last executing test programs: 5.376714778s ago: executing program 2 (id=2014): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_ident={0x2, 0xb, 0x5, 0x0, 0xfff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private=0x400}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x40000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x640100fe}}]}, 0x60}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r2, 0x0, 0x8000f25, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000380)=ANY=[@ANYRESDEC], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r4, r5, 0x0, 0x7feff000) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) read$alg(r4, &(0x7f0000000480)=""/4096, 0x1000) (async) read$alg(r4, &(0x7f0000000480)=""/4096, 0x1000) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, &(0x7f0000000040), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 5.185403612s ago: executing program 2 (id=2017): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16=r5, @ANYBLOB="01002dbd7000f8dbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a000600080211000000000005001301000000000800118004000100"], 0x38}, 0x1, 0x0, 0x0, 0x200448c1}, 0x80) r7 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket(0x22, 0x2, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x220, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000200)={r9, 0x2, 0x30}, &(0x7f0000000240)=0xc) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 4.879027919s ago: executing program 2 (id=2021): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r0, &(0x7f00000006c0)=[{0xfffffffffffffffe}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000150001002abd7000ffdbdf2502180100", @ANYRES32=r10, @ANYBLOB="08000100e0000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) bind$packet(r2, &(0x7f0000000180)={0x11, 0x16, r7, 0x1, 0x40, 0x6, @random="000040ca9600"}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000120a090000000000000000000200000440000000000800034000000001140000001100010000000000000000000000000a"], 0x58}}, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="4516bcbad4f27f15c66a9c4548e7af454065f926b4528ee2030330ea4e49f62df8b29d85bf18e5b20eae02310934982370a4fad091b531c2e0517f86f0"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x24000880) socket$nl_route(0x10, 0x3, 0x0) 4.679167707s ago: executing program 2 (id=2026): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0)=0xf813, 0x4) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r1, 0x0, &(0x7f0000005e00)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 4.625111575s ago: executing program 2 (id=2029): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x40047459, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 4.472253078s ago: executing program 2 (id=2032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000040}, 0x80d0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x40010, r2, 0x39335000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x1, 0x3c40, 0x80, 0xa, {{0x34, 0x4, 0x1, 0x28, 0xd0, 0x66, 0x0, 0x40, 0x29, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x14, 0xda, 0x0, 0xc, [0x7, 0x5, 0x6, 0x400]}, @timestamp_prespec={0x44, 0x24, 0x83, 0x3, 0x5, [{@multicast2, 0x5}, {@rand_addr=0x64010101}, {@rand_addr=0x64010100, 0xfa}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x5}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0xb, [0xfffff001]}, @cipso={0x86, 0x4f, 0x0, [{0x5, 0x8, "9961b688ac6e"}, {0x1, 0x3, '-'}, {0x0, 0x11, "112ac749b96b92596d046b38e923ef"}, {0x0, 0xa, "1975208c81520d32"}, {0x6, 0x9, "26f2813c2deeb4"}, {0x5, 0xb, "98aaeee6dd38841198"}, {0x2, 0xf, "694d27f5fd87b72c8ad9a14e5f"}]}, @ssrr={0x89, 0xb, 0x72, [@dev={0xac, 0x14, 0x14, 0x3e}, @multicast1]}, @timestamp={0x44, 0x20, 0xfb, 0x0, 0x9, [0x6, 0x101, 0x1, 0x8, 0xffff, 0x4, 0x0]}]}}}}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r6, 0x802, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000002c0)={r4, 0x1, 0x18, "33e4da95bfda036438bec037fbcdedbdc2fca16987dfc5b548f49390263897958be7e9345cd4f58fa12f1273152c6bd0d4966b0f2209ecc129a41e8cef38bf1c18cfba0537073b92b4515d0b4611e4f251d49e56c3ed4eb344f493a13175b373d9f09898d58a5bcdd1bac71c09ecc23d4b2c795b8b8b60d255db86d76b2a54d4af75226653c642322e4a1be520296b0db0033da352"}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000000700)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.903286046s ago: executing program 1 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x1f, r1}]}, 0x44}}, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000400)={0x0, 0xdd1, 0xffffffffffffa1cb, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000800)={{r2}, 0x0, 0x4, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0x9, 0x9, {0x3f, 0x2, 0x4, 0x6, 0x3}, [0x65, 0x760d]}}, @devid=r3}) 2.713663715s ago: executing program 1 (id=2057): r0 = socket$vsock_stream(0x28, 0x1, 0x0) pread64(r0, &(0x7f0000000000)=""/105, 0x69, 0xe) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x3, 0x3, 0x5}) listen(r0, 0x4) (async) sendmsg$unix(r1, &(0x7f0000001380)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001340)=[{&(0x7f0000000140)="4000ca707ae389fa793b91cb12a4d261c4463ff5ea2b731a08a984ffe27391d9e4bb541160abb59cac9dcf141f974c6a491508f19222e331601913b85de9142fa2566e563df36450663fddd04301e292a1a3fe65ceb45bd7023d63bbae924eea43d92d7fe7fb3eda480c6e6be1f0ea561688f133aebf729a9230c183d01c560434c5fd4b470b4dac0d9489be05f782d2c7bf92d80e0f4de34a", 0x99}, {&(0x7f0000000200)="5814fdfc481216e7bdc1475e54fef887c34fbbe92d1201411b7825c24a3150e2907a99b3960046c7fb6fb01624d37b62659b51858913bc2bc2e7c61c0e7e49", 0x3f}, {&(0x7f0000000240)="668a55104f0a9572b4ab87d3c5bc19be4e1ada5bcf29eb06b902bb070eafc17a325080227c3ff0170c188e2f9b048d3d3712c3cd542d6d50045cd5d480422b218ccf489c882da385906bf7560c3af4583e9b5b106efe8d42a92b4d746cecd7d6a5260217ccc217bfee75d7fe86c5d4132e0fe8af75e721a04f4e8eca9b1d9e4ae8fa7a709369f223f32d01de97bb714cfb8a60a100f5252161f25084581e2d93b3be72fd9bcf58bfe6691ee7c9180dc2ff447b0e45ddb8eb09d9fd24927979809d84f0cf52c156e846548294a4853c39c4cab3b88ce9ab9655de5c7574140b7ffd854a687a960ec97532", 0xea}, {&(0x7f0000000340)="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", 0x1000}], 0x4, 0x0, 0x0, 0x20008040}, 0x4044881) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$x25(r1, &(0x7f00000013c0), 0x12) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000001400), &(0x7f0000001440)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001480)={{0x84, @private=0xa010101, 0x4e20, 0x2, 'dh\x00', 0x4, 0x7b, 0x67}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e22, 0x3, 0x3, 0x9, 0x4}}, 0x44) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000001500)={0x2, 'pim6reg1\x00', {0x3}, 0xb3e4}) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000001540)={0x3c, 0x8, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7, 0xfff7, [0x10, 0x3, 0xd7c8, 0x8, 0x1, 0x2, 0x5]}}]}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000015c0)={0x0, {{0xa, 0x4e24, 0x9, @mcast2, 0x6}}}, 0x88) (async) splice(r2, &(0x7f0000001680)=0x6, r0, &(0x7f00000016c0)=0x2, 0x6, 0x3) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000001700)) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001880)={0x1, 0x0, 0x1000, 0x7e, &(0x7f0000001740)="19cd4079bcf6670c160e8640741ff158da54436a498a1ede3aceb5ff0d8de580f4213da7d58fc7f81ae41b890af53b00d91094d3af37ef1e933ae68bbd5667671dec583556b7c68fe2920104503997632c50de2a39b184cc33d7a1c7edf01e9bed0b198a1d6d14bbebeb535f4ca5f548a148482fdacfd7d9a409791c280c", 0x8c, 0x0, &(0x7f00000017c0)="0d549d1871f20e4cf04ef66051b8c9fd5136d094fa803b425feef3f64a4f9c757c5ffdd6b2afc208fee257920b3ca9fbaabbba423319ecc79551576dce3d9b1a64b80812be5ebd2bb758c11603ab54ec13afc763c80c6545f402706c9565ba58fb4e178d606623ce68e699e11441e5c69990178f738503fa71dc5158ca5dfd1318d3ec96d3e54ab5ecfbb0ca"}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000001900)) r3 = accept4$x25(r1, 0x0, &(0x7f0000001940), 0x80000) writev(r0, &(0x7f0000001a40)=[{&(0x7f0000001980)="40c461dc50faf8dbc3b9b05a9b03a61765893582d648155b415fffd982e0a986389fac374f30c854ffd7b007653f6c6c3d78bc357e2f0f9f09658a4e00089b2c64f21e2f7a23d58b4988f1e0e3643b91fb59c7e8505480fefba71e65699cfc64d7e431588362f94e073877e30c768ace7fbd0691d15f951f353968dd56b9e5c5420a287985a37a5a291181c3efef", 0x8e}], 0x1) (async) close(r3) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000001a80)={0x1, 0x5, [@multicast, @empty, @local, @remote, @broadcast]}) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4018094}, 0x44) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c00), r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c40)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001c80)={0x0, @loopback, @private}, &(0x7f0000001cc0)=0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001ec0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d00)={0x160, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x98, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001f00)={0x0, 'veth0_to_batadv\x00', {0x1}, 0xb1}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r8) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) 2.654254168s ago: executing program 1 (id=2058): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x1403, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = socket(0x8, 0x3, 0x0) getpeername$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$SIOCGETVIFCNT(r1, 0x61e3, 0x0) 1.971239314s ago: executing program 1 (id=2066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$OBJ_GET_MAP(0x7, &(0x7f0000007cc0)=@generic={&(0x7f0000007c80)='.\x00', 0x0, 0x10}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001080)={r2, 0xd}, 0x8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r3, &(0x7f0000002980), 0x0, 0x10102, 0x0) 1.645087274s ago: executing program 0 (id=2070): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) bind$packet(r4, 0x0, 0x0) r6 = accept(r0, &(0x7f00000000c0)=@can, &(0x7f0000000300)=0x80) setsockopt$sock_void(r6, 0x1, 0x77, 0x0, 0x0) syz_emit_ethernet(0x14e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "ce5c59", 0x118, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[@routing={0x2e, 0x14, 0x1, 0x8, 0x0, [@loopback, @private1, @remote, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @local]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x9, 0x18, 0xad, [@mcast2, @loopback]}], {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "7479711c05fddbd7b3992b1cbd6319ddc77a8c21572a3917", "cbaf7198e4bce306b8863ee88766688bb47f21475f256fa704ab20084feca524"}}}}}}}, 0x0) 1.39522341s ago: executing program 0 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x100, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x100, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) (async) 1.394205326s ago: executing program 3 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x100}, 0x814) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) r8 = socket(0x2a, 0x2, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r11, &(0x7f00000004c0)="8cfddee19c57", &(0x7f0000000580)=""/123, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xffff, 0x9}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x64}}, 0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x120, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040801}, 0x4040010) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r12, 0x84, 0x13, &(0x7f0000000180)={r13, 0x8000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r14 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r14, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="ffff"], 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 1.278201255s ago: executing program 0 (id=2074): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x1, 0x6, 0xfc], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb138]}}]}}]}, 0x8c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) 1.039209371s ago: executing program 3 (id=2076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000400)={@rand_addr=0x64010100, @rand_addr=0x64010100}, 0x8) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040811}, 0x40010) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x0, 0xd}}}, 0x24}}, 0x4000000) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4}, {0x1, 0x7, {0x0, 0x1}}, {0xffffffffffffff46, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', r5, 0x4, 0x9, 0x11, 0x89, 0x10, @private1, @private2, 0x8000, 0x20, 0x5800000, 0x101}}) 1.000263829s ago: executing program 4 (id=2077): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000080)={{0x0, 0x9, 0x6, 0x9, 0x101, 0x7, 0x7fffffff, 0xb, 0x2, 0x5b8, 0x6, 0x3, 0xfffffffffffffffa, 0x2, 0x7}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{r1, 0xcd3, 0x6, 0x100000001, 0xbe, 0xffffffffffff264f, 0x16c6, 0x400, 0x0, 0x7, 0x1, 0x6, 0xc37, 0xe91, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x44001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000340)={0x1, [0x0]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x140e, 0x8, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}}, 0xd4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r5, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_SSID={0x5, 0x34, @random="f8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "71a5367a1d61997b70c4b6ec96fc2a8e"}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8041) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r2) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r6, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004044}, 0x20000880) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r7, 0x10, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x41) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000840)) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000880), &(0x7f00000008c0)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x228002}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000854}, 0xc0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f0000000a80)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}, 0x40, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000a40)='vlan0\x00', 0xaa, 0x0, 0x9}) r10 = accept4$llc(r0, &(0x7f0000000b00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000b40)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000b80)={'team_slave_0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000bc0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f0000000cc0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000d00)={{{@in=@remote, @in6=@mcast1, 0x4e20, 0x0, 0x4e23, 0x2, 0xa, 0x80, 0xa0, 0xff, 0x0, r11}, {0x400, 0x8000000000000000, 0x0, 0x5, 0x8c75, 0x4, 0x9, 0x2}, {0xf07, 0x8, 0x2, 0x6}, 0xf38, 0x6e6bbd, 0x1, 0x1, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0x2, @in=@multicast2, 0x3503, 0x0, 0x0, 0x90, 0x100, 0x4, 0x7}}, 0xe8) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000e40)={0x0, {0x2, 0x4e23, @private=0xa010100}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @loopback}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000e00)='pim6reg\x00', 0x7, 0x9, 0x7}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x74, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3654}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x84}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x2, 0x1, 0x8, 0x1, 0x4, 0x5, 0x8000, 0xb]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x4, 0xfffffffa]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000001000)={'vxcan1\x00', {0x2, 0x0, @empty}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001140)=0x14) 995.835522ms ago: executing program 1 (id=2078): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000040)={'veth1_to_batadv\x00', @ifru_addrs=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a05fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 890.989126ms ago: executing program 0 (id=2079): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x805, 0x0) (async, rerun: 32) socket$inet(0x2, 0x80001, 0x84) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$netlink(0x10, 0x3, 0xc) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 32) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r5, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="30010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800010001000000040004800800020001000000080108802c0007800800ffeac3bc0000080006001c0000000800060000000000080005"], 0x130}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 814.737272ms ago: executing program 4 (id=2080): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000100)={0x2, 0x400, @multicast2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="daf65834a651beed9c64f6172baeff952bc6a9fde3929208fb305d10f536197b7284d5c978b7dbd7b157f85c89c929605ec31b1d1345b0aa9312dfdabf06ab0d7a903a007c5ec5aeb9d51120638f5a91a2983c06eb65d01c0d6eda746cfecec1b5a8d5fe8463ebf7e636062478e640c64af52139d14116ac7e6e883701f09a76f15f41185e7dbe5c850f212050db82fc4e675eee8428b5382e151809b329fb5fafecffc2fccd6a38c187ab05faae95c700aa32", 0xb3, 0x8001, &(0x7f0000000280)=@hci={0x1f, 0x4, 0x3}, 0x80) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000b00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 788.98981ms ago: executing program 1 (id=2081): nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@ctrl_frame=@rts={{}, {0x1}, @device_b, @broadcast}, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000180)={0x33, {{0xa, 0x4e20, 0x973, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x88) socketpair(0x11, 0x80000, 0x3, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x370}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd5f3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x28}}, 0x4000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) ioctl$PPPIOCGIDLE32(r5, 0x8008743f, &(0x7f0000000700)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x190, r6, 0x209, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x16, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x7fffffff}}}}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xf51, @empty, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan0\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000000) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000a00)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000a40)=0x2c) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r9, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '(\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40440c1}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r9, 0x4, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48810}, 0x4004) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000f80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d40)={0x1e0, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc6a00000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd73}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x383}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe31}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a1}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x8001, 0x7]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8e3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x95}, 0x20000001) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x80, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000040}, 0x4004010) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0x11, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1fffc0, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001400)='syzkaller\x00', 0x5, 0x40, &(0x7f0000001440)=""/64, 0x40f00, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0x4, 0x101, 0x22a}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001500)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5], &(0x7f0000001540)=[{0x1, 0x3, 0x1, 0x5}, {0x0, 0x1, 0x5, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001900)={r10, 0xe0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0], 0x0, 0xc8, &(0x7f0000001700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001740), &(0x7f0000001780), 0x8, 0x6a, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) 711.232899ms ago: executing program 3 (id=2082): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.time\x00', 0x275a, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$alg(0x26, 0x5, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r2, 0x249f8000) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x8) 711.021681ms ago: executing program 0 (id=2083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r3], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fc000000fe880000000000000000000000000000b100000000000000bd1142d300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080010000800000000000c0015"], 0xe0}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r6, &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 681.974747ms ago: executing program 3 (id=2084): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd502000000090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100006e7ac06a0000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 679.158238ms ago: executing program 4 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000b00)={0xa4, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x5, 0xf}}) 511.143912ms ago: executing program 3 (id=2086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="35821ff78274dc95f742f0f04064e9a281d61185a1c0af0acf81ab7d3851b9c594b351e47ee37c9a689f4253cf9f28fb306fd9da9b3074ae66149c6d", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 510.122602ms ago: executing program 4 (id=2087): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8090) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c0}, 0x8090) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340100001710000000d916de8000000000000500000000000000ffffffffffff00000000000000fbac141400000000000000000000000000fe8000000000000000000000000000bbac148c9f800000000000000000000000001cd36e72583cf499fc7a72abe185c95d017e18ea0ec61b26c09d784c08e633d8ae6da64800"/140, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x134}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340100001710000000d916de8000000000000500000000000000ffffffffffff00000000000000fbac141400000000000000000000000000fe8000000000000000000000000000bbac148c9f800000000000000000000000001cd36e72583cf499fc7a72abe185c95d017e18ea0ec61b26c09d784c08e633d8ae6da64800"/140, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b7e000000000000000000000000000000000000000000000000000c0008000800080000000000"], 0x134}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x80) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r6 = accept(r5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001a40)=ANY=[@ANYBLOB="72bff8", @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf253b0000000c009900adae00005b000000040087000500190107000000050019010c000000050018012700000008002600b81500002600330030904a00080211000000080211000001505050505050430096ce0c4100402b00ff0f0000"], 0x6c}}, 0x4000) recvmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) setsockopt$ax25_int(r3, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) 358.590299ms ago: executing program 4 (id=2088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x4}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x4, 0x3, 0x4, 0x0, 0x5, 0x8, 0x5, 0x802}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000240)=r12}, 0x20) socket$packet(0x11, 0x3, 0x300) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)=""/119, 0x77, 0x10000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x205}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r13}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 339.177849ms ago: executing program 0 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r5, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000016a300019078ac1414bbac1414aa030490780300000045000000000000000033000064010101e0000001"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req={0xff, 0x5, 0x2, 0x8}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x4, 0x80000001, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x68, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x66, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x1000}, {@multicast1, 0x21ef}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x8}]}, @timestamp={0x44, 0x20, 0x46, 0x0, 0x1, [0x1, 0xfef8, 0x55, 0x4f, 0xc, 0x8, 0x4]}, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x2c, 0x75, 0x1, 0x7, [{@loopback, 0x4c2c}, {@empty, 0x3}, {@empty, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@remote, 0x6}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x28, r8, 0x400, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r16}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xa8, r8, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x10}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc880}, 0x40000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000a3cc8007b35823b81400e449328b6ebf8267a3a8a72b0bd5d21a9518bfb1ebe1ac0e3c13a6a6ae84caa421f1e5605f9a81096285d25bc211cd8428520261a73eedc2f7", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000014000180100001006574683a6970766c616e3000"], 0x28}}, 0x20000080) 271.165197ms ago: executing program 3 (id=2090): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r4, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r8, 0x0) listen(r8, 0x7f3d) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f00000010c0)={0x0, 0x2, 0x4, "5b5157dc"}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r9, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 0s ago: executing program 4 (id=2091): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r4) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x40000000, {}, [{0x54, 0x1, [@m_mpls={0x1b, 0x1, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf47eb}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESOCT=r6, @ANYBLOB="f1ab10e85bf2944c5f25f420e79fb08f8d4ea0c6c93922d54ce79d1f32b70a8ed2f77d704e964e9fff1b28aaf581ff3d457ed4fc9620a734ef1a7e43a9b0cb4b3c60ebc6259578435a7773edc0f0acb9b8f32ab33ddf9e181f4eccec8543b62171908d203011cd6b459411c4411107129760b0eccd7e2ed13783583b0390aa8d7416d39b37db30815b9b56e6b341caf8d8c40c3a8a12af7545fdaa3048f0027c4b0702e94a39679fdcd326c470545d3f13580ea32abdf21e35bbc9a76a2e52b52f19bbd78c8e3c532794f93a13c1e99e287d77ceb963f0872e028872e833164effba4d4ae6"], 0x38}, 0x1, 0x300, 0x0, 0xc090}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00m', @ANYRESHEX=r7], 0x38}, 0x1, 0x300}, 0x0) kernel console output (not intermixed with test programs): packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.845804][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.858513][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.865801][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.891855][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.910711][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.917790][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.943730][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.956453][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.963409][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.989405][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.044888][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.051852][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.078302][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.126454][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.133411][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.159401][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.252368][ T5870] hsr_slave_0: entered promiscuous mode [ 75.258623][ T5870] hsr_slave_1: entered promiscuous mode [ 75.265370][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 75.271175][ T5870] Cannot create hsr debugfs directory [ 75.281755][ T5866] hsr_slave_0: entered promiscuous mode [ 75.288035][ T5866] hsr_slave_1: entered promiscuous mode [ 75.294094][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 75.300462][ T5866] Cannot create hsr debugfs directory [ 75.334306][ T5869] hsr_slave_0: entered promiscuous mode [ 75.342086][ T5869] hsr_slave_1: entered promiscuous mode [ 75.349168][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 75.355455][ T5869] Cannot create hsr debugfs directory [ 75.392211][ T5874] hsr_slave_0: entered promiscuous mode [ 75.398567][ T5874] hsr_slave_1: entered promiscuous mode [ 75.405144][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 75.410894][ T5874] Cannot create hsr debugfs directory [ 75.631615][ T5862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.668444][ T5862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.708228][ T5862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.748523][ T5862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.961018][ T5870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.978121][ T5870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.991327][ T5870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.001794][ T5870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.107965][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.127089][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.145474][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.159360][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.182635][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.204156][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.256329][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.263585][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.287163][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.310029][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.317205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.340131][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.351506][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.363472][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.445192][ T5185] Bluetooth: hci0: command tx timeout [ 76.475979][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.488508][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.498502][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.510304][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.527130][ T5185] Bluetooth: hci1: command tx timeout [ 76.589475][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.617559][ T5185] Bluetooth: hci2: command tx timeout [ 76.693621][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.723313][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.730511][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.762974][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.770187][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.775097][ T5185] Bluetooth: hci3: command tx timeout [ 76.782782][ T5185] Bluetooth: hci4: command tx timeout [ 76.833822][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.921845][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.930940][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.952906][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.968303][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.975485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.044888][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.052064][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.073556][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.089995][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.117339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.124504][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.191301][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.198530][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.259790][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.351171][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.380740][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.387945][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.453819][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.461006][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.718900][ T5862] veth0_vlan: entered promiscuous mode [ 77.748017][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.803802][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.832367][ T5862] veth1_vlan: entered promiscuous mode [ 78.008648][ T5869] veth0_vlan: entered promiscuous mode [ 78.024547][ T5870] veth0_vlan: entered promiscuous mode [ 78.037480][ T5862] veth0_macvtap: entered promiscuous mode [ 78.059099][ T5869] veth1_vlan: entered promiscuous mode [ 78.069329][ T5870] veth1_vlan: entered promiscuous mode [ 78.088449][ T5862] veth1_macvtap: entered promiscuous mode [ 78.121776][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.152147][ T5870] veth0_macvtap: entered promiscuous mode [ 78.182830][ T5870] veth1_macvtap: entered promiscuous mode [ 78.192727][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.211217][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.227893][ T5869] veth0_macvtap: entered promiscuous mode [ 78.241512][ T5869] veth1_macvtap: entered promiscuous mode [ 78.251010][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.282386][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.291871][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313601][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.326330][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.335931][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.375765][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.388972][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.410384][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.439466][ T5866] veth0_vlan: entered promiscuous mode [ 78.455454][ T5866] veth1_vlan: entered promiscuous mode [ 78.462086][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.473872][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.502150][ T1103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.512976][ T1103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.527333][ T5185] Bluetooth: hci0: command tx timeout [ 78.556434][ T5874] veth0_vlan: entered promiscuous mode [ 78.566372][ T1103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.588193][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.597006][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.606062][ T5185] Bluetooth: hci1: command tx timeout [ 78.635573][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.685281][ T5185] Bluetooth: hci2: command tx timeout [ 78.691034][ T5874] veth1_vlan: entered promiscuous mode [ 78.724139][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.733036][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.788741][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.800266][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.821696][ T5866] veth0_macvtap: entered promiscuous mode [ 78.832730][ T5866] veth1_macvtap: entered promiscuous mode [ 78.849936][ T5185] Bluetooth: hci4: command tx timeout [ 78.855819][ T5878] Bluetooth: hci3: command tx timeout [ 78.916279][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.924221][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.952990][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.960969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.991790][ T5874] veth0_macvtap: entered promiscuous mode [ 79.016487][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.024064][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.032058][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.042669][ T1103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.055129][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.067767][ T5874] veth1_macvtap: entered promiscuous mode [ 79.073842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.081708][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.100124][ T1103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.124202][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.149816][ T1103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.163019][ T1103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.219473][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.296675][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.350645][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.399651][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.407816][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.437594][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.463371][ T5986] Zero length message leads to an empty skb [ 79.493963][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.537683][ T5984] bridge_slave_1 (unregistering): left allmulticast mode [ 79.544889][ T5984] bridge_slave_1 (unregistering): left promiscuous mode [ 79.553451][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.603010][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.663257][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.701864][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.736975][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.842317][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 79.851881][ T5999] netlink: 'syz.2.7': attribute type 30 has an invalid length. [ 79.937247][ T6004] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.994774][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.066416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.084782][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.100985][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.123798][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.138454][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.149553][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.212969][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.298801][ T6014] pimreg: entered allmulticast mode [ 80.391989][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.416718][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.613744][ T5185] Bluetooth: hci0: command tx timeout [ 80.685153][ T5185] Bluetooth: hci1: command tx timeout [ 80.764884][ T5185] Bluetooth: hci2: command tx timeout [ 80.838111][ T6033] netlink: 172 bytes leftover after parsing attributes in process `syz.0.17'. [ 80.865419][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.875372][ T6036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.925960][ T5185] Bluetooth: hci3: command tx timeout [ 80.930381][ T5878] Bluetooth: hci4: command tx timeout [ 80.948785][ T6039] syz.1.19 uses obsolete (PF_INET,SOCK_PACKET) [ 81.475612][ T6062] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 81.950883][ T6075] warning: `syz.2.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.176341][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.32'. [ 82.337620][ T6079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 82.391431][ T6079] gretap1: entered promiscuous mode [ 82.404999][ T6098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36'. [ 82.455007][ T6079] gretap1: entered allmulticast mode [ 82.602010][ T6098] vlan0: entered promiscuous mode [ 82.624814][ T6098] bond0: entered promiscuous mode [ 82.672433][ T6098] bond_slave_0: entered promiscuous mode [ 82.695786][ T6098] bond_slave_1: entered promiscuous mode [ 82.741376][ T6113] netlink: 'syz.1.37': attribute type 7 has an invalid length. [ 82.786821][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.37'. [ 82.952183][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 82.989521][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 83.059274][ T6128] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 83.105652][ T6121] bridge_slave_1: left allmulticast mode [ 83.111332][ T6121] bridge_slave_1: left promiscuous mode [ 83.136514][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.161710][ T6121] bridge_slave_0: left allmulticast mode [ 83.169556][ T6121] bridge_slave_0: left promiscuous mode [ 83.178306][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.482689][ T6146] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 83.594313][ T6146] tipc: Started in network mode [ 83.612328][ T6146] tipc: Node identity ac14140f, cluster identity 4711 [ 83.628590][ T6146] tipc: New replicast peer: 255.255.255.255 [ 83.643488][ T6146] tipc: Enabled bearer , priority 10 [ 84.110278][ T6178] Bluetooth: MGMT ver 1.23 [ 84.131821][ T6173] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 84.198170][ T6173] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.321332][ T6194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.509476][ T6178] bond1 (unregistering): Released all slaves [ 84.658608][ T6209] __nla_validate_parse: 4 callbacks suppressed [ 84.658626][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.61'. [ 84.705309][ T6208] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 84.713181][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 84.766337][ T5933] tipc: Node number set to 2886997007 [ 84.775789][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 84.813081][ T6215] netlink: 'syz.3.62': attribute type 27 has an invalid length. [ 85.178795][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.67'. [ 85.204788][ T6231] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 85.213228][ T6231] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 85.283916][ T6231] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 85.311964][ T6231] netlink: 'syz.2.68': attribute type 2 has an invalid length. [ 85.357286][ T6231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.68'. [ 85.401864][ T6238] syzkaller1: entered promiscuous mode [ 85.419962][ T6238] syzkaller1: entered allmulticast mode [ 85.433677][ T6238] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.69'. [ 85.444589][ T6243] delete_channel: no stack [ 85.594859][ T6252] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 85.602862][ T6252] netlink: 244 bytes leftover after parsing attributes in process `syz.2.74'. [ 85.677111][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.716572][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.810168][ T6265] 8021q: VLANs not supported on sit0 [ 86.346207][ T6293] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 86.523129][ T6304] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 86.564944][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.675195][ T6315] ieee802154 phy0 wpan0: encryption failed: -22 [ 86.699080][ T9] cfg80211: failed to load regulatory.db [ 86.867238][ T6310] netlink: 'syz.0.90': attribute type 5 has an invalid length. [ 87.487650][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.495492][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.541313][ T6361] nbd: must specify at least one socket [ 87.690342][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.713152][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.876590][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.925500][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.024018][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.033168][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.398187][ T6384] netlink: 'syz.2.109': attribute type 2 has an invalid length. [ 88.503440][ T6397] netlink: 'syz.1.114': attribute type 7 has an invalid length. [ 88.523872][ T6397] netlink: 'syz.1.114': attribute type 8 has an invalid length. [ 88.642544][ T6404] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 88.789632][ T6410] tipc: Enabling of bearer rejected, failed to enable media [ 88.852740][ T6417] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 88.947544][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.092027][ T6427] gretap1: entered allmulticast mode [ 89.200481][ T6417] veth3: entered promiscuous mode [ 89.735323][ T5185] Bluetooth: hci4: command 0x0405 tx timeout [ 89.794332][ T6476] __nla_validate_parse: 9 callbacks suppressed [ 89.794350][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 90.234069][ T6496] netlink: 36 bytes leftover after parsing attributes in process `syz.2.140'. [ 90.289277][ T6498] veth0_to_bridge: entered promiscuous mode [ 90.308168][ T6498] veth0_to_bridge: left promiscuous mode [ 90.400759][ T6498] validate_nla: 4 callbacks suppressed [ 90.400777][ T6498] netlink: 'syz.0.143': attribute type 4 has an invalid length. [ 90.420381][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.143'. [ 90.498191][ T6507] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 90.507657][ T6506] netlink: 'syz.2.144': attribute type 10 has an invalid length. [ 90.519865][ T6506] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 90.549070][ T6506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 90.793803][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 91.230549][ T30] audit: type=1107 audit(1757388907.153:2): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 91.233853][ T6539] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 91.295340][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 91.591604][ T6557] netlink: 152 bytes leftover after parsing attributes in process `syz.1.161'. [ 91.618388][ T6557] block nbd0: not configured, cannot reconfigure [ 91.917231][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 92.092836][ T6583] ip6gre0: Master is either lo or non-ether device [ 92.170662][ T6589] netlink: 'syz.2.172': attribute type 6 has an invalid length. [ 92.409523][ T6601] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.177'. [ 92.649190][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 92.743637][ T6611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.903171][ T6629] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.038072][ T6633] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 93.069365][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.093096][ T6633] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.110023][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 93.531366][ T6655] bridge: RTM_NEWNEIGH with invalid ether address [ 93.552390][ T6655] bridge: RTM_NEWNEIGH with invalid ether address [ 93.952358][ T6676] netlink: 'syz.3.202': attribute type 10 has an invalid length. [ 94.003622][ T6676] batman_adv: batadv0: Adding interface: team0 [ 94.026903][ T6676] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.123463][ T6676] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 94.183711][ T6685] syzkaller1: entered promiscuous mode [ 94.218078][ T6685] syzkaller1: entered allmulticast mode [ 94.361854][ T6695] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 94.736378][ T6718] tipc: Invalid UDP bearer configuration [ 94.736435][ T6718] tipc: Enabling of bearer rejected, failed to enable media [ 94.808449][ T6721] __nla_validate_parse: 6 callbacks suppressed [ 94.808467][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.220'. [ 94.995169][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 95.111756][ T6738] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 95.119793][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.218407][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 95.676691][ T6775] netlink: 88 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.690043][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 95.709282][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.235'. [ 95.752036][ T6775] macvtap1: entered promiscuous mode [ 95.759292][ T6775] vlan0: entered promiscuous mode [ 95.768253][ T6775] macvtap1: entered allmulticast mode [ 95.773722][ T6775] vlan0: entered allmulticast mode [ 95.781534][ T6775] veth0_vlan: entered allmulticast mode [ 95.929121][ T6785] netlink: 11 bytes leftover after parsing attributes in process `syz.4.237'. [ 96.215762][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.239'. [ 96.540547][ T6809] team0: Device ip6gre1 is of different type [ 96.747944][ T6831] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 96.760671][ T6831] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 96.812207][ T6831] netlink: 'syz.4.248': attribute type 8 has an invalid length. [ 96.938476][ T6828] wg1: entered allmulticast mode [ 97.369984][ T6859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.253'. [ 97.578791][ T6859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.253'. [ 97.627628][ T6865] netlink: 'syz.0.254': attribute type 29 has an invalid length. [ 97.903200][ T6878] bond1: entered promiscuous mode [ 97.908398][ T6878] bond1: entered allmulticast mode [ 97.915929][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.144756][ T6897] syzkaller0: entered allmulticast mode [ 98.152563][ T6897] syzkaller0: entered promiscuous mode [ 98.332481][ T6906] netlink: 'syz.3.266': attribute type 11 has an invalid length. [ 98.548875][ T6920] openvswitch: netlink: Missing key (keys=40, expected=80) [ 98.760928][ T6927] bond0: entered promiscuous mode [ 98.766715][ T6927] bond_slave_0: entered promiscuous mode [ 98.777010][ T6927] bond_slave_1: entered promiscuous mode [ 98.805132][ T6927] bond0: left promiscuous mode [ 98.810831][ T6927] bond_slave_0: left promiscuous mode [ 98.816631][ T6927] bond_slave_1: left promiscuous mode [ 98.836518][ T6930] bond0: entered promiscuous mode [ 98.841551][ T6930] bond_slave_0: entered promiscuous mode [ 98.848074][ T6930] bond_slave_1: entered promiscuous mode [ 98.855407][ T6930] bond0: left promiscuous mode [ 98.861514][ T6930] bond_slave_0: left promiscuous mode [ 98.868385][ T6930] bond_slave_1: left promiscuous mode [ 99.012112][ T6941] trusted_key: syz.4.275 sent an empty control message without MSG_MORE. [ 100.252467][ T6975] syzkaller0: entered promiscuous mode [ 100.261047][ T6975] syzkaller0: entered allmulticast mode [ 100.428326][ T7005] __nla_validate_parse: 11 callbacks suppressed [ 100.428345][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 100.734326][ T7018] Unsupported ieee802154 address type: 0 [ 101.608406][ T7005] xfrm1: entered promiscuous mode [ 101.613547][ T7005] xfrm1: entered allmulticast mode [ 101.619391][ T7013] tipc: Started in network mode [ 101.632506][ T7013] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.661014][ T7013] tipc: Enabling of bearer rejected, failed to enable media [ 101.694135][ T7022] netlink: 'syz.4.303': attribute type 1 has an invalid length. [ 101.789000][ T7026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.303'. [ 101.828959][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 101.834052][ T7022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.859043][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 101.874968][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.303'. [ 101.889849][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 101.918700][ T7028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.305'. [ 101.919099][ T7033] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 101.984078][ T7033] netlink: 144 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.040962][ T7033] netlink: 'syz.3.306': attribute type 1 has an invalid length. [ 102.092548][ T7033] netlink: 'syz.3.306': attribute type 2 has an invalid length. [ 102.113129][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.3.306'. [ 102.161311][ T7039] syzkaller0: entered promiscuous mode [ 102.193229][ T7039] syzkaller0: entered allmulticast mode [ 102.209327][ T7038] tipc: Started in network mode [ 102.214222][ T7038] tipc: Node identity 66c8e3d94244, cluster identity 4711 [ 102.284596][ T7038] tipc: Enabled bearer , priority 0 [ 102.335048][ T7038] tipc: Resetting bearer [ 102.429664][ T7038] tipc: Disabling bearer [ 102.783301][ T7077] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 102.886243][ T7085] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.321'. [ 102.895813][ T7085] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 102.922868][ T7085] openvswitch: netlink: Duplicate key (type 0). [ 103.123352][ T7099] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 104.666513][ T7182] sctp: [Deprecated]: syz.1.348 (pid 7182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.666513][ T7182] Use struct sctp_sack_info instead [ 104.696090][ T5878] Bluetooth: hci0: command 0x0c20 tx timeout [ 104.723753][ T7184] netem: change failed [ 104.757075][ T7169] syz.1.348 (7169) used greatest stack depth: 16168 bytes left [ 105.187149][ T7208] team_slave_0: mtu greater than device maximum [ 105.326341][ T7207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.377146][ T7219] macvlan0: entered promiscuous mode [ 105.382482][ T7219] macvlan0: entered allmulticast mode [ 105.680527][ T7235] __nla_validate_parse: 14 callbacks suppressed [ 105.680552][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 105.708857][ T7237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.877938][ T7244] team0: Port device team_slave_1 removed [ 105.932037][ T7237] pim6reg1: entered promiscuous mode [ 105.937630][ T7237] pim6reg1: entered allmulticast mode [ 106.311616][ T7275] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 106.426780][ T7268] syzkaller0: entered promiscuous mode [ 106.459982][ T7278] netlink: 'syz.0.377': attribute type 11 has an invalid length. [ 106.483803][ T7282] netlink: 'syz.1.375': attribute type 21 has an invalid length. [ 106.508079][ T7268] syzkaller0: entered allmulticast mode [ 106.544610][ T49] syzkaller0: tun_net_xmit 48 [ 106.550971][ T7282] netlink: 128 bytes leftover after parsing attributes in process `syz.1.375'. [ 106.551318][ T7275] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 106.580078][ T7275] syzkaller0: Linktype set failed because interface is up [ 106.604140][ T7282] netlink: 'syz.1.375': attribute type 5 has an invalid length. [ 106.621617][ T7282] netlink: 3 bytes leftover after parsing attributes in process `syz.1.375'. [ 108.020034][ T7319] tipc: Enabled bearer , priority 0 [ 108.061657][ T7319] tipc: Disabling bearer [ 108.309876][ T7332] ip6gre1: entered allmulticast mode [ 108.396355][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'. [ 108.580986][ T7350] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:0 [ 108.925026][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 109.157875][ T7367] netlink: 'syz.2.405': attribute type 13 has an invalid length. [ 109.208688][ T7367] veth0_macvtap: left promiscuous mode [ 109.242541][ T7367] macvtap0: entered allmulticast mode [ 109.285556][ T7367] macvtap0: refused to change device tx_queue_len [ 109.791395][ T7396] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 109.921859][ T7411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.416'. [ 109.947912][ T7411] netlink: 'syz.0.416': attribute type 14 has an invalid length. [ 109.989468][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 110.006806][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 110.017043][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 110.188327][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 110.450407][ T7435] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 110.521193][ T7440] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 110.571263][ T7440] netlink: 136 bytes leftover after parsing attributes in process `syz.4.425'. [ 110.626147][ T7440] netlink: 'syz.4.425': attribute type 2 has an invalid length. [ 110.655390][ T7440] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 110.868336][ T7458] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 110.894866][ T7456] netlink: 104 bytes leftover after parsing attributes in process `syz.3.431'. [ 110.918440][ T7458] netlink: 228 bytes leftover after parsing attributes in process `syz.3.431'. [ 110.932424][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 110.971554][ T7461] tipc: Started in network mode [ 110.978691][ T7461] tipc: Node identity 8a76e3f7765b, cluster identity 4711 [ 110.988562][ T7461] tipc: Enabled bearer , priority 0 [ 111.030469][ T7461] syzkaller0: entered promiscuous mode [ 111.070390][ T7461] syzkaller0: entered allmulticast mode [ 111.163480][ T7476] netlink: 80 bytes leftover after parsing attributes in process `syz.3.434'. [ 111.220243][ T7469] netlink: 2 bytes leftover after parsing attributes in process `syz.2.435'. [ 111.243902][ T7459] tipc: Resetting bearer [ 111.280870][ T7459] tipc: Disabling bearer [ 111.366102][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 111.460420][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 111.487284][ T7488] bond0: entered promiscuous mode [ 111.492497][ T7488] bond_slave_0: entered promiscuous mode [ 111.505386][ T7488] bond_slave_1: entered promiscuous mode [ 111.515393][ T7488] bond0: left promiscuous mode [ 111.535302][ T7488] bond_slave_0: left promiscuous mode [ 111.553762][ T7488] bond_slave_1: left promiscuous mode [ 111.591703][ T7483] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.437'. [ 111.604278][ T7491] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 111.849143][ T7508] netlink: 'syz.3.444': attribute type 1 has an invalid length. [ 111.925403][ T7508] netlink: 'syz.3.444': attribute type 4 has an invalid length. [ 111.955233][ T7508] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.444'. [ 112.213235][ T7527] bridge0: entered promiscuous mode [ 112.217718][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 112.219013][ T7527] bridge0: entered allmulticast mode [ 112.251809][ T7531] netlink: 'syz.4.454': attribute type 1 has an invalid length. [ 112.453239][ T7539] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 112.523551][ T7547] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.584389][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.584439][ T7548] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.592362][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.600143][ T7548] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.607850][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.615613][ T7548] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.623261][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.631013][ T7548] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.638807][ T7549] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 112.646505][ T7548] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 113.743037][ T7604] gretap2: entered promiscuous mode [ 113.748394][ T7604] gretap2: entered allmulticast mode [ 114.236079][ T7622] validate_nla: 5 callbacks suppressed [ 114.236097][ T7622] netlink: 'syz.2.478': attribute type 1 has an invalid length. [ 114.351800][ T7631] syz.1.480 uses old SIOCAX25GETINFO [ 114.560969][ T7646] lo: entered allmulticast mode [ 114.571908][ T7645] lo: left allmulticast mode [ 115.159623][ T7686] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 115.175582][ T7688] block nbd4: not configured, cannot reconfigure [ 115.389082][ T7694] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 115.398343][ T7694] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 115.931560][ T7723] syzkaller0: entered promiscuous mode [ 115.941137][ T7723] syzkaller0: entered allmulticast mode [ 115.995257][ T7736] tipc: Enabled bearer , priority 0 [ 116.019553][ T7726] __nla_validate_parse: 20 callbacks suppressed [ 116.019573][ T7726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.508'. [ 116.040306][ T7721] tipc: Resetting bearer [ 116.250993][ T7758] IPVS: length: 192 != 8 [ 117.047995][ T9] tipc: Node number set to 613213145 [ 117.270098][ T7721] tipc: Disabling bearer [ 117.416645][ T7769] netlink: 'syz.1.518': attribute type 2 has an invalid length. [ 117.429431][ T5932] IPVS: starting estimator thread 0... [ 117.442397][ T7769] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 117.454016][ T7769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.518'. [ 117.468791][ T7769] unsupported nlmsg_type 40 [ 117.482828][ T7776] netlink: 'syz.2.516': attribute type 10 has an invalid length. [ 117.537165][ T7773] IPVS: using max 30 ests per chain, 72000 per kthread [ 117.622511][ T7784] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 117.623072][ T7780] IPVS: stopping master sync thread 7784 ... [ 117.655255][ T7787] netlink: 'syz.4.521': attribute type 29 has an invalid length. [ 117.673924][ T7787] netlink: 'syz.4.521': attribute type 29 has an invalid length. [ 117.748705][ T7787] netlink: 500 bytes leftover after parsing attributes in process `syz.4.521'. [ 117.780806][ T7791] wg1 speed is unknown, defaulting to 1000 [ 117.787983][ T7791] wg1 speed is unknown, defaulting to 1000 [ 117.798793][ T7791] wg1 speed is unknown, defaulting to 1000 [ 117.806953][ T7787] unsupported nla_type 58 [ 117.814275][ T7790] netlink: 'syz.3.524': attribute type 30 has an invalid length. [ 117.832900][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.526'. [ 117.853793][ T7791] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.883454][ T7791] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.967678][ T7791] wg1 speed is unknown, defaulting to 1000 [ 117.978745][ T7791] wg1 speed is unknown, defaulting to 1000 [ 117.992133][ T7791] wg1 speed is unknown, defaulting to 1000 [ 118.001834][ T7791] wg1 speed is unknown, defaulting to 1000 [ 118.044086][ T7791] wg1 speed is unknown, defaulting to 1000 [ 118.090737][ T7812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.531'. [ 118.125384][ T7812] netlink: 43 bytes leftover after parsing attributes in process `syz.1.531'. [ 118.139780][ T7812] netlink: 'syz.1.531': attribute type 5 has an invalid length. [ 118.152003][ T7812] netlink: 43 bytes leftover after parsing attributes in process `syz.1.531'. [ 118.221117][ T7821] netlink: 'syz.2.532': attribute type 7 has an invalid length. [ 118.237834][ T7821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.532'. [ 118.277125][ T7829] rdma_op ffff88807d92c9f0 conn xmit_rdma 0000000000000000 [ 118.290743][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.535'. [ 118.302303][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 118.403820][ T7831] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 119.577884][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.614479][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.871070][ T7895] geneve2: entered promiscuous mode [ 119.876567][ T7895] geneve2: entered allmulticast mode [ 119.887678][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.922221][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.952470][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 119.964188][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.973258][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.982276][ T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.039287][ T153] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.061509][ T153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.083327][ T153] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.105283][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.114177][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.179116][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 120.206933][ T7930] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 120.578664][ T7958] batman_adv: batadv0: Adding interface: ipvlan0 [ 120.586878][ T7958] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.620563][ T7958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.629808][ T7960] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 120.631597][ T7958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.652687][ T7958] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 120.884850][ T7971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.059697][ T8001] bridge_slave_0: invalid flags given to default FDB implementation [ 121.107709][ T8000] validate_nla: 2 callbacks suppressed [ 121.107726][ T8000] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 121.145843][ T8004] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 121.165956][ T8006] net_ratelimit: 100 callbacks suppressed [ 121.165971][ T8006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.251608][ T8010] __nla_validate_parse: 3 callbacks suppressed [ 121.251626][ T8010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.588'. [ 121.303065][ T8012] netlink: 'syz.4.589': attribute type 12 has an invalid length. [ 121.315227][ T8012] netlink: 'syz.4.589': attribute type 29 has an invalid length. [ 121.339912][ T8012] netlink: 148 bytes leftover after parsing attributes in process `syz.4.589'. [ 121.352168][ T8012] netlink: 'syz.4.589': attribute type 2 has an invalid length. [ 121.360132][ T8012] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 121.369324][ T8012] netlink: 11 bytes leftover after parsing attributes in process `syz.4.589'. [ 121.379545][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 121.478312][ T8020] netlink: 64 bytes leftover after parsing attributes in process `syz.3.591'. [ 121.670185][ T8035] tipc: Started in network mode [ 121.694438][ T8035] tipc: Node identity b27a077b7f97, cluster identity 4711 [ 121.723198][ T8035] tipc: Enabled bearer , priority 0 [ 121.799284][ T8035] tipc: Disabling bearer [ 121.896814][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 121.931588][ T8056] netlink: 'syz.0.604': attribute type 16 has an invalid length. [ 121.947031][ T8056] netlink: 'syz.0.604': attribute type 17 has an invalid length. [ 121.986157][ T8064] netlink: 88 bytes leftover after parsing attributes in process `syz.0.604'. [ 121.991647][ T8063] xt_limit: Overflow, try lower: 271964/0 [ 122.020998][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 122.150815][ T8071] netlink: 'syz.2.607': attribute type 12 has an invalid length. [ 122.298495][ T8083] IPVS: length: 123 != 8 [ 122.435121][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 122.469995][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 122.633012][ T8105] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 122.806591][ T8116] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.890042][ T8124] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 122.917887][ T8117] can: request_module (can-proto-4) failed. [ 123.641450][ T8187] openvswitch: netlink: Actions may not be safe on all matching packets [ 124.098145][ T8219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.396378][ T8232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.407394][ T8239] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 124.425459][ T8239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.460475][ T8232] bond2: (slave veth5): Enslaving as an active interface with a down link [ 124.502954][ T8243] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 124.562226][ T8232] bond2: (slave veth7): Enslaving as an active interface with a down link [ 124.637880][ T8255] Bluetooth: MGMT ver 1.23 [ 124.686484][ T8257] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 125.210103][ T8299] team0 (unregistering): Port device team_slave_0 removed [ 125.230731][ T8299] team0 (unregistering): Port device team_slave_1 removed [ 125.911670][ T8356] vlan2: entered promiscuous mode [ 126.070310][ T8366] tipc: Enabled bearer , priority 0 [ 126.079691][ T8363] tipc: Enabling of bearer rejected, already enabled [ 126.090634][ T8366] syzkaller0: entered promiscuous mode [ 126.101217][ T8366] syzkaller0: entered allmulticast mode [ 126.128830][ T8369] validate_nla: 8 callbacks suppressed [ 126.128847][ T8369] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 126.161909][ T8363] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 126.221449][ T8363] tipc: Resetting bearer [ 126.232804][ T8362] tipc: Resetting bearer [ 126.259416][ T8362] tipc: Disabling bearer [ 126.423334][ T8385] __nla_validate_parse: 16 callbacks suppressed [ 126.423351][ T8385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.708'. [ 126.441153][ T8385] nbd: must specify a size in bytes for the device [ 126.458672][ T8386] netlink: 72 bytes leftover after parsing attributes in process `syz.0.706'. [ 126.491919][ T8380] bond2: entered promiscuous mode [ 126.502446][ T8380] bond2: entered allmulticast mode [ 126.511844][ T8386] nbd: illegal input index -8454144 [ 126.519133][ T8380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.535578][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.546874][ T8389] bond0: (slave rose0): Enslaving as an active interface with an up link [ 126.774317][ T8401] netlink: 64 bytes leftover after parsing attributes in process `syz.2.713'. [ 126.839735][ T8413] netlink: 56 bytes leftover after parsing attributes in process `syz.2.713'. [ 126.942664][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.718'. [ 126.962636][ T8415] tipc: Enabled bearer , priority 0 [ 126.972526][ T8415] syzkaller0: entered promiscuous mode [ 126.979235][ T8415] syzkaller0: entered allmulticast mode [ 126.991256][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.3.718'. [ 127.005005][ T8419] netlink: 'syz.2.719': attribute type 13 has an invalid length. [ 127.019661][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 127.032491][ T8415] tipc: Resetting bearer [ 127.056592][ T8415] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 127.064462][ T8422] netlink: 'syz.2.719': attribute type 13 has an invalid length. [ 127.086647][ T8414] tipc: Resetting bearer [ 127.099468][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.719'. [ 127.117567][ T8414] tipc: Disabling bearer [ 127.126361][ T8425] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 127.258947][ T8430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 127.263423][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 127.318711][ T8429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.710951][ T8461] netlink: 'syz.4.729': attribute type 17 has an invalid length. [ 127.754411][ T8461] netlink: 'syz.4.729': attribute type 2 has an invalid length. [ 127.931336][ T8471] netlink: 'syz.0.733': attribute type 24 has an invalid length. [ 127.980659][ T8429] netlink: 'syz.3.723': attribute type 3 has an invalid length. [ 128.444380][ T8495] bond2: (slave bridge1): making interface the new active one [ 128.471395][ T8495] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 129.227181][ T8531] tipc: Enabling of bearer rejected, failed to enable media [ 129.487647][ T8553] tipc: Enabled bearer , priority 0 [ 129.506422][ T8553] syzkaller0: entered promiscuous mode [ 129.511925][ T8553] syzkaller0: entered allmulticast mode [ 129.610334][ T8553] tipc: Resetting bearer [ 129.839674][ T8552] tipc: Resetting bearer [ 129.862021][ T8552] tipc: Disabling bearer [ 129.882091][ T8578] tipc: Enabling of bearer rejected, failed to enable media [ 130.447040][ T8618] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 130.689878][ T8644] FAULT_INJECTION: forcing a failure. [ 130.689878][ T8644] name failslab, interval 1, probability 0, space 0, times 1 [ 130.713005][ T8644] CPU: 1 UID: 0 PID: 8644 Comm: syz.0.784 Not tainted syzkaller #0 PREEMPT(full) [ 130.713030][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.713047][ T8644] Call Trace: [ 130.713054][ T8644] [ 130.713063][ T8644] dump_stack_lvl+0x189/0x250 [ 130.713098][ T8644] ? __pfx____ratelimit+0x10/0x10 [ 130.713122][ T8644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.713141][ T8644] ? __pfx__printk+0x10/0x10 [ 130.713169][ T8644] ? __pfx___might_resched+0x10/0x10 [ 130.713185][ T8644] ? fs_reclaim_acquire+0x7d/0x100 [ 130.713213][ T8644] should_fail_ex+0x414/0x560 [ 130.713241][ T8644] should_failslab+0xa8/0x100 [ 130.713265][ T8644] __kmalloc_noprof+0xcb/0x4f0 [ 130.713283][ T8644] ? kfree+0x4d/0x440 [ 130.713298][ T8644] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 130.713322][ T8644] tomoyo_realpath_from_path+0xe3/0x5d0 [ 130.713341][ T8644] ? tomoyo_domain+0xd9/0x130 [ 130.713364][ T8644] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 130.713386][ T8644] tomoyo_path_number_perm+0x1e8/0x5a0 [ 130.713411][ T8644] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 130.713450][ T8644] ? __lock_acquire+0xab9/0xd20 [ 130.713494][ T8644] ? __fget_files+0x2a/0x420 [ 130.713518][ T8644] ? __fget_files+0x2a/0x420 [ 130.713531][ T8644] ? __fget_files+0x3a0/0x420 [ 130.713545][ T8644] ? __fget_files+0x2a/0x420 [ 130.713565][ T8644] security_file_ioctl+0xcb/0x2d0 [ 130.713588][ T8644] __se_sys_ioctl+0x47/0x170 [ 130.713611][ T8644] do_syscall_64+0xfa/0x3b0 [ 130.713626][ T8644] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.713647][ T8644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.713664][ T8644] ? clear_bhb_loop+0x60/0xb0 [ 130.713684][ T8644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.713700][ T8644] RIP: 0033:0x7ff8f3b8ebe9 [ 130.713723][ T8644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.713736][ T8644] RSP: 002b:00007ff8f4a31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.713758][ T8644] RAX: ffffffffffffffda RBX: 00007ff8f3dc6090 RCX: 00007ff8f3b8ebe9 [ 130.713770][ T8644] RDX: 0000200000000100 RSI: 000000000000894b RDI: 0000000000000003 [ 130.713781][ T8644] RBP: 00007ff8f4a31090 R08: 0000000000000000 R09: 0000000000000000 [ 130.713791][ T8644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.713801][ T8644] R13: 00007ff8f3dc6128 R14: 00007ff8f3dc6090 R15: 00007ffdd5e459a8 [ 130.713831][ T8644] [ 130.726073][ T8644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.406501][ T8678] validate_nla: 6 callbacks suppressed [ 131.406519][ T8678] netlink: 'syz.3.798': attribute type 21 has an invalid length. [ 131.449937][ T8678] __nla_validate_parse: 22 callbacks suppressed [ 131.449954][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 131.478631][ T8678] netlink: 'syz.3.798': attribute type 21 has an invalid length. [ 131.502867][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 131.570950][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'. [ 131.781188][ T8703] netlink: 72 bytes leftover after parsing attributes in process `syz.1.807'. [ 131.943760][ T8715] netlink: 9 bytes leftover after parsing attributes in process `syz.3.811'. [ 131.969807][ T8715] gretap0: entered promiscuous mode [ 132.247103][ T8730] wg1 speed is unknown, defaulting to 1000 [ 132.317163][ T5878] block nbd0: Receive control failed (result -32) [ 132.500448][ T8745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.821'. [ 132.644310][ T8753] sctp: [Deprecated]: syz.4.823 (pid 8753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.644310][ T8753] Use struct sctp_sack_info instead [ 132.778389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.781928][ T8768] tc_dump_action: action bad kind [ 132.790220][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.791491][ T8768] tc_dump_action: action bad kind [ 132.825584][ T8763] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 132.861393][ T8756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.962453][ T8777] netlink: 100 bytes leftover after parsing attributes in process `syz.2.831'. [ 132.972460][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 132.991403][ T8777] netlink: 32 bytes leftover after parsing attributes in process `syz.2.831'. [ 133.257497][ T8793] netlink: 'syz.1.840': attribute type 1 has an invalid length. [ 133.279840][ T8793] netlink: 'syz.1.840': attribute type 2 has an invalid length. [ 133.460551][ T8799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 134.094025][ T8837] wg1 speed is unknown, defaulting to 1000 [ 134.169835][ T8846] gretap1: entered promiscuous mode [ 134.395054][ T8837] clip:clip_setentry: non-CLIP VCC [ 134.586660][ T8880] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 134.630955][ T8880] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.652345][ T8884] ip6gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 134.694604][ T8887] netlink: 'syz.3.870': attribute type 7 has an invalid length. [ 134.703970][ T8887] netlink: 'syz.3.870': attribute type 8 has an invalid length. [ 135.180452][ T8907] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 135.190786][ T8907] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 135.207930][ T8907] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 135.345764][ T8913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.571391][ T8931] netlink: 'syz.0.882': attribute type 2 has an invalid length. [ 135.589627][ T8931] netlink: 'syz.0.882': attribute type 11 has an invalid length. [ 136.398077][ T8985] syzkaller1: entered promiscuous mode [ 136.403694][ T8985] syzkaller1: entered allmulticast mode [ 136.416084][ T30] audit: type=1107 audit(1757388952.343:3): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='QB5W#muHA`Lj]Fĥn>^UHԻT;wxYG U3#xXߩ pJ,~%0}q=WnԸ4#lA=rx=tJ9YQ(;nx=]kn36X5tZ ձͧ=\|t{Y 0~+μ-D' [ 136.470030][ T8989] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20004 [ 136.803873][ T9014] syzkaller0: entered allmulticast mode [ 136.924132][ T9023] __nla_validate_parse: 17 callbacks suppressed [ 136.924151][ T9023] netlink: 3 bytes leftover after parsing attributes in process `syz.3.909'. [ 136.968244][ T9023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.704127][ T9082] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 137.959716][ T9101] validate_nla: 1 callbacks suppressed [ 137.959733][ T9101] netlink: 'syz.3.929': attribute type 21 has an invalid length. [ 138.072133][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 138.195401][ T9121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.933'. [ 138.320864][ T9123] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 138.500364][ T9135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.938'. [ 138.893584][ T9169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.901123][ T9169] IPv6: NLM_F_CREATE should be set when creating new route [ 138.929491][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 138.940131][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 138.949937][ T9164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 139.149862][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.953'. [ 139.188153][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.953'. [ 139.443703][ T9200] IPv6: sit2: Disabled Multicast RS [ 139.950988][ T9239] tunl0: entered promiscuous mode [ 139.959774][ T9239] netlink: 'syz.2.966': attribute type 3 has an invalid length. [ 139.968331][ T9239] netlink: 9 bytes leftover after parsing attributes in process `syz.2.966'. [ 140.004096][ T9243] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 140.219369][ T9256] nbd: must specify at least one socket [ 140.550699][ T9274] IPv6: sit1: Disabled Multicast RS [ 140.563097][ T9274] sit1: entered allmulticast mode [ 141.338667][ T9300] syzkaller1: entered promiscuous mode [ 141.344304][ T9300] syzkaller1: entered allmulticast mode [ 141.555821][ T9306] pim6reg1: entered promiscuous mode [ 141.565728][ T9306] pim6reg1: entered allmulticast mode [ 141.722106][ T9316] bond3: entered promiscuous mode [ 141.729581][ T9316] bond3: entered allmulticast mode [ 141.737357][ T9316] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.023156][ T9332] netlink: 'syz.1.992': attribute type 25 has an invalid length. [ 142.044010][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.992'. [ 142.058671][ T9332] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.067608][ T9332] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.083782][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.991'. [ 142.127246][ T9329] netlink: 'syz.2.991': attribute type 21 has an invalid length. [ 142.214913][ T9341] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 142.252646][ T9315] infiniband syz!: set active [ 142.264941][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.994'. [ 142.286551][ T9315] infiniband syz!: added team_slave_0 [ 142.399033][ T9315] RDS/IB: syz!: added [ 142.403787][ T9315] smc: adding ib device syz! with port count 1 [ 142.410352][ T9315] smc: ib device syz! port 1 has pnetid [ 142.498460][ T9352] tipc: Enabled bearer , priority 0 [ 142.535491][ T9353] tipc: Enabled bearer , priority 0 [ 142.543098][ T9352] syzkaller0: entered promiscuous mode [ 142.564957][ T9352] syzkaller0: entered allmulticast mode [ 142.587928][ T9353] syzkaller0: entered promiscuous mode [ 142.602576][ T9353] syzkaller0: entered allmulticast mode [ 142.642451][ T9350] tipc: Resetting bearer [ 142.669522][ T9350] tipc: Disabling bearer [ 142.692071][ T9352] tipc: Resetting bearer [ 143.270224][ T9351] tipc: Resetting bearer [ 143.333709][ T9351] tipc: Disabling bearer [ 143.553113][ T9406] nbd: must specify a size in bytes for the device [ 143.589446][ T9406] ipvlan3: entered promiscuous mode [ 143.597941][ T9411] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 143.634367][ T9411] netlink: 'syz.3.1011': attribute type 2 has an invalid length. [ 143.852486][ T9417] raw_sendmsg: syz.0.1013 forgot to set AF_INET. Fix it! [ 144.189108][ T9431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.199699][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'. [ 144.362855][ T9436] sctp: [Deprecated]: syz.0.1019 (pid 9436) Use of int in maxseg socket option. [ 144.362855][ T9436] Use struct sctp_assoc_value instead [ 145.873944][ T9527] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.969995][ T9535] macsec1: entered promiscuous mode [ 145.978848][ T9535] macsec1: entered allmulticast mode [ 146.020220][ T9538] netlink: 'syz.2.1052': attribute type 11 has an invalid length. [ 146.048956][ T9538] netlink: 'syz.2.1052': attribute type 11 has an invalid length. [ 146.062935][ T9538] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1052'. [ 146.279528][ T9553] tipc: Enabled bearer , priority 0 [ 146.297338][ T9553] syzkaller0: entered promiscuous mode [ 146.313147][ T9553] syzkaller0: entered allmulticast mode [ 146.376327][ T9552] tipc: Resetting bearer [ 146.412281][ T9552] tipc: Disabling bearer [ 146.412330][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1059'. [ 146.438642][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 146.447882][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 146.474425][ T9564] bridge0: port 3(vlan2) entered blocking state [ 146.491207][ T9564] bridge0: port 3(vlan2) entered disabled state [ 146.520675][ T9564] vlan2: entered allmulticast mode [ 146.535831][ T9564] vlan2: left allmulticast mode [ 146.673381][ T9576] tunl0: entered promiscuous mode [ 146.688400][ T9576] netlink: 'syz.0.1063': attribute type 3 has an invalid length. [ 146.698602][ T9576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1063'. [ 146.817915][ T9579] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 147.062880][ T9596] netlink: 'syz.0.1071': attribute type 7 has an invalid length. [ 147.099151][ T9596] : entered promiscuous mode [ 147.119018][ T9600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.274846][ T9608] __nla_validate_parse: 4 callbacks suppressed [ 147.274864][ T9608] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1074'. [ 147.555809][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 147.620575][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 147.642666][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 147.689688][ T9625] hsr_slave_0 (unregistering): left promiscuous mode [ 147.742647][ T9632] syzkaller0: entered promiscuous mode [ 147.764792][ T9632] syzkaller0: entered allmulticast mode [ 147.879674][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'. [ 148.228390][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 148.238743][ T9668] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.1093'. [ 148.245323][ T9663] nbd1: detected capacity change from 0 to 127 [ 148.253546][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'. [ 148.263804][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1092'. [ 148.275521][ T9668] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 148.375290][ T9660] wg1 speed is unknown, defaulting to 1000 [ 148.402693][ T9677] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 148.463039][ T9681] netlink: 'syz.4.1095': attribute type 12 has an invalid length. [ 148.490223][ T9677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 148.633856][ T9683] bond3: (slave veth3): Enslaving as an active interface with a down link [ 148.661563][ T5878] block nbd1: Receive control failed (result -32) [ 148.682060][ T9691] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1096'. [ 149.173799][ T9717] netlink: 'syz.4.1104': attribute type 4 has an invalid length. [ 149.253276][ T9722] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 149.511509][ T9730] can: request_module (can-proto-0) failed. [ 149.518699][ T9733] tipc: Enabled bearer , priority 0 [ 149.579475][ T9735] tipc: Resetting bearer [ 149.670597][ T9731] tipc: Disabling bearer [ 149.764209][ T9746] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 150.336529][ T9780] gre0: mtu less than device minimum [ 150.888167][ T9822] veth1_macvtap: left promiscuous mode [ 150.906512][ T9822] macsec0: entered promiscuous mode [ 150.912240][ T9822] macsec0: entered allmulticast mode [ 150.944880][ T9824] veth1_macvtap: entered promiscuous mode [ 150.950653][ T9824] veth1_macvtap: entered allmulticast mode [ 150.974011][ T9824] macsec0: left promiscuous mode [ 150.981846][ T9824] macsec0: left allmulticast mode [ 150.987377][ T9824] veth1_macvtap: left allmulticast mode [ 151.013166][ T9828] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 151.091611][ T9828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.130251][ T9837] vlan2: entered promiscuous mode [ 151.145960][ T9837] bond4: entered promiscuous mode [ 151.153891][ T9837] vlan2: entered allmulticast mode [ 151.164500][ T9837] bond4: entered allmulticast mode [ 151.198301][ T9838] tipc: Enabled bearer , priority 0 [ 151.218385][ T9828] gretap1: entered promiscuous mode [ 151.229140][ T9828] bond4: (slave gretap1): making interface the new active one [ 151.237228][ T9828] gretap1: entered allmulticast mode [ 151.243339][ T9828] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 151.268248][ T9838] syzkaller0: entered promiscuous mode [ 151.273985][ T9838] syzkaller0: entered allmulticast mode [ 151.339957][ T9838] tipc: Resetting bearer [ 151.370025][ T9834] tipc: Resetting bearer [ 151.399000][ T9834] tipc: Disabling bearer [ 151.661770][ T9872] xt_HMARK: proto mask must be zero with L3 mode [ 151.801909][ T9881] netlink: 'syz.4.1147': attribute type 3 has an invalid length. [ 152.351753][ T9909] atomic_op ffff888056061198 conn xmit_atomic 0000000000000000 [ 152.781176][ T9930] __nla_validate_parse: 19 callbacks suppressed [ 152.781195][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1166'. [ 153.003264][ T9940] netlink: 'syz.1.1169': attribute type 6 has an invalid length. [ 153.015574][ T9940] netlink: 'syz.1.1169': attribute type 6 has an invalid length. [ 153.033745][ T9940] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 153.219528][ T9946] netlink: 'syz.2.1172': attribute type 33 has an invalid length. [ 153.227543][ T9946] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1172'. [ 153.455397][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'. [ 153.666696][ T9974] tipc: Enabled bearer , priority 0 [ 153.690205][ T9974] syzkaller0: entered promiscuous mode [ 153.709513][ T9974] syzkaller0: entered allmulticast mode [ 153.745323][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 153.803031][ T9974] tipc: Resetting bearer [ 153.813208][ T9970] tipc: Resetting bearer [ 153.830283][ T9970] tipc: Disabling bearer [ 153.858103][ T9983] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 153.980447][ T9989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.989648][ T9992] netlink: 'syz.4.1185': attribute type 21 has an invalid length. [ 153.989728][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.989930][ T9992] netlink: 'syz.4.1185': attribute type 21 has an invalid length. [ 153.989968][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.990176][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 153.992686][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 154.202817][T10001] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1191'. [ 154.256481][T10001] pim6reg1: entered promiscuous mode [ 154.270073][T10001] pim6reg1: entered allmulticast mode [ 154.424838][T10018] openvswitch: netlink: IP tunnel dst address not specified [ 154.595536][T10032] validate_nla: 2 callbacks suppressed [ 154.595553][T10032] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 154.636843][T10032] netlink: 'syz.2.1201': attribute type 1 has an invalid length. [ 154.681253][T10040] nbd: illegal input index -8454144 [ 154.829005][T10043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.209389][T10078] siw: device registration error -23 [ 155.273045][T10085] : entered promiscuous mode [ 155.288767][T10087] netlink: 'syz.4.1218': attribute type 3 has an invalid length. [ 155.838681][T10122] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 155.863787][T10122] netlink: 'syz.2.1231': attribute type 2 has an invalid length. [ 155.961225][T10131] netlink: 'syz.2.1235': attribute type 39 has an invalid length. [ 156.215623][T10145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 156.274214][T10151] openvswitch: netlink: Unknown nsh attribute 0 [ 156.326564][T10151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.441688][T10166] pimreg: left allmulticast mode [ 157.108548][T10202] ip6gretap0: entered promiscuous mode [ 157.852814][T10242] __nla_validate_parse: 17 callbacks suppressed [ 157.852832][T10242] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1271'. [ 157.983210][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'. [ 158.008347][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.100463][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 158.118048][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 158.449351][T10283] 8021q: VLANs not supported on ip6_vti0 [ 158.630471][T10303] tunl0: left promiscuous mode [ 158.671476][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 158.692700][T10297] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 158.707638][T10311] IPVS: set_ctl: invalid protocol: 43 172.30.0.1:20000 [ 158.737810][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.757659][T10303] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.770610][T10303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.822104][T10306] wg1 speed is unknown, defaulting to 1000 [ 158.899768][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1291'. [ 158.909218][T10323] netlink: 'syz.2.1291': attribute type 7 has an invalid length. [ 158.917775][T10323] netlink: 'syz.2.1291': attribute type 8 has an invalid length. [ 158.928213][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 159.192241][T10330] syzkaller1: entered promiscuous mode [ 159.198596][T10330] syzkaller1: entered allmulticast mode [ 159.471711][T10334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 159.645582][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1298'. [ 159.755716][ T1103] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 159.815639][T10358] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1299'. [ 159.827702][T10346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.827968][T10358] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 159.849913][T10362] netlink: 'syz.0.1300': attribute type 23 has an invalid length. [ 159.930210][T10363] netlink: 'syz.0.1300': attribute type 23 has an invalid length. [ 160.000984][T10376] vcan0: tx drop: invalid da for name 0x0000000200000000 [ 160.853626][T10408] gretap0: entered promiscuous mode [ 160.883194][T10408] 0{X: renamed from gretap0 [ 160.894492][T10408] 0{X: left promiscuous mode [ 160.914886][T10408] 0{X: entered allmulticast mode [ 160.922246][T10408] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 161.036944][T10423] netlink: 'syz.2.1316': attribute type 21 has an invalid length. [ 161.130661][T10427] netlink: 'syz.0.1317': attribute type 21 has an invalid length. [ 161.145710][T10427] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 161.153828][T10427] netlink: 'syz.0.1317': attribute type 5 has an invalid length. [ 161.165163][T10427] netlink: 'syz.0.1317': attribute type 21 has an invalid length. [ 161.203746][T10427] netlink: 'syz.0.1317': attribute type 4 has an invalid length. [ 161.226940][T10427] netlink: 'syz.0.1317': attribute type 5 has an invalid length. [ 161.532425][T10462] netlink: 'syz.0.1328': attribute type 21 has an invalid length. [ 162.221442][T10487] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 162.231225][T10487] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 162.616834][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.624734][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.722659][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.754181][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.951018][T10518] syzkaller0: entered promiscuous mode [ 162.957404][T10518] syzkaller0: entered allmulticast mode [ 162.978400][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.996300][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.014437][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.058274][T10525] __nla_validate_parse: 17 callbacks suppressed [ 163.058292][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1345'. [ 163.071748][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.374034][ T49] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 163.428698][T10552] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1352'. [ 164.265492][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1354'. [ 164.518308][T10578] Bluetooth: MGMT ver 1.23 [ 164.620849][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'. [ 164.651135][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 164.699692][T10584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 164.750870][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 164.878342][T10597] bridge_slave_1: left allmulticast mode [ 164.896666][T10597] bridge_slave_1: left promiscuous mode [ 164.919055][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.941581][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 164.960673][T10597] bridge_slave_0: left allmulticast mode [ 164.972258][T10597] bridge_slave_0: left promiscuous mode [ 164.978142][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.049990][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1374'. [ 165.530635][T10642] tipc: Enabled bearer , priority 10 [ 165.539934][T10641] tipc: Enabled bearer , priority 0 [ 165.647424][T10641] syzkaller0: entered promiscuous mode [ 165.672016][T10641] syzkaller0: entered allmulticast mode [ 165.686262][T10641] tipc: Resetting bearer [ 165.706590][T10641] tipc: Enabling of bearer rejected, already enabled [ 165.721165][T10639] tipc: Resetting bearer [ 166.544761][ T5932] tipc: Node number set to 3454863227 [ 167.082582][T10639] tipc: Disabling bearer [ 167.100411][T10655] ipvlan2: entered promiscuous mode [ 167.236778][T10674] validate_nla: 3 callbacks suppressed [ 167.236796][T10674] netlink: 'syz.3.1393': attribute type 29 has an invalid length. [ 167.491879][T10697] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1401'. [ 167.530801][T10700] wg1 speed is unknown, defaulting to 1000 [ 167.661129][T10708] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 167.733270][ T5878] block nbd2: Receive control failed (result -32) [ 167.861865][T10712] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 167.951690][T10712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.013390][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.035939][T10721] bond3: (slave wlan0): Enslaving as an active interface with a down link [ 168.062491][T10702] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 168.092833][T10712] vlan1: entered allmulticast mode [ 168.104190][T10712] veth1: entered allmulticast mode [ 168.110939][T10712] bond3: (slave vlan1): Opening slave failed [ 168.522130][T10753] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1418'. [ 168.560245][T10756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1416'. [ 168.577801][T10755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.748966][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 168.827436][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.828583][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 168.880949][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.902822][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.921009][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.969520][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1423'. [ 169.037121][T10772] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1423'. [ 169.189742][T10786] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 169.222262][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 169.245968][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1428'. [ 169.293315][T10790] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1429'. [ 169.434046][T10801] sctp: [Deprecated]: syz.4.1434 (pid 10801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.434046][T10801] Use struct sctp_sack_info instead [ 169.448201][T10799] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 169.451502][T10803] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 169.470823][T10803] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 169.496312][T10803] netlink: 'syz.0.1431': attribute type 2 has an invalid length. [ 169.542644][T10803] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 169.551725][T10803] netlink: 'syz.0.1431': attribute type 2 has an invalid length. [ 169.569612][T10803] netlink: 'syz.0.1431': attribute type 1 has an invalid length. [ 169.608542][T10816] vcan0: mtu less than device minimum [ 169.693013][T10823] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 169.703291][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 169.763583][T10823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.102121][T10852] mac80211_hwsim hwsim6 : renamed from wlan1 [ 170.570913][T10869] netlink: 'syz.0.1454': attribute type 29 has an invalid length. [ 170.999750][T10901] xfrm1: entered promiscuous mode [ 171.013792][T10901] xfrm1: entered allmulticast mode [ 171.102663][T10910] bridge_slave_0: invalid flags given to default FDB implementation [ 171.399444][T10940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.628623][T10958] batman_adv: batadv0: Adding interface: team0 [ 171.635059][T10962] sctp: [Deprecated]: syz.1.1479 (pid 10962) Use of int in max_burst socket option. [ 171.635059][T10962] Use struct sctp_assoc_value instead [ 171.652502][T10958] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.678065][T10958] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 172.178726][T10995] netlink: zone id is out of range [ 172.189025][T10995] netlink: zone id is out of range [ 172.200846][T10995] netlink: zone id is out of range [ 172.215723][T10995] netlink: zone id is out of range [ 172.224226][T10995] netlink: zone id is out of range [ 172.294442][T10993] validate_nla: 4 callbacks suppressed [ 172.294458][T10993] netlink: 'syz.3.1490': attribute type 15 has an invalid length. [ 172.356062][ T153] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.367336][T10993] netlink: 'syz.3.1490': attribute type 15 has an invalid length. [ 172.397299][ T1103] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.414577][T11006] netlink: 'syz.0.1493': attribute type 22 has an invalid length. [ 172.432852][ T1103] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 172.522839][ T1103] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.522916][T11006] netlink: 'syz.0.1493': attribute type 22 has an invalid length. [ 172.546483][ T1103] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.587458][T11018] sctp: [Deprecated]: syz.4.1498 (pid 11018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.587458][T11018] Use struct sctp_sack_info instead [ 172.616865][ T1103] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.625840][ T1103] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.787460][T11018] geneve2: entered promiscuous mode [ 172.793208][T11018] geneve2: entered allmulticast mode [ 172.802311][ T3485] netdevsim netdevsim4 : set [1, 1] type 2 family 0 port 19999 - 0 [ 172.824171][ T3485] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 172.854157][T11033] gre0: entered promiscuous mode [ 172.949207][T11018] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.000688][ T3485] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.012619][T11025] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 173.072489][T11040] vxcan3: entered promiscuous mode [ 173.928656][T11067] __nla_validate_parse: 25 callbacks suppressed [ 173.928975][T11067] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1512'. [ 174.022880][T11070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1513'. [ 174.686712][T11018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.700828][T11018] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 174.747064][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 174.756151][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1522'. [ 174.939837][T11018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.950815][T11018] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.032602][T11018] netdevsim netdevsim4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.043228][T11018] netdevsim netdevsim4 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 175.067506][ T5878] block nbd3: Receive control failed (result -32) [ 175.158025][T11119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1529'. [ 175.262105][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 175.291459][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 175.347761][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 175.367396][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 175.400804][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 175.419158][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 175.447465][T11134] net_ratelimit: 23 callbacks suppressed [ 175.447481][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.457333][ T153] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 175.479655][ T153] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 175.481184][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.509933][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.529712][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.543040][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.550943][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.559095][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.573350][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.586694][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.596294][T11134] openvswitch: netlink: IPv4 tunnel dst address is zero [ 175.633537][ T7903] IPVS: starting estimator thread 0... [ 175.725179][T11149] IPVS: using max 25 ests per chain, 60000 per kthread [ 175.814332][T11158] netlink: 'syz.4.1543': attribute type 1 has an invalid length. [ 175.843267][T11158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 176.022429][T11164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1545'. [ 176.286289][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 176.404150][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.424418][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.676157][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 176.755150][T11227] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 176.873757][T11233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1565'. [ 176.890585][T11227] netlink: 'syz.0.1563': attribute type 7 has an invalid length. [ 177.119593][ T30] audit: type=1107 audit(1757388993.043:4): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1Rʸ;b.өOP@p [ 177.119593][ T30] $w [ 177.119593][ T30] nqPĒ'Ju yj[ pU}O|K&VEۇ5LvgϢ>?J0k8".7<8k"w9Nf!*r4\\ZMtٹJbOr/kRxu+Uu*"f`l`UIlWY8;b\l>?9i K|8}zwμ&P? ' [ 177.332469][T11269] IPv6: sit3: Disabled Multicast RS [ 177.341305][T11269] sit3: entered allmulticast mode [ 177.562534][T11285] team0: No ports can be present during mode change [ 177.572921][T11283] netlink: 'syz.2.1581': attribute type 11 has an invalid length. [ 177.763095][T11297] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.118977][T11323] netlink: 'syz.1.1594': attribute type 1 has an invalid length. [ 178.127642][T11325] netem: incorrect gi model size [ 178.142131][T11325] netem: change failed [ 178.221003][T11328] netlink: 'syz.4.1597': attribute type 4 has an invalid length. [ 178.234205][T11329] nbd: nbd1 already in use [ 178.249736][T11329] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 178.343604][T11336] bridge0: port 3(syz_tun) entered blocking state [ 178.355121][T11336] bridge0: port 3(syz_tun) entered disabled state [ 178.366939][T11336] syz_tun: entered allmulticast mode [ 178.380949][T11336] syz_tun: entered promiscuous mode [ 178.476674][T11340] vlan2: entered allmulticast mode [ 178.483109][T11340] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 178.506893][T11343] netlink: 'syz.3.1600': attribute type 4 has an invalid length. [ 178.822235][T11353] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 178.834050][T11353] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 178.951583][T11355] __nla_validate_parse: 10 callbacks suppressed [ 178.951600][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 178.970531][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 178.984823][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1605'. [ 179.000469][T11355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 179.015352][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1605'. [ 179.321561][T11386] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.380858][T11380] bridge0: port 3(syz_tun) entered blocking state [ 179.388205][T11380] bridge0: port 3(syz_tun) entered forwarding state [ 179.395226][T11380] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.402354][T11380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.451833][T11381] lo: entered promiscuous mode [ 179.463011][T11381] gre0: entered promiscuous mode [ 179.476238][T11381] gretap0: entered promiscuous mode [ 179.481607][T11381] erspan0: entered promiscuous mode [ 179.511121][T11396] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1617'. [ 179.523099][T11381] ip_vti0: entered promiscuous mode [ 179.551116][T11381] ip6_vti0: entered promiscuous mode [ 179.576347][T11381] sit0: entered promiscuous mode [ 179.581461][T11381] ip6tnl0: entered promiscuous mode [ 179.614977][T11381] ip6gre0: entered promiscuous mode [ 179.620427][T11381] ip6gretap0: entered promiscuous mode [ 179.646578][T11381] bond0: entered promiscuous mode [ 179.662074][T11381] bond_slave_0: entered promiscuous mode [ 179.671007][T11381] bond_slave_1: entered promiscuous mode [ 179.682329][T11381] dummy0: entered promiscuous mode [ 179.689514][T11381] nlmon0: entered promiscuous mode [ 179.699822][T11381] caif0: entered promiscuous mode [ 179.707225][T11381] batadv0: entered promiscuous mode [ 179.712666][T11381] vxcan0: entered promiscuous mode [ 179.723484][T11381] vxcan1: entered promiscuous mode [ 179.729194][T11381] veth0: entered promiscuous mode [ 179.734453][T11381] veth1: entered promiscuous mode [ 179.745656][T11381] wg0: entered promiscuous mode [ 179.750687][T11381] wg1: entered promiscuous mode [ 179.761079][T11381] wg2: entered promiscuous mode [ 179.766874][T11381] veth0_to_bridge: entered promiscuous mode [ 179.773004][T11381] bridge_slave_0: entered promiscuous mode [ 179.783602][T11381] veth1_to_bridge: entered promiscuous mode [ 179.790666][T11381] bridge_slave_1: entered promiscuous mode [ 179.801452][T11381] veth0_to_bond: entered promiscuous mode [ 179.809077][T11381] veth1_to_bond: entered promiscuous mode [ 179.819736][T11381] veth0_to_team: entered promiscuous mode [ 179.827227][T11381] team_slave_0: entered promiscuous mode [ 179.833030][T11381] veth1_to_team: entered promiscuous mode [ 179.839856][T11381] team_slave_1: entered promiscuous mode [ 179.846149][T11381] veth0_to_batadv: entered promiscuous mode [ 179.852273][T11381] batadv_slave_0: entered promiscuous mode [ 179.859115][T11381] veth1_to_batadv: entered promiscuous mode [ 179.870504][T11381] batadv_slave_1: entered promiscuous mode [ 179.877705][T11381] xfrm0: entered promiscuous mode [ 179.882890][T11381] veth1_to_hsr: entered promiscuous mode [ 179.894202][T11381] hsr0: entered promiscuous mode [ 179.900632][T11381] veth1_virt_wifi: entered promiscuous mode [ 179.911348][T11381] veth0_virt_wifi: entered promiscuous mode [ 179.918812][T11381] vlan0: entered promiscuous mode [ 179.924209][T11381] vlan1: entered promiscuous mode [ 179.935550][T11381] macvlan0: entered promiscuous mode [ 179.941045][T11381] macvlan1: entered promiscuous mode [ 179.951108][T11381] ipvlan0: entered promiscuous mode [ 179.958069][T11381] ipvlan1: entered promiscuous mode [ 179.964001][T11381] macvtap0: entered promiscuous mode [ 179.979538][T11381] macsec0: entered promiscuous mode [ 179.986921][T11381] geneve0: entered promiscuous mode [ 179.992288][T11381] geneve1: entered promiscuous mode [ 180.001716][T11381] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 180.011043][T11381] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 180.022552][T11381] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 180.032246][T11381] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 180.043782][T11381] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 180.059204][T11381] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 180.067980][T11381] ipvlan2: entered promiscuous mode [ 180.073353][T11381] bond1: left allmulticast mode [ 180.084138][T11381] macvlan2: entered promiscuous mode [ 180.090558][T11381] bridge1: entered promiscuous mode [ 180.101969][T11381] ip6erspan0: entered promiscuous mode [ 180.107944][T11381] gre1: entered promiscuous mode [ 180.113025][T11381] bridge2: entered promiscuous mode [ 180.124003][T11381] bond2: left allmulticast mode [ 180.129652][T11381] bridge3: entered promiscuous mode [ 180.140791][T11381] bridge4: entered promiscuous mode [ 180.146317][T11381] erspan1: entered promiscuous mode [ 180.152663][T11381] bond3: entered promiscuous mode [ 180.158161][T11381] veth2: entered promiscuous mode [ 180.163516][T11381] veth3: entered promiscuous mode [ 180.169514][T11381] vlan2: left allmulticast mode [ 180.174558][T11381] bond4: left allmulticast mode [ 180.181832][T11381] gretap1: left allmulticast mode [ 180.187401][T11381] mac80211_hwsim hwsim18 wlan2: entered promiscuous mode [ 180.194576][T11381] mac80211_hwsim hwsim19 wlan3: entered promiscuous mode [ 180.202221][T11381] ip6tnl1: entered promiscuous mode [ 180.208535][T11381] bridge0: entered promiscuous mode [ 180.214081][T11381] bridge5: entered promiscuous mode [ 180.221706][T11381] @: entered promiscuous mode [ 180.232377][T11381] syztnl0: entered promiscuous mode [ 180.238246][T11381] bond5: entered promiscuous mode [ 180.243580][T11387] veth0: entered promiscuous mode [ 180.252204][ T3485] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.275832][ T3485] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.290807][T11390] veth0: left promiscuous mode [ 180.296672][ T3485] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.317115][ T3485] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.421101][T11415] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1624'. [ 180.432421][T11418] syzkaller0: entered promiscuous mode [ 180.441193][T11415] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 180.452585][T11418] syzkaller0: entered allmulticast mode [ 180.462721][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 180.537284][T11418] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 180.597741][T11430] sch_fq: defrate 0 ignored. [ 180.734584][T11435] net_ratelimit: 26 callbacks suppressed [ 180.734600][T11435] IPv4: Oversized IP packet from 172.20.20.24 [ 180.747779][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 180.754336][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 180.815937][T11445] vcan0: entered allmulticast mode [ 181.320673][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 181.670306][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 181.958657][T11517] netlink: 'syz.2.1653': attribute type 12 has an invalid length. [ 181.959746][T11515] netlink: 'syz.4.1651': attribute type 2 has an invalid length. [ 182.293043][T11537] netlink: 'syz.1.1659': attribute type 24 has an invalid length. [ 182.445660][T11545] syzkaller0: entered promiscuous mode [ 182.451252][T11545] syzkaller0: entered allmulticast mode [ 182.485383][T11555] netlink: 'syz.3.1666': attribute type 10 has an invalid length. [ 182.539036][T11557] netlink: 'syz.1.1667': attribute type 26 has an invalid length. [ 182.607558][T11560] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 183.776732][T11555] batman_adv: batadv0: Adding interface: virt_wifi0 [ 183.783444][T11555] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.809910][T11555] batman_adv: batadv0: Interface activated: virt_wifi0 [ 183.998416][T11578] __nla_validate_parse: 9 callbacks suppressed [ 183.998433][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.025818][T11578] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.036999][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.072752][T11577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.082054][T11577] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.091256][T11577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 184.113871][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 184.127238][T11589] bond6: entered promiscuous mode [ 184.132305][T11589] bond6: entered allmulticast mode [ 184.145701][T11589] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.333183][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 184.352296][T11596] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1676'. [ 184.538481][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1682'. [ 184.649529][T11619] netlink: 'syz.3.1685': attribute type 12 has an invalid length. [ 185.226664][T11673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.490757][T11685] svc: failed to register nfsdv3 RPC service (errno 111). [ 185.512469][T11685] svc: failed to register nfsaclv3 RPC service (errno 111). [ 186.219339][T11723] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 186.245147][T11723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.574357][T11756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.971068][T11780] netlink: 'syz.1.1732': attribute type 33 has an invalid length. [ 187.005852][T11776] block nbd0: NBD_DISCONNECT [ 187.010554][T11776] block nbd0: Send disconnect failed -32 [ 187.031200][T11776] block nbd0: shutting down sockets [ 187.179250][T11794] netlink: 'syz.4.1736': attribute type 13 has an invalid length. [ 187.247559][T11796] sctp: [Deprecated]: syz.0.1737 (pid 11796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.247559][T11796] Use struct sctp_sack_info instead [ 187.278365][T11794] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.285578][T11794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.339760][T11794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.342449][T11806] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 187.369891][T11806] netlink: 'syz.0.1740': attribute type 1 has an invalid length. [ 187.667653][T11825] netlink: 'syz.3.1747': attribute type 11 has an invalid length. [ 187.708935][T11831] netlink: 'syz.4.1748': attribute type 4 has an invalid length. [ 188.248026][T11874] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 188.548608][T11900] netlink: 'syz.2.1766': attribute type 10 has an invalid length. [ 188.572993][T11900] dummy0: entered promiscuous mode [ 188.590523][ T5871] IPVS: starting estimator thread 0... [ 188.591824][T11900] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 188.671457][T11907] netlink: 'syz.4.1769': attribute type 2 has an invalid length. [ 188.704735][T11905] IPVS: using max 28 ests per chain, 67200 per kthread [ 188.705301][T11907] nbd: illegal input index 393220 [ 188.893575][T11921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.898201][T11918] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 188.909763][T11918] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 189.358277][T11930] team0: Device wireguard0 is of different type [ 189.471136][T11936] __nla_validate_parse: 18 callbacks suppressed [ 189.471153][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 189.586401][T11949] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 189.632751][T11951] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1784'. [ 189.726109][T11936] vlan0 (unregistering): left allmulticast mode [ 189.732441][T11936] veth0_vlan (unregistering): left allmulticast mode [ 189.739743][T11936] vlan0 (unregistering): left promiscuous mode [ 190.510932][T11979] tipc: Enabled bearer , priority 0 [ 190.519935][T11980] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 190.575366][T11983] syzkaller0: entered promiscuous mode [ 190.580864][T11983] syzkaller0: entered allmulticast mode [ 190.682990][T11963] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1788'. [ 191.195189][T11999] tipc: Resetting bearer [ 191.268190][T11974] tipc: Resetting bearer [ 191.582023][T11974] tipc: Disabling bearer [ 191.620293][T12006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.697155][ T1109] bond3: (slave wlan0): failed to get link speed/duplex [ 191.790024][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'. [ 191.846245][ T1109] bond3: (slave wlan0): failed to get link speed/duplex [ 191.846919][T12029] sock: sock_set_timeout: `syz.3.1806' (pid 12029) tries to set negative timeout [ 191.871736][T12029] netlink: 'syz.3.1806': attribute type 1 has an invalid length. [ 191.885162][T12030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1803'. [ 191.954725][T12034] sctp: [Deprecated]: syz.2.1808 (pid 12034) Use of int in max_burst socket option. [ 191.954725][T12034] Use struct sctp_assoc_value instead [ 191.978345][ T1109] bond3: (slave wlan0): failed to get link speed/duplex [ 192.125696][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 192.242865][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 192.366160][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 192.402327][T12064] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 192.487419][ T1109] bond3: (slave wlan0): failed to get link speed/duplex [ 192.570935][T12073] netlink: 'syz.3.1820': attribute type 11 has an invalid length. [ 192.590263][T12075] netlink: 'syz.3.1820': attribute type 11 has an invalid length. [ 192.604900][ T1109] bond3: (slave wlan0): failed to get link speed/duplex [ 192.640440][T12077] netlink: 'syz.1.1821': attribute type 12 has an invalid length. [ 192.746137][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 192.868660][T12095] tipc: Enabled bearer , priority 0 [ 192.885645][T12095] syzkaller0: entered promiscuous mode [ 192.906343][T12095] syzkaller0: entered allmulticast mode [ 193.028616][T12103] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1826'. [ 193.041554][T12094] tipc: Resetting bearer [ 193.083665][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1828'. [ 193.094563][T12094] tipc: Disabling bearer [ 193.152400][T12107] batman_adv: batadv0: Adding interface: dummy0 [ 193.159699][T12107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.186478][T12107] batman_adv: batadv0: Interface activated: dummy0 [ 193.204000][T12111] bridge0: port 3(syz_tun) entered disabled state [ 193.228163][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.278760][T12113] netlink: 'syz.1.1830': attribute type 16 has an invalid length. [ 193.314764][T12113] netlink: 'syz.1.1830': attribute type 17 has an invalid length. [ 193.442597][T12113] gre0: left promiscuous mode [ 193.474601][T12113] bridge0: port 3(syz_tun) entered blocking state [ 193.481211][T12113] bridge0: port 3(syz_tun) entered forwarding state [ 193.601284][T12130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1834'. [ 193.633976][T12134] netlink: 'syz.3.1836': attribute type 21 has an invalid length. [ 193.642665][T12134] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1836'. [ 193.653499][T12134] netlink: 'syz.3.1836': attribute type 5 has an invalid length. [ 193.667807][T12134] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1836'. [ 193.678659][T12135] netlink: 'syz.0.1834': attribute type 3 has an invalid length. [ 193.812097][T12142] tipc: Enabling of bearer rejected, failed to enable media [ 194.117007][T12161] nbd: couldn't find a device at index -373156329 [ 194.154308][T12164] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 194.214073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.222312][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.664408][T12184] __nla_validate_parse: 3 callbacks suppressed [ 194.664423][T12184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1856'. [ 194.678265][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1857'. [ 195.005740][T12206] dvmrp1: entered allmulticast mode [ 195.029038][T12209] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 195.148235][T12209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.172735][T12217] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1867'. [ 195.269270][T12213] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1864'. [ 195.278825][T12213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1864'. [ 195.372847][T12229] wg1 speed is unknown, defaulting to 1000 [ 195.644447][T12245] syzkaller1: entered promiscuous mode [ 195.655957][T12245] syzkaller1: entered allmulticast mode [ 195.682626][T12246] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1875'. [ 195.715324][T12246] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1875'. [ 195.877982][T12258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 195.882690][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1878'. [ 196.038186][T12263] tipc: Enabled bearer , priority 0 [ 196.082786][T12263] syzkaller0: entered promiscuous mode [ 196.125165][T12263] syzkaller0: entered allmulticast mode [ 196.213045][T12280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1884'. [ 196.232101][T12274] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 196.291760][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 196.293153][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 196.299242][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 196.382288][T12274] tipc: Resetting bearer [ 196.755500][ T59] net_ratelimit: 49 callbacks suppressed [ 196.755520][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 196.794174][T12262] tipc: Resetting bearer [ 196.826441][T12262] tipc: Disabling bearer [ 196.874746][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 196.984794][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 197.095036][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 197.215764][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 197.330392][T12339] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 197.390159][T12336] syzkaller0: entered promiscuous mode [ 197.399576][T12336] syzkaller0: entered allmulticast mode [ 197.487564][T12339] 8021q: adding VLAN 0 to HW filter on device bond8 [ 197.500798][T12339] bond7: (slave bond8): making interface the new active one [ 197.510883][T12339] bond7: (slave bond8): Enslaving as an active interface with an up link [ 197.526806][T12336] tipc: Enabled bearer , priority 0 [ 197.580010][T12351] bond7: (slave gretap4): Enslaving as a backup interface with an up link [ 197.593171][T12339] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.720183][T12353] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 197.756279][T12351] bridge_slave_0: left allmulticast mode [ 197.762063][T12351] bridge_slave_0: left promiscuous mode [ 197.769524][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.786720][T12351] bond0: (slave bond_slave_0): Releasing backup interface [ 197.804296][T12351] bond0: (slave bond_slave_1): Releasing backup interface [ 197.851105][T12351] team0: Port device team_slave_0 removed [ 197.875302][T12351] team0: Port device team_slave_1 removed [ 197.890876][T12351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.900826][T12351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.910196][T12351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.918209][T12351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.932429][T12351] bond7: (slave bond8): Releasing backup interface [ 197.942601][T12351] bond7: (slave bond8): the permanent HWaddr of slave - d6:f3:86:5e:34:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 197.960980][T12351] bond7: (slave gretap4): making interface the new active one [ 197.975645][T12351] bond7: (slave gretap4): Releasing backup interface [ 198.050569][T12329] tipc: Resetting bearer [ 198.090832][T12329] tipc: Disabling bearer [ 198.151226][ T5871] syz!: Port: 1 Link DOWN [ 198.175676][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 198.320353][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 198.455288][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 198.598439][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 198.721452][T12414] openvswitch: netlink: Message has 5 unknown bytes. [ 198.875524][T12424] pim6reg1: entered promiscuous mode [ 198.885495][T12424] pim6reg1: entered allmulticast mode [ 198.937951][T12428] netlink: 'syz.1.1916': attribute type 11 has an invalid length. [ 198.956558][T12427] netlink: 'syz.1.1916': attribute type 11 has an invalid length. [ 199.133073][T12441] wg1 speed is unknown, defaulting to 1000 [ 199.188940][T12447] batman_adv: batadv0: Removing interface: team0 [ 199.208826][T12447] bridge_slave_0: left allmulticast mode [ 199.214600][T12447] bridge_slave_0: left promiscuous mode [ 199.239481][T12447] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.363066][T12447] bridge_slave_1: left allmulticast mode [ 199.369138][T12447] bridge_slave_1: left promiscuous mode [ 199.385100][T12447] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.406336][T12460] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.420837][T12447] bond0: (slave bond_slave_0): Releasing backup interface [ 199.435385][T12447] bond0: (slave bond_slave_1): Releasing backup interface [ 199.448229][T12447] team0: Port device team_slave_0 removed [ 199.455672][T12447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.472461][T12447] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 199.482582][T12447] batman_adv: batadv0: Removing interface: virt_wifi0 [ 199.492073][T12447] bond2: (slave bridge1): Releasing active interface [ 199.673537][T12473] __nla_validate_parse: 113 callbacks suppressed [ 199.673555][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1929'. [ 199.673644][T12474] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 199.697967][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1930'. [ 199.718960][T12474] dummy0: entered promiscuous mode [ 199.734420][T12474] bridge0: port 1(dummy0) entered blocking state [ 199.746727][T12474] bridge0: port 1(dummy0) entered disabled state [ 199.758849][T12474] dummy0: entered allmulticast mode [ 199.832590][T12484] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 199.843125][T12484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1933'. [ 199.983172][T12497] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 200.013807][T12498] netlink: 'syz.0.1935': attribute type 8 has an invalid length. [ 200.060205][T12500] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 200.086608][T12500] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.102298][T12500] bond0: (slave team0): Enslaving as an active interface with an up link [ 200.133469][T12503] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 200.699225][T12531] netem: change failed [ 200.757277][T12533] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.815839][T12536] netlink: 'syz.1.1949': attribute type 1 has an invalid length. [ 200.831195][T12533] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.904074][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 201.152474][T12562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1953'. [ 201.162988][T12561] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1955'. [ 201.437442][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1962'. [ 201.618074][T12590] syzkaller0: entered allmulticast mode [ 201.874820][ T1103] net_ratelimit: 26 callbacks suppressed [ 201.874839][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 201.986580][T12608] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 201.999816][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 202.114756][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 202.229284][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 202.421384][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 202.595691][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 202.986036][T12675] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1988'. [ 204.215637][ T153] bond3: (slave wlan0): failed to get link speed/duplex [ 204.334771][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 204.360322][T12693] netlink: 'syz.3.1993': attribute type 6 has an invalid length. [ 204.456238][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 204.604814][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 204.829712][T12722] __nla_validate_parse: 1 callbacks suppressed [ 204.829730][T12722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2001'. [ 204.967923][T12722] syzkaller0: entered promiscuous mode [ 204.992043][T12722] syzkaller0: entered allmulticast mode [ 205.018759][T12737] tipc: Enabled bearer , priority 0 [ 205.053595][T12721] tipc: Resetting bearer [ 206.488703][T12721] tipc: Disabling bearer [ 206.574606][T12765] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 206.670769][T12773] syz_tun: left allmulticast mode [ 206.683197][T12773] syz_tun: left promiscuous mode [ 206.704938][T12773] bridge0: port 3(syz_tun) entered disabled state [ 206.763416][T12773] bond0: (slave team0): Releasing backup interface [ 206.836711][T12773] bridge_slave_0: left allmulticast mode [ 206.842482][T12773] bridge_slave_0: left promiscuous mode [ 206.859840][T12773] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.918200][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.953075][T12773] bond0: (slave bond_slave_0): Releasing backup interface [ 206.973107][T12773] bond0: (slave bond_slave_1): Releasing backup interface [ 206.998011][T12773] team0: Port device team_slave_0 removed [ 207.011552][T12773] team0: Port device team_slave_1 removed [ 207.018154][T12773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.025709][T12773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.033927][T12773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.041769][T12773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.075441][ T59] net_ratelimit: 5 callbacks suppressed [ 207.075460][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 207.220062][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2021'. [ 207.239942][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 207.264052][T12812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2022'. [ 207.316473][T12812] ip6erspan0: entered promiscuous mode [ 207.367309][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 207.443633][T12831] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2027'. [ 207.482220][T12833] netlink: zone id is out of range [ 207.487489][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 207.516659][T12833] netlink: zone id is out of range [ 207.528422][T12837] bond0: entered allmulticast mode [ 207.534290][T12837] bond_slave_0: entered allmulticast mode [ 207.543031][T12837] bond_slave_1: entered allmulticast mode [ 207.581291][T12833] netlink: zone id is out of range [ 207.596383][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 207.598915][T12833] netlink: zone id is out of range [ 207.619481][T12833] netlink: zone id is out of range [ 207.754515][T12854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 208.120822][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 208.149829][T12872] !: renamed from dummy0 (while UP) [ 208.921180][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2048'. [ 209.073288][T12905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2052'. [ 209.095125][T12905] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 209.108863][T12905] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 209.119162][T12905] gretap2: entered promiscuous mode [ 209.125203][T12905] gretap2: entered allmulticast mode [ 209.573215][T12925] clip:clip_setentry: non-CLIP VCC [ 209.576941][T12930] wg1 speed is unknown, defaulting to 1000 [ 209.579771][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2060'. [ 209.761285][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'. [ 210.145587][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 210.241635][T12953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2067'. [ 210.469968][T12958] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 210.532752][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2069'. [ 210.547579][T12959] netlink: 'syz.3.2069': attribute type 30 has an invalid length. [ 210.589149][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 210.768865][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2071'. [ 211.431696][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 211.453766][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.464276][T13010] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 211.472660][T13010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2084'. [ 211.792254][T13021] tipc: Enabled bearer , priority 0 [ 211.800147][T13021] syzkaller0: entered promiscuous mode [ 211.806285][T13021] syzkaller0: entered allmulticast mode [ 211.828599][T13021] tipc: Resetting bearer [ 211.898750][T13027] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 211.926326][T13019] tipc: Resetting bearer [ 211.971249][T13019] tipc: Disabling bearer [ 212.050647][T13027] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.126363][T13024] [ 212.128726][T13024] ====================================================== [ 212.134219][T13028] bond6: (slave geneve2): making interface the new active one [ 212.135745][T13024] WARNING: possible circular locking dependency detected [ 212.135766][T13024] syzkaller #0 Not tainted [ 212.135775][T13024] ------------------------------------------------------ [ 212.135782][T13024] syz.3.2090/13024 is trying to acquire lock: [ 212.135793][T13024] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 212.135851][T13024] [ 212.135851][T13024] but task is already holding lock: [ 212.135858][T13024] ffff8881433ce2c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 212.135908][T13024] [ 212.135908][T13024] which lock already depends on the new lock. [ 212.135908][T13024] [ 212.135914][T13024] [ 212.135914][T13024] the existing dependency chain (in reverse order) is: [ 212.135921][T13024] [ 212.135921][T13024] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 212.135953][T13024] lock_acquire+0x120/0x360 [ 212.135974][T13024] blk_alloc_queue+0x538/0x620 [ 212.233115][T13024] __blk_mq_alloc_disk+0x15c/0x340 [ 212.238736][T13024] nbd_dev_add+0x46c/0xae0 [ 212.243665][T13024] nbd_init+0x168/0x1f0 [ 212.248330][T13024] do_one_initcall+0x233/0x820 [ 212.253607][T13024] do_initcall_level+0x104/0x190 [ 212.259055][T13024] do_initcalls+0x59/0xa0 [ 212.263898][T13024] kernel_init_freeable+0x334/0x4b0 [ 212.269602][T13024] kernel_init+0x1d/0x1d0 [ 212.274437][T13024] ret_from_fork+0x3fc/0x770 [ 212.279535][T13024] ret_from_fork_asm+0x1a/0x30 [ 212.284810][T13024] [ 212.284810][T13024] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 212.292008][T13024] lock_acquire+0x120/0x360 [ 212.297026][T13024] fs_reclaim_acquire+0x72/0x100 [ 212.302476][T13024] prepare_alloc_pages+0x153/0x610 [ 212.308091][T13024] __alloc_frozen_pages_noprof+0x123/0x370 [ 212.314401][T13024] __alloc_pages_noprof+0xa/0x30 [ 212.319842][T13024] pcpu_populate_chunk+0x182/0xb30 [ 212.325464][T13024] pcpu_alloc_noprof+0xcbf/0x16b0 [ 212.330999][T13024] bpf_map_alloc_percpu+0xbc/0x1b0 [ 212.336619][T13024] array_map_alloc+0x385/0x700 [ 212.341887][T13024] map_create+0xaa0/0x14d0 [ 212.346808][T13024] __sys_bpf+0x60f/0x870 [ 212.351556][T13024] __x64_sys_bpf+0x7c/0x90 [ 212.356479][T13024] do_syscall_64+0xfa/0x3b0 [ 212.361488][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.367883][T13024] [ 212.367883][T13024] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 212.375601][T13024] validate_chain+0xb9b/0x2140 [ 212.380868][T13024] __lock_acquire+0xab9/0xd20 [ 212.386051][T13024] lock_acquire+0x120/0x360 [ 212.391063][T13024] __mutex_lock+0x187/0x1350 [ 212.396157][T13024] pcpu_alloc_noprof+0x286/0x16b0 [ 212.401693][T13024] sbitmap_init_node+0x1e1/0x630 [ 212.407135][T13024] sbitmap_queue_init_node+0x3e/0x4d0 [ 212.413012][T13024] blk_mq_init_tags+0x110/0x280 [ 212.418370][T13024] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 212.424343][T13024] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 212.430651][T13024] nbd_start_device+0x17f/0xb10 [ 212.436015][T13024] nbd_genl_connect+0x135b/0x18f0 [ 212.441546][T13024] genl_family_rcv_msg_doit+0x215/0x300 [ 212.447596][T13024] genl_rcv_msg+0x60e/0x790 [ 212.452604][T13024] netlink_rcv_skb+0x205/0x470 [ 212.457875][T13024] genl_rcv+0x28/0x40 [ 212.462359][T13024] netlink_unicast+0x82c/0x9e0 [ 212.467631][T13024] netlink_sendmsg+0x805/0xb30 [ 212.472898][T13024] __sock_sendmsg+0x21c/0x270 [ 212.478084][T13024] ____sys_sendmsg+0x505/0x830 [ 212.483353][T13024] ___sys_sendmsg+0x21f/0x2a0 [ 212.488535][T13024] __x64_sys_sendmsg+0x19b/0x260 [ 212.493976][T13024] do_syscall_64+0xfa/0x3b0 [ 212.498984][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.505381][T13024] [ 212.505381][T13024] other info that might help us debug this: [ 212.505381][T13024] [ 212.515592][T13024] Chain exists of: [ 212.515592][T13024] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 212.515592][T13024] [ 212.529227][T13024] Possible unsafe locking scenario: [ 212.529227][T13024] [ 212.536660][T13024] CPU0 CPU1 [ 212.542011][T13024] ---- ---- [ 212.547355][T13024] lock(&q->q_usage_counter(io)#49); [ 212.552716][T13024] lock(fs_reclaim); [ 212.559203][T13024] lock(&q->q_usage_counter(io)#49); [ 212.567085][T13024] lock(pcpu_alloc_mutex); [ 212.571572][T13024] [ 212.571572][T13024] *** DEADLOCK *** [ 212.571572][T13024] [ 212.579695][T13024] 6 locks held by syz.3.2090/13024: [ 212.584871][T13024] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 212.593043][T13024] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 212.601987][T13024] #2: ffff8881437a0988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 212.613365][T13024] #3: ffff8881437a08d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 212.624311][T13024] #4: ffff8881433ce2c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 212.635005][T13024] #5: ffff8881433ce300 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 212.645958][T13024] [ 212.645958][T13024] stack backtrace: [ 212.651832][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.3.2090 Not tainted syzkaller #0 PREEMPT(full) [ 212.651848][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.651856][T13024] Call Trace: [ 212.651863][T13024] [ 212.651870][T13024] dump_stack_lvl+0x189/0x250 [ 212.651889][T13024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.651904][T13024] ? __pfx__printk+0x10/0x10 [ 212.651923][T13024] ? print_lock_name+0xde/0x100 [ 212.651940][T13024] print_circular_bug+0x2ee/0x310 [ 212.651957][T13024] check_noncircular+0x134/0x160 [ 212.651973][T13024] validate_chain+0xb9b/0x2140 [ 212.651994][T13024] __lock_acquire+0xab9/0xd20 [ 212.652013][T13024] ? pcpu_alloc_noprof+0x286/0x16b0 [ 212.652031][T13024] lock_acquire+0x120/0x360 [ 212.652048][T13024] ? pcpu_alloc_noprof+0x286/0x16b0 [ 212.652069][T13024] __mutex_lock+0x187/0x1350 [ 212.652082][T13024] ? pcpu_alloc_noprof+0x286/0x16b0 [ 212.652101][T13024] ? kasan_save_track+0x4f/0x80 [ 212.652117][T13024] ? kasan_save_track+0x3e/0x80 [ 212.652131][T13024] ? __kasan_kmalloc+0x93/0xb0 [ 212.652146][T13024] ? blk_mq_init_tags+0x85/0x280 [ 212.652160][T13024] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 212.652179][T13024] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 212.652192][T13024] ? pcpu_alloc_noprof+0x286/0x16b0 [ 212.652208][T13024] ? nbd_genl_connect+0x135b/0x18f0 [ 212.652225][T13024] ? genl_family_rcv_msg_doit+0x215/0x300 [ 212.652241][T13024] ? genl_rcv_msg+0x60e/0x790 [ 212.652256][T13024] ? __pfx___mutex_lock+0x10/0x10 [ 212.652267][T13024] ? ____sys_sendmsg+0x505/0x830 [ 212.652282][T13024] ? do_syscall_64+0xfa/0x3b0 [ 212.652294][T13024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.652312][T13024] pcpu_alloc_noprof+0x286/0x16b0 [ 212.652335][T13024] sbitmap_init_node+0x1e1/0x630 [ 212.652349][T13024] ? __kasan_kmalloc+0x93/0xb0 [ 212.652366][T13024] sbitmap_queue_init_node+0x3e/0x4d0 [ 212.652381][T13024] blk_mq_init_tags+0x110/0x280 [ 212.652397][T13024] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 212.652418][T13024] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 212.652431][T13024] ? kfree+0x18e/0x440 [ 212.652447][T13024] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 212.652467][T13024] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 212.652487][T13024] ? sysfs_add_file_mode_ns+0x259/0x300 [ 212.652508][T13024] nbd_start_device+0x17f/0xb10 [ 212.652528][T13024] ? device_create_file+0xf4/0x1c0 [ 212.652542][T13024] nbd_genl_connect+0x135b/0x18f0 [ 212.652562][T13024] ? __pfx_nbd_genl_connect+0x10/0x10 [ 212.652584][T13024] ? __nla_parse+0x40/0x60 [ 212.652603][T13024] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 212.652621][T13024] genl_family_rcv_msg_doit+0x215/0x300 [ 212.652639][T13024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 212.652659][T13024] ? stack_trace_save+0x9c/0xe0 [ 212.652681][T13024] genl_rcv_msg+0x60e/0x790 [ 212.652698][T13024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.652712][T13024] ? __pfx_nbd_genl_connect+0x10/0x10 [ 212.652733][T13024] netlink_rcv_skb+0x205/0x470 [ 212.652751][T13024] ? __lock_acquire+0xab9/0xd20 [ 212.652768][T13024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 212.652783][T13024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.652807][T13024] ? down_read+0x1ad/0x2e0 [ 212.652820][T13024] genl_rcv+0x28/0x40 [ 212.652833][T13024] netlink_unicast+0x82c/0x9e0 [ 212.652853][T13024] ? __pfx_netlink_unicast+0x10/0x10 [ 212.652870][T13024] ? netlink_sendmsg+0x642/0xb30 [ 212.652881][T13024] ? skb_put+0x11b/0x210 [ 212.652895][T13024] netlink_sendmsg+0x805/0xb30 [ 212.652910][T13024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.652923][T13024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.652937][T13024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.652950][T13024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.652963][T13024] __sock_sendmsg+0x21c/0x270 [ 212.652980][T13024] ____sys_sendmsg+0x505/0x830 [ 212.652996][T13024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.653013][T13024] ? import_iovec+0x74/0xa0 [ 212.653029][T13024] ___sys_sendmsg+0x21f/0x2a0 [ 212.653043][T13024] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.653068][T13024] ? __fget_files+0x2a/0x420 [ 212.653079][T13024] ? __fget_files+0x3a0/0x420 [ 212.653093][T13024] __x64_sys_sendmsg+0x19b/0x260 [ 212.653108][T13024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 212.653125][T13024] ? rcu_is_watching+0x15/0xb0 [ 212.653140][T13024] ? do_syscall_64+0xbe/0x3b0 [ 212.653153][T13024] do_syscall_64+0xfa/0x3b0 [ 212.653165][T13024] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.653182][T13024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.653195][T13024] ? clear_bhb_loop+0x60/0xb0 [ 212.653209][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.653223][T13024] RIP: 0033:0x7f6bd818ebe9 [ 212.653236][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.653248][T13024] RSP: 002b:00007f6bd63ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.653263][T13024] RAX: ffffffffffffffda RBX: 00007f6bd83c5fa0 RCX: 00007f6bd818ebe9 [ 212.653273][T13024] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 000000000000000c [ 212.653282][T13024] RBP: 00007f6bd8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.653291][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.653299][T13024] R13: 00007f6bd83c6038 R14: 00007f6bd83c5fa0 R15: 00007ffdda06eb38 [ 212.653315][T13024] [ 212.671238][T13028] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 212.682773][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 212.715665][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.762221][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 212.899352][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.926850][ T51] block nbd0: Receive control failed (result -32) [ 212.994954][ T5185] block nbd0: Receive control failed (result -32) [ 213.246995][T13024] nbd0: detected capacity change from 0 to 127 [ 213.253274][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.265833][T13036] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2091'. [ 213.293185][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.325516][ T1103] net_ratelimit: 47 callbacks suppressed [ 213.325536][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 213.444998][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 213.555084][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 213.664758][ T59] bond3: (slave wlan0): failed to get link speed/duplex [ 213.775082][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 213.884768][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 213.994819][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 214.104756][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 214.214814][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 214.324731][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 218.374947][ T13] net_ratelimit: 35 callbacks suppressed [ 218.374969][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 218.494844][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 218.604885][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 218.724920][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 218.835037][ T3485] bond3: (slave wlan0): failed to get link speed/duplex [ 218.944778][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 219.064862][ T12] bond3: (slave wlan0): failed to get link speed/duplex [ 219.174742][ T13] bond3: (slave wlan0): failed to get link speed/duplex [ 219.284743][ T1103] bond3: (slave wlan0): failed to get link speed/duplex [ 219.394934][ T13] bond3: (slave wlan0): failed to get link speed/duplex