last executing test programs: 4.868763206s ago: executing program 1 (id=2124): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/63, 0x12c000, 0x1000, 0x1000000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x5a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2, 0x0, r0}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x445, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800b000100765fd00d86d947ec7fcb26e065787468647200002400028008000340000024000800014000000013050002000000000008000440000000650900010073797a30000000000900020073797a32000000001400000011000100"], 0x8c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="ff68f18f346924f55edb4b7a1e76db27"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r6, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, &(0x7f0000000000)=0x2, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x10102, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r9, &(0x7f0000001800)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 4.451622067s ago: executing program 1 (id=2129): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x22000092}, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10, 0x0, 0xffffff92}, 0x30004000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000043) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 4.30848564s ago: executing program 1 (id=2132): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000600)=@ethtool_pauseparam={0x12, 0x7, 0x80, 0x81}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x1, @null, @bpq0, 0x7, 'syz0\x00', @bcast, 0x4, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_MARK={0x8, 0x10, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 2.784132776s ago: executing program 0 (id=2148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3c85127f, 0x4, 0xea9, 0x0, 0x7f130b6d, {0xa, 0x0, 0xfffd, 0x1, 0x3, 0x2}, {0xd, 0x2, 0x1, 0x7, 0x8001, 0x75a}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe49a, 0x0, 0x9d5, 0xdde, 0x0, 0x9, 0x6d77, 0x400, 0xff, 0xb, 0x5, 0x80, 0x38a7, 0xbdc9, 0x4, 0x90, 0x8, 0x8, 0x60, 0x7, 0x480000, 0x80000001, 0x1ff, 0x7ff, 0x1b, 0x7, 0x7, 0x2, 0xfffffff9, 0x8, 0x2, 0xb17, 0x3, 0x800, 0x3, 0xffff, 0xe, 0xe, 0x6, 0x2, 0x9, 0x200, 0xfffff943, 0x1ff, 0x7, 0x2, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9, 0x0, 0x10, 0x400, 0x0, 0x7, 0x1, 0x7, 0x3, 0x44, 0x7ff, 0x1, 0x43, 0x986, 0x7, 0xffffac79, 0xfff, 0x1, 0x7fffffff, 0x200, 0x2, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0xd, 0x3, 0x6, 0x40000, 0x8, 0x8001, 0x5, 0xab, 0x400, 0x1000, 0x1, 0x1, 0x9, 0xa373, 0x1b5, 0x6, 0x40, 0x8, 0x5, 0xb, 0x5, 0x6, 0x100, 0x100, 0x7, 0x35, 0x356, 0x2, 0xffffffff, 0x9, 0x8000, 0x7, 0xf37a, 0x6, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x80, 0x71f1, 0x7, 0xffffffff, 0x100, 0x8, 0x89, 0xe, 0x0, 0x9, 0x7, 0x7, 0xb, 0x8, 0xffff, 0xb, 0x8, 0xfff, 0xfd1d, 0x5, 0x4, 0x6, 0x81, 0x0, 0x80, 0xf, 0x5, 0x4, 0x80000001, 0x1, 0x6, 0x6, 0xc35, 0x6, 0x6, 0xb68, 0x7fffffff, 0x4, 0x1a, 0x7fffffff, 0x6, 0x9, 0x385d, 0x6, 0xcce, 0x4, 0x6, 0x80, 0x1000, 0x7, 0xfffffe01, 0x2, 0x7, 0x0, 0x8, 0x3, 0x8000, 0x6, 0x9, 0x2, 0x5, 0x7, 0x6, 0xf, 0x2, 0xfffffffb, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x800, 0x80000000, 0x5, 0xa5, 0x7, 0x3ff, 0x5, 0x9, 0x5203, 0x8, 0xb, 0xe, 0x27, 0x6, 0x3, 0x4, 0x6, 0x7, 0xb04, 0x2, 0x1, 0x6, 0x7fff, 0x3, 0x0, 0x5, 0x4, 0x4be2, 0x7fff, 0x3, 0x8001, 0x2, 0x7, 0xfffffffd, 0x6, 0x8, 0x5, 0x7, 0x6, 0xead, 0x8, 0xa3, 0x5000000, 0x3, 0x96, 0x2, 0x9, 0x31ca, 0x1, 0xa17f, 0x41cd, 0x7ff, 0x4, 0x4, 0x9ac3, 0x96, 0x0, 0x7d494b8f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x10001, 0x7, 0x3, 0x7, 0x8001, 0x10001, 0x6, 0x7ff, 0x8000, 0x40, 0x9, 0x5, 0x0, 0xffffffd5, 0x4, 0x80000000, 0x3, 0x1, 0xe, 0xad76, 0x100, 0x0, 0x38b, 0x0, 0x0, 0x26, 0x400, 0x8, 0x6, 0x5c07, 0xb08, 0x800, 0x4, 0x5, 0xcca1, 0x5f, 0x81, 0x70000, 0xcce, 0x3, 0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x7fff, 0x1dd, 0xfff, 0x1, 0x891, 0x4b56, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x4, 0x5, 0xb6, 0x1000, 0x101, 0x8, 0x3, 0xb, 0x60, 0xf, 0x166, 0x3, 0x80000000, 0xc, 0x3, 0x4, 0x0, 0x10000, 0x4, 0xa88, 0x4, 0x10, 0x8, 0x7, 0xe, 0x3, 0x6, 0x5, 0x5c, 0x6, 0x4, 0x5, 0xce15, 0x8, 0x9, 0x15e, 0x4, 0x8, 0x74, 0x3, 0x5, 0x2, 0x887, 0x8, 0x200, 0x1, 0x7, 0x964, 0x1, 0x0, 0xc010, 0x0, 0x10000, 0x7, 0xffff, 0x4, 0x1, 0x79367550, 0x0, 0x7, 0x1, 0x7, 0x5f8, 0x5, 0xfff, 0x5, 0x9, 0x565, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x323, 0x74d5, 0x3, 0x8001, 0xa1ce, 0xfffffffd, 0x8, 0x9, 0x100, 0x1, 0x2b6a, 0xd4c, 0x7, 0xed3c, 0xb, 0xfb85, 0xfffffffb, 0x5, 0x6, 0x7, 0x90b, 0x3, 0x5, 0xdbe, 0x7, 0x9, 0x7, 0x7, 0x6, 0x8, 0x6, 0x10001, 0xc77f4f7c, 0x1, 0x52, 0x10, 0x9, 0x5, 0x6, 0x0, 0x9, 0xdab, 0x2, 0x0, 0x0, 0x8, 0x2, 0xfffffff9, 0x2, 0xd, 0xcc, 0x4, 0xb8, 0x9, 0xfffffff2, 0x200, 0x7, 0x9, 0x8001, 0x8, 0x7, 0x6, 0xe, 0x6, 0x7fffffff, 0xffff, 0x80000000, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8, 0x8, 0xfffffff8, 0x37e860e9, 0x4, 0x3, 0x3, 0x4, 0x800, 0x1, 0x4, 0x8e04, 0x7, 0x27d7, 0xffffff0c, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0x1, 0xa360, 0xc448, 0xfffffffa, 0x2, 0xb, 0x1, 0x2, 0x3, 0x0, 0xaf8, 0x84, 0xffff, 0x1, 0x1ec, 0x690, 0x1, 0x3, 0x89, 0x8, 0x4, 0x4, 0x80000001, 0x4, 0x101]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.31419761s ago: executing program 0 (id=2152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) (async) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x30, 0x32, 0x301, 0x70bd2b, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.926459574s ago: executing program 3 (id=2158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000e8fffffffffbffff0000000000000000000000080000"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r2 = socket$inet6(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x52) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.888945414s ago: executing program 2 (id=2159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x8001, {0x3}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff000000, 0xff000000, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xffffff00, 0xff000000], 'pim6reg1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x3c, 0x9, 0x5, 0x693364dfef7fa9d1}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x7742, 0x6, 0x3, 0x20010, 0xffffffffffffffff, 0xf7eb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00', 0x6) (async) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) (async) socket(0x2, 0x80805, 0x0) (async) mkdirat$cgroup(r3, &(0x7f0000000380)='syz0\x00', 0x1ff) (async) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1e, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) r7 = socket$kcm(0x10, 0x2, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x27, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000001ab5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000006040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESHEX=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.875000382s ago: executing program 0 (id=2160): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001d98fc922b3d36fe1000000010000000020000000000000000000001b0000000000000000200"], 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffd}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000140), 0x10}, 0x94) 1.803932899s ago: executing program 3 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3c85127f, 0x4, 0xea9, 0x0, 0x7f130b6d, {0xa, 0x0, 0xfffd, 0x1, 0x3, 0x2}, {0xd, 0x2, 0x1, 0x7, 0x8001, 0x75a}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe49a, 0x0, 0x9d5, 0xdde, 0x0, 0x9, 0x6d77, 0x400, 0xff, 0xb, 0x5, 0x80, 0x38a7, 0xbdc9, 0x4, 0x90, 0x8, 0x8, 0x60, 0x7, 0x480000, 0x80000001, 0x1ff, 0x7ff, 0x1b, 0x7, 0x7, 0x2, 0xfffffff9, 0x8, 0x2, 0xb17, 0x3, 0x800, 0x3, 0xffff, 0xe, 0xe, 0x6, 0x2, 0x9, 0x200, 0xfffff943, 0x1ff, 0x7, 0x2, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9, 0x0, 0x10, 0x400, 0x0, 0x7, 0x1, 0x7, 0x3, 0x44, 0x7ff, 0x1, 0x43, 0x986, 0x7, 0xffffac79, 0xfff, 0x1, 0x7fffffff, 0x200, 0x2, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0xd, 0x3, 0x6, 0x40000, 0x8, 0x8001, 0x5, 0xab, 0x400, 0x1000, 0x1, 0x1, 0x9, 0xa373, 0x1b5, 0x6, 0x40, 0x8, 0x5, 0xb, 0x5, 0x6, 0x100, 0x100, 0x7, 0x35, 0x356, 0x2, 0xffffffff, 0x9, 0x8000, 0x7, 0xf37a, 0x6, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x80, 0x71f1, 0x7, 0xffffffff, 0x100, 0x8, 0x89, 0xe, 0x0, 0x9, 0x7, 0x7, 0xb, 0x8, 0xffff, 0xb, 0x8, 0xfff, 0xfd1d, 0x5, 0x4, 0x6, 0x81, 0x0, 0x80, 0xf, 0x5, 0x4, 0x80000001, 0x1, 0x6, 0x6, 0xc35, 0x6, 0x6, 0xb68, 0x7fffffff, 0x4, 0x1a, 0x7fffffff, 0x6, 0x9, 0x385d, 0x6, 0xcce, 0x4, 0x6, 0x80, 0x1000, 0x7, 0xfffffe01, 0x2, 0x7, 0x0, 0x8, 0x3, 0x8000, 0x6, 0x9, 0x2, 0x5, 0x7, 0x6, 0xf, 0x2, 0xfffffffb, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x800, 0x80000000, 0x5, 0xa5, 0x7, 0x3ff, 0x5, 0x9, 0x5203, 0x8, 0xb, 0xe, 0x27, 0x6, 0x3, 0x4, 0x6, 0x7, 0xb04, 0x2, 0x1, 0x6, 0x7fff, 0x3, 0x0, 0x5, 0x4, 0x4be2, 0x7fff, 0x3, 0x8001, 0x2, 0x7, 0xfffffffd, 0x6, 0x8, 0x5, 0x7, 0x6, 0xead, 0x8, 0xa3, 0x5000000, 0x3, 0x96, 0x2, 0x9, 0x31ca, 0x1, 0xa17f, 0x41cd, 0x7ff, 0x4, 0x4, 0x9ac3, 0x96, 0x0, 0x7d494b8f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x10001, 0x7, 0x3, 0x7, 0x8001, 0x10001, 0x6, 0x7ff, 0x8000, 0x40, 0x9, 0x5, 0x0, 0xffffffd5, 0x4, 0x80000000, 0x3, 0x1, 0xe, 0xad76, 0x100, 0x0, 0x38b, 0x0, 0x0, 0x26, 0x400, 0x8, 0x6, 0x5c07, 0xb08, 0x800, 0x4, 0x5, 0xcca1, 0x5f, 0x81, 0x70000, 0xcce, 0x3, 0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x7fff, 0x1dd, 0xfff, 0x1, 0x891, 0x4b56, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x4, 0x5, 0xb6, 0x1000, 0x101, 0x8, 0x3, 0xb, 0x60, 0xf, 0x166, 0x3, 0x80000000, 0xc, 0x3, 0x4, 0x0, 0x10000, 0x4, 0xa88, 0x4, 0x10, 0x8, 0x7, 0xe, 0x3, 0x6, 0x5, 0x5c, 0x6, 0x4, 0x5, 0xce15, 0x8, 0x9, 0x15e, 0x4, 0x8, 0x74, 0x3, 0x5, 0x2, 0x887, 0x8, 0x200, 0x1, 0x7, 0x964, 0x1, 0x0, 0xc010, 0x0, 0x10000, 0x7, 0xffff, 0x4, 0x1, 0x79367550, 0x0, 0x7, 0x1, 0x7, 0x5f8, 0x5, 0xfff, 0x5, 0x9, 0x565, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x323, 0x74d5, 0x3, 0x8001, 0xa1ce, 0xfffffffd, 0x8, 0x9, 0x100, 0x1, 0x2b6a, 0xd4c, 0x7, 0xed3c, 0xb, 0xfb85, 0xfffffffb, 0x5, 0x6, 0x7, 0x90b, 0x3, 0x5, 0xdbe, 0x7, 0x9, 0x7, 0x7, 0x6, 0x8, 0x6, 0x10001, 0xc77f4f7c, 0x1, 0x52, 0x10, 0x9, 0x5, 0x6, 0x0, 0x9, 0xdab, 0x2, 0x0, 0x0, 0x8, 0x2, 0xfffffff9, 0x2, 0xd, 0xcc, 0x4, 0xb8, 0x9, 0xfffffff2, 0x200, 0x7, 0x9, 0x8001, 0x8, 0x7, 0x6, 0xe, 0x6, 0x7fffffff, 0xffff, 0x80000000, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8, 0x8, 0xfffffff8, 0x37e860e9, 0x4, 0x3, 0x3, 0x4, 0x800, 0x1, 0x4, 0x8e04, 0x7, 0x27d7, 0xffffff0c, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0x1, 0xa360, 0xc448, 0xfffffffa, 0x2, 0xb, 0x1, 0x2, 0x3, 0x0, 0xaf8, 0x84, 0xffff, 0x1, 0x1ec, 0x690, 0x1, 0x3, 0x89, 0x8, 0x4, 0x4, 0x80000001, 0x4, 0x101]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbc", 0xf}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.724687193s ago: executing program 0 (id=2163): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1b", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000001}, 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.666234748s ago: executing program 2 (id=2165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x478, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0xffff, 0xd}, {0x1, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x340, 0x2, {{0x5, [0x2, 0x5, 0x4, 0xe, 0x5, 0x0, 0x0, 0xc, 0xd, 0x0, 0xd, 0x3, 0x4, 0x1, 0xd, 0x4], 0x0, [0x9, 0x3, 0x9, 0x9, 0x80, 0x4a, 0x3af, 0x3ff, 0x8, 0xf97a, 0x2e, 0x8, 0xbb2, 0x4, 0x3256, 0xff], [0x3, 0xca9, 0x9, 0xcd72, 0xa, 0x4, 0x5, 0x8000, 0x400, 0x0, 0x200, 0xbf, 0x0, 0x1, 0x0, 0x3ff]}, [@TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x5}, {0xc, 0x3, 0xf}, {0xc, 0x3, 0x685cf858}, {0xc, 0x3, 0x5}]}, @TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_MAX_RATE64={0xc4, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0xc1}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x100000001}, {0xc, 0x4, 0x89c1}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0xa6}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xda6c}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x2}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x8}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xffffffffffffff0a}, {0xc, 0x4, 0x5}, {0xc}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x80}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0xc}]}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x7}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0xfffffffffffffffe}, {0xc, 0x3, 0x10001}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0xbee}, {0xc, 0x3, 0x80}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x400}, {0xc, 0x3, 0x80000000}, {0xc}, {0xc, 0x3, 0xffffffffffffffff}, {0xc, 0x3, 0xfffffffffffffff8}]}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x1}, {0xc, 0x4, 0x8000000000000000}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x200}, {0xc, 0x4, 0x188}, {0xc, 0x4, 0x81}, {0xc, 0x4, 0xffffffff}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0x2a}, {0xc, 0x4, 0x40}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0xe}]}]}}}, @TCA_RATE={0x6, 0x5, {0xe5, 0x81}}, @TCA_STAB={0x100, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xb, 0x9, 0x2, 0x1, 0x3, 0x8c3, 0x6}}, {0x10, 0x2, [0x7e4d, 0x40, 0x4, 0xfff, 0x8, 0x3]}}, {{0x1c, 0x1, {0x8, 0x4, 0x2, 0xff, 0x0, 0x2ee, 0x6, 0x8}}, {0x14, 0x2, [0x7, 0x1, 0x689a, 0x1, 0xf, 0x5, 0x200, 0x8000]}}, {{0x1c, 0x1, {0x1, 0x8, 0x8, 0x9, 0x0, 0x40, 0x2, 0x1}}, {0x6, 0x2, [0xfffc]}}, {{0x1c, 0x1, {0x4, 0x7, 0xfffd, 0x3b, 0x1, 0x80000000, 0xc, 0x3}}, {0xa, 0x2, [0x1ff, 0x0, 0x7]}}, {{0x1c, 0x1, {0x0, 0x1, 0x9, 0x460931cf, 0x2, 0xfffffff5, 0xff, 0x6}}, {0x10, 0x2, [0x2, 0x2, 0xa, 0xc20e, 0x101, 0x4]}}, {{0x1c, 0x1, {0x4, 0x68, 0x587, 0x3, 0x2, 0x1, 0x8, 0x4}}, {0xc, 0x2, [0xa, 0x8, 0x3ff, 0x7]}}]}]}, 0x478}, 0x1, 0x0, 0x0, 0x4040051}, 0x1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 32) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000980)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="020029bd7000ffdbdf250a00004c3ff28625495fa1d02b277c299f307d243e173b3a0fb505edd28b4c4ef2c5fc65b302460b8c183002487a94596a6b68f5f57f8572956609c471d906000000fb4276731abc52e2a4ac87a18eeead9590615667f1d466689118546051742846083a509d1d3150e6b98c9dec00000c0001800800030000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 32) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@private1, 0x0}, &(0x7f0000000800)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f00000009c0)={'ip6_vti0\x00', r8, 0x29, 0x1, 0x3, 0x7fffffff, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7880, 0x700, 0x100, 0x2}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'wlan0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) 1.560883988s ago: executing program 0 (id=2166): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x0, 0x0, 0x4020, 0x0, "bb02a3c344ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x0, 0x1000000000000000}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x7fffdfff}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 1.448222751s ago: executing program 3 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x304, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_USERDATA={0x86, 0xd, 0x1, 0x0, "7ea65b0da5aeaa663e896a339246e697c8e9fbd10820db61e4d17049033391679477ce9f42130d7049448a34ca41007f574af166e0347a2e1da9922c502c065b9172f3db9d0c9673bda1662e2abe106b83e786929b7e2e5c9f0b79093f4f2c97706b437a7173ab95250073cdfa63f494b40ade581dd681d8aa0feec77f4291e6c125"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x13, 0x6, "e4bd5f2f29bc3fc8e5af2ad30f5c2f"}]}], {0x14, 0x10}}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000001c0)={0x4, {{0x2, 0x4e22, @rand_addr=0x64010100}}, {{0x2, 0x4e23, @loopback}}}, 0x108) 1.410877583s ago: executing program 2 (id=2169): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 1.228775054s ago: executing program 2 (id=2171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x3b, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14}}}]}, @NFTA_RULE_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000002e80)={'hsr0\x00', &(0x7f0000000100)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) 1.141039318s ago: executing program 1 (id=2172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000014000780080012400000000005001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000240)={0x7, 0x7, 0x202, 0x1ff, 0x2, 0x9, 0x6, 0xa3d, r9}, 0x20) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.086466554s ago: executing program 4 (id=2173): r0 = socket(0x10, 0x3, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c0003ef05000100000000000c0002"], 0xc0}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r2) 1.008378171s ago: executing program 1 (id=2174): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$netlink(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=ANY=[], 0x114}], 0x1}, 0x800) recvmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/89, 0x59}], 0x2}, 0x5) accept4$tipc(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) 971.863888ms ago: executing program 1 (id=2175): socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x99, 0x6}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x0, 0x0}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000010c0)={'raw\x00', 0x0, [0x101, 0x4a3, 0xe2d, 0x40004, 0xfffefffa]}, &(0x7f0000000240)=0x54) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r5, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c0002800500010005"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x9}, [@RTA_IIF={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x38, 0x0, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0xc044) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r6, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xa6b}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@alu={0x7, 0x1, 0x0, 0x249d3b36c5e71ea7, 0x4, 0x1b, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 953.418848ms ago: executing program 4 (id=2176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) 844.767014ms ago: executing program 4 (id=2177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3c85127f, 0x4, 0xea9, 0x0, 0x7f130b6d, {0xa, 0x0, 0xfffd, 0x1, 0x3, 0x2}, {0xd, 0x2, 0x1, 0x7, 0x8001, 0x75a}, 0x5, 0x3, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xe49a, 0x0, 0x9d5, 0xdde, 0x0, 0x9, 0x6d77, 0x400, 0xff, 0xb, 0x5, 0x80, 0x38a7, 0xbdc9, 0x4, 0x90, 0x8, 0x8, 0x60, 0x7, 0x480000, 0x80000001, 0x1ff, 0x7ff, 0x1b, 0x7, 0x7, 0x2, 0xfffffff9, 0x8, 0x2, 0xb17, 0x3, 0x800, 0x3, 0xffff, 0xe, 0xe, 0x6, 0x2, 0x9, 0x200, 0xfffff943, 0x1ff, 0x7, 0x2, 0x2, 0x1000, 0x3, 0x1, 0x1, 0x7f, 0x1, 0xb, 0x7fffffff, 0x9, 0x0, 0x10, 0x400, 0x0, 0x7, 0x1, 0x7, 0x3, 0x44, 0x7ff, 0x1, 0x43, 0x986, 0x7, 0xffffac79, 0xfff, 0x1, 0x7fffffff, 0x200, 0x2, 0x5, 0x7, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x2, 0xd, 0x3, 0x6, 0x40000, 0x8, 0x8001, 0x5, 0xab, 0x400, 0x1000, 0x1, 0x1, 0x9, 0xa373, 0x1b5, 0x6, 0x40, 0x8, 0x5, 0xb, 0x5, 0x6, 0x100, 0x100, 0x7, 0x35, 0x356, 0x2, 0xffffffff, 0x9, 0x8000, 0x7, 0xf37a, 0x6, 0x0, 0x9, 0x7, 0x0, 0x6, 0x9, 0x80, 0x71f1, 0x7, 0xffffffff, 0x100, 0x8, 0x89, 0xe, 0x0, 0x9, 0x7, 0x7, 0xb, 0x8, 0xffff, 0xb, 0x8, 0xfff, 0xfd1d, 0x5, 0x4, 0x6, 0x81, 0x0, 0x80, 0xf, 0x5, 0x4, 0x80000001, 0x1, 0x6, 0x6, 0xc35, 0x6, 0x6, 0xb68, 0x7fffffff, 0x4, 0x1a, 0x7fffffff, 0x6, 0x9, 0x385d, 0x6, 0xcce, 0x4, 0x6, 0x80, 0x1000, 0x7, 0xfffffe01, 0x2, 0x7, 0x0, 0x8, 0x3, 0x8000, 0x6, 0x9, 0x2, 0x5, 0x7, 0x6, 0xf, 0x2, 0xfffffffb, 0x9, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x800, 0x80000000, 0x5, 0xa5, 0x7, 0x3ff, 0x5, 0x9, 0x5203, 0x8, 0xb, 0xe, 0x27, 0x6, 0x3, 0x4, 0x6, 0x7, 0xb04, 0x2, 0x1, 0x6, 0x7fff, 0x3, 0x0, 0x5, 0x4, 0x4be2, 0x7fff, 0x3, 0x8001, 0x2, 0x7, 0xfffffffd, 0x6, 0x8, 0x5, 0x7, 0x6, 0xead, 0x8, 0xa3, 0x5000000, 0x3, 0x96, 0x2, 0x9, 0x31ca, 0x1, 0xa17f, 0x41cd, 0x7ff, 0x4, 0x4, 0x9ac3, 0x96, 0x0, 0x7d494b8f, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x3, 0x10001, 0x7, 0x3, 0x7, 0x8001, 0x10001, 0x6, 0x7ff, 0x8000, 0x40, 0x9, 0x5, 0x0, 0xffffffd5, 0x4, 0x80000000, 0x3, 0x1, 0xe, 0xad76, 0x100, 0x0, 0x38b, 0x0, 0x0, 0x26, 0x400, 0x8, 0x6, 0x5c07, 0xb08, 0x800, 0x4, 0x5, 0xcca1, 0x5f, 0x81, 0x70000, 0xcce, 0x3, 0x5, 0x9, 0x1, 0x5, 0x0, 0x5, 0x2, 0xfffffff9, 0x2, 0x7fff, 0x1dd, 0xfff, 0x1, 0x891, 0x4b56, 0x10000, 0x4, 0x0, 0x5, 0x5, 0x4, 0x5, 0xb6, 0x1000, 0x101, 0x8, 0x3, 0xb, 0x60, 0xf, 0x166, 0x3, 0x80000000, 0xc, 0x3, 0x4, 0x0, 0x10000, 0x4, 0xa88, 0x4, 0x10, 0x8, 0x7, 0xe, 0x3, 0x6, 0x5, 0x5c, 0x6, 0x4, 0x5, 0xce15, 0x8, 0x9, 0x15e, 0x4, 0x8, 0x74, 0x3, 0x5, 0x2, 0x887, 0x8, 0x200, 0x1, 0x7, 0x964, 0x1, 0x0, 0xc010, 0x0, 0x10000, 0x7, 0xffff, 0x4, 0x1, 0x79367550, 0x0, 0x7, 0x1, 0x7, 0x5f8, 0x5, 0xfff, 0x5, 0x9, 0x565, 0x8, 0x0, 0x8, 0x7, 0x0, 0x8, 0x323, 0x74d5, 0x3, 0x8001, 0xa1ce, 0xfffffffd, 0x8, 0x9, 0x100, 0x1, 0x2b6a, 0xd4c, 0x7, 0xed3c, 0xb, 0xfb85, 0xfffffffb, 0x5, 0x6, 0x7, 0x90b, 0x3, 0x5, 0xdbe, 0x7, 0x9, 0x7, 0x7, 0x6, 0x8, 0x6, 0x10001, 0xc77f4f7c, 0x1, 0x52, 0x10, 0x9, 0x5, 0x6, 0x0, 0x9, 0xdab, 0x2, 0x0, 0x0, 0x8, 0x2, 0xfffffff9, 0x2, 0xd, 0xcc, 0x4, 0xb8, 0x9, 0xfffffff2, 0x200, 0x7, 0x9, 0x8001, 0x8, 0x7, 0x6, 0xe, 0x6, 0x7fffffff, 0xffff, 0x80000000, 0x5, 0x3, 0x2, 0x6, 0x3, 0x8, 0x8, 0xfffffff8, 0x37e860e9, 0x4, 0x3, 0x3, 0x4, 0x800, 0x1, 0x4, 0x8e04, 0x7, 0x27d7, 0xffffff0c, 0x0, 0x4, 0x2, 0x3, 0x0, 0x6, 0x7, 0x5, 0x1, 0xa360, 0xc448, 0xfffffffa, 0x2, 0xb, 0x1, 0x2, 0x3, 0x0, 0xaf8, 0x84, 0xffff, 0x1, 0x1ec, 0x690, 0x1, 0x3, 0x89, 0x8, 0x4, 0x4, 0x80000001, 0x4, 0x101]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 796.470765ms ago: executing program 3 (id=2178): mmap(&(0x7f00000f5000/0x1000)=nil, 0x1000, 0xb, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x38, 0x1, 0x70bd25, 0x25dfdbfc, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x880) (async) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x38, 0x1, 0x70bd25, 0x25dfdbfc, {0x18}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x880) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000)="f146bed0189d8e6acdd2b943c460c8f0deff7149c6c3b0164834f135d49d1d3cf1a870c4b46037c90bfebc7b82f8a4bf844e86def6021b2e6a60b1269e04181b1b12c62f85f3a2aaa92a5185437ea8bb8893c2e745189e8fb7801537ed2df16b54fa0ef5099bd9f2596455933da5be5e5439646c39cf4db298bd1c11940c84cca5c2bfb206539f8411455854d3bd1d7dcfce0b91482aac55bee4bd494b5327683da88c426ace53d6703dfe45b092c699cae525048a", &(0x7f00000000c0)=@tcp6=r2}, 0x20) 664.226166ms ago: executing program 4 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x4084) 584.576989ms ago: executing program 3 (id=2180): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@broadcast, @dev, 0x0}, &(0x7f0000000380)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r3, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@jmp={0x5, 0x0, 0x5, 0x7, 0x6, 0x80, 0x8}, @printk={@ld}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x8b, &(0x7f0000000280)=""/139, 0x41100, 0x41, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x1ff, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x1, r2, r3, r4, r5], &(0x7f0000000500)=[{0x5, 0x1, 0x10, 0x6}, {0x4, 0x5, 0xf, 0x6}, {0x4, 0x1, 0x2, 0xc}, {0x0, 0x3, 0x7}], 0x10, 0x6f3}, 0x94) 335.132984ms ago: executing program 0 (id=2181): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 317.502391ms ago: executing program 2 (id=2182): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000400007012dbd7000ffdbdf25047c00000400c3000c00018008001600e000000122b10221542b0cd0e11690f1e302ccf9b331930741e024793b"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) 316.535271ms ago: executing program 3 (id=2183): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000240)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000180)={r1, &(0x7f0000000080)='&\x00', 0x0, &(0x7f00000000c0)={@align=0x2, {0xd, 0x4a44, 0x4, 0x6392}}, 0x1ff, &(0x7f0000000100), &(0x7f0000000140)=0x3}) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004000}, 0x40c1) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @remote}, {0x306, @random="570d7dc952b9"}, 0x44, {0x2, 0x4e21, @multicast2}, 'hsr0\x00'}) 107.923263ms ago: executing program 4 (id=2184): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x9}, 0x10) (async) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) (async) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) poll(&(0x7f0000000180)=[{r0, 0x1000}, {r1, 0x400}, {r2, 0x1590}, {r3, 0x480}, {r4}, {r5, 0x101}, {0xffffffffffffffff, 0x8000}, {r6, 0x1000}], 0x8, 0x7) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r8, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r9, 0x8089f1, &(0x7f00000009c0)="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") (async) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 21.086015ms ago: executing program 2 (id=2185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockname$inet(r2, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r1, &(0x7f0000000080), 0x1a1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) 0s ago: executing program 4 (id=2186): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000080)="8b091f56f1", 0x5}], 0x1}}], 0x1, 0x20000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, r5, 0x1, 0x1, 0x25dfdc01, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40810) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x30, 0x2c, 0xd27, 0x1070bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x7, 0x0, 0xe, 0x4}, {0x3, 0xf, 0x2, 0xb}]}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000280)=0x8) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x0, 0x60, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x100}]}, 0x10) kernel console output (not intermixed with test programs): man_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.120120][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.144338][ T5828] team0: Port device team_slave_0 added [ 82.151860][ T5825] team0: Port device team_slave_0 added [ 82.169717][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.176860][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.206356][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.219573][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.227032][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.253360][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.267718][ T5828] team0: Port device team_slave_1 added [ 82.275291][ T5825] team0: Port device team_slave_1 added [ 82.291740][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.298859][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.325007][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.353775][ T5837] Bluetooth: hci0: command tx timeout [ 82.362853][ T5145] Bluetooth: hci4: command tx timeout [ 82.362903][ T5843] Bluetooth: hci2: command tx timeout [ 82.363282][ T5835] Bluetooth: hci3: command tx timeout [ 82.368701][ T5843] Bluetooth: hci1: command tx timeout [ 82.403653][ T5832] team0: Port device team_slave_0 added [ 82.411820][ T5832] team0: Port device team_slave_1 added [ 82.486361][ T5829] hsr_slave_0: entered promiscuous mode [ 82.493340][ T5829] hsr_slave_1: entered promiscuous mode [ 82.500389][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.507623][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.533660][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.545491][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.552472][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.579145][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.613546][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.620543][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.646623][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.658348][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.665751][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.691931][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.710771][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.717835][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.744151][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.773303][ T5824] hsr_slave_0: entered promiscuous mode [ 82.779893][ T5824] hsr_slave_1: entered promiscuous mode [ 82.786473][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 82.792268][ T5824] Cannot create hsr debugfs directory [ 82.808702][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.815840][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.842362][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.022092][ T5825] hsr_slave_0: entered promiscuous mode [ 83.028667][ T5825] hsr_slave_1: entered promiscuous mode [ 83.035218][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 83.040984][ T5825] Cannot create hsr debugfs directory [ 83.059996][ T5828] hsr_slave_0: entered promiscuous mode [ 83.066462][ T5828] hsr_slave_1: entered promiscuous mode [ 83.072634][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 83.078819][ T5828] Cannot create hsr debugfs directory [ 83.184321][ T5832] hsr_slave_0: entered promiscuous mode [ 83.190709][ T5832] hsr_slave_1: entered promiscuous mode [ 83.197271][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 83.203082][ T5832] Cannot create hsr debugfs directory [ 83.552026][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.563998][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.585425][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.596800][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.604836][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.615010][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.634897][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.645601][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.726249][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.742292][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.751770][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.762138][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.770368][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.780932][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.788957][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.799692][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.905133][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.917318][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.927487][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.938732][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.947663][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.959114][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.994743][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.004934][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.050800][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.099585][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.109605][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.119214][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.130327][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.138374][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.148658][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.157853][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.167479][ T5828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.220928][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.267209][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.274541][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.297685][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.308206][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.325323][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.334158][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.341288][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.356808][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.366938][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.379842][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.389178][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.397646][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.409791][ T5832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.433261][ T5835] Bluetooth: hci3: command tx timeout [ 84.433296][ T5837] Bluetooth: hci0: command tx timeout [ 84.438722][ T5835] Bluetooth: hci2: command tx timeout [ 84.444281][ T5843] Bluetooth: hci1: command tx timeout [ 84.453163][ T5145] Bluetooth: hci4: command tx timeout [ 84.502563][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.539944][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.547162][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.590036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.597252][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.637146][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.696677][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.717222][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.764173][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.771374][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.809057][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.816259][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.828970][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.885985][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.893225][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.926538][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.933793][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.057246][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.148572][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.180282][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.248289][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.255584][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.275132][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.282333][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.418151][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.467807][ T5829] veth0_vlan: entered promiscuous mode [ 85.497903][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.529371][ T5829] veth1_vlan: entered promiscuous mode [ 85.574821][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.610436][ T5829] veth0_macvtap: entered promiscuous mode [ 85.635722][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.664495][ T5829] veth1_macvtap: entered promiscuous mode [ 85.691274][ T5824] veth0_vlan: entered promiscuous mode [ 85.738113][ T5825] veth0_vlan: entered promiscuous mode [ 85.769942][ T5824] veth1_vlan: entered promiscuous mode [ 85.791369][ T5825] veth1_vlan: entered promiscuous mode [ 85.818570][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.832067][ T5828] veth0_vlan: entered promiscuous mode [ 85.864779][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.879282][ T5828] veth1_vlan: entered promiscuous mode [ 85.925991][ T5825] veth0_macvtap: entered promiscuous mode [ 85.935055][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.945705][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.971179][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.980064][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.005296][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.041386][ T5828] veth0_macvtap: entered promiscuous mode [ 86.077041][ T5824] veth0_macvtap: entered promiscuous mode [ 86.086186][ T5825] veth1_macvtap: entered promiscuous mode [ 86.115321][ T5824] veth1_macvtap: entered promiscuous mode [ 86.142584][ T5828] veth1_macvtap: entered promiscuous mode [ 86.220354][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.247964][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.297819][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.311320][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.329239][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.343759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.351725][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.373702][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.399980][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.413363][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.468373][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.479579][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.512480][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522641][ T5145] Bluetooth: hci2: command tx timeout [ 86.528440][ T5145] Bluetooth: hci4: command tx timeout [ 86.533521][ T5835] Bluetooth: hci0: command tx timeout [ 86.534287][ T5145] Bluetooth: hci1: command tx timeout [ 86.540790][ T5835] Bluetooth: hci3: command tx timeout [ 86.553028][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.561795][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.578244][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.592241][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.604393][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.617504][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.649954][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.660494][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.737150][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.805704][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.860265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.895525][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.913134][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.926010][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.017825][ T5832] veth0_vlan: entered promiscuous mode [ 87.075811][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.090493][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.107006][ T5832] veth1_vlan: entered promiscuous mode [ 87.139225][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.183647][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.228837][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.258227][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.270366][ T5832] veth0_macvtap: entered promiscuous mode [ 87.361112][ T5832] veth1_macvtap: entered promiscuous mode [ 87.391573][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.410774][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.479189][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.528886][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.578595][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.599136][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.618483][ T5943] Zero length message leads to an empty skb [ 87.625393][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675803][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.782145][ T5955] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 87.807763][ T5955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.815252][ T5955] IPv6: NLM_F_CREATE should be set when creating new route [ 87.931001][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.957394][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.154959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.182432][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.228048][ T5967] syzkaller0: entered promiscuous mode [ 88.234152][ T5967] syzkaller0: entered allmulticast mode [ 88.455164][ T5974] team_slave_0: entered promiscuous mode [ 88.461139][ T5974] team_slave_0: entered allmulticast mode [ 88.593521][ T5835] Bluetooth: hci3: command tx timeout [ 88.598670][ T5145] Bluetooth: hci1: command tx timeout [ 88.599226][ T5835] Bluetooth: hci0: command tx timeout [ 88.605312][ T5145] Bluetooth: hci4: command tx timeout [ 88.611160][ T5843] Bluetooth: hci2: command tx timeout [ 88.711044][ T5982] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.729718][ T5981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 89.004851][ T5998] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17'. [ 89.132171][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'. [ 89.590584][ T6011] warning: `syz.4.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.833136][ T6020] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 89.840925][ T6020] netlink: 'syz.3.23': attribute type 2 has an invalid length. [ 90.153500][ T6031] syzkaller0: entered promiscuous mode [ 90.159058][ T6031] syzkaller0: entered allmulticast mode [ 90.207943][ T6031] Bluetooth: MGMT ver 1.23 [ 90.214255][ T6035] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 90.476132][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.504432][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.532850][ T6049] netlink: 60 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.556892][ T6049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.577709][ T6054] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.34'. [ 90.615712][ T6054] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 90.971965][ T6069] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 91.022916][ T6080] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.38'. [ 91.170231][ T6076] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 91.242426][ T6076] bond1 (unregistering): Released all slaves [ 91.378556][ T6096] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 91.391857][ T6089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.41'. [ 91.434180][ T6102] syz.0.42 uses obsolete (PF_INET,SOCK_PACKET) [ 91.764020][ T6115] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.799776][ T10] cfg80211: failed to load regulatory.db [ 92.132299][ T6114] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 92.930592][ T6143] team1: entered promiscuous mode [ 92.936011][ T6143] team1: entered allmulticast mode [ 93.219113][ T6153] xt_l2tp: v2 doesn't support IP mode [ 93.330943][ T6158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.743323][ T6180] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 93.762403][ T6181] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 93.981945][ T6192] __nla_validate_parse: 5 callbacks suppressed [ 93.981963][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'. [ 94.507193][ T6223] netlink: 92 bytes leftover after parsing attributes in process `syz.0.78'. [ 94.514118][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.77'. [ 94.642156][ T6229] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 94.819154][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.841190][ T6240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.006150][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 95.056487][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 95.105112][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 95.124495][ T6256] vlan2: entered allmulticast mode [ 95.129825][ T6256] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 95.274094][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 95.310768][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 95.327606][ T6261] netlink: 9688 bytes leftover after parsing attributes in process `syz.1.89'. [ 95.336940][ T6261] openvswitch: netlink: Flow key attr not present in new flow. [ 96.187000][ T6299] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 96.414343][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 96.786504][ T6333] team0: Device gtp0 is up. Set it down before adding it as a team port [ 96.857517][ T6341] netlink: 'syz.1.115': attribute type 51 has an invalid length. [ 97.005414][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.023748][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.066230][ T6343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.077590][ T6347] netlink: 'syz.4.117': attribute type 10 has an invalid length. [ 97.094149][ T6343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.206619][ T6347] dummy0: entered promiscuous mode [ 97.220199][ T6347] bridge0: port 3(dummy0) entered blocking state [ 97.231072][ T6352] netlink: 'syz.0.119': attribute type 7 has an invalid length. [ 97.266094][ T6347] bridge0: port 3(dummy0) entered disabled state [ 97.272841][ T6347] dummy0: entered allmulticast mode [ 97.281830][ T6347] bridge0: port 3(dummy0) entered blocking state [ 97.288578][ T6347] bridge0: port 3(dummy0) entered forwarding state [ 97.451695][ T6358] tipc: Started in network mode [ 97.469669][ T6358] tipc: Node identity ac14140f, cluster identity 4711 [ 97.487121][ T6358] tipc: New replicast peer: 255.255.255.255 [ 97.497856][ T6358] tipc: Enabled bearer , priority 10 [ 97.543503][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.551530][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.602579][ T6363] bridge_slave_0: left allmulticast mode [ 97.610024][ T6363] bridge_slave_0: left promiscuous mode [ 97.620551][ T6363] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.637755][ T6363] bridge_slave_1: left allmulticast mode [ 97.643664][ T6363] bridge_slave_1: left promiscuous mode [ 97.649405][ T6363] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.664928][ T6363] bond0: (slave bond_slave_0): Releasing backup interface [ 97.677488][ T6363] bond0: (slave bond_slave_1): Releasing backup interface [ 97.695721][ T6363] team0: Port device team_slave_0 removed [ 97.712654][ T6363] team0: Port device team_slave_1 removed [ 97.729885][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.741768][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.754946][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.775832][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.807583][ T6363] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 98.068127][ T6387] 0·: renamed from hsr_slave_1 (while UP) [ 98.089054][ T6387] 0·: entered allmulticast mode [ 98.113953][ T6387] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 98.170282][ T6391] wireguard0: entered promiscuous mode [ 98.176816][ T6391] wireguard0: entered allmulticast mode [ 98.209458][ T6391] team0: Device wireguard0 is of different type [ 98.468546][ T6404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.601050][ T6407] netlink: 'syz.3.134': attribute type 29 has an invalid length. [ 98.646174][ T10] tipc: Node number set to 2886997007 [ 98.674018][ T6411] netlink: 'syz.3.134': attribute type 29 has an invalid length. [ 98.706251][ T6407] netlink: 'syz.3.134': attribute type 32 has an invalid length. [ 99.206961][ T6437] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 99.262685][ T6437] netlink: 'syz.3.142': attribute type 6 has an invalid length. [ 99.349472][ T6448] __nla_validate_parse: 8 callbacks suppressed [ 99.349493][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 99.368006][ T6448] block nbd0: Unsupported socket: should be TCP or UNIX. [ 99.411208][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 99.458454][ T6450] bridge0: entered promiscuous mode [ 99.484877][ T6450] macsec1: entered promiscuous mode [ 99.491011][ T6450] macsec1: entered allmulticast mode [ 99.499207][ T6450] bridge0: entered allmulticast mode [ 99.509904][ T6450] bridge0: left allmulticast mode [ 99.516644][ T6450] bridge0: left promiscuous mode [ 99.576353][ T6454] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.148'. [ 99.876676][ T13] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 100.006899][ T6485] netlink: 'syz.4.156': attribute type 58 has an invalid length. [ 100.014966][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.156'. [ 100.265345][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'. [ 100.609917][ T6498] syz_tun: entered allmulticast mode [ 102.729209][ T6460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.754505][ T6520] netlink: 256 bytes leftover after parsing attributes in process `syz.3.165'. [ 102.894947][ T6528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 102.970910][ T6528] netlink: 224 bytes leftover after parsing attributes in process `syz.4.168'. [ 103.022670][ T6528] syzkaller0: entered promiscuous mode [ 103.572828][ T6572] netlink: 144 bytes leftover after parsing attributes in process `syz.4.180'. [ 103.943251][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 104.453122][ T6621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.490785][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.194'. [ 104.544505][ T6626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.696815][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.196'. [ 104.729721][ T6633] unsupported nlmsg_type 40 [ 104.871622][ T6645] sctp: [Deprecated]: syz.1.200 (pid 6645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.871622][ T6645] Use struct sctp_sack_info instead [ 104.979600][ T6656] netlink: 'syz.3.201': attribute type 3 has an invalid length. [ 105.160430][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 105.191912][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 105.228482][ T6660] xt_l2tp: v2 doesn't support IP mode [ 105.309529][ T6669] tls_set_device_offload: netdev not found [ 105.468077][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 105.507940][ T6678] netlink: 'syz.2.211': attribute type 20 has an invalid length. [ 105.509078][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 105.550670][ T6678] netlink: 'syz.2.211': attribute type 21 has an invalid length. [ 105.577903][ T6678] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.951191][ T6700] Cannot find add_set index 0 as target [ 105.977234][ T6702] netlink: 'syz.0.217': attribute type 10 has an invalid length. [ 106.039285][ T6702] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 106.083977][ T6704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.084729][ T6710] netlink: 'syz.4.218': attribute type 12 has an invalid length. [ 106.174060][ T6710] netlink: 'syz.4.218': attribute type 29 has an invalid length. [ 106.181863][ T6710] netlink: 148 bytes leftover after parsing attributes in process `syz.4.218'. [ 106.214538][ T6710] netlink: 59 bytes leftover after parsing attributes in process `syz.4.218'. [ 106.624642][ T6726] sctp: [Deprecated]: syz.2.223 (pid 6726) Use of int in max_burst socket option deprecated. [ 106.624642][ T6726] Use struct sctp_assoc_value instead [ 107.135998][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 107.723424][ T6785] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 108.247310][ T6804] syzkaller1: entered promiscuous mode [ 108.258109][ T6804] syzkaller1: entered allmulticast mode [ 109.063724][ T6842] tipc: Started in network mode [ 109.081314][ T6842] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 109.117158][ T6842] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 109.134153][ T6842] tipc: Enabled bearer , priority 10 [ 109.203375][ T6850] veth0_macvtap: left promiscuous mode [ 110.085619][ T6888] pimreg: entered allmulticast mode [ 110.228515][ T6884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.281656][ T6889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.289475][ T6889] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 110.331454][ T6889] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 110.348933][ T6889] bond2: (slave xfrm1): making interface the new active one [ 110.359991][ T6889] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 110.370571][ T5830] tipc: Node number set to 1 [ 110.561942][ T6913] __nla_validate_parse: 5 callbacks suppressed [ 110.561964][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.279'. [ 110.621509][ T6916] syzkaller0: entered promiscuous mode [ 110.650306][ T6916] syzkaller0: entered allmulticast mode [ 110.711924][ T6916] tipc: Enabled bearer , priority 0 [ 110.747657][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 110.761848][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 110.777263][ T6915] tipc: Resetting bearer [ 110.816166][ T6915] tipc: Disabling bearer [ 110.826255][ T6928] netlink: 'syz.4.283': attribute type 21 has an invalid length. [ 110.896575][ T6934] netlink: 'syz.4.283': attribute type 11 has an invalid length. [ 110.905568][ T6934] netlink: 224 bytes leftover after parsing attributes in process `syz.4.283'. [ 111.190894][ T6955] netlink: 144 bytes leftover after parsing attributes in process `syz.2.292'. [ 111.282304][ T6953] bond1 (unregistering): Released all slaves [ 111.493975][ T6969] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 111.522123][ T6969] netlink: 'syz.1.295': attribute type 2 has an invalid length. [ 111.620754][ T6976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.695052][ T6978] bond3: option lp_interval: invalid value (0) [ 111.701354][ T6978] bond3: option lp_interval: allowed values 1 - 2147483647 [ 111.746251][ T6978] bond3 (unregistering): Released all slaves [ 111.816693][ T6988] netlink: 'syz.1.300': attribute type 16 has an invalid length. [ 111.835617][ T6988] netlink: 'syz.1.300': attribute type 17 has an invalid length. [ 111.896029][ T6988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.950306][ T6991] ip6t_REJECT: ECHOREPLY is not supported [ 112.541358][ T7019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.758963][ T7019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.845399][ T7035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.318'. [ 112.896424][ T7035] netlink: 'syz.0.318': attribute type 1 has an invalid length. [ 112.980267][ T7043] sctp: [Deprecated]: syz.4.319 (pid 7043) Use of int in maxseg socket option. [ 112.980267][ T7043] Use struct sctp_assoc_value instead [ 113.166007][ T7019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.240879][ T7059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 113.379472][ T7057] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 113.445302][ T7057] bond3 (unregistering): Released all slaves [ 113.560062][ T7073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.326'. [ 113.581732][ T7019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.710484][ T7071] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 113.778022][ T7071] bond1 (unregistering): Released all slaves [ 113.881789][ T7036] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.901910][ T7036] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 113.992669][ T7036] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.002777][ T7036] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 114.066065][ T7036] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.087458][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.099476][ T7036] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 114.111752][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.136391][ T7092] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 114.145076][ T7036] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 114.151039][ T7036] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 114.210123][ T7036] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.225190][ T7036] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 114.243543][ T7095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.333'. [ 114.273373][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.309950][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.851844][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 114.883223][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.339'. [ 115.236273][ T7146] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 115.634633][ T7173] __nla_validate_parse: 2 callbacks suppressed [ 115.634654][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 115.783540][ T7175] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 115.822031][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 115.868798][ T7186] netlink: 'syz.4.355': attribute type 19 has an invalid length. [ 115.944369][ T7189] netlink: 'syz.4.355': attribute type 4 has an invalid length. [ 116.026327][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 116.342630][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 116.380141][ T7210] : entered promiscuous mode [ 116.548969][ T7226] syzkaller0: entered promiscuous mode [ 116.554705][ T7226] syzkaller0: entered allmulticast mode [ 116.801753][ T7231] syzkaller0: entered promiscuous mode [ 116.807364][ T7231] syzkaller0: entered allmulticast mode [ 117.095257][ T7247] netlink: 276 bytes leftover after parsing attributes in process `syz.2.371'. [ 117.113091][ T7251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 117.164074][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'. [ 117.405876][ T7273] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 117.430739][ T7271] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 117.467397][ T7273] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 117.564272][ T7278] syzkaller0: entered promiscuous mode [ 117.578465][ T7278] syzkaller0: entered allmulticast mode [ 117.587439][ T7271] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 117.590357][ T7284] nftables ruleset with unbound chain [ 117.644587][ T7281] syzkaller0: entered promiscuous mode [ 117.667172][ T7281] syzkaller0: entered allmulticast mode [ 118.985754][ T7309] syzkaller0: entered promiscuous mode [ 119.012830][ T7309] syzkaller0: entered allmulticast mode [ 119.084908][ T7321] netlink: 'syz.1.384': attribute type 64 has an invalid length. [ 119.419170][ T7333] ip6t_srh: unknown srh match flags 5F28 [ 119.559716][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 119.572904][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 119.613038][ T7340] netlink: 'syz.4.392': attribute type 1 has an invalid length. [ 119.620744][ T7340] netlink: 224 bytes leftover after parsing attributes in process `syz.4.392'. [ 119.859552][ T7363] netlink: 'syz.3.393': attribute type 4 has an invalid length. [ 120.007918][ T7355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.189347][ T7355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.232124][ T7380] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 120.447560][ T7355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.697826][ T7355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.760113][ T7405] __nla_validate_parse: 1 callbacks suppressed [ 120.760132][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.405'. [ 120.970389][ T1341] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.039545][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.111158][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.146104][ T7420] netlink: 1 bytes leftover after parsing attributes in process `syz.1.409'. [ 121.222774][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.432918][ T7434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 121.467656][ T7436] tipc: Started in network mode [ 121.472596][ T7436] tipc: Node identity 2e3db0e914db, cluster identity 4711 [ 121.520178][ T7429] "syz.0.410" (7429) uses obsolete ecb(arc4) skcipher [ 121.530067][ T7436] tipc: Enabled bearer , priority 0 [ 121.646554][ T7436] tipc: Disabling bearer [ 121.739895][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 121.773732][ T7454] xt_hashlimit: size too large, truncated to 1048576 [ 121.977603][ T7463] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 122.212543][ T7473] syzkaller0: entered promiscuous mode [ 122.232525][ T7473] syzkaller0: entered allmulticast mode [ 122.499499][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 122.710749][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 122.731763][ T7494] sctp: [Deprecated]: syz.0.427 (pid 7494) Use of int in max_burst socket option. [ 122.731763][ T7494] Use struct sctp_assoc_value instead [ 122.747770][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.425'. [ 122.755118][ T7492] syzkaller0: entered promiscuous mode [ 122.762154][ T7492] syzkaller0: entered allmulticast mode [ 123.077876][ T7508] bond1: entered promiscuous mode [ 123.083316][ T7508] bond1: entered allmulticast mode [ 123.088887][ T7508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.141634][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.430'. [ 123.163985][ T7508] vcan0: entered allmulticast mode [ 123.596015][ T7527] netlink: 28 bytes leftover after parsing attributes in process `syz.2.435'. [ 123.905342][ T7537] netlink: 15 bytes leftover after parsing attributes in process `syz.2.437'. [ 123.996137][ T7541] netlink: 'syz.0.439': attribute type 21 has an invalid length. [ 124.036411][ T7541] netlink: 'syz.0.439': attribute type 21 has an invalid length. [ 124.067083][ T7545] bond2: option fail_over_mac: invalid value (16) [ 124.075881][ T7545] bond2 (unregistering): Released all slaves [ 124.101637][ T1341] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 124.109995][ T1341] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.138017][ T1341] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.156188][ T1341] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.565548][ T7562] syzkaller0: entered promiscuous mode [ 124.571126][ T7562] syzkaller0: entered allmulticast mode [ 124.788909][ T7572] delete_channel: no stack [ 124.889849][ T7578] netlink: 'syz.4.451': attribute type 3 has an invalid length. [ 124.998003][ T7585] tipc: Failed to remove unknown binding: 66,0,0/0:2064064485/2064064486 [ 125.023381][ T7585] tipc: Failed to remove unknown binding: 66,0,0/0:2064064485/2064064486 [ 126.438224][ T7667] netlink: 'syz.1.476': attribute type 27 has an invalid length. [ 126.515460][ T7669] syzkaller1: entered promiscuous mode [ 126.521268][ T7669] syzkaller1: entered allmulticast mode [ 126.708765][ T7687] __nla_validate_parse: 12 callbacks suppressed [ 126.708788][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.480'. [ 126.833274][ T7687] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 126.883010][ T7687] gretap2: entered promiscuous mode [ 126.916052][ T7687] gretap2: entered allmulticast mode [ 127.206740][ T7714] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 127.297673][ T7714] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 127.334410][ T7718] syzkaller0: entered promiscuous mode [ 127.378125][ T7718] syzkaller0: entered allmulticast mode [ 127.561025][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 127.584148][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.491'. [ 127.660150][ T7742] netlink: 'syz.4.491': attribute type 15 has an invalid length. [ 127.775009][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 127.783901][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 127.797988][ T7761] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.823911][ T7763] raw_sendmsg: syz.1.495 forgot to set AF_INET. Fix it! [ 127.964086][ T7757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 127.978661][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 127.988694][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 128.034450][ T7779] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 128.177894][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.500'. [ 128.279777][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.499'. [ 128.430851][ T7794] syzkaller0: entered promiscuous mode [ 128.457825][ T7794] syzkaller0: entered allmulticast mode [ 128.501366][ T7794] tc action pedit offset must be on 32 bit boundaries [ 128.589337][ T7806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.696631][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 128.860225][ T7822] x_tables: duplicate underflow at hook 4 [ 128.933182][ T7829] netlink: 'syz.2.513': attribute type 21 has an invalid length. [ 128.951429][ T7829] netlink: 'syz.2.513': attribute type 22 has an invalid length. [ 128.971262][ T7829] netlink: 'syz.2.513': attribute type 23 has an invalid length. [ 129.002488][ T7829] netlink: 'syz.2.513': attribute type 25 has an invalid length. [ 129.023449][ T7829] netlink: 96 bytes leftover after parsing attributes in process `syz.2.513'. [ 129.046780][ T7835] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 129.075742][ T7838] netlink: 'syz.2.513': attribute type 4 has an invalid length. [ 129.283945][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.516'. [ 129.974733][ T7880] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 130.173227][ T7892] xt_cgroup: invalid path, errno=-2 [ 130.251502][ T7900] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.291159][ T7890] netlink: 'syz.4.536': attribute type 3 has an invalid length. [ 130.339290][ T7903] syzkaller0: entered promiscuous mode [ 130.345640][ T7905] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 130.362884][ T7903] syzkaller0: entered allmulticast mode [ 130.584525][ T35] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 130.613419][ T35] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 130.638048][ T35] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 130.652588][ T35] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 130.753710][ T7927] SET target dimension over the limit! [ 130.767510][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.788782][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.848369][ T7927] syz_tun (unregistering): left allmulticast mode [ 130.879415][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.908160][ T7925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.362522][ T7964] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 131.391389][ T7964] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 131.657234][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.750612][ T7992] __nla_validate_parse: 15 callbacks suppressed [ 131.750652][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 132.348401][ T8031] netlink: 32 bytes leftover after parsing attributes in process `syz.0.579'. [ 132.409298][ T8033] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 132.759386][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.813237][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 132.860603][ T8061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.057091][ T6257] IPVS: starting estimator thread 0... [ 133.167921][ T8082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.593'. [ 133.208514][ T8076] IPVS: using max 37 ests per chain, 88800 per kthread [ 133.215653][ T8082] netlink: 168 bytes leftover after parsing attributes in process `syz.1.593'. [ 133.558019][ T8119] xt_hashlimit: size too large, truncated to 1048576 [ 133.835079][ T8129] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 133.852874][ T8129] netlink: 236 bytes leftover after parsing attributes in process `syz.0.606'. [ 134.587556][ T8152] netlink: 52 bytes leftover after parsing attributes in process `syz.0.614'. [ 134.610252][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.618431][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.676619][ T8152] netlink: 52 bytes leftover after parsing attributes in process `syz.0.614'. [ 134.947518][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 135.029898][ T8166] syzkaller0: entered promiscuous mode [ 135.039820][ T8166] syzkaller0: entered allmulticast mode [ 135.058060][ T8166] netlink: 360 bytes leftover after parsing attributes in process `syz.2.619'. [ 135.324719][ T8182] xt_ecn: cannot match TCP bits for non-tcp packets [ 136.130000][ T8217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.640591][ T8251] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 136.651264][ T8251] netlink: 'syz.4.646': attribute type 3 has an invalid length. [ 136.685356][ T8251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.706702][ T8248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.765926][ T8262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.786032][ T8256] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 136.801626][ T8262] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20000 [ 136.899666][ T8266] wireguard0: entered promiscuous mode [ 136.905519][ T8266] wireguard0: entered allmulticast mode [ 136.914977][ T8266] team0: Device wireguard0 is of different type [ 137.418057][ T8297] __nla_validate_parse: 6 callbacks suppressed [ 137.418077][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 137.502143][ T8297] bond4 (unregistering): Released all slaves [ 137.612520][ T8308] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 137.634548][ T8308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.663'. [ 137.671318][ T8313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.843079][ T8310] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 137.879057][ T8310] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 137.949805][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 138.081954][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'. [ 138.094039][ T8336] netlink: 'syz.2.671': attribute type 23 has an invalid length. [ 138.148221][ T8337] netlink: 'syz.2.671': attribute type 23 has an invalid length. [ 138.148539][ T8338] netlink: 236 bytes leftover after parsing attributes in process `syz.2.671'. [ 138.265448][ T8346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 138.293287][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 138.558838][ T8355] syzkaller0: entered promiscuous mode [ 138.700263][ T8360] xt_limit: Overflow, try lower: 271964/0 [ 138.751281][ T8361] xt_hashlimit: overflow, try lower: 3/0 [ 138.752566][ T8364] xt_hashlimit: overflow, try lower: 3/0 [ 138.792339][ T8366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.681'. [ 139.100260][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.687'. [ 139.116951][ T8384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.687'. [ 139.173671][ T8386] ipvlan2: entered allmulticast mode [ 139.179039][ T8386] syz_tun: entered allmulticast mode [ 139.210274][ T8389] block nbd0: not configured, cannot reconfigure [ 139.294830][ T8389] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 139.725169][ T8427] xt_hashlimit: size too large, truncated to 1048576 [ 139.769908][ T8422] 0· (unregistering): left promiscuous mode [ 139.810022][ T8437] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.984624][ T8439] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 140.055794][ T8439] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 140.155308][ T8450] netlink: 'syz.3.705': attribute type 4 has an invalid length. [ 140.239745][ T8456] netlink: 'syz.3.705': attribute type 4 has an invalid length. [ 140.300292][ T29] audit: type=1800 audit(1775945126.186:2): pid=8452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.706" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 140.320817][ T8452] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 140.320875][ T8452] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 140.320896][ T8452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 140.445492][ T8452] syz.0.706 (8452) used greatest stack depth: 17696 bytes left [ 140.551975][ T8467] netlink: 'syz.0.709': attribute type 26 has an invalid length. [ 141.170705][ T8506] veth1_macvtap: renamed from veth0_vlan [ 141.536801][ T8527] netlink: 'syz.4.723': attribute type 11 has an invalid length. [ 141.664345][ T8536] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 142.078105][ T797] IPVS: starting estimator thread 0... [ 142.188717][ T8559] IPVS: using max 25 ests per chain, 60000 per kthread [ 142.278039][ T8574] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.474748][ T8584] erspan0: entered promiscuous mode [ 142.484098][ T8585] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 142.730005][ T8594] validate_nla: 2 callbacks suppressed [ 142.730026][ T8594] netlink: 'syz.2.742': attribute type 23 has an invalid length. [ 142.755634][ T5490] veth1_macvtap: left promiscuous mode [ 142.813805][ T5490] veth1_macvtap: entered promiscuous mode [ 143.640631][ T8639] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.682913][ T8639] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 143.717180][ T8639] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 143.861808][ T8645] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 143.993035][ T8658] __nla_validate_parse: 16 callbacks suppressed [ 143.993059][ T8658] netlink: 56 bytes leftover after parsing attributes in process `syz.3.754'. [ 144.112484][ T8659] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 144.128837][ T8667] sctp: [Deprecated]: syz.2.757 (pid 8667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.128837][ T8667] Use struct sctp_sack_info instead [ 144.246012][ T8645] macvlan0: entered promiscuous mode [ 144.256246][ T8645] macvlan0: entered allmulticast mode [ 144.267060][ T8645] bond2: entered promiscuous mode [ 144.272684][ T8645] bridge2: entered promiscuous mode [ 144.281492][ T8645] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 144.320120][ T8645] bond2: left promiscuous mode [ 144.326014][ T8645] bridge2: left promiscuous mode [ 144.617284][ T8687] ip6gre1: entered allmulticast mode [ 144.630324][ T8683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.660515][ T8683] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.680224][ T8683] gretap1: entered promiscuous mode [ 144.685736][ T8683] gretap1: entered allmulticast mode [ 145.044521][ T8702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 145.066370][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.764'. [ 145.088687][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.771'. [ 145.097296][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 145.170938][ T8731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 145.215370][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 145.913333][ T8773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.005357][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 146.025339][ T8775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 146.043479][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.075770][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.119993][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.155161][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.207978][ T8787] netlink: 'syz.0.786': attribute type 4 has an invalid length. [ 146.345870][ T8795] veth0_macvtap: left promiscuous mode [ 146.484173][ T8800] netlink: 'syz.2.791': attribute type 26 has an invalid length. [ 146.578485][ T8773] syzkaller0: entered promiscuous mode [ 146.602789][ T8773] syzkaller0: entered allmulticast mode [ 146.654050][ T8809] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 146.662034][ T8809] netlink: 96 bytes leftover after parsing attributes in process `syz.0.795'. [ 146.685050][ T8809] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 146.693012][ T8809] netlink: 'syz.0.795': attribute type 8 has an invalid length. [ 146.938505][ T8820] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 147.953737][ T8831] syzkaller0: entered promiscuous mode [ 147.959377][ T8831] syzkaller0: entered allmulticast mode [ 148.129839][ T8839] netlink: 'syz.1.800': attribute type 51 has an invalid length. [ 148.268149][ T8847] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 148.493491][ T8858] tipc: Enabling of bearer rejected, failed to enable media [ 148.801686][ T8873] syzkaller0: entered promiscuous mode [ 148.811699][ T8873] syzkaller0: entered allmulticast mode [ 149.067983][ T8890] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.361733][ T8910] __nla_validate_parse: 5 callbacks suppressed [ 149.361756][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 149.383319][ T8910] openvswitch: netlink: Flow actions attr not present in new flow. [ 149.428606][ T8910] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.825'. [ 149.446182][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 149.512947][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 149.583342][ T8930] netlink: 'syz.2.830': attribute type 6 has an invalid length. [ 149.587927][ T8918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 149.754747][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 149.851181][ T8944] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.836'. [ 149.909495][ T8948] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 149.957244][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.836'. [ 150.126435][ T8963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'. [ 150.146223][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.842'. [ 150.196731][ T8962] openvswitch: netlink: Flow key attr not present in new flow. [ 150.826939][ T9001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.337001][ T9034] netlink: 'syz.2.856': attribute type 1 has an invalid length. [ 151.669272][ T9062] netlink: 'syz.4.864': attribute type 2 has an invalid length. [ 151.770654][ T9067] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 151.794832][ T9075] macvtap1: entered promiscuous mode [ 151.827660][ T9075] macvtap1: entered allmulticast mode [ 151.844324][ T9075] veth1_vlan: entered allmulticast mode [ 151.899532][ T9067] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.946433][ T9078] macvtap2: entered promiscuous mode [ 151.957774][ T9078] macvtap2: entered allmulticast mode [ 152.456320][ T9110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.554959][ T9119] tipc: Cannot configure node identity twice [ 152.717250][ T9128] netlink: 'syz.1.878': attribute type 12 has an invalid length. [ 152.729021][ T9131] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 152.737009][ T9128] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 153.227628][ T9166] nbd: must specify a size in bytes for the device [ 153.476981][ T9173] syzkaller0: entered promiscuous mode [ 153.482860][ T9173] syzkaller0: entered allmulticast mode [ 153.659512][ T9193] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 155.144681][ T9193] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 155.288822][ T9239] __nla_validate_parse: 8 callbacks suppressed [ 155.288846][ T9239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.904'. [ 155.381978][ T9243] netlink: 88 bytes leftover after parsing attributes in process `syz.0.905'. [ 155.428481][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 155.476402][ T9243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 155.520633][ T9243] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 155.557211][ T9243] netlink: 96 bytes leftover after parsing attributes in process `syz.0.905'. [ 155.585881][ T9243] netlink: 658 bytes leftover after parsing attributes in process `syz.0.905'. [ 155.707007][ T9264] syzkaller0: entered promiscuous mode [ 155.728981][ T9264] syzkaller0: entered allmulticast mode [ 155.804880][ T9270] netlink: 'syz.0.910': attribute type 9 has an invalid length. [ 155.812608][ T9270] netlink: 'syz.0.910': attribute type 11 has an invalid length. [ 155.839502][ T9264] veth3: entered allmulticast mode [ 155.862800][ T9270] netlink: 'syz.0.910': attribute type 12 has an invalid length. [ 155.923922][ T9270] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.910'. [ 155.943119][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.910'. [ 156.173799][ T9282] bond4: entered allmulticast mode [ 156.535504][ T9310] netlink: 'syz.2.921': attribute type 9 has an invalid length. [ 156.875886][ T9329] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 156.898010][ T9333] veth0_to_bond: entered allmulticast mode [ 156.908231][ T49] syzkaller0: tun_net_xmit 76 [ 156.908309][ T9329] syzkaller0: create flow: hash 1227031664 index 2 [ 156.915138][ T49] syzkaller0: tun_net_xmit 48 [ 156.932109][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.927'. [ 156.934776][ T9330] syzkaller0: delete flow: hash 1227031664 index 2 [ 156.953007][ T10] syzkaller0: tun_net_xmit 76 [ 157.206509][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 157.368714][ T9357] trusted_key: syz.2.932 sent an empty control message without MSG_MORE. [ 157.460756][ T9360] netlink: 'syz.1.933': attribute type 1 has an invalid length. [ 157.545702][ T9365] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 157.708045][ T9368] bond3: (slave geneve2): making interface the new active one [ 157.727143][ T9368] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 157.736450][ T49] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.746786][ T49] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.788173][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.812291][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 159.024144][ T9411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.034540][ T9412] tipc: Enabling of bearer rejected, failed to enable media [ 159.495353][ T9460] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 159.525781][ T9463] netlink: 'syz.4.969': attribute type 1 has an invalid length. [ 159.571330][ T9460] bond5: entered promiscuous mode [ 159.582393][ T9460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.606796][ T9464] bond5: (slave bridge3): making interface the new active one [ 159.614796][ T9464] bridge3: entered promiscuous mode [ 159.621000][ T9464] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 160.038184][ T9496] nbd: must specify at least one socket [ 160.564445][ T9534] vlan2: entered allmulticast mode [ 160.591860][ T9534] hsr0: entered allmulticast mode [ 160.602361][ T9534] hsr_slave_0: entered allmulticast mode [ 160.621988][ T9534] hsr_slave_1: entered allmulticast mode [ 160.670644][ T9536] 8021q: VLANs not supported on ip6gre0 [ 160.692374][ T9536] Unknown options in mask b7f2 [ 160.816049][ T9549] netlink: 'syz.4.989': attribute type 21 has an invalid length. [ 160.844552][ T9549] __nla_validate_parse: 11 callbacks suppressed [ 160.844572][ T9549] netlink: 152 bytes leftover after parsing attributes in process `syz.4.989'. [ 160.888386][ T9543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.987'. [ 160.898896][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 160.928915][ T9539] xt_CT: No such helper "snmp_trap" [ 161.013922][ T9551] bond4: option xmit_hash_policy: invalid value (64) [ 161.059064][ T9551] bond4 (unregistering): Released all slaves [ 161.221795][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 161.272641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058563000: rx timeout, send abort [ 161.521053][ T9585] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.995'. [ 161.571480][ T9585] netlink: Unknown conntrack attr (0) [ 161.591894][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 161.730741][ T9600] netlink: 36 bytes leftover after parsing attributes in process `syz.2.999'. [ 161.773443][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f8a000: rx timeout, send abort [ 161.781872][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058563000: abort rx timeout. Force session deactivation [ 161.846246][ T9600] netlink: 48 bytes leftover after parsing attributes in process `syz.2.999'. [ 161.990882][ T9610] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 162.052197][ T9616] openvswitch: netlink: Key type 271 is out of range max 32 [ 162.317003][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f8a000: abort rx timeout. Force session deactivation [ 163.167930][ T9677] netlink: 'syz.0.1019': attribute type 21 has an invalid length. [ 163.194637][ T9677] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1019'. [ 163.204826][ T9677] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 163.224511][ T9679] netlink: 'syz.0.1019': attribute type 21 has an invalid length. [ 163.242644][ T9677] netlink: 'syz.0.1019': attribute type 5 has an invalid length. [ 163.252169][ T9677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1019'. [ 163.272125][ T9679] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 163.333033][ T9679] netlink: 'syz.0.1019': attribute type 5 has an invalid length. [ 163.497478][ T9684] can: request_module (can-proto-3) failed. [ 163.767833][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.793933][ T9715] IPv6: NLM_F_CREATE should be specified when creating new route [ 163.923089][ T9726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.127096][ T9742] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 164.488829][ T9764] ip6erspan0: entered promiscuous mode [ 164.977956][ T9801] sctp: [Deprecated]: syz.2.1055 (pid 9801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.977956][ T9801] Use struct sctp_sack_info instead [ 165.767619][ T9847] ipt_REJECT: TCP_RESET invalid for non-tcp [ 165.876407][ T9856] __nla_validate_parse: 15 callbacks suppressed [ 165.876430][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1070'. [ 166.129455][ T9866] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 166.229835][ T9866] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.259152][ T9866] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1072'. [ 166.272422][ T9871] vlan2: entered promiscuous mode [ 166.277709][ T9871] bond4: entered promiscuous mode [ 166.283544][ T9871] vlan2: entered allmulticast mode [ 166.288818][ T9871] bond4: entered allmulticast mode [ 166.296393][ T9873] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1074'. [ 166.330280][ T9866] bond4: (slave bridge1): making interface the new active one [ 166.339885][ T9866] bridge1: entered promiscuous mode [ 166.345504][ T9866] bridge1: entered allmulticast mode [ 166.352308][ T9866] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 166.470531][ T9882] netlink: 'syz.0.1077': attribute type 10 has an invalid length. [ 166.593968][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 166.627387][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 166.964510][ T9911] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1088'. [ 167.003467][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 167.297767][ T9935] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 167.306907][ T9935] netlink: 'syz.0.1093': attribute type 2 has an invalid length. [ 167.314897][ T9935] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 167.490953][ T9946] batadv1: entered allmulticast mode [ 168.023192][ T9976] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 168.124815][ T9981] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 168.522384][T10014] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1117'. [ 168.535500][T10014] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1117'. [ 168.690383][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 191.296248][T10040] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 191.303308][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 191.456031][T10049] ip6t_srh: unknown srh invflags 4000 [ 191.522391][T10056] openvswitch: netlink: IP tunnel dst address not specified [ 191.869267][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 191.881286][T10069] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1132'. [ 191.900120][T10069] syzkaller0: entered promiscuous mode [ 191.906074][T10069] syzkaller0: entered allmulticast mode [ 191.930618][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1133'. [ 192.049573][T10077] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 192.071783][T10077] bond1 (unregistering): Released all slaves [ 192.210980][T10083] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1136'. [ 192.221674][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1136'. [ 192.263614][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 192.273113][T10084] bridge: RTM_NEWNEIGH with invalid ether address [ 192.280727][T10084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 192.298175][T10084] bridge: RTM_NEWNEIGH with invalid ether address [ 192.356469][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 192.396546][T10093] syzkaller0: entered promiscuous mode [ 192.430615][T10093] syzkaller0: entered allmulticast mode [ 192.464968][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 192.497041][T10099] bridge: RTM_NEWNEIGH with invalid ether address [ 192.784346][T10116] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 192.798959][T10116] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 192.841902][T10116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.586274][T10182] netlink: 'syz.4.1166': attribute type 1 has an invalid length. [ 193.800070][T10191] bond4 (unregistering): Released all slaves [ 193.887652][T10199] netlink: 'syz.1.1172': attribute type 3 has an invalid length. [ 193.909564][T10199] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 193.924020][T10199] netlink: 'syz.1.1172': attribute type 2 has an invalid length. [ 194.197985][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446336][T10223] xt_bpf: check failed: parse error [ 194.536709][T10230] veth1_virt_wifi: entered promiscuous mode [ 194.563167][T10226] nbd0: detected capacity change from 0 to 127 [ 194.576870][T10230] veth1_virt_wifi (unregistering): left promiscuous mode [ 194.644085][ T5835] block nbd0: Receive control failed (result -104) [ 194.709477][T10236] dummy0: left allmulticast mode [ 194.716834][T10236] bridge0: port 3(dummy0) entered disabled state [ 194.756780][T10236] bridge_slave_0: left allmulticast mode [ 194.767025][T10244] netlink: 'syz.3.1184': attribute type 20 has an invalid length. [ 194.788156][T10236] bridge_slave_0: left promiscuous mode [ 194.795900][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.808727][T10244] IPv6: NLM_F_CREATE should be specified when creating new route [ 194.826535][T10236] bridge_slave_1: left allmulticast mode [ 194.835248][T10236] bridge_slave_1: left promiscuous mode [ 194.855696][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.874796][T10236] bond0: (slave bond_slave_0): Releasing backup interface [ 194.889637][T10236] bond0: (slave bond_slave_1): Releasing backup interface [ 194.919981][T10236] team0: Port device team_slave_0 removed [ 194.938298][T10236] team0: Port device team_slave_1 removed [ 194.945811][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.954341][T10236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.965085][T10236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.973475][T10236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.990637][T10236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.147916][T10250] IPv6: sit1: Disabled Multicast RS [ 195.682635][T10292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.900096][T10303] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 195.912024][T10301] gtp1: entered promiscuous mode [ 195.917530][T10301] gtp1: entered allmulticast mode [ 196.087209][T10314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 196.371316][T10330] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 196.444904][T10336] __nla_validate_parse: 43 callbacks suppressed [ 196.444925][T10336] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1212'. [ 196.446315][T10330] bond1: entered promiscuous mode [ 196.466279][T10330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.489419][T10330] bond1: (slave bridge4): making interface the new active one [ 196.497213][T10330] bridge4: entered promiscuous mode [ 196.519169][T10330] bridge4: left promiscuous mode [ 196.527508][T10333] netlink: 'syz.0.1213': attribute type 1 has an invalid length. [ 196.780680][T10358] tls_set_device_offload: netdev not found [ 197.028906][T10365] IPVS: set_ctl: invalid protocol: 103 172.30.0.1:20000 [ 197.387144][T10391] x_tables: unsorted underflow at hook 3 [ 197.491449][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.520988][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.535076][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.548894][T10396] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 197.583833][T10396] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 197.649807][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.661650][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 197.671884][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.680653][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.689564][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.748354][T10396] wg1 speed is unknown, defaulting to 1000 [ 197.760789][T10402] netlink: 'syz.1.1233': attribute type 2 has an invalid length. [ 197.768824][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 198.000942][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 198.200141][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1240'. [ 198.250514][T10429] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 198.422165][T10439] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1243'. [ 198.727905][T10448] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.909876][T10463] netlink: 'syz.1.1251': attribute type 8 has an invalid length. [ 199.388663][T10490] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1260'. [ 199.600150][T10502] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 199.750796][T10509] sctp: [Deprecated]: syz.4.1268 (pid 10509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.750796][T10509] Use struct sctp_sack_info instead [ 199.941345][T10521] wg1 speed is unknown, defaulting to 1000 [ 200.237412][T10534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 200.248820][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 200.258438][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 200.575336][T10556] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 200.652217][T10558] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 200.688214][T10558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.774543][T10569] x_tables: duplicate entry at hook 3 [ 201.199942][T10600] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 201.212462][T10602] netlink: 'syz.4.1298': attribute type 3 has an invalid length. [ 201.223647][T10602] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 201.243472][T10600] netlink: 'syz.1.1297': attribute type 9 has an invalid length. [ 201.251406][T10600] netlink: 'syz.1.1297': attribute type 11 has an invalid length. [ 201.261048][T10602] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 201.268297][T10600] netlink: 'syz.1.1297': attribute type 12 has an invalid length. [ 201.567157][T10626] __nla_validate_parse: 5 callbacks suppressed [ 201.567178][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 201.593969][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 201.605689][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 201.905965][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'. [ 201.915974][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1309'. [ 202.004643][T10646] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 202.005653][T10644] netlink: 61 bytes leftover after parsing attributes in process `syz.4.1310'. [ 202.021296][T10646] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 202.030304][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1310'. [ 202.057351][T10644] syzkaller1: entered promiscuous mode [ 202.062987][T10644] syzkaller1: entered allmulticast mode [ 202.291084][T10658] netlink: 212048 bytes leftover after parsing attributes in process `syz.2.1316'. [ 202.319545][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'. [ 202.497282][T10674] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1321'. [ 203.007185][T10710] netlink: 'syz.2.1332': attribute type 4 has an invalid length. [ 203.138365][T10715] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 203.260454][T10723] netlink: 'syz.4.1336': attribute type 39 has an invalid length. [ 203.283668][T10719] syzkaller0: entered promiscuous mode [ 203.291095][T10719] syzkaller0: entered allmulticast mode [ 203.803239][T10764] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.039782][T10784] syzkaller0: entered promiscuous mode [ 204.048737][T10784] syzkaller0: entered allmulticast mode [ 204.422460][T10811] macsec1: entered promiscuous mode [ 205.020393][T10847] tipc: Enabled bearer , priority 0 [ 205.044958][T10848] +: renamed from syzkaller0 [ 205.083926][T10848] tipc: Disabling bearer [ 205.112814][T10851] veth0: entered promiscuous mode [ 205.130508][T10850] veth0: left promiscuous mode [ 205.177188][T10859] validate_nla: 2 callbacks suppressed [ 205.177208][T10859] netlink: 'syz.0.1377': attribute type 39 has an invalid length. [ 205.324310][T10859] hsr_slave_1 (unregistering): left promiscuous mode [ 205.360420][T10865] 8021q: VLANs not supported on sit0 [ 205.501685][T10878] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 205.510302][T10878] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.759038][T10895] syzkaller0: entered promiscuous mode [ 205.764652][T10895] syzkaller0: entered allmulticast mode [ 206.585528][T10924] __nla_validate_parse: 31 callbacks suppressed [ 206.585558][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1399'. [ 206.760511][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'. [ 206.832070][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1406'. [ 206.939482][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 206.956069][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 206.996554][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 207.024448][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 207.036478][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 207.047294][T10965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1410'. [ 207.061066][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 207.214286][T10976] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 207.239004][T10975] netem: invalid attributes len -24 [ 207.246778][T10975] netem: change failed [ 207.262639][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.281049][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.289549][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.370158][T10985] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20003 [ 207.378772][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.073061][T11030] pim6reg1: entered promiscuous mode [ 208.078586][T11030] pim6reg1: entered allmulticast mode [ 208.193366][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.314861][T11043] macvtap2: entered promiscuous mode [ 208.332997][T11043] macvtap2: entered allmulticast mode [ 208.361686][T11045] macvtap3: entered promiscuous mode [ 208.368587][T11045] macvtap3: entered allmulticast mode [ 208.601747][T11059] netlink: 'syz.1.1442': attribute type 9 has an invalid length. [ 208.789321][T11071] bond7: entered promiscuous mode [ 208.796157][T11071] bond7: entered allmulticast mode [ 208.801780][T11071] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.473037][T11119] syzkaller0: entered promiscuous mode [ 209.478585][T11119] syzkaller0: entered allmulticast mode [ 210.047319][T11160] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 210.053535][T11160] syzkaller1: Linktype set failed because interface is up [ 210.073185][ T5951] syzkaller1: tun_net_xmit 90 [ 210.275963][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.284759][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.294023][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.304758][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.561459][T11177] netlink: 'syz.4.1473': attribute type 13 has an invalid length. [ 210.692187][ T796] wg1 speed is unknown, defaulting to 1000 [ 210.818426][T11196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.335892][T11217] syzkaller0: entered promiscuous mode [ 211.341540][T11217] syzkaller0: entered allmulticast mode [ 211.394119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.805281][T11255] __nla_validate_parse: 18 callbacks suppressed [ 212.805301][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 212.825425][T11255] netlink: 'syz.2.1493': attribute type 7 has an invalid length. [ 212.847529][T11257] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 212.855635][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 212.886936][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 212.901220][T11255] netlink: 'syz.2.1493': attribute type 7 has an invalid length. [ 212.909597][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'. [ 213.018184][T11257] 8021q: adding VLAN 0 to HW filter on device bond6 [ 213.044868][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.094045][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.102301][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.170637][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.258736][T11272] netlink: 'syz.0.1497': attribute type 12 has an invalid length. [ 213.411634][T11287] sctp: [Deprecated]: syz.4.1501 (pid 11287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.411634][T11287] Use struct sctp_sack_info instead [ 213.511270][T11295] netlink: 'syz.2.1503': attribute type 1 has an invalid length. [ 213.644506][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1504'. [ 213.670974][T11297] bond8: (slave gretap1): making interface the new active one [ 213.699535][T11297] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 213.730499][T11305] netlink: 'syz.0.1505': attribute type 12 has an invalid length. [ 213.764791][T11305] netlink: 'syz.0.1505': attribute type 29 has an invalid length. [ 213.794741][T11305] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1505'. [ 213.823625][T11305] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 214.063133][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1511'. [ 214.080559][T11319] xfrm1: entered promiscuous mode [ 214.086037][T11319] xfrm1: entered allmulticast mode [ 214.100900][T11319] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1511'. [ 214.168474][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 214.412037][T11332] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1515'. [ 215.092900][T11354] bond4: entered promiscuous mode [ 215.859961][T11419] tipc: Started in network mode [ 215.865238][T11419] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 215.874348][T11419] tipc: Enabled bearer , priority 10 [ 215.882184][T11424] netlink: 'syz.4.1544': attribute type 21 has an invalid length. [ 215.967590][T11427] syzkaller0: entered promiscuous mode [ 215.973231][T11427] syzkaller0: entered allmulticast mode [ 216.440065][T11455] vlan4: entered allmulticast mode [ 216.454125][T11455] bridge5: entered allmulticast mode [ 216.542331][T11455] bridge5: port 1(bond9) entered blocking state [ 216.642612][T11455] bridge5: port 1(bond9) entered disabled state [ 216.665713][T11455] bond9: entered allmulticast mode [ 216.686035][T11455] bond9: entered promiscuous mode [ 216.849069][T11488] netlink: 'syz.0.1560': attribute type 11 has an invalid length. [ 216.876997][T11488] netlink: 'syz.0.1560': attribute type 11 has an invalid length. [ 216.899134][T11488] netlink: 'syz.0.1560': attribute type 10 has an invalid length. [ 217.105317][T11501] openvswitch: netlink: Message has 4 unknown bytes. [ 217.212308][ T797] tipc: Node number set to 10136234 [ 217.224781][T11507] lo: entered allmulticast mode [ 217.810799][T11545] 8021q: VLANs not supported on tunl0 [ 218.291528][T11571] __nla_validate_parse: 14 callbacks suppressed [ 218.291551][T11571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1583'. [ 218.341251][T11571] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1583'. [ 218.373553][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1583'. [ 218.441488][T11579] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.1585'. [ 218.656982][T11595] tipc: Invalid UDP bearer configuration [ 218.657038][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 218.695005][T11590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1591'. [ 218.712335][T11595] Bluetooth: MGMT ver 1.23 [ 219.123583][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 219.156447][T11637] netlink: 'syz.4.1596': attribute type 4 has an invalid length. [ 219.668053][T11654] syzkaller0: entered promiscuous mode [ 219.692807][T11654] syzkaller0: entered allmulticast mode [ 219.797324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.807049][T11664] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1606'. [ 219.849307][T11664] bond0: (slave bond_slave_0): Releasing backup interface [ 219.904971][T11664] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 219.948935][T11668] veth0: entered promiscuous mode [ 219.997662][T11667] veth0: left promiscuous mode [ 220.190898][T11690] netlink: 'syz.2.1615': attribute type 8 has an invalid length. [ 220.209844][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 220.229318][T11690] bond0: entered promiscuous mode [ 220.236251][T11690] bond0: left promiscuous mode [ 220.378004][T11695] syzkaller1: entered promiscuous mode [ 220.385207][T11695] syzkaller1: entered allmulticast mode [ 220.428079][T11704] netlink: 1196 bytes leftover after parsing attributes in process `syz.2.1621'. [ 220.589783][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1622'. [ 220.739677][T11719] TC_ACT_REPEAT abuse ? [ 220.749881][T11719] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 220.859190][T11727] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 220.986799][T11733] netlink: 'syz.0.1629': attribute type 4 has an invalid length. [ 221.115668][T11739] syzkaller0: entered promiscuous mode [ 221.121443][T11739] syzkaller0: entered allmulticast mode [ 221.139946][T11742] h: entered promiscuous mode [ 221.692347][T11767] netlink: 'syz.4.1639': attribute type 21 has an invalid length. [ 221.906418][T11775] bond10: option all_slaves_active: invalid value (222) [ 221.954191][T11775] bond10 (unregistering): Released all slaves [ 222.554179][T11802] netlink: 'syz.1.1646': attribute type 7 has an invalid length. [ 222.791787][T11802] netlink: 'syz.1.1646': attribute type 7 has an invalid length. [ 223.057741][T11824] syz.4.1652 (11824) used greatest stack depth: 17472 bytes left [ 223.108913][T11829] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.116329][T11829] IPv6: NLM_F_CREATE should be set when creating new route [ 223.410464][T11846] __nla_validate_parse: 9 callbacks suppressed [ 223.410485][T11846] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1659'. [ 223.450530][T11846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.539851][T11856] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 223.699631][T11863] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 223.741521][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1666'. [ 223.792644][T11863] team0: Port device dummy0 added [ 223.804065][T11871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1667'. [ 223.888116][T11877] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1669'. [ 224.066909][T11883] netlink: 'syz.0.1671': attribute type 1 has an invalid length. [ 224.125209][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1672'. [ 224.135683][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 224.149650][T11883] bond3: entered promiscuous mode [ 224.155841][T11883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.171562][T11888] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1673'. [ 224.207041][T11889] bond5: entered promiscuous mode [ 224.212655][T11889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.245120][T11896] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 224.281601][T11889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.289222][T11889] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 224.303373][T11889] bond5: (slave sit1): Error -95 calling set_mac_address [ 224.496732][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 224.563218][T11914] netlink: 'syz.0.1678': attribute type 1 has an invalid length. [ 224.634877][T11916] vlan5: entered allmulticast mode [ 224.650666][T11916] hsr0: entered allmulticast mode [ 224.666619][T11916] hsr_slave_0: entered allmulticast mode [ 224.679049][T11916] hsr_slave_1: entered allmulticast mode [ 224.727069][T11919] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.843844][T11928] bond2: option mode: unable to set because the bond device has slaves [ 224.866591][T11928] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.893362][T11928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.933044][ T1629] block nbd0: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 30 seconds [ 224.946664][ T1629] block nbd0: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 30 seconds [ 224.959790][ T1629] block nbd0: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 30 seconds [ 224.970917][ T1629] block nbd0: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 30 seconds [ 225.581741][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1693'. [ 225.706353][T11985] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1694'. [ 225.719803][T11981] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 225.731301][T11985] netlink: 'syz.2.1694': attribute type 4 has an invalid length. [ 225.732467][T11981] bond4 (unregistering): Released all slaves [ 226.392216][T12012] xt_l2tp: invalid flags combination: 8 [ 226.654275][T12037] x_tables: duplicate underflow at hook 3 [ 226.883477][T12050] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 226.902634][T12054] openvswitch: netlink: IP tunnel dst address not specified [ 226.978835][T12060] netlink: 'syz.3.1716': attribute type 11 has an invalid length. [ 226.995074][T12050] bond4: entered promiscuous mode [ 227.009813][T12050] 8021q: adding VLAN 0 to HW filter on device bond4 [ 227.069190][T12064] Cannot find add_set index 4 as target [ 227.413682][T12083] syzkaller0: entered promiscuous mode [ 227.419223][T12083] syzkaller0: entered allmulticast mode [ 227.837627][T12119] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 227.957113][T12121] vlan7: entered allmulticast mode [ 228.001223][T12121] bond0: entered allmulticast mode [ 228.096695][T12123] bond0 (unregistering): Released all slaves [ 228.397230][T12148] netlink: 'syz.4.1741': attribute type 1 has an invalid length. [ 228.405321][T12148] netlink: 'syz.4.1741': attribute type 8 has an invalid length. [ 228.414663][T12148] __nla_validate_parse: 8 callbacks suppressed [ 228.414681][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1741'. [ 228.590093][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1741'. [ 228.628188][T12158] netlink: 193572 bytes leftover after parsing attributes in process `syz.2.1744'. [ 228.690025][T12158] netlink: Unknown conntrack attr (type=2304, max=9) [ 228.812076][T12165] netlink: 'syz.0.1745': attribute type 2 has an invalid length. [ 228.830079][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 228.880036][T12165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1745'. [ 228.905903][T12168] Cannot find del_set index 4 as target [ 228.934420][T12169] netlink: 'syz.0.1745': attribute type 2 has an invalid length. [ 228.953802][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 228.969231][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1748'. [ 228.996133][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1747'. [ 229.018088][T12168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1746'. [ 229.196441][T12188] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 229.271647][T12195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1754'. [ 229.407017][T12188] bond5: (slave veth5): Enslaving as an active interface with a down link [ 229.449978][T12203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.483297][T12212] bridge_slave_1: default FDB implementation only supports local addresses [ 229.705078][T12223] bond7: option xmit_hash_policy: invalid value (64) [ 229.722611][T12223] bond7 (unregistering): Released all slaves [ 230.000216][T12232] bond6: Removing last ns target with arp_interval on [ 230.220084][T12251] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 230.233237][T12263] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.397914][T12268] tipc: Enabling of bearer rejected, failed to enable media [ 230.413658][T12269] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 230.460035][T12274] netlink: 'syz.1.1772': attribute type 12 has an invalid length. [ 230.973091][T12300] bond0: invalid ARP target 0.0.0.0 specified for addition [ 230.980505][T12300] bond0: option arp_ip_target: invalid value (0) [ 230.989003][T12300] bond0 (unregistering): Released all slaves [ 231.610919][T12335] wg1 speed is unknown, defaulting to 1000 [ 231.811127][T12350] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 231.829251][T12350] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 231.841777][T12350] Bluetooth: MGMT ver 1.23 [ 233.127023][T12415] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 233.217925][T12415] bond0: (slave lo): Enslaving as an active interface with an up link [ 233.259633][T12415] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 233.300704][T12423] syzkaller1: entered promiscuous mode [ 233.325826][T12423] syzkaller1: entered allmulticast mode [ 233.366167][T12423] ip6tnl0: Caught tx_queue_len zero misconfig [ 233.838896][T12447] __nla_validate_parse: 16 callbacks suppressed [ 233.838917][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1827'. [ 234.140791][T12467] netlink: 'syz.2.1834': attribute type 3 has an invalid length. [ 234.351895][T12483] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20004 [ 234.369908][T12486] IPVS: set_ctl: invalid protocol: 29 10.1.1.2:20004 [ 234.377462][T12485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1841'. [ 234.442312][T12483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1840'. [ 234.520940][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 234.545737][T12498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1846'. [ 234.557861][T12493] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1843'. [ 234.598065][T12501] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1846'. [ 234.621006][T12497] syzkaller0: entered promiscuous mode [ 234.627105][T12497] syzkaller0: entered allmulticast mode [ 234.644297][T12493] geneve2: entered promiscuous mode [ 234.649741][T12493] geneve2: entered allmulticast mode [ 234.650740][T12498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1846'. [ 234.696201][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.703744][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.788550][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.795863][T12498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.803558][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.810737][T12498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.885799][T12498] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1846'. [ 234.934016][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1847'. [ 235.044907][T12517] xt_l2tp: unknown flags: 1c [ 235.821929][T12527] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 236.330474][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.337735][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.432880][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.552208][T12535] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 236.630813][T12540] bond6: (slave bridge2): making interface the new active one [ 236.640142][T12540] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 236.658112][T12541] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 236.688143][T12541] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 236.746446][T12545] xt_hashlimit: size too large, truncated to 1048576 [ 237.165800][T12566] syzkaller0: entered promiscuous mode [ 237.174452][T12566] 0: reclassify loop, rule prio 0, protocol 800 [ 237.181724][T12566] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 237.314081][T12574] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 237.321974][T12574] netlink: 'syz.4.1864': attribute type 3 has an invalid length. [ 237.523607][T12579] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 237.531499][T12579] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 237.682153][T12583] syzkaller0: entered promiscuous mode [ 237.709378][T12583] syzkaller0: entered allmulticast mode [ 238.043895][T12619] xt_hashlimit: size too large, truncated to 1048576 [ 240.611891][T12587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.864735][T12637] tipc: Can't bind to reserved service type 1 [ 241.133424][T12656] __nla_validate_parse: 10 callbacks suppressed [ 241.133445][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'. [ 241.249546][T12641] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.314854][T12641] bond7: (slave lo): Enslaving as an active interface with an up link [ 241.364883][T12641] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 243.871105][T12641] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 244.088097][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'. [ 244.168404][T12685] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1895'. [ 244.181347][T12687] netlink: 'syz.3.1892': attribute type 2 has an invalid length. [ 244.234625][T12678] bond7: option fail_over_mac: invalid value (16) [ 244.244702][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 244.260650][T12678] bond7 (unregistering): Released all slaves [ 244.320434][T12697] batadv_slave_0: Caught tx_queue_len zero misconfig [ 244.517385][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1900'. [ 244.579117][T12707] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 244.601892][T12716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.625726][T12707] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 244.654356][T12707] gretap2: entered promiscuous mode [ 244.670095][T12707] gretap2: entered allmulticast mode [ 244.676477][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 244.760745][T12723] bond7: option xmit_hash_policy: invalid value (64) [ 244.781300][T12723] bond7 (unregistering): Released all slaves [ 244.877089][T12731] syzkaller0: entered promiscuous mode [ 244.903348][T12731] syzkaller0: entered allmulticast mode [ 245.083953][T12743] netlink: 'syz.2.1911': attribute type 3 has an invalid length. [ 245.094705][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 245.098814][T12745] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1910'. [ 245.145402][T12745] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1910'. [ 245.283384][T12755] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 245.305588][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 245.353221][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.389450][T12757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.399129][T12761] netlink: 'syz.0.1918': attribute type 16 has an invalid length. [ 245.424367][T12761] netlink: 'syz.0.1918': attribute type 17 has an invalid length. [ 245.533259][T12766] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 245.574235][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.581431][T12761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.606517][T12761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.734769][T12773] syzkaller0: entered promiscuous mode [ 245.743052][T12773] syzkaller0: entered allmulticast mode [ 245.886189][T12781] macvlan0: entered promiscuous mode [ 246.157945][T12797] __nla_validate_parse: 2 callbacks suppressed [ 246.157965][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1932'. [ 246.284965][T12812] 8021q: VLANs not supported on caif0 [ 246.572634][T12824] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.1940'. [ 246.602463][T12824] openvswitch: netlink: Missing key (keys=40, expected=100) [ 246.630133][T12833] tc_dump_action: action bad kind [ 246.812751][T12847] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 246.871243][T12847] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 246.885380][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 246.921012][T12847] bond7 (unregistering): (slave ip6gretap2): Releasing backup interface [ 246.958627][T12854] netlink: 'syz.4.1949': attribute type 30 has an invalid length. [ 246.973765][T12847] bond7 (unregistering): Released all slaves [ 247.129354][T12854] bond7: option arp_missed_max: invalid value (0) [ 247.162196][T12854] bond7: option arp_missed_max: allowed values 1 - 255 [ 247.200883][T12871] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1952'. [ 247.214764][T12854] bond7 (unregistering): Released all slaves [ 247.242637][T12873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1952'. [ 247.290867][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 247.422028][T12878] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 247.458398][T12884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.619239][T12895] syzkaller0: entered promiscuous mode [ 247.624972][T12895] syzkaller0: entered allmulticast mode [ 247.750128][T12903] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 247.881458][T12910] netlink: 'syz.3.1968': attribute type 3 has an invalid length. [ 247.984303][T12915] netlink: 'syz.2.1970': attribute type 9 has an invalid length. [ 248.144192][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1972'. [ 248.158002][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 248.181197][T12920] syzkaller0: entered promiscuous mode [ 248.186885][T12920] syzkaller0: entered allmulticast mode [ 248.255643][T12930] syzkaller0: entered promiscuous mode [ 248.261182][T12930] syzkaller0: entered allmulticast mode [ 248.421669][T12945] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 248.555686][T12951] netlink: 'syz.4.1980': attribute type 29 has an invalid length. [ 248.568499][T12952] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:5 [ 248.629657][T12954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'. [ 248.674077][T12954] tipc: Started in network mode [ 248.683137][T12954] tipc: Node identity 01000000000000002db3, cluster identity 4711 [ 248.871689][T12966] veth0: entered promiscuous mode [ 248.881382][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 249.043987][T12978] "syz.2.1987" (12978) uses obsolete ecb(arc4) skcipher [ 249.121178][T12984] syzkaller0: entered promiscuous mode [ 249.127295][T12984] syzkaller0: entered allmulticast mode [ 249.343579][T12992] validate_nla: 2 callbacks suppressed [ 249.343599][T12992] netlink: 'syz.3.1992': attribute type 15 has an invalid length. [ 249.563661][T12997] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 249.584939][T12997] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 249.595208][T12997] netlink: 'syz.3.1994': attribute type 1 has an invalid length. [ 249.608700][T12997] netlink: 'syz.3.1994': attribute type 8 has an invalid length. [ 249.729021][T13009] netlink: 'syz.0.1997': attribute type 5 has an invalid length. [ 249.801844][T13009] geneve3: entered promiscuous mode [ 249.807733][T13009] geneve3: entered allmulticast mode [ 249.809530][T13012] netlink: 'syz.3.1998': attribute type 11 has an invalid length. [ 249.842468][ T161] netdevsim netdevsim0 : set [1, 1] type 2 family 0 port 256 - 0 [ 249.859476][ T161] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 249.888008][ T161] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 249.902797][ T161] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 250.304033][T13042] macsec1: entered promiscuous mode [ 250.309647][T13042] bridge0: entered promiscuous mode [ 250.320047][T13042] macsec1: entered allmulticast mode [ 250.332798][T13042] bridge0: entered allmulticast mode [ 250.338788][T13042] bridge0: port 3(macsec1) entered blocking state [ 250.363244][T13042] bridge0: port 3(macsec1) entered disabled state [ 250.412976][T13042] bridge0: left allmulticast mode [ 250.420505][T13042] bridge0: left promiscuous mode [ 250.456496][T13055] netlink: 'syz.2.2011': attribute type 3 has an invalid length. [ 250.464675][T13055] netlink: 'syz.2.2011': attribute type 3 has an invalid length. [ 250.484944][T13055] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 250.654423][T13069] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 250.674255][T13068] netlink: 'syz.3.2013': attribute type 1 has an invalid length. [ 250.694499][T13069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.887839][T13085] wireguard0: entered promiscuous mode [ 250.897927][T13085] wireguard0: entered allmulticast mode [ 250.926020][T13085] team0: Device wireguard0 is of different type [ 251.255792][T13110] __nla_validate_parse: 12 callbacks suppressed [ 251.255816][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2024'. [ 251.273221][T13107] block nbd1: server does not support multiple connections per device. [ 251.282026][T13107] block nbd1: shutting down sockets [ 251.323233][T13111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2023'. [ 251.332571][T13113] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2025'. [ 251.352249][T13111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'. [ 251.443283][T13113] bond8 (unregistering): Released all slaves [ 251.478683][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2023'. [ 251.528598][T13128] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 251.554170][T13118] nbd: device at index 64 is going down [ 251.564199][T13117] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2026'. [ 251.597645][T13117] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 251.731414][T10435] udevd[10435]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 251.779690][T10435] udevd[10435]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 251.874750][T13142] tipc: Enabling of bearer rejected, failed to enable media [ 252.306789][T13176] tunl0: entered promiscuous mode [ 252.325034][T13176] netlink: 'syz.0.2041': attribute type 3 has an invalid length. [ 252.333161][T13176] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2041'. [ 252.418436][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 252.429180][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2045'. [ 252.692050][T13195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 253.077534][T13207] bridge0: port 3(ipvlan2) entered blocking state [ 253.085975][T13207] bridge0: port 3(ipvlan2) entered disabled state [ 253.093433][T13207] ipvlan2: entered allmulticast mode [ 253.098850][T13207] bridge0: entered allmulticast mode [ 253.107757][T13207] ipvlan2: left allmulticast mode [ 253.114035][T13207] bridge0: left allmulticast mode [ 253.634641][T13241] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 254.037491][T13262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.086683][T13263] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.109657][T13263] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 254.134908][T13263] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 254.153532][T13263] bond7: (slave xfrm1): making interface the new active one [ 254.162190][T13263] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 254.571990][T13302] syzkaller0: entered promiscuous mode [ 254.577661][T13302] syzkaller0: entered allmulticast mode [ 254.794884][T13321] netlink: 'syz.2.2082': attribute type 1 has an invalid length. [ 254.899550][T13321] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.956521][T13323] bond10: entered allmulticast mode [ 254.994271][ T1629] block nbd0: Connection timed out, retrying (0/1 alive) [ 255.002091][ T1629] block nbd0: Connection timed out, retrying (0/1 alive) [ 255.010062][ T1629] block nbd0: Connection timed out, retrying (0/1 alive) [ 255.017757][ T1629] block nbd0: Connection timed out, retrying (0/1 alive) [ 255.027070][ T25] block nbd0: Dead connection, failed to find a fallback [ 255.121343][T13342] openvswitch: netlink: Flow actions attr not present in new flow. [ 255.139256][T13342] lo: Caught tx_queue_len zero misconfig [ 255.453534][T13356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.515619][T13359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.639480][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.669878][T13363] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.677127][T13363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.684742][T13363] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.691941][T13363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.710348][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.717670][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.741117][T13372] netlink: 'syz.2.2097': attribute type 3 has an invalid length. [ 256.219424][T13402] block nbd2: NBD_DISCONNECT [ 256.381521][T13413] vlan1: entered allmulticast mode [ 256.392779][T13413] veth0_vlan: entered allmulticast mode [ 256.531804][T13421] syzkaller0: entered promiscuous mode [ 256.537437][T13421] syzkaller0: entered allmulticast mode [ 256.548496][T13421] netlink: 'syz.3.2115': attribute type 4 has an invalid length. [ 256.783187][T13438] __nla_validate_parse: 20 callbacks suppressed [ 256.783208][T13438] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2117'. [ 256.826319][T13438] netlink: 54 bytes leftover after parsing attributes in process `syz.4.2117'. [ 256.853564][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2117'. [ 257.124050][T13453] syzkaller0: entered promiscuous mode [ 257.129593][T13453] syzkaller0: entered allmulticast mode [ 257.238132][T13460] batadv0: entered promiscuous mode [ 257.265192][T13460] macsec1: entered promiscuous mode [ 257.280093][T13460] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 257.307443][T13460] batadv0: left promiscuous mode [ 257.356150][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2124'. [ 257.396254][T13465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2124'. [ 257.604736][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 257.657182][T13480] netlink: 'syz.0.2128': attribute type 8 has an invalid length. [ 258.134177][T13515] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 258.417111][T13515] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 258.516015][T13528] netlink: 'syz.0.2137': attribute type 2 has an invalid length. [ 258.719532][T13534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2139'. [ 259.073635][T13553] nbd1: detected capacity change from 0 to 127 [ 259.317020][T13568] wg1 speed is unknown, defaulting to 1000 [ 259.485673][T13572] syzkaller0: entered promiscuous mode [ 259.501565][T13572] syzkaller0: entered allmulticast mode [ 259.736842][T13583] syz_tun: entered allmulticast mode [ 259.783892][ T5835] block nbd1: Receive control failed (result -104) [ 260.042017][T13592] syzkaller0: entered promiscuous mode [ 260.047740][T13592] syzkaller0: entered allmulticast mode [ 260.428504][T13621] syzkaller0: entered promiscuous mode [ 260.434263][T13621] syzkaller0: entered allmulticast mode [ 260.525041][T13625] netlink: 'syz.4.2164': attribute type 1 has an invalid length. [ 260.553154][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 260.602949][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 260.618115][T13625] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2164'. [ 260.886584][T13646] syzkaller0: entered promiscuous mode [ 261.110741][T13659] netlink: 'syz.4.2173': attribute type 2 has an invalid length. [ 261.325629][T13668] syzkaller0: entered promiscuous mode [ 261.331790][T13668] syzkaller0: entered allmulticast mode [ 261.467186][T13665] bond1: entered promiscuous mode [ 261.472384][T13665] bond1: entered allmulticast mode [ 261.949206][T13693] __nla_validate_parse: 6 callbacks suppressed [ 261.949229][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'. [ 261.968832][T13693] bridge_slave_1: left allmulticast mode [ 261.982943][T13694] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 262.003902][T13693] bridge_slave_1: left promiscuous mode [ 262.010002][T13693] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.065679][T13693] bridge_slave_0: left allmulticast mode [ 262.083151][T13693] bridge_slave_0: left promiscuous mode [ 262.088980][T13693] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.466537][T13717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'. [ 262.600899][T13723] syzkaller0: entered promiscuous mode [ 262.606623][T13723] syzkaller0: entered allmulticast mode [ 262.802094][ T5490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.888166][T13745] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 265.935007][ T5194] udevd[5194]: worker [10051] /devices/virtual/block/nbd0 is taking a long time [ 269.713057][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.553838][T13338] block nbd1: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 30 seconds [ 289.565391][T13338] block nbd1: Possible stuck request ffff888026ab0200: control (read@1024,1024B). Runtime 30 seconds [ 289.576372][T13338] block nbd1: Possible stuck request ffff888026ab0400: control (read@2048,1024B). Runtime 30 seconds [ 289.587508][T13338] block nbd1: Possible stuck request ffff888026ab0600: control (read@3072,1024B). Runtime 30 seconds [ 317.077199][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.633689][T13338] block nbd1: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 60 seconds [ 319.644492][T13338] block nbd1: Possible stuck request ffff888026ab0200: control (read@1024,1024B). Runtime 60 seconds [ 319.655646][T13338] block nbd1: Possible stuck request ffff888026ab0400: control (read@2048,1024B). Runtime 60 seconds [ 319.666671][T13338] block nbd1: Possible stuck request ffff888026ab0600: control (read@3072,1024B). Runtime 60 seconds [ 320.061351][ T5194] udevd[5194]: worker [10435] /devices/virtual/block/nbd1 is taking a long time [ 337.552889][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.714984][T13338] block nbd1: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 90 seconds [ 349.725820][T13338] block nbd1: Possible stuck request ffff888026ab0200: control (read@1024,1024B). Runtime 90 seconds [ 349.737125][T13338] block nbd1: Possible stuck request ffff888026ab0400: control (read@2048,1024B). Runtime 90 seconds [ 349.748105][T13338] block nbd1: Possible stuck request ffff888026ab0600: control (read@3072,1024B). Runtime 90 seconds [ 377.209236][ T5194] udevd[5194]: worker [10051] /devices/virtual/block/nbd0 timeout; kill it [ 377.219114][ T5194] udevd[5194]: seq 14484 '/devices/virtual/block/nbd0' killed [ 378.516579][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.794662][T13338] block nbd1: Possible stuck request ffff888026ab0000: control (read@0,1024B). Runtime 120 seconds [ 379.805523][T13338] block nbd1: Possible stuck request ffff888026ab0200: control (read@1024,1024B). Runtime 120 seconds [ 379.816751][T13338] block nbd1: Possible stuck request ffff888026ab0400: control (read@2048,1024B). Runtime 120 seconds [ 379.827897][T13338] block nbd1: Possible stuck request ffff888026ab0600: control (read@3072,1024B). Runtime 120 seconds [ 403.472805][ T30] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 403.480484][ T30] Not tainted syzkaller #0 [ 403.486609][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.495419][ T30] task:kworker/1:0H state:D stack:26504 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 403.507594][ T30] Workqueue: kblockd blk_mq_requeue_work [ 403.513343][ T30] Call Trace: [ 403.516640][ T30] [ 403.519582][ T30] __schedule+0x15dd/0x52d0 [ 403.524289][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 403.530997][ T30] ? __pfx___schedule+0x10/0x10 [ 403.536231][ T30] ? schedule+0x90/0x360 [ 403.540586][ T30] schedule+0x164/0x360 [ 403.544913][ T30] schedule_timeout+0x158/0x2c0 [ 403.549808][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 403.555335][ T30] ? __pfx_process_timeout+0x10/0x10 [ 403.560679][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.566630][ T30] ? prepare_to_wait_event+0x436/0x480 [ 403.572142][ T30] nbd_queue_rq+0x857/0x1100 [ 403.576837][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 403.581909][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 403.588134][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.593595][ T30] ? irqentry_exit+0x59e/0x620 [ 403.598426][ T30] ? trace_irq_disable+0x3b/0x150 [ 403.603605][ T30] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 403.609207][ T30] ? sbitmap_get+0x229/0x390 [ 403.613887][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 403.619913][ T30] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 403.625883][ T30] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 403.632286][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 403.639320][ T30] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 403.645493][ T30] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 403.650830][ T30] blk_mq_run_hw_queue+0x348/0x4f0 [ 403.656854][ T30] blk_mq_run_hw_queues+0x26c/0x3f0 [ 403.662174][ T30] blk_mq_requeue_work+0x71c/0x780 [ 403.667877][ T30] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 403.673744][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 403.679520][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 403.685383][ T30] process_scheduled_works+0xb6e/0x18c0 [ 403.691000][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 403.697390][ T30] ? assign_work+0x3d5/0x5e0 [ 403.702021][ T30] worker_thread+0xa53/0xfc0 [ 403.706757][ T30] kthread+0x388/0x470 [ 403.710872][ T30] ? __pfx_worker_thread+0x10/0x10 [ 403.716429][ T30] ? __pfx_kthread+0x10/0x10 [ 403.721096][ T30] ret_from_fork+0x51e/0xb90 [ 403.726207][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 403.731369][ T30] ? __switch_to+0xc7d/0x1450 [ 403.736217][ T30] ? __pfx_kthread+0x10/0x10 [ 403.740850][ T30] ret_from_fork_asm+0x1a/0x30 [ 403.745725][ T30] [ 403.748891][ T30] [ 403.748891][ T30] Showing all locks held in the system: [ 403.756954][ T30] 4 locks held by kworker/1:0H/25: [ 403.762098][ T30] #0: ffff88801e2bd548 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 403.773417][ T30] #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 403.787577][ T30] #2: ffff88802637fd98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 403.797633][ T30] #3: ffff888026a80580 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 403.806851][ T30] 1 lock held by khungtaskd/30: [ 403.811835][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 403.822143][ T30] 2 locks held by syslogd/5176: [ 403.827472][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 403.837522][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 403.846521][ T30] 2 locks held by getty/5585: [ 403.851229][ T30] #0: ffff8880376c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 403.861387][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 403.871639][ T30] 1 lock held by udevd/10051: [ 403.876387][ T30] #0: ffff888026966358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 403.885993][ T30] 1 lock held by udevd/10435: [ 403.890698][ T30] #0: ffff888026a52358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 403.900106][ T30] [ 403.902474][ T30] ============================================= [ 403.902474][ T30] [ 403.911016][ T30] NMI backtrace for cpu 0 [ 403.911039][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 403.911058][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.911067][ T30] Call Trace: [ 403.911074][ T30] [ 403.911082][ T30] dump_stack_lvl+0xe8/0x150 [ 403.911109][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 403.911127][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 403.911150][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 403.911170][ T30] sys_info+0x135/0x170 [ 403.911185][ T30] watchdog+0xfd9/0x1030 [ 403.911204][ T30] ? watchdog+0x21a/0x1030 [ 403.911235][ T30] kthread+0x388/0x470 [ 403.911258][ T30] ? __pfx_watchdog+0x10/0x10 [ 403.911270][ T30] ? __pfx_kthread+0x10/0x10 [ 403.911286][ T30] ret_from_fork+0x51e/0xb90 [ 403.911309][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 403.911329][ T30] ? __switch_to+0xc7d/0x1450 [ 403.911350][ T30] ? __pfx_kthread+0x10/0x10 [ 403.911366][ T30] ret_from_fork_asm+0x1a/0x30 [ 403.911401][ T30] [ 403.911407][ T30] Sending NMI from CPU 0 to CPUs 1: [ 404.023041][ C1] NMI backtrace for cpu 1 [ 404.023060][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 404.023079][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.023096][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 404.023127][ C1] Code: 6e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 404.023144][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 404.023161][ C1] RAX: 0000000000161e59 RBX: ffffffff819a9d1a RCX: 0000000080000001 [ 404.023173][ C1] RDX: 0000000000000001 RSI: ffffffff8defc649 RDI: ffffffff8c27d580 [ 404.023186][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 404.023199][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 404.023211][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 404.023224][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 404.023239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.023251][ C1] CR2: 00007f25a7a0fae4 CR3: 0000000076338000 CR4: 00000000003526f0 [ 404.023267][ C1] Call Trace: [ 404.023275][ C1] [ 404.023282][ C1] default_idle+0x9/0x20 [ 404.023298][ C1] default_idle_call+0x72/0xb0 [ 404.023317][ C1] do_idle+0x36a/0x5f0 [ 404.023346][ C1] ? __pfx_do_idle+0x10/0x10 [ 404.023376][ C1] cpu_startup_entry+0x43/0x60 [ 404.023401][ C1] start_secondary+0x101/0x110 [ 404.023423][ C1] common_startup_64+0x13e/0x147 [ 404.023451][ C1] [ 404.187450][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 404.194378][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 404.203498][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.213581][ T30] Call Trace: [ 404.216879][ T30] [ 404.219812][ T30] vpanic+0x56c/0xa60 [ 404.223810][ T30] ? __pfx___schedule+0x10/0x10 [ 404.228674][ T30] ? __pfx_vpanic+0x10/0x10 [ 404.233198][ T30] ? __pfx_console_unlock+0x10/0x10 [ 404.238442][ T30] panic+0xc5/0xd0 [ 404.242204][ T30] ? __pfx_panic+0x10/0x10 [ 404.246637][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 404.252020][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 404.258182][ T30] watchdog+0x1023/0x1030 [ 404.262522][ T30] ? watchdog+0x21a/0x1030 [ 404.266945][ T30] kthread+0x388/0x470 [ 404.271015][ T30] ? __pfx_watchdog+0x10/0x10 [ 404.275692][ T30] ? __pfx_kthread+0x10/0x10 [ 404.280285][ T30] ret_from_fork+0x51e/0xb90 [ 404.284902][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 404.290079][ T30] ? __switch_to+0xc7d/0x1450 [ 404.294779][ T30] ? __pfx_kthread+0x10/0x10 [ 404.299477][ T30] ret_from_fork_asm+0x1a/0x30 [ 404.304282][ T30] [ 404.307507][ T30] Kernel Offset: disabled [ 404.311845][ T30] Rebooting in 86400 seconds..