168.480118][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 168.528241][ T7757] tipc: Enabling of bearer rejected, failed to enable media [ 169.032292][ T7789] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 169.077613][ T7789] A link change request failed with some changes committed already. Interface lok may have been left with an inconsistent configuration, please check. [ 169.582911][ T7815] bond2: option all_slaves_active: invalid value (222) [ 169.613280][ T7815] bond2 (unregistering): Released all slaves [ 169.846732][ T7830] __nla_validate_parse: 9 callbacks suppressed [ 169.846753][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.539'. [ 169.978317][ T7830] netlink: 248 bytes leftover after parsing attributes in process `syz.3.539'. [ 170.017438][ T7836] net veth1_virt_wifi .: renamed from virt_wifi0 [ 170.379917][ T7847] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 170.551301][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.548'. [ 170.747381][ T7874] netlink: 'syz.3.550': attribute type 6 has an invalid length. [ 170.775069][ T7876] netlink: 'syz.3.550': attribute type 6 has an invalid length. [ 170.889499][ T7879] netlink: 'syz.2.553': attribute type 142 has an invalid length. [ 170.966193][ T7883] veth1_to_bond: entered allmulticast mode [ 170.975237][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 171.066548][ T7883] bond0: (slave bond_slave_1): Releasing backup interface [ 171.125169][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.556'. [ 171.148954][ T7883] veth1_to_bond (unregistering): left allmulticast mode [ 171.660983][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 171.698641][ T7926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.760863][ T7925] : entered promiscuous mode [ 171.830858][ T7932] netlink: 'syz.1.565': attribute type 23 has an invalid length. [ 172.099426][ T7939] netlink: 27 bytes leftover after parsing attributes in process `syz.0.568'. [ 172.200233][ T7943] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 172.435933][ T7951] bond4: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 172.450038][ T7951] bond4 (unregistering): Released all slaves [ 172.663469][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 173.063337][ T7981] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 173.144598][ T7981] bond3: entered promiscuous mode [ 173.153211][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 173.167407][ T7981] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.254521][ T7981] bond3: (slave bridge3): making interface the new active one [ 173.276736][ T7981] bridge3: entered promiscuous mode [ 173.287907][ T7981] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 173.973128][ T8026] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 174.101327][ T8039] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 174.125947][ T8026] bond3 (unregistering): Released all slaves [ 174.148810][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 174.319089][ T8041] bond2: (slave bridge3): making interface the new active one [ 174.329116][ T8041] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 174.456495][ T8056] netlink: 'syz.4.602': attribute type 142 has an invalid length. [ 174.555162][ T8060] netlink: 'syz.1.603': attribute type 11 has an invalid length. [ 174.563171][ T8060] netlink: 'syz.1.603': attribute type 11 has an invalid length. [ 174.617476][ T8064] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.752667][ T8069] bridge_slave_0: left allmulticast mode [ 174.759902][ T8069] bridge_slave_0: left promiscuous mode [ 174.768195][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.822062][ T8069] bridge_slave_1: left allmulticast mode [ 174.844168][ T8069] bridge_slave_1: left promiscuous mode [ 174.868341][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.912687][ T8069] bond0: (slave bond_slave_0): Releasing backup interface [ 174.957819][ T8069] bond0: (slave bond_slave_1): Releasing backup interface [ 175.015997][ T8069] team0: Port device team_slave_0 removed [ 175.070116][ T8069] team0: Port device team_slave_1 removed [ 175.085459][ T8069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.096214][ T8069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.118902][ T8069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.128866][ T8069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.158969][ T8069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.199769][ T8089] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 175.425021][ T8102] __nla_validate_parse: 3 callbacks suppressed [ 175.425041][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.612'. [ 175.623574][ T8109] tipc: Started in network mode [ 175.638501][ T8109] tipc: Node identity 4256798640e, cluster identity 4711 [ 175.645760][ T8109] tipc: Enabled bearer , priority 0 [ 175.797926][ T8109] syzkaller0: entered promiscuous mode [ 175.803556][ T8109] syzkaller0: entered allmulticast mode [ 175.810657][ T8109] tipc: Resetting bearer [ 175.845719][ T8108] tipc: Resetting bearer [ 176.121625][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 177.125356][ T8108] tipc: Disabling bearer [ 177.179729][ T5920] tipc: Node number set to 45513094 [ 177.210769][ T8138] netlink: 'syz.1.622': attribute type 4 has an invalid length. [ 177.547801][ T8148] netlink: 64 bytes leftover after parsing attributes in process `syz.3.624'. [ 177.595505][ T8161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'. [ 177.832114][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.632'. [ 178.041211][ T8178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.634'. [ 178.368405][ T8198] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 178.416535][ T8198] netlink: 'syz.1.638': attribute type 4 has an invalid length. [ 178.583990][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 178.967021][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 178.999758][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.642'. [ 179.137575][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 179.873753][ T8276] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 179.878475][ T8278] openvswitch: netlink: IPv4 tun info is not correct [ 179.939006][ T8282] sctp: [Deprecated]: syz.4.656 (pid 8282) Use of int in maxseg socket option. [ 179.939006][ T8282] Use struct sctp_assoc_value instead [ 180.149703][ T8286] bond4 (unregistering): Released all slaves [ 180.630749][ T8314] __nla_validate_parse: 5 callbacks suppressed [ 180.630770][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 180.649724][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 180.989498][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 181.066116][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.671'. [ 181.290546][ T5988] IPVS: starting estimator thread 0... [ 181.311344][ T8342] geneve3: entered allmulticast mode [ 181.317775][ T8344] netlink: 'syz.2.674': attribute type 21 has an invalid length. [ 181.336146][ T8344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.674'. [ 181.366942][ T8344] netlink: 3 bytes leftover after parsing attributes in process `syz.2.674'. [ 181.426349][ T8347] IPVS: using max 30 ests per chain, 72000 per kthread [ 181.648915][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 182.052344][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 182.252321][ T8397] netlink: 96 bytes leftover after parsing attributes in process `syz.4.689'. [ 182.564252][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 182.573471][ T8415] netlink: 'syz.2.694': attribute type 5 has an invalid length. [ 182.615265][ T8415] geneve3: entered promiscuous mode [ 182.646907][ T8415] geneve3: entered allmulticast mode [ 182.655132][ T1105] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 182.677080][ T1105] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 182.685235][ T1105] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 182.694428][ T8415] netlink: 'syz.2.694': attribute type 7 has an invalid length. [ 182.708261][ T8415] netlink: 'syz.2.694': attribute type 8 has an invalid length. [ 182.724129][ T1105] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 182.740715][ T8418] netlink: 'syz.4.696': attribute type 29 has an invalid length. [ 182.764635][ T8418] netlink: 'syz.4.696': attribute type 29 has an invalid length. [ 182.774537][ T8420] netlink: 'syz.3.695': attribute type 58 has an invalid length. [ 182.852405][ T8422] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 183.014369][ T8431] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 183.036551][ T8431] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.209705][ T8445] netlink: 'syz.3.704': attribute type 5 has an invalid length. [ 183.244204][ T8445] netlink: 'syz.3.704': attribute type 6 has an invalid length. [ 183.697612][ T8473] veth0: entered promiscuous mode [ 183.704173][ T8473] veth0: left promiscuous mode [ 183.793512][ T8476] netlink: 'syz.3.716': attribute type 11 has an invalid length. [ 184.097312][ T8490] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 185.177677][ T8540] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20001 [ 185.330846][ T30] audit: type=1800 audit(1765205490.118:3): pid=8544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.740" name="memory.events" dev="tmpfs" ino=700 res=0 errno=0 [ 185.421460][ T30] audit: type=1804 audit(1765205490.118:4): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.740" name="/newroot/134/memory.events" dev="tmpfs" ino=700 res=1 errno=0 [ 185.474999][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.508381][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.767520][ T8564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.870220][ T8574] __nla_validate_parse: 13 callbacks suppressed [ 185.870240][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 186.016465][ T8579] A link change request failed with some changes committed already. Interface lok may have been left with an inconsistent configuration, please check. [ 186.200982][ T8584] openvswitch: netlink: IP tunnel dst address not specified [ 186.629672][ T8603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 186.668318][ T8603] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 186.721448][ T8606] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.757'. [ 186.834381][ T8611] veth0: entered promiscuous mode [ 186.939683][ T8610] veth0: left promiscuous mode [ 187.188367][ T8631] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.764'. [ 187.215445][ T8631] openvswitch: netlink: Message has 6 unknown bytes. [ 187.343639][ T4098] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.371931][ T4098] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.385860][ T4098] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.402709][ T4098] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.521521][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 187.627256][ T8654] xt_socket: unknown flags 0x50 [ 187.646097][ T8653] validate_nla: 6 callbacks suppressed [ 187.646117][ T8653] netlink: 'syz.4.767': attribute type 3 has an invalid length. [ 187.719742][ T8653] netlink: 'syz.4.767': attribute type 3 has an invalid length. [ 187.885392][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.775'. [ 188.004422][ T8669] vlan2: entered promiscuous mode [ 188.107046][ T8683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.781'. [ 188.116429][ T8684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 188.154471][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 188.398546][ T8698] openvswitch: netlink: Message has 8 unknown bytes. [ 188.409931][ T8698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.454458][ T8701] netlink: 'syz.2.785': attribute type 4 has an invalid length. [ 188.530048][ T8697] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 188.559828][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.785'. [ 188.707214][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 188.841552][ T8709] bridge2: port 1(veth3) entered blocking state [ 188.851348][ T8709] bridge2: port 1(veth3) entered disabled state [ 188.858477][ T8709] veth3: entered allmulticast mode [ 188.871355][ T8709] veth3: entered promiscuous mode [ 188.940803][ T8712] bridge2: port 2(veth0_to_bond) entered blocking state [ 188.967068][ T8712] bridge2: port 2(veth0_to_bond) entered disabled state [ 188.982199][ T8712] veth0_to_bond: entered allmulticast mode [ 189.007022][ T8723] netlink: 'syz.4.793': attribute type 2 has an invalid length. [ 189.023743][ T8712] veth0_to_bond: entered promiscuous mode [ 189.028613][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 189.270347][ T8737] bridge0: port 3(vlan1) entered blocking state [ 189.285408][ T8737] bridge0: port 3(vlan1) entered disabled state [ 189.300424][ T8737] vlan1: entered allmulticast mode [ 189.315934][ T8737] bridge0: entered allmulticast mode [ 189.359720][ T8737] vlan1: left allmulticast mode [ 189.390400][ T8737] bridge0: left allmulticast mode [ 189.675108][ T8758] netlink: 'syz.3.801': attribute type 17 has an invalid length. [ 189.755338][ T8758] erspan0: entered promiscuous mode [ 189.826418][ T8758] erspan0: left promiscuous mode [ 190.375486][ T8794] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 190.902105][ T8814] sctp: [Deprecated]: syz.1.820 (pid 8814) Use of int in max_burst socket option. [ 190.902105][ T8814] Use struct sctp_assoc_value instead [ 191.091677][ T8828] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 191.103222][ T8828] __nla_validate_parse: 11 callbacks suppressed [ 191.103241][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'. [ 191.218726][ T8832] netlink: 192 bytes leftover after parsing attributes in process `syz.0.826'. [ 191.579216][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 191.595097][ T8858] gtp0: entered promiscuous mode [ 191.628151][ T8858] gtp0: entered allmulticast mode [ 191.749982][ T8871] netlink: 'syz.2.834': attribute type 1 has an invalid length. [ 191.947157][ T8876] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 191.954857][ T8876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.835'. [ 192.044124][ T8880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.837'. [ 192.085125][ T8882] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 192.173010][ T8882] macvlan2: entered promiscuous mode [ 192.179225][ T8882] macvlan2: entered allmulticast mode [ 192.192009][ T8882] bond4: entered promiscuous mode [ 192.223451][ T8882] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.261737][ T8888] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001 [ 192.283592][ T8882] bond4: left promiscuous mode [ 193.294684][ T8906] dvmrp0: entered allmulticast mode [ 193.329657][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.339436][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 193.471028][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 193.511508][ T8932] A link change request failed with some changes committed already. Interface lok may have been left with an inconsistent configuration, please check. [ 193.777156][ T8939] xt_cgroup: invalid path, errno=-2 [ 194.054596][ T8961] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 194.063280][ T8961] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 194.064424][ T8953] tipc: Enabled bearer , priority 0 [ 194.081274][ T8961] netlink: 'syz.2.861': attribute type 2 has an invalid length. [ 194.132238][ T8961] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 194.157839][ T8961] netlink: 'syz.2.861': attribute type 1 has an invalid length. [ 194.326371][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.332737][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.642334][ T8940] tipc: Disabling bearer [ 195.137360][ T9009] netlink: 112 bytes leftover after parsing attributes in process `syz.4.873'. [ 195.146901][ T9003] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.175920][ T9003] syzkaller0: entered promiscuous mode [ 195.198341][ T9003] syzkaller0: entered allmulticast mode [ 195.295066][ T9003] tipc: Enabled bearer , priority 0 [ 195.355640][ T9001] tipc: Resetting bearer [ 195.505305][ T9] IPVS: starting estimator thread 0... [ 195.513388][ T9001] tipc: Disabling bearer [ 195.535978][ T9017] SET target dimension over the limit! [ 195.617730][ T9023] IPVS: using max 23 ests per chain, 55200 per kthread [ 195.783082][ T9033] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.799268][ T9033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.806883][ T9033] IPv6: NLM_F_CREATE should be set when creating new route [ 195.814155][ T9033] IPv6: NLM_F_CREATE should be set when creating new route [ 196.030624][ T9043] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 196.414256][ T9053] vlan2: entered promiscuous mode [ 196.421476][ T9053] bridge0: entered promiscuous mode [ 196.455838][ T9057] bond0: entered promiscuous mode [ 196.465186][ T9057] bond_slave_0: entered promiscuous mode [ 196.482672][ T9057] bond_slave_1: entered promiscuous mode [ 196.530838][ T9048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.807340][ T9070] veth0: entered promiscuous mode [ 196.818512][ T9068] syzkaller0: entered promiscuous mode [ 196.824024][ T9068] syzkaller0: entered allmulticast mode [ 196.833006][ T9069] veth0: left promiscuous mode [ 196.974237][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 197.270431][ T9089] syzkaller0: entered promiscuous mode [ 197.275977][ T9089] syzkaller0: entered allmulticast mode [ 197.486759][ T9103] netlink: 14 bytes leftover after parsing attributes in process `syz.0.899'. [ 197.885499][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 197.897004][ T9112] bond4 (unregistering): Released all slaves [ 197.945493][ T9120] xt_hashlimit: overflow, rate too high: 0 [ 198.022541][ T9118] syzkaller0: entered promiscuous mode [ 198.028518][ T9118] syzkaller0: entered allmulticast mode [ 198.860994][ T9151] x_tables: duplicate underflow at hook 1 [ 200.724849][ T8997] Set syz1 is full, maxelem 65536 reached [ 200.788823][ T9162] syzkaller0: entered promiscuous mode [ 200.794485][ T9162] syzkaller0: entered allmulticast mode [ 201.007839][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.922'. [ 201.207221][ T9184] nbd3: detected capacity change from 0 to 127 [ 201.225307][ T5842] block nbd3: Receive control failed (result -32) [ 201.244803][ T6333] block nbd3: Dead connection, failed to find a fallback [ 201.277409][ T6333] block nbd3: shutting down sockets [ 201.282878][ T6333] blk_print_req_error: 159 callbacks suppressed [ 201.282894][ T6333] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.359212][ T6333] buffer_io_error: 159 callbacks suppressed [ 201.359230][ T6333] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.385689][ T6333] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.394724][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 201.413677][ T6333] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.450345][ T6333] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.497241][ T6333] Buffer I/O error on dev nbd3, logical block 2, async page read [ 201.505398][ T6333] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.515975][ T6333] Buffer I/O error on dev nbd3, logical block 3, async page read [ 201.524480][ T6333] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.534480][ T6333] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.542733][ T6333] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.562256][ T9206] netlink: 340 bytes leftover after parsing attributes in process `syz.0.930'. [ 201.566276][ T6333] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.599595][ T6333] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.602207][ T9208] ksmbd: Unknown IPC event: 3, ignore. [ 201.633095][ T6333] Buffer I/O error on dev nbd3, logical block 2, async page read [ 201.670990][ T6333] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.687148][ T6333] Buffer I/O error on dev nbd3, logical block 3, async page read [ 201.695112][ T6333] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.717220][ T6333] Buffer I/O error on dev nbd3, logical block 0, async page read [ 201.748209][ T6333] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.768119][ T6333] Buffer I/O error on dev nbd3, logical block 1, async page read [ 201.820640][ T6333] ldm_validate_partition_table(): Disk read failed. [ 201.850251][ T6333] Dev nbd3: unable to read RDB block 0 [ 201.868101][ T6333] nbd3: unable to read partition table [ 201.903626][ T6333] ldm_validate_partition_table(): Disk read failed. [ 201.928742][ T6333] Dev nbd3: unable to read RDB block 0 [ 201.960094][ T6333] nbd3: unable to read partition table [ 202.096586][ T9229] Bluetooth: MGMT ver 1.23 [ 202.101086][ T9229] Bluetooth: hci1: too big key_count value 32778 [ 202.407234][ T9252] netlink: zone id is out of range [ 202.412413][ T9252] netlink: zone id is out of range [ 202.492699][ T9252] netlink: zone id is out of range [ 202.527190][ T9252] netlink: zone id is out of range [ 202.548487][ T9252] netlink: zone id is out of range [ 202.676184][ T9252] netlink: zone id is out of range [ 202.721554][ T9252] netlink: zone id is out of range [ 202.770993][ T9252] netlink: zone id is out of range [ 202.794163][ T9252] netlink: zone id is out of range [ 202.990264][ T9270] IPVS: set_ctl: invalid protocol: 171 100.1.1.0:20001 [ 203.004373][ T9270] IPVS: set_ctl: invalid protocol: 171 100.1.1.0:20001 [ 203.029224][ T9270] IPVS: set_ctl: invalid protocol: 171 100.1.1.0:20001 [ 203.221108][ T9278] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 203.256370][ T9278] netlink: 228 bytes leftover after parsing attributes in process `syz.2.953'. [ 203.274900][ T9280] netlink: 44 bytes leftover after parsing attributes in process `syz.4.951'. [ 203.639254][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.959'. [ 203.668286][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.960'. [ 203.710940][ T9300] netlink: 112 bytes leftover after parsing attributes in process `syz.4.960'. [ 204.042512][ T9320] netlink: 88 bytes leftover after parsing attributes in process `syz.0.967'. [ 204.064084][ T9330] netlink: 'syz.2.970': attribute type 9 has an invalid length. [ 204.329786][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 204.370646][ T9343] netlink: 'syz.2.973': attribute type 32 has an invalid length. [ 204.390616][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 204.492250][ T9343] bond5: Setting coupled_control to off (0) [ 204.774192][ T9374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 204.846196][ T9373] netem: change failed [ 204.957327][ T9373] syzkaller0: entered promiscuous mode [ 204.962884][ T9373] syzkaller0: entered allmulticast mode [ 205.176064][ T9389] netlink: 76 bytes leftover after parsing attributes in process `syz.0.988'. [ 205.204090][ T9392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 205.922415][ T9422] can: request_module (can-proto-0) failed. [ 206.149649][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.170088][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.361690][ T9452] sctp: [Deprecated]: syz.0.1006 (pid 9452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.361690][ T9452] Use struct sctp_sack_info instead [ 206.628238][ T9468] netlink: 'syz.2.1009': attribute type 83 has an invalid length. [ 207.007819][ T9490] netlink: 'syz.4.1017': attribute type 7 has an invalid length. [ 207.046751][ T9493] netlink: 'syz.4.1017': attribute type 7 has an invalid length. [ 207.237282][ T9504] netlink: 'syz.2.1021': attribute type 7 has an invalid length. [ 207.252259][ T9504] netlink: 'syz.2.1021': attribute type 8 has an invalid length. [ 207.369600][ T9500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.512040][ T9509] bond2: entered allmulticast mode [ 207.741412][ T9526] netlink: 'syz.4.1027': attribute type 11 has an invalid length. [ 207.932815][ T9531] veth5: entered allmulticast mode [ 208.096503][ T9546] sctp: [Deprecated]: syz.1.1034 (pid 9546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.096503][ T9546] Use struct sctp_sack_info instead [ 208.296758][ T9556] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 208.326027][ T9556] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 209.104176][ T9601] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 210.064041][ T9630] syzkaller1: entered promiscuous mode [ 210.119379][ T9630] syzkaller1: entered allmulticast mode [ 210.168340][ T9632] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 210.271986][ T9632] syzkaller0: entered promiscuous mode [ 210.291924][ T9632] syzkaller0: entered allmulticast mode [ 210.606960][ T9649] __nla_validate_parse: 25 callbacks suppressed [ 210.606980][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1064'. [ 210.637758][ T9657] netlink: 'syz.4.1065': attribute type 1 has an invalid length. [ 210.848843][ T9657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.871783][ T9662] bond5: entered allmulticast mode [ 210.939072][ T9666] bond5: (slave ip6gretap1): making interface the new active one [ 210.978988][ T9666] ip6gretap1: entered allmulticast mode [ 210.997042][ T9666] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 211.096520][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.125252][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.132536][ T9679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.270932][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.304641][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.314205][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.344531][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.361049][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1075'. [ 211.608147][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 211.706057][ T9723] net_ratelimit: 46 callbacks suppressed [ 211.706079][ T9723] openvswitch: netlink: EtherType 50a is less than min 600 [ 211.757493][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 211.757875][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 211.763612][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 211.776376][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 211.838980][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 211.910939][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 212.790841][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 212.843821][ T30] audit: type=1800 audit(1765205517.628:5): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1089" name="memory.events" dev="tmpfs" ino=1054 res=0 errno=0 [ 213.051859][ T9785] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 213.700968][ T9807] netlink: 'syz.2.1103': attribute type 5 has an invalid length. [ 214.288525][ T9835] netlink: 'syz.2.1110': attribute type 1 has an invalid length. [ 214.311455][ T9835] NCSI netlink: No device for ifindex 0 [ 214.722525][ T9866] netlink: 'syz.3.1116': attribute type 21 has an invalid length. [ 214.837771][ T9876] netlink: 'syz.4.1120': attribute type 3 has an invalid length. [ 215.738537][ T9913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.834651][ T9918] __nla_validate_parse: 13 callbacks suppressed [ 215.834671][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 215.971966][ T9901] wg1 speed is unknown, defaulting to 1000 [ 215.992746][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.012288][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.076018][ T9901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 216.166071][ T9901] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 216.251236][ T9944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1142'. [ 216.282209][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.320800][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.359437][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.366181][ T9938] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 216.389871][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.440910][ T9901] wg1 speed is unknown, defaulting to 1000 [ 216.512192][ T9948] batadv1: entered allmulticast mode [ 216.610236][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 216.668301][ T9955] set match dimension is over the limit! [ 216.770800][ T9960] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 217.087034][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 217.430968][T10003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1157'. [ 217.539367][T10010] lo speed is unknown, defaulting to 1000 [ 217.550158][T10010] lo speed is unknown, defaulting to 1000 [ 217.559408][T10015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.607610][T10010] lo speed is unknown, defaulting to 1000 [ 217.756711][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1162'. [ 217.765714][T10024] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1162'. [ 217.794880][T10024] netlink: 'syz.2.1162': attribute type 5 has an invalid length. [ 217.804159][T10024] netlink: 'syz.2.1162': attribute type 6 has an invalid length. [ 217.813293][T10024] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1162'. [ 217.829837][T10018] vlan0: entered promiscuous mode [ 217.835125][T10018] vlan0: entered allmulticast mode [ 217.842041][T10018] veth0_vlan: entered allmulticast mode [ 217.858301][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1164'. [ 218.094807][T10039] syz_tun: entered allmulticast mode [ 218.325740][T10010] infiniband sz1: set active [ 218.337539][T10010] infiniband sz1: added lo [ 218.343989][T10010] sz1: rxe_create_cq: returned err = -12 [ 218.354136][T10010] infiniband sz1: Couldn't create ib_mad CQ [ 218.365350][ T5920] lo speed is unknown, defaulting to 1000 [ 218.392636][T10010] infiniband sz1: Couldn't open port 1 [ 218.507659][T10010] RDS/IB: sz1: added [ 218.530205][T10010] smc: adding ib device sz1 with port count 1 [ 218.554905][T10010] smc: ib device sz1 port 1 has no pnetid [ 218.609716][ T5920] lo speed is unknown, defaulting to 1000 [ 218.642861][T10010] lo speed is unknown, defaulting to 1000 [ 218.686402][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 218.743005][T10062] wg1 speed is unknown, defaulting to 1000 [ 219.160750][T10010] lo speed is unknown, defaulting to 1000 [ 219.505111][T10083] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 219.552023][T10083] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.564660][T10083] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 219.575143][T10083] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 219.604701][T10062] lo speed is unknown, defaulting to 1000 [ 219.773021][T10088] netlink: 'syz.0.1179': attribute type 12 has an invalid length. [ 219.785431][T10088] syzkaller0: entered promiscuous mode [ 219.791506][T10088] syzkaller0: entered allmulticast mode [ 220.049350][T10010] lo speed is unknown, defaulting to 1000 [ 220.525182][T10010] lo speed is unknown, defaulting to 1000 [ 220.683647][T10010] lo speed is unknown, defaulting to 1000 [ 220.929583][T10133] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1187'. [ 221.148223][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 221.386544][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 222.709544][T10160] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1197'. [ 222.880096][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1201'. [ 222.997845][T10172] netlink: 'syz.1.1203': attribute type 12 has an invalid length. [ 223.028220][T10172] netlink: 'syz.1.1203': attribute type 29 has an invalid length. [ 223.036091][T10172] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1203'. [ 223.058834][T10172] netlink: 'syz.1.1203': attribute type 2 has an invalid length. [ 223.083158][T10172] netlink: 'syz.1.1203': attribute type 3 has an invalid length. [ 223.118303][T10172] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1203'. [ 223.135184][T10182] openvswitch: netlink: IP tunnel dst address not specified [ 223.464007][T10203] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 223.489909][T10203] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 223.675663][T10214] syzkaller0: entered promiscuous mode [ 223.682029][T10214] syzkaller0: entered allmulticast mode [ 223.734896][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 223.744904][T10217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 223.869031][T10223] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check. [ 223.994701][T10231] netlink: 'syz.4.1223': attribute type 6 has an invalid length. [ 224.009062][T10231] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1223'. [ 224.018276][T10231] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.212950][T10246] sctp: [Deprecated]: syz.3.1228 (pid 10246) Use of int in max_burst socket option deprecated. [ 224.212950][T10246] Use struct sctp_assoc_value instead [ 225.638482][T10339] xt_l2tp: v2 sid > 0xffff: 1114112 [ 225.845509][T10350] netlink: 'syz.3.1255': attribute type 5 has an invalid length. [ 225.881957][T10350] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 225.992760][T10358] netlink: 'syz.1.1257': attribute type 13 has an invalid length. [ 226.086190][T10360] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 226.300300][ T5843] lo speed is unknown, defaulting to 1000 [ 226.309336][T10369] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.318831][T10369] syzkaller0: entered promiscuous mode [ 226.324329][T10369] syzkaller0: entered allmulticast mode [ 226.367291][T10375] __nla_validate_parse: 14 callbacks suppressed [ 226.367311][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 226.393272][T10377] netlink: 'syz.4.1265': attribute type 32 has an invalid length. [ 226.402625][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 226.487697][T10377] bond7: Setting coupled_control to off (0) [ 226.530188][T10381] syzkaller1: entered promiscuous mode [ 226.562055][T10381] syzkaller1: entered allmulticast mode [ 226.583332][T10389] netlink: 'syz.3.1266': attribute type 1 has an invalid length. [ 226.592273][T10389] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.1266'. [ 226.672583][T10393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1267'. [ 226.908696][T10404] bridge_slave_0: left allmulticast mode [ 226.921283][T10404] bridge_slave_0: left promiscuous mode [ 226.946708][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.059445][T10404] bridge_slave_1: left allmulticast mode [ 227.065309][T10404] bridge_slave_1: left promiscuous mode [ 227.071444][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.095885][T10404] bond0: (slave bond_slave_0): Releasing backup interface [ 227.145431][T10404] team0: Port device team_slave_0 removed [ 227.183785][T10404] team0: Port device team_slave_1 removed [ 227.210299][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.237803][T10404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.265030][T10404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.278297][T10404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.311066][T10404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.350284][ T5892] wg1 speed is unknown, defaulting to 1000 [ 227.453858][T10413] tipc: Enabling of bearer rejected, failed to enable media [ 227.664174][T10440] syzkaller0: entered promiscuous mode [ 227.699755][T10440] syzkaller0: entered allmulticast mode [ 227.944285][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1282'. [ 228.187168][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 228.202177][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 228.570989][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 228.587776][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1290'. [ 228.650679][T10501] Unsupported ieee802154 address type: 0 [ 228.669783][T10501] xt_connbytes: Forcing CT accounting to be enabled [ 228.825346][T10513] x_tables: unsorted entry at hook 3 [ 228.902543][T10511] bond6: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 229.232240][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1299'. [ 229.358935][T10533] bond3: option lp_interval: invalid value (0) [ 229.369261][T10533] bond3: option lp_interval: allowed values 1 - 2147483647 [ 229.391955][T10533] bond3 (unregistering): Released all slaves [ 230.531373][ C1] af_packet: tpacket_rcv: packet too big, clamped from 4276 to 3944. macoff=96 [ 230.628520][ T1105] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.638058][ T1105] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.661789][ T1105] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.693216][ T1105] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.997128][T10615] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 231.037927][T10615] 8021q: VLANs not supported on lo [ 231.072713][ T307] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.102488][ T307] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.136131][ T307] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.189611][T10617] macvtap1: entered allmulticast mode [ 231.195135][T10617] veth0_macvtap: entered allmulticast mode [ 231.208883][ T307] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.251863][T10632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.269857][T10627] syzkaller0: entered promiscuous mode [ 231.275433][T10627] syzkaller0: entered allmulticast mode [ 231.413150][T10644] __nla_validate_parse: 9 callbacks suppressed [ 231.413170][T10644] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1328'. [ 231.669095][T10655] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1331'. [ 231.889118][T10667] netlink: 512 bytes leftover after parsing attributes in process `syz.2.1334'. [ 232.011103][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 232.244163][T10700] netlink: 'syz.0.1343': attribute type 7 has an invalid length. [ 232.275600][T10697] pim6reg1: entered promiscuous mode [ 232.296701][T10697] pim6reg1: entered allmulticast mode [ 232.314573][T10701] tipc: Enabling of bearer rejected, failed to enable media [ 232.620256][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1349'. [ 232.650911][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 232.791854][T10738] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1352'. [ 232.803202][T10738] x_tables: duplicate underflow at hook 3 [ 232.829604][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1351'. [ 232.836780][T10727] IPVS: persistence engine module ip_vs_pe_ not found [ 233.035683][T10751] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1355'. [ 233.068326][T10751] netlink: 'syz.4.1355': attribute type 8 has an invalid length. [ 233.078487][T10756] netlink: 'syz.3.1356': attribute type 16 has an invalid length. [ 233.087044][T10756] netlink: 'syz.3.1356': attribute type 17 has an invalid length. [ 233.165280][T10756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.203574][T10761] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 233.203856][T10762] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 233.261315][T10761] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 233.682982][T10808] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1366'. [ 233.708538][T10808] netlink: 'syz.1.1366': attribute type 6 has an invalid length. [ 233.718911][T10808] netlink: 'syz.1.1366': attribute type 5 has an invalid length. [ 233.780234][T10834] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 233.919643][T10857] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 233.931054][T10834] 8021q: adding VLAN 0 to HW filter on device bond9 [ 233.961612][T10823] bond9: (slave geneve4): making interface the new active one [ 234.017561][T10823] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 234.373175][T10915] bond7: Unable to set down delay as MII monitoring is disabled [ 234.395235][T10915] bond7 (unregistering): Released all slaves [ 234.665498][T10944] macvtap1: entered promiscuous mode [ 234.671539][T10944] macvtap1: entered allmulticast mode [ 234.677939][T10944] erspan0: entered allmulticast mode [ 235.648135][T10784] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 236.036925][T11064] xt_hashlimit: size too large, truncated to 1048576 [ 236.680617][T11083] veth0: entered promiscuous mode [ 236.706176][T11080] veth0: left promiscuous mode [ 236.714026][T11082] __nla_validate_parse: 12 callbacks suppressed [ 236.714055][T11082] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1401'. [ 237.214124][T11098] bond10: (slave bridge3): making interface the new active one [ 237.286810][T11098] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 237.363651][T11104] bond4: entered promiscuous mode [ 237.372412][T11104] bond4: entered allmulticast mode [ 237.378164][T11104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.400802][T11102] bond5: option miimon: invalid value (18446744073709551585) [ 237.408451][T11102] bond5: option miimon: allowed values 0 - 2147483647 [ 237.428910][T11102] bond5 (unregistering): Released all slaves [ 237.460923][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1411'. [ 238.035317][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.228207][T11147] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1423'. [ 238.348507][T11155] validate_nla: 4 callbacks suppressed [ 238.348527][T11155] netlink: 'syz.1.1425': attribute type 10 has an invalid length. [ 238.462900][T11152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.492241][T11152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.520568][T11155] bridge0: port 3(team0) entered blocking state [ 238.534045][T11155] bridge0: port 3(team0) entered disabled state [ 238.550014][T11155] team0: entered allmulticast mode [ 238.562411][T11155] team_slave_0: entered allmulticast mode [ 238.572894][T11155] team_slave_1: entered allmulticast mode [ 238.593982][T11155] team0: entered promiscuous mode [ 238.609030][T11155] team_slave_0: entered promiscuous mode [ 238.621598][T11155] team_slave_1: entered promiscuous mode [ 238.637775][T11155] bridge0: port 3(team0) entered blocking state [ 238.644216][T11155] bridge0: port 3(team0) entered forwarding state [ 238.700045][T11152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.714202][T11152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.810324][T11171] IPVS: sh: FWM 3 0x00000003 - no destination available [ 238.817600][T11172] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 238.833469][T11172] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 238.849729][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 238.871885][T11152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.908444][T11152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.052556][ T5848] Bluetooth: hci4: link tx timeout [ 239.058270][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.061541][T11152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.095656][T11152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.218596][ T5201] udevd[5201]: worker [6014] /devices/virtual/block/nbd2 is taking a long time [ 239.286919][ T1148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.295658][ T1148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.297553][T11182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 239.319539][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 239.329311][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 239.372418][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.386540][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 239.397651][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.467214][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.492524][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.561251][T11186] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 239.575395][T11186] bond11 (unregistering): Released all slaves [ 239.606809][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.620111][T11199] netlink: 'syz.0.1437': attribute type 5 has an invalid length. [ 239.631865][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.686906][T11200] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1437'. [ 240.039288][T11215] lo: Caught tx_queue_len zero misconfig [ 240.098649][T11213] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1443'. [ 240.129378][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 240.550281][T11241] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 240.701774][T11248] bond7: (slave geneve4): making interface the new active one [ 240.710236][T11248] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 240.723790][ T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.773534][T11245] syzkaller0: entered promiscuous mode [ 240.783671][T11245] syzkaller0: entered allmulticast mode [ 240.791573][ T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.860510][ T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 240.878315][ T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 241.017010][ T6259] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.055832][ T6259] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.075317][ T6259] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.117322][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 241.140211][ T6259] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.192378][T11263] syzkaller0: entered promiscuous mode [ 241.198230][T11263] syzkaller0: entered allmulticast mode [ 242.082355][T11308] __nla_validate_parse: 4 callbacks suppressed [ 242.082374][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1471'. [ 242.139197][T11308] netlink: 'syz.3.1471': attribute type 42 has an invalid length. [ 242.169143][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 242.178226][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 242.320891][T11321] netlink: 'syz.2.1475': attribute type 6 has an invalid length. [ 242.329742][T11320] netlink: 'syz.2.1475': attribute type 39 has an invalid length. [ 242.347241][T11316] syzkaller0: entered promiscuous mode [ 242.352903][T11316] syzkaller0: entered allmulticast mode [ 242.462247][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'. [ 242.769819][T11346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1483'. [ 242.823722][T11350] lo: entered allmulticast mode [ 242.839881][T11350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.900461][T11350] netlink: 'syz.2.1484': attribute type 27 has an invalid length. [ 243.200450][T11370] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 243.569455][T11399] netlink: 'syz.4.1502': attribute type 9 has an invalid length. [ 243.627670][T11399] netlink: 'syz.4.1502': attribute type 11 has an invalid length. [ 243.653014][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.666595][T11409] bridge_slave_0: left allmulticast mode [ 243.676676][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.697625][T11399] netlink: 'syz.4.1502': attribute type 12 has an invalid length. [ 243.718028][T11399] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1502'. [ 243.917068][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1506'. [ 244.026431][T11425] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 244.035662][T11425] tipc: Enabled bearer , priority 10 [ 244.132299][T11432] veth1_macvtap: left promiscuous mode [ 244.138635][T11432] macsec0: entered promiscuous mode [ 244.143962][T11432] macsec0: entered allmulticast mode [ 244.167760][T11432] veth1_macvtap: entered promiscuous mode [ 244.173966][T11432] veth1_macvtap: entered allmulticast mode [ 244.181000][T11432] macsec0: left promiscuous mode [ 244.187549][T11432] macsec0: left allmulticast mode [ 244.193507][T11434] netlink: zone id is out of range [ 244.196310][T11432] veth1_macvtap: left allmulticast mode [ 244.200032][T11434] netlink: zone id is out of range [ 244.236660][T11434] netlink: zone id is out of range [ 244.243030][T11434] netlink: zone id is out of range [ 244.261737][T11434] netlink: zone id is out of range [ 244.268006][T11434] netlink: zone id is out of range [ 244.294949][T11434] netlink: zone id is out of range [ 244.301792][T11434] netlink: zone id is out of range [ 244.308234][T11434] netlink: zone id is out of range [ 244.344588][T11434] netlink: zone id is out of range [ 244.366479][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 244.656979][T11455] xt_ecn: cannot match TCP bits for non-tcp packets [ 244.857927][T11469] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 245.016123][T11476] dvmrp0: entered allmulticast mode [ 245.072372][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 245.143092][T11488] netlink: 'syz.4.1526': attribute type 10 has an invalid length. [ 245.195989][ T5893] tipc: Node number set to 3732542212 [ 245.630912][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 245.800469][T11519] tipc: Enabled bearer , priority 0 [ 245.814610][T11519] syzkaller0: entered promiscuous mode [ 245.833160][T11519] syzkaller0: entered allmulticast mode [ 245.917020][T11523] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 245.960112][T11519] tipc: Resetting bearer [ 245.969375][T11518] tipc: Resetting bearer [ 246.019373][T11518] tipc: Disabling bearer [ 246.192416][T11536] netlink: 'syz.0.1541': attribute type 10 has an invalid length. [ 246.200508][T11536] team0: Device lok is loopback device. Loopback devices can't be added as a team port [ 246.300129][T11541] pim6reg: entered allmulticast mode [ 246.472299][T11547] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.487052][T11545] netlink: 'syz.2.1543': attribute type 25 has an invalid length. [ 246.728324][T11555] wg1 speed is unknown, defaulting to 1000 [ 246.779795][T11555] lo speed is unknown, defaulting to 1000 [ 246.779925][T11571] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 247.405320][T11597] bond0: entered promiscuous mode [ 247.415992][T11597] !: entered promiscuous mode [ 247.425483][T11597] bond_slave_1: entered promiscuous mode [ 247.433895][T11597] batadv0: entered promiscuous mode [ 247.441605][T11597] debugfs: 'hsr1' already exists in 'hsr' [ 247.447709][T11597] Cannot create hsr debugfs directory [ 247.453400][T11597] hsr1: entered allmulticast mode [ 247.458925][T11597] bond0: entered allmulticast mode [ 247.464072][T11597] !: entered allmulticast mode [ 247.470934][T11597] bond_slave_1: entered allmulticast mode [ 247.477547][T11597] batadv0: entered allmulticast mode [ 247.483473][T11597] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 247.510172][T11597] bond0: left promiscuous mode [ 247.515073][T11597] !: left promiscuous mode [ 247.526780][T11601] __nla_validate_parse: 5 callbacks suppressed [ 247.526796][T11601] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1564'. [ 247.532099][T11603] xt_hashlimit: size too large, truncated to 1048576 [ 247.533081][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1564'. [ 247.542780][T11597] bond_slave_1: left promiscuous mode [ 247.566156][T11597] batadv0: left promiscuous mode [ 247.614131][T11604] veth1_macvtap: left promiscuous mode [ 247.976505][T11620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1571'. [ 248.511440][T11644] netlink: 'syz.2.1576': attribute type 1 has an invalid length. [ 248.615175][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1579'. [ 248.695620][T11644] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 248.812016][T11659] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 248.872820][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 248.913606][T11655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.010121][T11655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.327224][T11693] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1589'. [ 249.341366][T11696] sctp: [Deprecated]: syz.4.1588 (pid 11696) Use of int in max_burst socket option deprecated. [ 249.341366][T11696] Use struct sctp_assoc_value instead [ 249.478373][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1587'. [ 249.490381][T11703] netlink: 10810 bytes leftover after parsing attributes in process `syz.0.1587'. [ 249.900658][T11734] sctp: [Deprecated]: syz.2.1599 (pid 11734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.900658][T11734] Use struct sctp_sack_info instead [ 249.927130][T11736] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1601'. [ 250.191015][T11754] netlink: 'syz.1.1605': attribute type 4 has an invalid length. [ 250.218784][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 250.419490][T11764] net_ratelimit: 50 callbacks suppressed [ 250.419511][T11764] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.807458][T11796] netlink: 'syz.2.1613': attribute type 4 has an invalid length. [ 250.828447][T11798] netlink: 'syz.1.1617': attribute type 15 has an invalid length. [ 250.852924][T11796] netlink: 'syz.2.1613': attribute type 4 has an invalid length. [ 251.121211][T11822] nbd: must specify at least one socket [ 251.181244][T11820] team0: left allmulticast mode [ 251.195124][T11820] team_slave_0: left allmulticast mode [ 251.210899][T11820] team_slave_1: left allmulticast mode [ 251.220618][T11820] team0: left promiscuous mode [ 251.230722][T11820] team_slave_0: left promiscuous mode [ 251.249318][T11820] team_slave_1: left promiscuous mode [ 251.261605][T11831] netlink: 'syz.3.1629': attribute type 1 has an invalid length. [ 251.262152][T11820] bridge0: port 3(team0) entered disabled state [ 251.317768][T11820] bridge_slave_0: left allmulticast mode [ 251.343584][T11820] bridge_slave_0: left promiscuous mode [ 251.359011][T11820] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.375417][T11820] bridge_slave_1: left allmulticast mode [ 251.381799][T11820] bridge_slave_1: left promiscuous mode [ 251.388366][T11820] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.412039][T11820] veth0_to_bond: left allmulticast mode [ 251.418342][T11820] veth0_to_bond: left promiscuous mode [ 251.424161][T11820] bridge2: port 2(veth0_to_bond) entered disabled state [ 251.465462][T11820] bond0: (slave bond_slave_0): Releasing backup interface [ 251.478454][T11820] bond_slave_0: left promiscuous mode [ 251.491700][T11820] bond0: (slave bond_slave_1): Releasing backup interface [ 251.505163][T11820] bond_slave_1: left promiscuous mode [ 251.532015][T11820] team0: Port device team_slave_0 removed [ 251.546035][T11846] xt_l2tp: unknown flags: 10 [ 251.548845][T11820] team0: Port device team_slave_1 removed [ 251.564228][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.572414][T11820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.590074][T11820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.888969][T11869] Cannot find add_set index 2 as target [ 252.030670][T11875] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 252.244587][T11882] syzkaller0: entered promiscuous mode [ 252.257459][T11882] syzkaller0: entered allmulticast mode [ 254.506514][T11964] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 254.514688][T11964] __nla_validate_parse: 12 callbacks suppressed [ 254.514707][T11964] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1664'. [ 254.535232][T11964] team0: entered promiscuous mode [ 254.550279][T11964] team_slave_0: entered promiscuous mode [ 254.556414][T11964] team_slave_1: entered promiscuous mode [ 254.564195][T11964] bridge0: port 1(team0) entered blocking state [ 254.571909][T11964] bridge0: port 1(team0) entered disabled state [ 254.579105][T11964] team0: entered allmulticast mode [ 254.584463][T11964] team_slave_0: entered allmulticast mode [ 254.590719][T11964] team_slave_1: entered allmulticast mode [ 254.753840][T11969] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1666'. [ 254.994210][T11987] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 255.215863][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 255.399680][T12015] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 255.522108][T12022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1682'. [ 255.612397][T12030] netlink: 'syz.4.1683': attribute type 29 has an invalid length. [ 255.638283][T12030] netlink: 'syz.4.1683': attribute type 29 has an invalid length. [ 255.670416][T12030] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1683'. [ 255.766468][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.772836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.932229][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1691'. [ 256.163265][T12066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1695'. [ 256.326773][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 257.081287][T12094] x_tables: duplicate underflow at hook 2 [ 257.248019][T12105] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1705'. [ 257.264598][T12110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 257.384095][T12110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.427794][T12110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.469458][T12120] netlink: 'syz.1.1710': attribute type 4 has an invalid length. [ 257.487910][T12110] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.516715][T12120] `: renamed from bond0 (while UP) [ 258.029264][T12149] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 258.041186][T12149] team0: Device macvtap1 is already an upper device of the team interface [ 258.108516][T12154] netlink: 'syz.1.1720': attribute type 28 has an invalid length. [ 258.136453][T12154] netlink: 'syz.1.1720': attribute type 3 has an invalid length. [ 258.138712][T12152] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 258.155212][T12152] netlink: 'syz.3.1719': attribute type 29 has an invalid length. [ 258.366904][T12164] syzkaller1: entered promiscuous mode [ 258.386616][T12164] syzkaller1: entered allmulticast mode [ 258.946819][T12209] ip6tnl1: entered promiscuous mode [ 259.731273][T12261] __nla_validate_parse: 13 callbacks suppressed [ 259.731293][T12261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 259.776412][T12266] syz_tun: entered allmulticast mode [ 259.791001][T12266] macvlan0: entered promiscuous mode [ 259.853042][T12268] netlink: 'syz.2.1757': attribute type 9 has an invalid length. [ 259.862036][T12268] netlink: 'syz.2.1757': attribute type 11 has an invalid length. [ 259.870489][T12268] netlink: 'syz.2.1757': attribute type 12 has an invalid length. [ 259.878791][T12268] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1757'. [ 259.889069][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1757'. [ 259.909749][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'. [ 259.996450][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 259.997358][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.085287][T12279] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1761'. [ 260.113582][T12279] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1761'. [ 260.175779][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1763'. [ 260.235138][T12284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.356056][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 260.407145][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1765'. [ 260.492557][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 260.754917][T12316] validate_nla: 5 callbacks suppressed [ 260.754939][T12316] netlink: 'syz.1.1775': attribute type 1 has an invalid length. [ 261.015356][T12333] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 261.019681][T12328] wg1 speed is unknown, defaulting to 1000 [ 261.040365][T12328] lo speed is unknown, defaulting to 1000 [ 261.312014][T12346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.323583][ T65] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 261.667342][T12347] hsr_slave_1 (unregistering): left promiscuous mode [ 261.827744][T12358] raw_sendmsg: syz.0.1787 forgot to set AF_INET. Fix it! [ 262.190924][T12375] netlink: 'syz.3.1791': attribute type 11 has an invalid length. [ 262.522035][T12387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.015194][T12408] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 263.068440][T12408] 8021q: adding VLAN 0 to HW filter on device bond8 [ 263.117375][T12408] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 263.468154][T12429] can: request_module (can-proto-0) failed. [ 263.763162][T12454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.867195][T12457] IPVS: set_ctl: invalid protocol: 98 172.30.0.1:20004 [ 264.195604][T12481] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 264.261880][T12481] 8021q: adding VLAN 0 to HW filter on device bond11 [ 264.532354][T12501] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 265.072108][T12512] __nla_validate_parse: 23 callbacks suppressed [ 265.072129][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 265.102504][T12512] tc_dump_action: action bad kind [ 265.168924][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 265.194963][T12518] syzkaller0: entered promiscuous mode [ 265.203507][T12518] syzkaller0: entered allmulticast mode [ 265.310232][T12524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1839'. [ 265.334805][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 265.381418][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 265.463069][T12528] gtp0: entered promiscuous mode [ 265.468363][T12528] gtp0: entered allmulticast mode [ 265.647785][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'. [ 265.839178][T12550] netlink: 'syz.3.1846': attribute type 1 has an invalid length. [ 265.868042][ T30] audit: type=1800 audit(1765205570.658:6): pid=12555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1847" name="memory.events" dev="tmpfs" ino=1905 res=0 errno=0 [ 266.002183][T12561] team0: Mode "oa" not found [ 266.009944][T12561] Unsupported ieee802154 address type: 0 [ 266.076749][T12566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1850'. [ 266.155332][T12569] netlink: 'syz.3.1851': attribute type 8 has an invalid length. [ 266.221309][T12572] Cannot find del_set index 49151 as target [ 266.287095][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 266.453789][T12582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1855'. [ 266.552547][T12586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1856'. [ 266.699684][T12597] syzkaller0: entered promiscuous mode [ 266.725749][T12597] syzkaller0: entered allmulticast mode [ 266.930232][T12611] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 266.943642][T12613] netlink: 'syz.0.1863': attribute type 12 has an invalid length. [ 266.959602][T12611] dummy0: entered promiscuous mode [ 266.965499][T12611] dummy0: entered allmulticast mode [ 266.988281][T12611] team0: Failed to send options change via netlink (err -105) [ 267.036764][T12611] team0: Port device dummy0 added [ 267.078937][T12617] netlink: 'syz.4.1865': attribute type 4 has an invalid length. [ 267.095998][T12623] syzkaller0: entered promiscuous mode [ 267.102177][T12623] syzkaller0: entered allmulticast mode [ 267.155075][T12623] tipc: Enabled bearer , priority 0 [ 267.187760][T12622] tipc: Resetting bearer [ 267.239401][T12622] tipc: Disabling bearer [ 267.631259][T12649] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 267.693365][T12649] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 267.931344][T12663] veth1_macvtap: entered promiscuous mode [ 267.936575][T12665] netlink: 'syz.4.1879': attribute type 11 has an invalid length. [ 267.948959][T12663] macsec2: entered promiscuous mode [ 267.981273][T12663] veth1_macvtap: left promiscuous mode [ 268.829864][T12700] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 269.097605][T12708] netlink: 'syz.2.1889': attribute type 6 has an invalid length. [ 269.333045][T12721] x_tables: duplicate underflow at hook 2 [ 269.373425][T12724] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 269.571549][T12734] netlink: 'syz.2.1899': attribute type 3 has an invalid length. [ 270.137446][T12768] __nla_validate_parse: 9 callbacks suppressed [ 270.137467][T12768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1908'. [ 270.343238][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1909'. [ 270.354581][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1909'. [ 270.374928][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1909'. [ 270.384460][T12786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1909'. [ 270.644923][T12797] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.843661][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 270.911261][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 271.167124][T12826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1927'. [ 271.470325][T12841] netlink: 'syz.0.1932': attribute type 138 has an invalid length. [ 271.528234][T12841] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20002 [ 271.536771][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.589475][T12849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1932'. [ 271.743279][T12841] bond6: entered promiscuous mode [ 271.758090][ T6259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.770120][T12841] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.864779][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.090409][T12884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.147740][T12884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.274293][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.780516][T12915] veth5: entered promiscuous mode [ 272.806635][T12918] tipc: Enabling of bearer rejected, failed to enable media [ 272.855791][T12921] netlink: 'syz.3.1953': attribute type 9 has an invalid length. [ 272.879030][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.895146][T12921] netlink: 'syz.3.1953': attribute type 11 has an invalid length. [ 272.903359][ T4098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.922090][T12921] netlink: 'syz.3.1953': attribute type 12 has an invalid length. [ 273.037556][T12931] netlink: 'syz.4.1956': attribute type 3 has an invalid length. [ 273.109487][T12937] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 273.312396][T12948] bond0: option all_slaves_active: invalid value (222) [ 273.329317][T12948] bond0 (unregistering): Released all slaves [ 273.820226][T12969] syzkaller0: entered promiscuous mode [ 273.825767][T12969] syzkaller0: entered allmulticast mode [ 273.918806][ T5920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.224194][T13002] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 274.958681][ T5892] net_ratelimit: 1 callbacks suppressed [ 274.958704][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.972415][ T5892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.236631][ T6284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.497904][T13002] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 275.517734][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.854840][T13022] wg1 speed is unknown, defaulting to 1000 [ 275.898168][T13022] lo speed is unknown, defaulting to 1000 [ 275.902478][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.926801][T13034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.946543][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.967664][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.976126][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.991460][T13033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.090625][T13038] netlink: 'syz.2.1985': attribute type 17 has an invalid length. [ 276.106250][T13038] __nla_validate_parse: 10 callbacks suppressed [ 276.106270][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 276.135329][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 276.144650][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1985'. [ 276.195893][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1986'. [ 276.423166][T13052] lo: left promiscuous mode [ 276.457644][T13052] tunl0: left promiscuous mode [ 276.462650][T13052] gre0: left promiscuous mode [ 276.472811][T13052] ip_vti0: left promiscuous mode [ 276.559283][T13052] bridge0: port 3(team0) entered disabled state [ 276.565870][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.573723][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.638126][ T5892] lo speed is unknown, defaulting to 1000 [ 276.646866][ T5892] sz1: Port: 1 Link DOWN [ 276.728880][ T5893] lo speed is unknown, defaulting to 1000 [ 276.753369][T13065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1994'. [ 276.768407][T13068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.808197][T13065] bond4 (unregistering): Released all slaves [ 276.887321][T13077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1994'. [ 277.000907][T13081] xt_hashlimit: max too large, truncated to 1048576 [ 277.797048][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.810428][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2009'. [ 277.825114][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.834323][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2009'. [ 277.855248][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.876417][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2009'. [ 277.886493][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.894402][T13124] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2009'. [ 277.910588][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.919938][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.938444][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.949162][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.959270][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 277.980540][T13124] netlink: 'syz.1.2009': attribute type 33 has an invalid length. [ 280.077362][T11755] net_ratelimit: 248 callbacks suppressed [ 280.077384][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.636654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.645348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.653672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.661947][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.670216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.678429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.686696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.694871][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.796689][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.196833][ T31] INFO: task udevd:6014 blocked for more than 143 seconds. [ 285.204094][ T31] Not tainted syzkaller #0 [ 285.209242][T11756] net_ratelimit: 6 callbacks suppressed [ 285.209257][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.222952][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.232051][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 285.241297][ T31] task:udevd state:D stack:21920 pid:6014 tgid:6014 ppid:5201 task_flags:0x400140 flags:0x00080000 [ 285.253836][ T31] Call Trace: [ 285.257365][ T31] [ 285.260420][ T31] __schedule+0x14bc/0x5000 [ 285.264991][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 285.270374][ T31] ? __pfx___schedule+0x10/0x10 [ 285.306309][ T31] ? __blk_flush_plug+0x3fc/0x4b0 [ 285.311449][ T31] ? schedule+0x91/0x360 [ 285.315750][ T31] schedule+0x165/0x360 [ 285.377335][ T31] schedule_timeout+0x12b/0x270 [ 285.382263][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 285.426277][ T31] ? __pfx_process_timeout+0x10/0x10 [ 285.431640][ T31] ? prepare_to_wait_event+0x437/0x480 [ 285.451279][ T31] nbd_queue_rq+0x662/0xf10 [ 285.455860][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 285.461604][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 285.468112][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 285.473688][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 285.479203][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 285.485211][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 285.491598][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 285.498394][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 285.505208][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 285.510957][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 285.517441][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 285.522770][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 285.528318][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 285.533544][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 285.539288][ T31] ? blk_mq_dispatch_list+0x200/0xe00 [ 285.544695][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 285.550842][ T31] ? rcu_is_watching+0x15/0xb0 [ 285.555639][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 285.561488][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 285.567592][ T31] ? blk_mq_submit_bio+0x1a55/0x2590 [ 285.572913][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 285.579284][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 285.584174][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 285.589997][ T31] __submit_bio+0x2d3/0x5a0 [ 285.594542][ T31] ? __pfx___submit_bio+0x10/0x10 [ 285.602531][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 285.608318][ T31] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 285.613976][ T31] ? bio_associate_blkg+0x6d/0x230 [ 285.619556][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 285.625740][ T31] ? submit_bio_noacct+0xdfc/0x1b60 [ 285.631554][ T31] block_read_full_folio+0x599/0x830 [ 285.637264][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 285.642678][ T31] filemap_read_folio+0x117/0x380 [ 285.647778][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 285.653367][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 285.659016][ T31] ? filemap_add_folio+0x35f/0x540 [ 285.664229][ T31] do_read_cache_folio+0x350/0x590 [ 285.669392][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 285.674946][ T31] read_part_sector+0xb6/0x2b0 [ 285.679816][ T31] adfspart_check_ICS+0xa4/0xa50 [ 285.684780][ T31] ? snprintf+0xda/0x120 [ 285.689103][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 285.694687][ T31] bdev_disk_changed+0x75f/0x14b0 [ 285.700030][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 285.705517][ T31] blkdev_get_whole+0x380/0x510 [ 285.711751][ T31] bdev_open+0x31e/0xd30 [ 285.716026][ T31] blkdev_open+0x457/0x600 [ 285.720602][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 285.725555][ T31] do_dentry_open+0x7ce/0x1420 [ 285.730382][ T31] vfs_open+0x3b/0x340 [ 285.734478][ T31] ? path_openat+0x33f3/0x3dd0 [ 285.739324][ T31] path_openat+0x340e/0x3dd0 [ 285.743952][ T31] ? do_sys_openat2+0xbc/0x200 [ 285.748871][ T31] ? __x64_sys_openat+0x138/0x170 [ 285.753911][ T31] ? __pfx_path_openat+0x10/0x10 [ 285.758951][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 285.763915][ T31] do_filp_open+0x1fa/0x410 [ 285.768448][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 285.773518][ T31] ? _raw_spin_unlock+0x28/0x50 [ 285.778466][ T31] ? alloc_fd+0x64c/0x6c0 [ 285.782835][ T31] do_sys_openat2+0x121/0x200 [ 285.787554][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.792775][ T31] __x64_sys_openat+0x138/0x170 [ 285.797716][ T31] do_syscall_64+0xfa/0xf80 [ 285.802241][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.808377][ T31] ? clear_bhb_loop+0x60/0xb0 [ 285.813083][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.819127][ T31] RIP: 0033:0x7f6831ca7407 [ 285.823580][ T31] RSP: 002b:00007ffffc87cf60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 285.832147][ T31] RAX: ffffffffffffffda RBX: 00007f6832498880 RCX: 00007f6831ca7407 [ 285.840256][ T31] RDX: 00000000000a0800 RSI: 000055d9cada4e50 RDI: ffffffffffffff9c [ 285.848285][ T31] RBP: 000055d9cad59910 R08: 0000000000000000 R09: 0000000000000000 [ 285.856344][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d9cad71e00 [ 285.864329][ T31] R13: 000055d9cad67190 R14: 0000000000000000 R15: 000055d9cad71e00 [ 285.872371][ T31] [ 285.875460][ T31] [ 285.875460][ T31] Showing all locks held in the system: [ 285.883341][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 285.888800][ T31] #0: ffff8880b893a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 285.898925][ T31] 1 lock held by khungtaskd/31: [ 285.903785][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 285.913701][ T31] 2 locks held by getty/5589: [ 285.918642][ T31] #0: ffff888032e480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 285.928471][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 285.938667][ T31] 4 locks held by syz-executor/5837: [ 285.943950][ T31] #0: ffff88807316cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 285.953945][ T31] #1: ffff88807316c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0xff0 [ 285.963581][ T31] #2: ffffffff8f467348 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 285.973788][ T31] #3: ffff8880285c4338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 285.983184][ T31] 1 lock held by syz-executor/5838: [ 285.988440][ T31] #0: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 285.999608][ T31] 3 locks held by kworker/1:7/5920: [ 286.004826][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 286.016474][ T31] #1: ffffc9000466fb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 286.026878][ T31] #2: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 286.037875][ T31] 2 locks held by kworker/0:7/5953: [ 286.043088][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 286.054194][ T31] #1: ffffc90004effb80 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 286.065001][ T31] 3 locks held by udevd/6014: [ 286.069730][ T31] #0: ffff888025013358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 286.079019][ T31] #1: ffff888143733e18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 286.088584][ T31] #2: ffff8880251451f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 286.097593][ T31] [ 286.126251][ T31] ============================================= [ 286.126251][ T31] [ 286.134722][ T31] NMI backtrace for cpu 0 [ 286.134740][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 286.134762][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.134772][ T31] Call Trace: [ 286.134780][ T31] [ 286.134788][ T31] dump_stack_lvl+0x189/0x250 [ 286.134818][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.134839][ T31] ? __pfx__printk+0x10/0x10 [ 286.134879][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 286.134902][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 286.134924][ T31] ? __pfx__printk+0x10/0x10 [ 286.134955][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 286.134985][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 286.135008][ T31] watchdog+0xf3c/0xf80 [ 286.135037][ T31] ? watchdog+0x1e2/0xf80 [ 286.135067][ T31] kthread+0x711/0x8a0 [ 286.135094][ T31] ? __pfx_watchdog+0x10/0x10 [ 286.135116][ T31] ? __pfx_kthread+0x10/0x10 [ 286.135142][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.135163][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 286.135185][ T31] ? __pfx_kthread+0x10/0x10 [ 286.135209][ T31] ret_from_fork+0x599/0xb30 [ 286.135239][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 286.135278][ T31] ? __switch_to_asm+0x39/0x70 [ 286.135299][ T31] ? __switch_to_asm+0x33/0x70 [ 286.135318][ T31] ? __pfx_kthread+0x10/0x10 [ 286.135341][ T31] ret_from_fork_asm+0x1a/0x30 [ 286.135382][ T31] [ 286.135390][ T31] Sending NMI from CPU 0 to CPUs 1: [ 286.288004][ C1] NMI backtrace for cpu 1 [ 286.288024][ C1] CPU: 1 UID: 0 PID: 5829 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 286.288059][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.288068][ C1] RIP: 0010:lock_is_held_type+0x65/0x190 [ 286.288094][ C1] Code: 85 ef 00 00 00 65 4c 8b 2c 25 08 f0 76 92 41 83 bd 2c 0b 00 00 00 0f 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 94 09 78 8d e8 67 1a 00 00 65 ff [ 286.288107][ C1] RSP: 0018:ffffc9000400f9c0 EFLAGS: 00000246 [ 286.288122][ C1] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: 32e75bc684637d00 [ 286.288140][ C1] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8df41cc0 [ 286.288150][ C1] RBP: 00000000ffffffff R08: ffffffff8230866e R09: ffffffff8df41cc0 [ 286.288161][ C1] R10: 000000000000000b R11: ffffffff81ad4ad0 R12: 0000000000062073 [ 286.288171][ C1] R13: ffff888027645b80 R14: ffffffff8df41cc0 R15: 0000000000001000 [ 286.288182][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 286.288194][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.288204][ C1] CR2: 00007f2270117d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 286.288219][ C1] Call Trace: [ 286.288225][ C1] [ 286.288235][ C1] page_ext_lookup+0xe7/0x180 [ 286.288255][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 286.288274][ C1] __update_page_owner_free_handle+0x103/0x470 [ 286.288297][ C1] __reset_page_owner+0x85/0x1f0 [ 286.288315][ C1] __free_frozen_pages+0xbc4/0xd30 [ 286.288338][ C1] vfree+0x25a/0x400 [ 286.288354][ C1] ? __pfx_kcov_close+0x10/0x10 [ 286.288373][ C1] kcov_close+0x28/0x50 [ 286.288388][ C1] __fput+0x44c/0xa70 [ 286.288407][ C1] task_work_run+0x1d4/0x260 [ 286.288428][ C1] ? __pfx_task_work_run+0x10/0x10 [ 286.288447][ C1] ? kmem_cache_free+0x197/0x620 [ 286.288464][ C1] ? do_exit+0x6c0/0x2310 [ 286.288484][ C1] do_exit+0x6c5/0x2310 [ 286.288502][ C1] ? count_memcg_event_mm+0x21/0x260 [ 286.288521][ C1] ? __pfx_do_exit+0x10/0x10 [ 286.288541][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.288578][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 286.288597][ C1] do_group_exit+0x21c/0x2d0 [ 286.288616][ C1] __x64_sys_exit_group+0x3f/0x40 [ 286.288634][ C1] x64_sys_call+0x2210/0x2210 [ 286.288651][ C1] do_syscall_64+0xfa/0xf80 [ 286.288670][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.288685][ C1] ? clear_bhb_loop+0x60/0xb0 [ 286.288708][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.288722][ C1] RIP: 0033:0x7f226f38f749 [ 286.288735][ C1] Code: Unable to access opcode bytes at 0x7f226f38f71f. [ 286.288743][ C1] RSP: 002b:00007ffc6e613198 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 286.288758][ C1] RAX: ffffffffffffffda RBX: 00007f226f41585d RCX: 00007f226f38f749 [ 286.288768][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 286.288777][ C1] RBP: 00007f226f41586f R08: 00007ffc6e610f37 R09: 00000000000927c0 [ 286.288787][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 286.288796][ C1] R13: 00000000000927c0 R14: 0000000000044054 R15: 00007ffc6e613340 [ 286.288815][ C1] [ 286.347379][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.899652][ T5837] syz_tun (unregistering): left allmulticast mode [ 287.022992][ T5838] syz_tun (unregistering): left allmulticast mode [ 287.118167][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.758364][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.906506][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.006621][T11756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.196856][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.106595][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.316802][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.216485][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.336633][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.877339][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.885524][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.446551][ T1146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.546525][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.796692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.805056][T11755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog