last executing test programs: 9.34940144s ago: executing program 1 (id=3096): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000e1ffff0100000000000000", @ANYRES32=0x1, @ANYBLOB='\n\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0xbf, 0x7, 0x15, @mcast1, @local, 0x80, 0x700, 0xcd2, 0x8}}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x7}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x0, r1}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000800)={'pimreg0\x00', &(0x7f0000000740)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) socket$unix(0x1, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000b40)="3275de090303953e423d1c1eb320740540041b5ddc1472c4a6a642c5a521dd38c37fb12f13e3b42df736314715d0ac37b333f7dd5a41548b71eeacc4603089c7fa20d8a8877a1bb5ce176b0176", 0x4d}], 0x1}}], 0x1, 0x0) writev(r7, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000a40)={{0xa, 0x4e21, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xf}, {0xa, 0x4e23, 0x3, @empty, 0x273cc0}, 0xffffffffffffffff, {[0x72, 0x1000, 0x3, 0x8, 0x7, 0x6, 0x6, 0x43]}}, 0x5c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000008100000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0xc0, &(0x7f0000000240)=""/192, 0x40f00, 0x61, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x1, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff, r5, 0x1, r6], &(0x7f0000000640)=[{0x0, 0x4, 0x7, 0x2}, {0x0, 0x1, 0x1, 0x7}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xf, 0x5}], 0x10, 0xd}, 0x94) 8.311870322s ago: executing program 1 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5f9d8116d30af9ffff281c2da040", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x0, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5f9d8116d30af9ffff281c2da040", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 8.239686514s ago: executing program 1 (id=3104): pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x8000, 0x0, 0x1, 0xfff, 0x1ff], 0x3, &(0x7f0000000040)=[{}, {}], 0x0, [{}, {}, {}]}, 0xa8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x8d0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r6, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x161b060f1436d4f2}, 0x10) 5.439304726s ago: executing program 1 (id=3108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a02fdff000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 5.301711826s ago: executing program 1 (id=3111): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast1}}}], 0x38}, 0x4008001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}]}}]}, 0x3c}}, 0x1d56ce4313cec79f) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.084262826s ago: executing program 1 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="8d74eb"], &(0x7f0000001500)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0) 4.180353932s ago: executing program 0 (id=3124): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="280100000000000001000fa314014418ce4b30b98a6a23000001", @ANYRESOCT=r2], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x26020480) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x492f, 0x5, 0x41, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r5, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x5) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4(r0, 0x0, 0x0, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d04000000000000000200000000", @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00003c"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.410289641s ago: executing program 4 (id=3131): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = gettid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={r3, 0xee00, 0xee00}, 0xc) (async) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33df, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x50) close(r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xffffffff, 0x6, 0x4, 0x24, r2, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0xd}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r5, &(0x7f0000000040)}, 0x20) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x20010, r1, 0x19c01000) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000002e00090027bd7000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="2c00168025001c005b010e5ee7495023e607c1f498a459eaffffffffffffffff3a9a39b3d5defad754000000"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newchain={0x24, 0x64, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x0, 0xffe0}, {0xc, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x18081}, 0x20008090) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) (async) recvmsg$qrtr(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x0) syz_emit_ethernet(0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbb04000000000340110804450c001e0000000000019078ac1414bbac1414aa080090780fff0200c135"], 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) 3.32855759s ago: executing program 4 (id=3132): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000018380000000c0a01010000000000000000070000000900010073797a3000000000040003800800044000000003090002"], 0xbc}}, 0x0) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) close(r3) syz_emit_ethernet(0x5e, &(0x7f0000000800)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x2e, [@multicast2, @multicast2, @broadcast]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x1, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}, 0x0) 3.186115394s ago: executing program 0 (id=3134): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000001400000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x15}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendto$unix(r7, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r7, 0x0, 0x23, 0x40000011, 0x0, 0x0) close(0x4) 3.048419888s ago: executing program 4 (id=3135): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x283469c4fb420076}, 0x20004000) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000024c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25010000000800020006000000140005000000000000000000000000000000000008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x20008804) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="2c0000001000010000000000fedbdf27070000001300000008000000", @ANYRES32, @ANYBLOB="0c003a00010009"], 0x2c}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f0000000180)={r0, &(0x7f0000000040)='\x00', 0x4001, &(0x7f00000000c0)={@align=0xfffffffffffffffa, {0x7fff, 0x5, 0x8, 0xb}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) 2.934993052s ago: executing program 3 (id=3136): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'rose0\x00', &(0x7f0000000040)=@ethtool_cmd={0x18, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x87, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80000043, [0x2, 0x89ff]}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000010400006160000000080000c0080000", @ANYRES32, @ANYBLOB="01000100"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000010800012000000009000000000000c2c2cdf3000000000000000000"], 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_ifreq(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r7, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="d8dd8f69a6c2df36202e14997e2262c8ca3ff57548ddca451669b4ea105861c9", 0x20}], 0x1, 0x0, 0x0, 0x4c944}], 0x1, 0x40840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0x9}}}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x9c, 0x0, 0x204, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6dc74b1c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7236d1c0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x465}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfc}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.761403721s ago: executing program 4 (id=3137): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast1}}}], 0x38}, 0x4008001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_EMATCHES={0x4}]}}]}, 0x40}}, 0x1d56ce4313cec79f) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.687596668s ago: executing program 3 (id=3138): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x43, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000290000003700000033000000000000001400000000000000290000001b0000000800000000000000"], 0x30}}], 0x2, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 2.532470324s ago: executing program 3 (id=3139): socket$kcm(0x23, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x2c, 0x0, "bb02a3c364ca41d6357e544524014004000b42a21d7214bf34a6324d6193fcf19b2df3ee818afaa4fb1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe0000000600"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) unshare(0x8040480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read(r5, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000180)) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f00000000c0), 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 2.464130673s ago: executing program 4 (id=3141): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000004c0)={@private2, 0x0}, &(0x7f0000000500)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r6, @ANYBLOB="100001800400048008"], 0x28}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x8c, 0x0, 0x200, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x28000841}, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'syztnl2\x00', r2, 0x20, 0x10, 0x7fffffff, 0xfffffe00, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x66, 0x0, 0xa2, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@lsrr={0x83, 0x7, 0x8b, [@remote]}]}}}}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1400}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) 2.242691699s ago: executing program 4 (id=3143): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)=':%\x00', 0x40100, &(0x7f0000000040)={@_ha_fsid={[0x3, 0x9]}, {0x7, 0x4, 0x0, 0x700000000}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0xa}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r1, 0x700, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xbf5d}, @NL80211_ATTR_VENDOR_DATA={0x2b, 0xc5, "9f2666619e89cfc33b5c0ad93262146d62177f4b7d4154d6a26df13878a63ffdcd401e774bf5ec"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x88}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40088}, 0x801) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r3 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x218, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x2) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x5a4f, 0x4) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @remote}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="48297893e42909b5bf2a313e0aa20f2a3e12b204d2a97fdc63216ce3819bc2aff831a2f0d368ed9720f13f965c6e3cc55ba730e661a354ddf5b8af60a1c60e7eb8a3d8267039b1b8d1c301fe76d9e1570d00006cb3e372814778708ac169fd39575f3f28985a9f653fbe", @ANYRES16=r8, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="6000301207f2ab716b08590b1af877ebfb8c7b633d09d2000000000000", @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c0002001e0000001f00000006000100fc0f00000600050088", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x60}}, 0x8000) ioctl$EXT4_IOC_GETSTATE(r9, 0x40046629, &(0x7f0000000680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc4, 0x8, 0x0, 0x0, 0x2000}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.975631957s ago: executing program 3 (id=3144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020400040001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.843818951s ago: executing program 3 (id=3145): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r6, 0x6, 0x2, 0xfffffffffffffffd, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, 0x0, 0x0) 1.011223398s ago: executing program 2 (id=3149): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000041ffffff000000000800000018170000", @ANYRES32=r0, @ANYBLOB="0000000000000000181200000e9438bf423d217431a4fc68bf3f95a3190ed4b4b486557e5e42bb5d3cad5fa55027c605be8d3f875f5f5d9a8a57011396647f7aa6e2f10b4ea4cb36431ef9692243f2618174c3a432e5025ce68b596183a84acee9fda71b4921823c26c0b3011f67c466aa2936df4c218dab18222d8527a6a90fd5d2dd831608cbc4dc47e018848920e33ced00718adfc088a71ca7dcc6481cbc79237980ec4a7b58b0379aa5bb9cb87b32228a541fc9724f05abd41b6e6db2c8b33450f48cf4102d06cdb2e576d20524622150e06d7eb1709cb73b3aa1b6a4316ba28fc7b20463cf22f05fca", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe27, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 924.382112ms ago: executing program 2 (id=3150): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast1}}}], 0x38}, 0x4008001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}, @TCA_FLOW_EMATCHES={0x4}]}}]}, 0x40}}, 0x1d56ce4313cec79f) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 779.965104ms ago: executing program 2 (id=3151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="020320001300000000000000000000000400030003000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff00000000000000000000000000000000020001000000000000000000ce91912f030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0xb4}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x64}}, 0x4004c015) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) 625.289117ms ago: executing program 0 (id=3152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000700)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x80000006}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000000002900000039000000840202"], 0x28}}], 0x1, 0x40000000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x0, 0x25dfdbfe, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x48800) 544.321582ms ago: executing program 2 (id=3153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x54, r1, 0x409, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x550}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="04040000160001000000000000000000ac141410000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe88000000000000000000000000210100000000320000007f00000100000000000000000000000000000000000000000000000000000000ec0100000000000000000000000000000000010000000000000010000000000000000000000000009948000000000000000000000000000000000000000000000000004000000000000000000000000000000000000100000000000000000003000000000a00000000000000000000000000000002000000dc0014"], 0x404}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000180)='ns/ipc\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff033189442602000000f09900", 0x0, 0x61, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)={0xd0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b5f44e4ce2d715f5f5f290a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x4}]}, 0xd0}, {&(0x7f00000006c0)={0x100, 0x1d, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xc8, 0x79, 0x0, 0x1, [@generic="8efc81bf7b36e71e2b56f8736298", @generic="ee6458bee7b5d893ef079c8e735a8532e892959fcb1bc39a9bd51b4936f81ae0d1572f64bcd9ce75835826f593464e49b3b41ef31c854b5c46e4101ddca753b78a6db75f0963dae7affc02f8828f0829119da4baa9eee140b3826a4aeb2eaee93fc5c702ddfa651643dfcc4f8e8dc5461973524e91553029182a2a39c7b5685312d45634503422049530de4d14d5c0ee741d686defdef3b4363d31a747d95e647a15", @typed={0x8, 0x28, 0x0, 0x0, @uid=r6}, @typed={0x8, 0xd4, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x24}]}, @typed={0xb, 0x14c, 0x0, 0x0, @str='ns/ipc\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r3}, @nested={0x14, 0x6d, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x9}, @nested={0x4, 0x119}]}]}, 0x100}, {&(0x7f00000001c0)={0x144, 0x2f, 0x2, 0x70bd26, 0x25dfdbfe, "", [@generic="9402a2c3b66f85e9e8207440750b975c2402db3dcf0340d80770ac8a87ce012a59775dffa47554f367a8a55c725ae9e2417e5c367949c2dd3db2f836809873e43c3e11c657aaef64c0258f412db44f7ec9a360051057b009a8140d0725f44cfb2bf07d7e9a6048831991ad6b3297658a61731d048472fca1a4b1b7b5905a6ee51450ad57c18d4336362bc890a83b2048d843858da874bdc67f18f8dc566bb7fde8056f50", @generic="5ded5a2644d656720ab18c93fb463bb2bf657bbb074945eba236cbf15878245cb6d3d3f21d9f2ca2f0de9c295c0e86c18389bfeb7a8da66ef5b6b809fa46c4c22a80aa2e0ab5cdd18ec5163e76f14ea1142ae813648195fad57caef2c4957c036670c2c018bc3d819a7c8ade1d3cc5fd816aa79caa279336ee54976474360fa52e3d5f2f943f6061f132f606d15929"]}, 0x144}], 0x3}, 0x40040) 441.175018ms ago: executing program 2 (id=3154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000100001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) 341.248ms ago: executing program 2 (id=3155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005cc0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000", 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) accept4(r2, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x80, 0x80000) splice(r3, 0x0, r3, 0x0, 0x1100000000f336, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800) 243.875157ms ago: executing program 0 (id=3156): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000005000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 205.663163ms ago: executing program 3 (id=3157): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRESOCT=r1], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) accept4$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0xc1000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000566b56186a10912c104e4482354186d48ef73e550ab347b5de1ff39c4d6b386c1658cc882d8058ed91b9a9742fdfcb7bc9fd2a043a1a27193744b4d5431a4e51210d207a97f8c851d1867115759a8e3b0a59462f1efc4fd06ab418b3da94d5e9b16041223ee0aed7ac6624ead72cef15fc27e5a9420a8ecc278cc6d0b78911958d68ade03f33224aced8b6fadd583819d9f64d8bddd98925fb474912c74a046d98b8d3b652b8102f573fb873191fff6a76a3d036e8ba2d9b309d3ab9c388ebd987e76dc4aa6cf03dd187c806d3b36d2ea0b18b5ac44f44813c963d8620441014fed4d6e9cebc6707367c8b7f05f1fb5dc4"], 0x28}}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x3ff}}, 0xfa1, 0x7ff, 0x6, 0x7, 0x0, 0x7ff}, &(0x7f00000003c0)=0x9c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000400)={r6, 0x7}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r9 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000740)={0x20002010}) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300006813000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NL80211_CMD_GET_MPATH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0], 0x34}}, 0x8080) sendmsg$NL80211_CMD_ASSOCIATE(r7, 0x0, 0x80081) 201.244317ms ago: executing program 0 (id=3158): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000090000000000000007000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000fcffffff0000000000000000850000001e000000183b00000400"/72], &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000340)=""/119, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x400, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x4, 0xa}, {0x0, 0x1, 0x4}], 0x10, 0x1}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000540)=r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001cc0)={{r0, &(0x7f0000000040)=').#\x00', 0x400000, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x8]}, {0x0, 0x12d, 0xcb84, 0x8cd}}, 0x88, &(0x7f0000000240), &(0x7f0000000280)=0x5}, 0x6, &(0x7f0000001c00)=[{0x3, 0x5, &(0x7f00000002c0)='\x00', &(0x7f0000000780)="0b4ce6a83843987cc95bbfd57fe1ab84be75798e853b398780645e1440b2bc64c312a1d5d36b849ddb76e0adf0bcf56afc8ae1099326d9b3c16ea093bd10f62fae7236d73e50f74d8c1a821e3a2e66930d3f10", 0x53, 0x28}, {0x3, 0xffffff04, &(0x7f0000000800)='GPL\x00', &(0x7f0000000840)="29b0a5ca045275590ab40257aa070d38a7fe66906d9a04d6c9b6230a04867bff3abdae4c7d3793f211c733c961a2cc02630551d7ca86325969d7d3be5f3731b2bae89aa8502dce4ed352edcf", 0x4c, 0x10}, {0x1, 0x3, &(0x7f00000008c0)='.-{\x00', &(0x7f0000000900)="f7d4b04c65f2ae671d2ace52c0166cec3e09f5abd05ee38df532963f049536193705ac0c79c442bd6dd370f67ea1895fbf00bafbcaf1848ca240962e66a9d28756569caa2f3258325b3a2ac9c3592a", 0x4f, 0x10}, {0x1, 0x6, &(0x7f0000000980)='+$[\x00', &(0x7f00000009c0)="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", 0x1000, 0x22}, {0x1, 0xd, &(0x7f00000019c0)='veth0_virt_wifi\x00', &(0x7f0000001a00)="53d9dc37e274443917b524e6a99a49112c431bf35ee4735bb8e7c8400bbe85bce76856ed9b2e5de3dfd4e728bb408ddb7c00f6bfcc07cac9dc8af78247baf1b5c3b05de8c77535ee5071d07e73364427f7c273cb70bc35ad2c23ffef80f044df79e7f320f67fb9801aa946ee600abc790b4d6d7844afe30418b40d5f056fa360cda544fda802f2b517f71889b5852998685fc2c0fa5e19742b3be760f896b15956afc8759e7488d44e220bbe397dce3f69801041f1d7456b077931a2cf41125d62d401d0a0b6d01528ee120c5670eb71fdf18b2a2137", 0xd6, 0x22}, {0x2, 0x4, &(0x7f0000001b00)='\x00', &(0x7f0000001b40)="162b21e73336d5d1451180f6bd0cf2ad190ab27b182757c98416336499df845b1bb9d02632f53765f6db3d03340981ab701df3fd0b40628043bbc05a003efc6731da32a7022639369d3f1e1891819c6eba88c90baf424fa174443490e4dd9118225d9616686b524fdbfd471fc919fb6b56b0f08a5f4cef6ba27bab804e10aeac25bb4bffb7d555975a8e966b4ea862896e421744f286b6ea8e763f30cb6cb6", 0x9f, 0x50}]}) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000090000000000000007000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018430000fcffffff0000000000000000850000001e000000183b00000400"/72], &(0x7f0000000300)='GPL\x00', 0x4, 0x77, &(0x7f0000000340)=""/119, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x400, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x2, 0x4, 0xa}, {0x0, 0x1, 0x4}], 0x10, 0x1}, 0x94) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000540)=r0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001cc0)={{r0, &(0x7f0000000040)=').#\x00', 0x400000, &(0x7f0000000200)={@_ha_fsid={[0x6, 0x8]}, {0x0, 0x12d, 0xcb84, 0x8cd}}, 0x88, &(0x7f0000000240), &(0x7f0000000280)=0x5}, 0x6, &(0x7f0000001c00)=[{0x3, 0x5, &(0x7f00000002c0)='\x00', &(0x7f0000000780)="0b4ce6a83843987cc95bbfd57fe1ab84be75798e853b398780645e1440b2bc64c312a1d5d36b849ddb76e0adf0bcf56afc8ae1099326d9b3c16ea093bd10f62fae7236d73e50f74d8c1a821e3a2e66930d3f10", 0x53, 0x28}, {0x3, 0xffffff04, &(0x7f0000000800)='GPL\x00', &(0x7f0000000840)="29b0a5ca045275590ab40257aa070d38a7fe66906d9a04d6c9b6230a04867bff3abdae4c7d3793f211c733c961a2cc02630551d7ca86325969d7d3be5f3731b2bae89aa8502dce4ed352edcf", 0x4c, 0x10}, {0x1, 0x3, &(0x7f00000008c0)='.-{\x00', &(0x7f0000000900)="f7d4b04c65f2ae671d2ace52c0166cec3e09f5abd05ee38df532963f049536193705ac0c79c442bd6dd370f67ea1895fbf00bafbcaf1848ca240962e66a9d28756569caa2f3258325b3a2ac9c3592a", 0x4f, 0x10}, {0x1, 0x6, &(0x7f0000000980)='+$[\x00', &(0x7f00000009c0)="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", 0x1000, 0x22}, {0x1, 0xd, &(0x7f00000019c0)='veth0_virt_wifi\x00', &(0x7f0000001a00)="53d9dc37e274443917b524e6a99a49112c431bf35ee4735bb8e7c8400bbe85bce76856ed9b2e5de3dfd4e728bb408ddb7c00f6bfcc07cac9dc8af78247baf1b5c3b05de8c77535ee5071d07e73364427f7c273cb70bc35ad2c23ffef80f044df79e7f320f67fb9801aa946ee600abc790b4d6d7844afe30418b40d5f056fa360cda544fda802f2b517f71889b5852998685fc2c0fa5e19742b3be760f896b15956afc8759e7488d44e220bbe397dce3f69801041f1d7456b077931a2cf41125d62d401d0a0b6d01528ee120c5670eb71fdf18b2a2137", 0xd6, 0x22}, {0x2, 0x4, &(0x7f0000001b00)='\x00', &(0x7f0000001b40)="162b21e73336d5d1451180f6bd0cf2ad190ab27b182757c98416336499df845b1bb9d02632f53765f6db3d03340981ab701df3fd0b40628043bbc05a003efc6731da32a7022639369d3f1e1891819c6eba88c90baf424fa174443490e4dd9118225d9616686b524fdbfd471fc919fb6b56b0f08a5f4cef6ba27bab804e10aeac25bb4bffb7d555975a8e966b4ea862896e421744f286b6ea8e763f30cb6cb6", 0x9f, 0x50}]}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000001d80), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) (async) 0s ago: executing program 0 (id=3159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x141000, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000000)) close(r2) r4 = socket(0x2, 0x80805, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000000240)={0x9, 0xffffffffffffff80, 0x1, 0xa693, 0x4, 0x0, [{0x7, 0x5, 0x3, '\x00', 0x405}, {0xfffffffffffffffd, 0x7, 0xfffffffffffffffd, '\x00', 0x2}, {0x10000, 0x7f, 0x3ce8000000, '\x00', 0x90e}, {0x80, 0x7, 0x8, '\x00', 0x100}]}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): mit: Local address not yet configured! [ 271.378266][ T5881] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.386666][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.425191][ T809] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 271.955679][ T809] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 272.164587][T12812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.294658][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 272.929233][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 273.565463][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 273.683016][T12833] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1789'. [ 273.939230][T12848] netlink: zone id is out of range [ 273.960372][T12848] netlink: zone id is out of range [ 273.998976][T12848] netlink: zone id is out of range [ 274.029303][T12848] netlink: zone id is out of range [ 274.061118][T12848] netlink: zone id is out of range [ 274.098915][T12848] netlink: zone id is out of range [ 274.130307][T12848] netlink: zone id is out of range [ 274.158161][T12848] netlink: zone id is out of range [ 274.195091][T12848] netlink: zone id is out of range [ 274.236211][T12848] netlink: zone id is out of range [ 274.652486][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 274.873632][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 275.107435][T12887] team1: entered promiscuous mode [ 275.121187][T12887] team1: entered allmulticast mode [ 275.130136][T12887] 8021q: adding VLAN 0 to HW filter on device team1 [ 275.144926][T12918] xt_hashlimit: size too large, truncated to 1048576 [ 275.352071][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 275.582565][T12941] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 275.649656][T12941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.762203][T12941] bond4: (slave geneve4): making interface the new active one [ 275.806950][T12941] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 275.943446][T12965] sctp: [Deprecated]: syz.4.1813 (pid 12965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.943446][T12965] Use struct sctp_sack_info instead [ 276.510908][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 276.541413][T12984] sctp: [Deprecated]: syz.0.1820 (pid 12984) Use of int in max_burst socket option. [ 276.541413][T12984] Use struct sctp_assoc_value instead [ 277.451865][T13026] sctp: [Deprecated]: syz.1.1834 (pid 13026) Use of int in max_burst socket option. [ 277.451865][T13026] Use struct sctp_assoc_value instead [ 277.676660][T13039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.893065][T13051] x_tables: unsorted entry at hook 1 [ 278.127148][T13059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1844'. [ 278.376342][T13069] sctp: [Deprecated]: syz.2.1848 (pid 13069) Use of int in max_burst socket option. [ 278.376342][T13069] Use struct sctp_assoc_value instead [ 278.751411][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1854'. [ 278.900375][T13092] sctp: [Deprecated]: syz.3.1855 (pid 13092) Use of int in max_burst socket option. [ 278.900375][T13092] Use struct sctp_assoc_value instead [ 278.921442][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 279.199892][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 279.283081][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 279.782358][T13137] sctp: [Deprecated]: syz.3.1862 (pid 13137) Use of int in max_burst socket option. [ 279.782358][T13137] Use struct sctp_assoc_value instead [ 280.042167][T13150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1866'. [ 280.263843][T13157] sctp: [Deprecated]: syz.2.1864 (pid 13157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.263843][T13157] Use struct sctp_sack_info instead [ 280.282084][T13157] ÿ: renamed from bond_slave_0 (while UP) [ 280.860444][T13186] xt_nfacct: accounting object `syz0' does not exist [ 280.955591][T13188] ip6gre3: entered promiscuous mode [ 281.243004][T13205] erspan0: entered promiscuous mode [ 281.273566][T13205] macsec2: entered promiscuous mode [ 281.310666][T13205] erspan0: left promiscuous mode [ 281.683257][ T42] IPVS: starting estimator thread 0... [ 281.779216][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1888'. [ 281.785628][T13235] IPVS: using max 31 ests per chain, 74400 per kthread [ 282.176220][T13247] team0: entered promiscuous mode [ 282.197222][T13247] team_slave_0: entered promiscuous mode [ 282.203577][T13247] team_slave_1: entered promiscuous mode [ 282.231312][T13247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 282.456423][T13271] syzkaller1: entered promiscuous mode [ 282.464980][T13281] sctp: [Deprecated]: syz.2.1897 (pid 13281) Use of int in max_burst socket option. [ 282.464980][T13281] Use struct sctp_assoc_value instead [ 282.474396][T13271] syzkaller1: entered allmulticast mode [ 282.524655][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 282.524672][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 282.669498][T13290] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 282.706250][T13290] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 283.202307][T13328] 8021q: VLANs not supported on lo [ 283.373336][T13339] sctp: [Deprecated]: syz.1.1911 (pid 13339) Use of int in max_burst socket option. [ 283.373336][T13339] Use struct sctp_assoc_value instead [ 283.658309][T13344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.665659][T13344] IPv6: NLM_F_CREATE should be set when creating new route [ 283.672912][T13344] IPv6: NLM_F_CREATE should be set when creating new route [ 283.854035][T13358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1916'. [ 284.004419][T13363] netlink: 'syz.4.1918': attribute type 16 has an invalid length. [ 284.016521][T13363] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1918'. [ 284.401410][T13373] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.413232][T13373] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.497825][T13390] netlink: 'syz.0.1923': attribute type 89 has an invalid length. [ 284.512333][T13391] netlink: 'syz.0.1923': attribute type 89 has an invalid length. [ 284.746363][T13400] sctp: [Deprecated]: syz.3.1924 (pid 13400) Use of int in max_burst socket option. [ 284.746363][T13400] Use struct sctp_assoc_value instead [ 286.639430][T13373] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.649876][T13373] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.688842][T13407] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 286.904411][T13373] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.929630][T13373] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.167487][T13373] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.191265][T13449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1933'. [ 287.200692][T13373] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.233913][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 287.545965][T13460] syzkaller0: entered promiscuous mode [ 287.551642][T13460] syzkaller0: entered allmulticast mode [ 287.616557][T13460] xt_TCPMSS: Only works on TCP SYN packets [ 287.689690][ T5884] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.704679][ T5884] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.913507][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1941'. [ 287.926837][T13489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 287.934754][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.957388][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.029759][ T5872] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.050032][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.111635][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.127209][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.917228][T13541] lo: Caught tx_queue_len zero misconfig [ 289.063679][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1957'. [ 289.331721][T13563] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 289.368634][T13563] bond5 (unregistering): Released all slaves [ 289.394411][T13568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1961'. [ 289.534342][T13572] sctp: [Deprecated]: syz.2.1963 (pid 13572) Use of int in max_burst socket option. [ 289.534342][T13572] Use struct sctp_assoc_value instead [ 289.564818][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 289.660413][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 289.671947][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 289.681876][T13576] netlink: 'syz.2.1965': attribute type 14 has an invalid length. [ 289.781817][T13581] netlink: 'syz.2.1967': attribute type 11 has an invalid length. [ 289.794765][T13582] netlink: 'syz.2.1967': attribute type 11 has an invalid length. [ 290.089070][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1970'. [ 290.130495][T13597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1970'. [ 290.427068][T13621] sctp: [Deprecated]: syz.0.1975 (pid 13621) Use of int in max_burst socket option. [ 290.427068][T13621] Use struct sctp_assoc_value instead [ 291.045938][T13647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.286560][T13657] syzkaller1: entered promiscuous mode [ 291.296693][T13657] syzkaller1: entered allmulticast mode [ 291.313548][T13658] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 291.551642][T13671] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:20001 [ 291.858771][T13685] openvswitch: netlink: Flow key attr not present in new flow. [ 291.871868][T13686] netlink: 'syz.3.1991': attribute type 1 has an invalid length. [ 292.090304][T13697] sctp: [Deprecated]: syz.0.1994 (pid 13697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.090304][T13697] Use struct sctp_sack_info instead [ 292.254070][T13693] sctp: [Deprecated]: syz.0.1994 (pid 13693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.254070][T13693] Use struct sctp_sack_info instead [ 292.371413][T13697] syzkaller1: entered promiscuous mode [ 292.383040][T13710] SET target dimension over the limit! [ 292.385609][T13697] syzkaller1: entered allmulticast mode [ 293.142934][ T5635] block nbd1: Receive control failed (result -32) [ 293.153328][T13741] veth0_to_hsr: entered promiscuous mode [ 293.165145][T13741] veth0_to_hsr: entered allmulticast mode [ 293.331670][T13754] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.390508][T13754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.476290][T13760] netlink: 'syz.3.2009': attribute type 2 has an invalid length. [ 293.484402][T13760] __nla_validate_parse: 8 callbacks suppressed [ 293.484420][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2009'. [ 293.829265][T13763] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.844619][T13763] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 293.885143][T13763] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.004347][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2012'. [ 294.032777][T13763] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.055316][T13763] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 294.074900][T13763] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.206000][T13775] netlink: 'syz.4.2013': attribute type 1 has an invalid length. [ 294.241327][T13763] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.253921][T13763] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 294.268608][T13763] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 294.287130][T13785] tap0: tun_chr_ioctl cmd 1074025677 [ 294.292783][T13785] tap0: linktype set to 6 [ 294.483788][T13775] bond6: entered promiscuous mode [ 294.489688][T13775] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.509295][T13806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2016'. [ 294.580223][T13763] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.594806][T13763] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 294.612970][T13763] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 295.123328][T13805] bond6: (slave bridge3): making interface the new active one [ 295.130917][T13805] bridge3: entered promiscuous mode [ 295.138449][T13805] bridge3: left promiscuous mode [ 295.183747][T13812] tipc: Enabled bearer , priority 0 [ 295.200339][T13813] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 295.226875][T13813] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 295.233080][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2020'. [ 295.441713][ T5874] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.461815][ T5874] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44526 - 0 [ 295.472613][ T5874] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.503287][ T5874] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.516685][ T5874] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44526 - 0 [ 295.527017][ T5874] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.536925][T13835] sctp: [Deprecated]: syz.0.2023 (pid 13835) Use of int in maxseg socket option. [ 295.536925][T13835] Use struct sctp_assoc_value instead [ 295.551120][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 295.603776][ T5884] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.613871][ T5884] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44526 - 0 [ 295.632826][ T5884] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.666899][ T5884] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.704090][ T5884] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44526 - 0 [ 295.732064][ T5884] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 295.820096][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 295.834702][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 295.867447][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2028'. [ 295.928119][T13858] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.022497][T13843] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 296.041301][ T1223] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.053837][T13848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2028'. [ 296.093173][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2029'. [ 296.315702][T13867] netlink: 'syz.4.2032': attribute type 5 has an invalid length. [ 296.517735][T13877] syz.0.2033 (13877) used obsolete PPPIOCDETACH ioctl [ 296.654733][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.954349][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 296.978814][ T5884] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.107246][T13901] veth0_virt_wifi: mtu less than device minimum [ 297.132582][T13899] netlink: 'syz.3.2039': attribute type 1 has an invalid length. [ 297.245175][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 297.285833][T13905] netlink: 'syz.2.2040': attribute type 12 has an invalid length. [ 297.338091][T13912] 8021q: adding VLAN 0 to HW filter on device bond6 [ 297.352875][T13912] bond5: (slave bond6): making interface the new active one [ 297.362005][T13912] bond5: (slave bond6): Enslaving as an active interface with an up link [ 297.559859][ T5733] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.803779][T13927] bond0: (slave syz_tun): Releasing backup interface [ 297.832528][T13927] bridge_slave_0: left allmulticast mode [ 297.850254][T13927] bridge_slave_0: left promiscuous mode [ 297.869597][T13927] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.927200][T13927] bridge_slave_1: left allmulticast mode [ 297.936283][T13927] bridge_slave_1: left promiscuous mode [ 297.960287][T13927] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.043124][T13927] bond0: (slave bond_slave_0): Releasing backup interface [ 298.054952][T13927] team0: Port device team_slave_0 removed [ 298.062068][T13927] team0: Port device team_slave_1 removed [ 298.068622][T13927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.076845][T13927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.085629][T13927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.467322][T13960] ip6gre1: entered promiscuous mode [ 298.481212][T13960] ip6gre1: entered allmulticast mode [ 298.516485][ T5635] Bluetooth: hci4: link tx timeout [ 298.523187][ T5635] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 298.639350][T13960] syzkaller0: entered promiscuous mode [ 298.659655][T13960] syzkaller0: entered allmulticast mode [ 298.667223][T13969] __nla_validate_parse: 10 callbacks suppressed [ 298.667249][T13969] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2056'. [ 298.689885][T13969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2056'. [ 298.716637][T13967] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2055'. [ 300.611055][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 301.201525][T13967] 0·: renamed from hsr0 (while UP) [ 301.208632][T13967] 0·: entered allmulticast mode [ 301.213535][T13967] hsr_slave_0: entered allmulticast mode [ 301.219355][T13967] hsr_slave_1: entered allmulticast mode [ 301.226142][T13967] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 301.243445][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.251317][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.263429][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.278634][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.377323][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 301.388410][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2064'. [ 301.695766][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.845140][T14031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.852752][T14031] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.894112][T14031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.905349][T14031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.920082][T14031] veth0_macvtap: left promiscuous mode [ 301.926884][T14031] veth0_macvtap: entered promiscuous mode [ 301.933728][T14031] veth1_macvtap: entered promiscuous mode [ 301.959698][T14031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.971241][T14031] 8021q: adding VLAN 0 to HW filter on device eth0 [ 301.979279][T14031] 8021q: adding VLAN 0 to HW filter on device eth1 [ 301.987201][T14031] 8021q: adding VLAN 0 to HW filter on device eth2 [ 301.995431][T14031] 8021q: adding VLAN 0 to HW filter on device eth3 [ 302.009793][ T1121] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.010566][T14031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 302.020443][ T1121] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 302.038050][ T1121] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.047454][T14031] veth0_to_team: entered promiscuous mode [ 302.058256][T14031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 302.076851][ T5881] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.096039][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.104113][T13992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.119632][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2069'. [ 302.140477][ T1121] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.166961][ T1121] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 302.215654][ T1121] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.216478][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.244642][ T5874] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.253072][ T5884] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.268184][ T5874] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.287043][ T5884] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.336320][T14038] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2073'. [ 302.345636][ T5884] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.360453][ T5874] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.370410][ T5884] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.376687][ T5874] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.404775][ T5872] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.449648][ T1121] bond2: (slave ip6gretap1): link status up again after 0 ms [ 302.480575][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 302.512016][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 302.527939][ T5734] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.550743][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2076'. [ 302.573937][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'. [ 302.703650][T14057] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 302.712427][T14057] netlink: 'syz.0.2081': attribute type 2 has an invalid length. [ 302.721502][T14059] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 302.745621][T14059] netlink: 'syz.0.2081': attribute type 2 has an invalid length. [ 303.367334][T14070] netlink: 'syz.4.2083': attribute type 13 has an invalid length. [ 303.404292][T14070] netlink: 'syz.4.2083': attribute type 17 has an invalid length. [ 303.759623][T14083] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 303.824900][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2087'. [ 305.166376][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.506944][T14070] syz_tun: left promiscuous mode [ 305.534415][T14070] geneve2: left promiscuous mode [ 305.540051][T14070] geneve2: left allmulticast mode [ 305.553256][T14070] veth7: left promiscuous mode [ 305.580205][T14070] bond6: left promiscuous mode [ 305.585843][T14070] ip6gre1: left promiscuous mode [ 305.590782][T14070] ip6gre1: left allmulticast mode [ 305.625138][ T809] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.665592][T14083] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 305.667978][T14088] bond0: Caught tx_queue_len zero misconfig [ 305.820662][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 305.847692][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2089'. [ 305.874023][T14101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2090'. [ 305.912656][T14101] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 306.091794][T14115] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2090'. [ 306.096046][T14101] bond5: entered promiscuous mode [ 306.106651][T14101] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.123688][T14123] netlink: 'syz.1.2095': attribute type 4 has an invalid length. [ 306.257213][T14101] bond5: (slave bridge4): making interface the new active one [ 306.291456][T14101] bridge4: entered promiscuous mode [ 306.298652][T14101] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 306.503527][T14149] netlink: 'syz.2.2103': attribute type 39 has an invalid length. [ 306.526562][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.589808][T14149] hsr_slave_0 (unregistering): left promiscuous mode [ 306.622951][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.633092][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.064155][T14169] bond8: entered promiscuous mode [ 307.076789][T14169] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.086041][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 307.236320][T14172] veth7: entered promiscuous mode [ 307.251675][T14172] veth7: entered allmulticast mode [ 307.265785][ T5872] net_ratelimit: 17 callbacks suppressed [ 307.265803][ T5872] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.415014][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.502623][ T5623] block nbd2: Receive control failed (result -32) [ 307.509409][ T5631] block nbd2: Receive control failed (result -32) [ 307.524673][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.677566][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.730015][T14191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2114'. [ 307.825159][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 307.976264][ T5872] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.106263][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.236421][ T5872] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.394812][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 308.455173][T14224] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2124'. [ 308.485989][T14226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.616406][T14233] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2127'. [ 309.596476][T14257] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2133'. [ 309.616600][T14264] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.2133'. [ 309.629542][T14259] veth6: entered allmulticast mode [ 310.044895][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 310.176316][T14283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2139'. [ 310.205803][T14285] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 310.268670][T14285] validate_nla: 2 callbacks suppressed [ 310.268690][T14285] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 310.336696][T14293] sctp: [Deprecated]: syz.0.2141 (pid 14293) Use of int in max_burst socket option. [ 310.336696][T14293] Use struct sctp_assoc_value instead [ 310.338257][T14285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2140'. [ 310.546758][T14300] netlink: 'syz.2.2144': attribute type 1 has an invalid length. [ 310.598745][T14300] bond6: entered promiscuous mode [ 310.605070][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.615291][T14300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.768192][T14294] sctp: [Deprecated]: syz.3.2140 (pid 14294) Use of int in max_burst socket option. [ 310.768192][T14294] Use struct sctp_assoc_value instead [ 310.816931][T14308] FAULT_INJECTION: forcing a failure. [ 310.816931][T14308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.835607][T14308] CPU: 1 UID: 0 PID: 14308 Comm: syz.2.2146 Not tainted syzkaller #0 PREEMPT(full) [ 310.835632][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.835654][T14308] Call Trace: [ 310.835661][T14308] [ 310.835668][T14308] dump_stack_lvl+0xe8/0x150 [ 310.835693][T14308] should_fail_ex+0x412/0x560 [ 310.835721][T14308] _copy_from_user+0x2d/0xb0 [ 310.835750][T14308] __sys_sendto+0x2b0/0x710 [ 310.835774][T14308] ? __pfx___sys_sendto+0x10/0x10 [ 310.835793][T14308] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 310.835828][T14308] ? __fget_files+0x3a0/0x420 [ 310.835860][T14308] ? ksys_write+0x242/0x270 [ 310.835887][T14308] ? __pfx_ksys_write+0x10/0x10 [ 310.835916][T14308] __x64_sys_sendto+0xde/0x100 [ 310.835937][T14308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.835957][T14308] do_syscall_64+0x15f/0xf80 [ 310.835977][T14308] ? trace_irq_disable+0x3b/0x140 [ 310.836002][T14308] ? clear_bhb_loop+0x40/0x90 [ 310.836023][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.836041][T14308] RIP: 0033:0x7fd44bd9cdd9 [ 310.836058][T14308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.836074][T14308] RSP: 002b:00007fd44cc02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 310.836094][T14308] RAX: ffffffffffffffda RBX: 00007fd44c015fa0 RCX: 00007fd44bd9cdd9 [ 310.836106][T14308] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000004 [ 310.836118][T14308] RBP: 00007fd44cc02090 R08: 0000200000000540 R09: 0000000000000014 [ 310.836129][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.836139][T14308] R13: 00007fd44c016038 R14: 00007fd44c015fa0 R15: 00007fff8790eef8 [ 310.836168][T14308] [ 311.076846][T14310] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 311.271730][T14320] netlink: 'syz.2.2150': attribute type 10 has an invalid length. [ 311.294714][T14320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2150'. [ 311.321596][T14327] netlink: 'syz.2.2150': attribute type 10 has an invalid length. [ 311.355900][T14327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2150'. [ 311.661271][T14341] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2154'. [ 311.821579][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 311.914090][T14348] IPVS: persistence engine module ip_vs_pe_… not found [ 311.929780][T14352] team0: No ports can be present during mode change [ 311.946474][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 312.111395][T14356] syzkaller0: entered promiscuous mode [ 312.117368][T14356] syzkaller0: entered allmulticast mode [ 312.274551][T14355] net_ratelimit: 975 callbacks suppressed [ 312.274570][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.288860][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.295736][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.302597][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.309476][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.316366][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.323234][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.330122][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.334667][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 312.336991][T14355] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.494165][T14365] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 313.099227][T14383] tipc: Enabling of bearer rejected, already enabled [ 313.247917][T14397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.660056][T14414] bridge_slave_0: left allmulticast mode [ 313.672627][T14414] bridge_slave_0: left promiscuous mode [ 313.680373][T14414] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.706055][T14414] bridge_slave_1: left promiscuous mode [ 313.718755][T14414] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.770018][T14414] bond0: (slave 45ÿ): Releasing backup interface [ 313.833629][T14414] bond0: (slave bond_slave_1): Releasing backup interface [ 313.873475][T14414] team_slave_0: left promiscuous mode [ 313.915080][T14414] team0: Port device team_slave_0 removed [ 313.921884][T14414] team_slave_1: left promiscuous mode [ 313.945846][T14414] team0: Port device team_slave_1 removed [ 313.961730][T14414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.971156][T14414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.082727][ T459] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.104574][ T459] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.123231][ T459] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.137166][ T459] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.156716][ T459] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.172889][ T459] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.212180][ T459] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.231771][ T459] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.242349][ T459] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.257542][ T459] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.266318][ T459] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.280348][ T459] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 315.349543][T14471] __nla_validate_parse: 6 callbacks suppressed [ 315.349561][T14471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 315.371283][T14495] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 315.381277][T14495] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2188'. [ 315.432743][T14495] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2188'. [ 315.479713][T14495] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 315.529788][T14495] netlink: 634 bytes leftover after parsing attributes in process `syz.0.2188'. [ 315.545003][T14505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 315.604002][T14511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 315.604283][T14495] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2188'. [ 315.680681][T14518] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 315.708657][T14518] netlink: 'syz.4.2191': attribute type 2 has an invalid length. [ 315.718967][T14518] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 315.729049][T14518] netlink: 'syz.4.2191': attribute type 2 has an invalid length. [ 316.058016][T14530] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2195'. [ 316.118205][T14534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2195'. [ 316.184354][T11637] udevd[11637]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 316.195041][T14536] netlink: 'syz.0.2197': attribute type 1 has an invalid length. [ 316.211938][T14536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2197'. [ 316.372716][T14546] tap0: tun_chr_ioctl cmd 1074025677 [ 316.388500][T14546] tap0: linktype set to 776 [ 316.484090][T14549] netlink: 'syz.0.2200': attribute type 9 has an invalid length. [ 316.727837][T14559] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 316.779702][T14562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2202'. [ 316.841030][T14561] syzkaller0: entered promiscuous mode [ 316.847256][T14561] syzkaller0: entered allmulticast mode [ 316.872845][T14568] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 317.116780][T14559] 8021q: adding VLAN 0 to HW filter on device bond7 [ 319.298138][T14589] tipc: New replicast peer: 255.255.255.255 [ 319.306657][T14589] tipc: Enabled bearer , priority 10 [ 319.586099][T14610] FAULT_INJECTION: forcing a failure. [ 319.586099][T14610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.599999][T14610] CPU: 1 UID: 0 PID: 14610 Comm: syz.0.2217 Not tainted syzkaller #0 PREEMPT(full) [ 319.600024][T14610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.600033][T14610] Call Trace: [ 319.600041][T14610] [ 319.600048][T14610] dump_stack_lvl+0xe8/0x150 [ 319.600075][T14610] should_fail_ex+0x412/0x560 [ 319.600102][T14610] _copy_from_iter+0x1d3/0x1670 [ 319.600125][T14610] ? rep_movs_alternative+0x4a/0x90 [ 319.600156][T14610] ? __pfx__copy_from_iter+0x10/0x10 [ 319.600175][T14610] ? sock_alloc_send_pskb+0x896/0x990 [ 319.600202][T14610] ? __pfx__copy_from_iter+0x10/0x10 [ 319.600230][T14610] copy_page_from_iter+0x220/0x2d0 [ 319.600256][T14610] skb_copy_datagram_from_iter+0x306/0x710 [ 319.600289][T14610] packet_sendmsg+0x35b1/0x4fb0 [ 319.600319][T14610] ? __lock_acquire+0x6b5/0x2cf0 [ 319.600349][T14610] ? __lock_acquire+0x6b5/0x2cf0 [ 319.600386][T14610] ? __pfx_packet_sendmsg+0x10/0x10 [ 319.600402][T14610] ? aa_sk_perm+0x6d5/0x900 [ 319.600431][T14610] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.600449][T14610] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 319.600479][T14610] ? aa_sock_msg_perm+0xf1/0x1b0 [ 319.600502][T14610] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 319.600536][T14610] ? __pfx_packet_sendmsg+0x10/0x10 [ 319.600555][T14610] __sys_sendto+0x672/0x710 [ 319.600576][T14610] ? __pfx___sys_sendto+0x10/0x10 [ 319.600593][T14610] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 319.600627][T14610] ? __fget_files+0x3a0/0x420 [ 319.600658][T14610] ? ksys_write+0x242/0x270 [ 319.600683][T14610] ? __pfx_ksys_write+0x10/0x10 [ 319.600710][T14610] __x64_sys_sendto+0xde/0x100 [ 319.600731][T14610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.600753][T14610] do_syscall_64+0x15f/0xf80 [ 319.600772][T14610] ? trace_irq_disable+0x3b/0x140 [ 319.600795][T14610] ? clear_bhb_loop+0x40/0x90 [ 319.600815][T14610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.600832][T14610] RIP: 0033:0x7fc9cdf9cdd9 [ 319.600855][T14610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.600868][T14610] RSP: 002b:00007fc9cee23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 319.600887][T14610] RAX: ffffffffffffffda RBX: 00007fc9ce215fa0 RCX: 00007fc9cdf9cdd9 [ 319.600900][T14610] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000004 [ 319.600911][T14610] RBP: 00007fc9cee23090 R08: 0000200000000540 R09: 0000000000000014 [ 319.600923][T14610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.600932][T14610] R13: 00007fc9ce216038 R14: 00007fc9ce215fa0 R15: 00007ffc1c5bcbf8 [ 319.600961][T14610] [ 320.373895][T14631] __nla_validate_parse: 4 callbacks suppressed [ 320.373913][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2223'. [ 320.409260][T14632] netlink: 'syz.1.2221': attribute type 8 has an invalid length. [ 320.470413][ T5818] tipc: Node number set to 563612547 [ 320.518994][T14631] syzkaller1: tun_chr_ioctl cmd 35111 [ 320.760029][T14647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 321.309438][T14667] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 321.361399][T14667] bond7: entered promiscuous mode [ 321.375439][T14667] bond7: entered allmulticast mode [ 321.391083][T14667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 321.441109][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 321.465146][T14672] erspan2: entered allmulticast mode [ 321.510627][T14672] bond7: (slave erspan2): making interface the new active one [ 321.550797][T14672] erspan2: entered promiscuous mode [ 321.554953][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 321.614418][T14672] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 321.667474][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2235'. [ 321.720165][T14671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2233'. [ 321.783827][T14678] macsec2: entered promiscuous mode [ 321.797019][T14678] bridge0: entered promiscuous mode [ 321.877318][ T5872] net_ratelimit: 2389 callbacks suppressed [ 321.877335][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.965078][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.206611][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.408385][T14699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2238'. [ 322.737739][T14720] openvswitch: netlink: Message has 8 unknown bytes. [ 322.740537][T14719] openvswitch: netlink: Message has 8 unknown bytes. [ 322.869823][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2242'. [ 322.896206][T14725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.904723][T14719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2242'. [ 322.962296][T14725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.989405][T14725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.014770][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.026136][T14733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.035000][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.070466][T14725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2244'. [ 323.090014][T14741] netlink: 'syz.0.2246': attribute type 3 has an invalid length. [ 323.090864][T14725] netlink: 'syz.1.2244': attribute type 11 has an invalid length. [ 323.106617][T14725] netlink: 'syz.1.2244': attribute type 4 has an invalid length. [ 323.847260][T14736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.001183][T14770] team0: Mode changed to "activebackup" [ 324.234718][T14786] --map-set only usable from mangle table [ 324.631646][T14795] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 324.852223][T14800] netlink: 'syz.3.2266': attribute type 9 has an invalid length. [ 325.405252][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 325.423163][T14833] FAULT_INJECTION: forcing a failure. [ 325.423163][T14833] name failslab, interval 1, probability 0, space 0, times 0 [ 325.459911][T14832] __nla_validate_parse: 9 callbacks suppressed [ 325.459931][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 325.494391][T14833] CPU: 0 UID: 0 PID: 14833 Comm: syz.3.2272 Not tainted syzkaller #0 PREEMPT(full) [ 325.494415][T14833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.494424][T14833] Call Trace: [ 325.494431][T14833] [ 325.494441][T14833] dump_stack_lvl+0xe8/0x150 [ 325.494464][T14833] should_fail_ex+0x412/0x560 [ 325.494488][T14833] should_failslab+0xa8/0x100 [ 325.494511][T14833] ? security_file_alloc+0x34/0x310 [ 325.494526][T14833] kmem_cache_alloc_noprof+0x87/0x650 [ 325.494546][T14833] ? rcu_is_watching+0x15/0xb0 [ 325.494565][T14833] ? trace_kmem_cache_alloc+0x29/0xe0 [ 325.494586][T14833] security_file_alloc+0x34/0x310 [ 325.494603][T14833] init_file+0x90/0x2b0 [ 325.494622][T14833] alloc_empty_file+0x74/0x1d0 [ 325.494639][T14833] alloc_file_pseudo+0x155/0x240 [ 325.494660][T14833] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 325.494677][T14833] ? alloc_fd+0x64b/0x6c0 [ 325.494705][T14833] anon_inode_getfd+0xc8/0x1f0 [ 325.494730][T14833] map_create+0x1247/0x16a0 [ 325.494756][T14833] ? security_bpf+0x7e/0x2d0 [ 325.494776][T14833] __sys_bpf+0x6e1/0x950 [ 325.494799][T14833] ? __pfx___sys_bpf+0x10/0x10 [ 325.494836][T14833] ? ksys_write+0x242/0x270 [ 325.494858][T14833] ? __pfx_ksys_write+0x10/0x10 [ 325.494884][T14833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.494901][T14833] __x64_sys_bpf+0x7c/0x90 [ 325.494921][T14833] do_syscall_64+0x15f/0xf80 [ 325.494938][T14833] ? trace_irq_disable+0x3b/0x140 [ 325.494959][T14833] ? clear_bhb_loop+0x40/0x90 [ 325.494977][T14833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.494992][T14833] RIP: 0033:0x7f957779cdd9 [ 325.495008][T14833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.495021][T14833] RSP: 002b:00007f9578740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.495038][T14833] RAX: ffffffffffffffda RBX: 00007f9577a15fa0 RCX: 00007f957779cdd9 [ 325.495049][T14833] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000 [ 325.495058][T14833] RBP: 00007f9578740090 R08: 0000000000000000 R09: 0000000000000000 [ 325.495067][T14833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.495076][T14833] R13: 00007f9577a16038 R14: 00007f9577a15fa0 R15: 00007ffc80afd808 [ 325.495103][T14833] [ 325.788044][T14832] hsr_slave_1 (unregistering): left promiscuous mode [ 326.684700][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.716513][T14883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2285'. [ 326.753650][T14885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2287'. [ 326.754564][T14883] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 326.769522][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 326.800474][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2287'. [ 326.812614][T14883] netlink: 568 bytes leftover after parsing attributes in process `syz.3.2285'. [ 326.815895][T14885] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2287'. [ 326.859756][T14885] netlink: 'syz.1.2287': attribute type 1 has an invalid length. [ 326.875510][T14885] netlink: 'syz.1.2287': attribute type 2 has an invalid length. [ 327.750595][T14901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2292'. [ 327.845882][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2294'. [ 328.254881][T14938] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 328.292393][T14936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2303'. [ 328.325191][ T5631] block nbd3: Receive control failed (result -32) [ 328.334245][ T5635] block nbd3: Receive control failed (result -32) [ 328.757683][T14963] netlink: 'syz.4.2307': attribute type 1 has an invalid length. [ 328.775012][T14963] netlink: 'syz.4.2307': attribute type 2 has an invalid length. [ 329.618493][T14992] net_ratelimit: 12 callbacks suppressed [ 329.618510][T14992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.651097][T14993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.763210][T14982] sctp: [Deprecated]: syz.4.2311 (pid 14982) Use of int in max_burst socket option. [ 329.763210][T14982] Use struct sctp_assoc_value instead [ 329.870905][T15002] netlink: 'syz.2.2317': attribute type 1 has an invalid length. [ 329.909043][T15002] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.289924][T15019] netlink: 'syz.3.2321': attribute type 4 has an invalid length. [ 330.313004][T15022] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 330.344106][T15022] netlink: 'syz.1.2322': attribute type 2 has an invalid length. [ 330.582845][T15034] __nla_validate_parse: 7 callbacks suppressed [ 330.582862][T15034] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2324'. [ 330.716919][T15030] syzkaller0: entered promiscuous mode [ 330.738493][T15030] syzkaller0: entered allmulticast mode [ 330.851011][T15032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2323'. [ 330.899379][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2327'. [ 330.978934][T15051] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2328'. [ 331.018508][T15051] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2328'. [ 331.045570][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 331.113973][T15063] xt_cgroup: invalid path, errno=-2 [ 331.463633][T15075] bond0: entered promiscuous mode [ 331.476385][T15075] batadv0: entered promiscuous mode [ 331.486097][T15075] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 331.510223][T15075] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 331.523514][T15075] bond0: left promiscuous mode [ 331.555718][T15075] batadv0: left promiscuous mode [ 331.776358][T15089] validate_nla: 3 callbacks suppressed [ 331.776373][T15089] netlink: 'syz.4.2337': attribute type 6 has an invalid length. [ 331.805019][T15089] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2337'. [ 332.177382][T15094] bond7: option miimon: invalid value (18446744073709551607) [ 332.185176][T15094] bond7: option miimon: allowed values 0 - 2147483647 [ 332.193016][T15094] bond7 (unregistering): Released all slaves [ 332.350279][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'. [ 332.454887][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 333.626929][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2347'. [ 334.053235][T15059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.240681][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2351'. [ 334.383794][T15140] netlink: 'syz.3.2354': attribute type 1 has an invalid length. [ 334.501761][T15140] bond8: entered promiscuous mode [ 334.507916][T15140] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.593415][T15154] bond8: (slave bridge7): making interface the new active one [ 334.611473][T15154] bridge7: entered promiscuous mode [ 334.632957][T15154] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 334.667051][T15140] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 334.700057][T15136] "syz.0.2353" (15136) uses obsolete ecb(arc4) skcipher [ 334.833490][T15165] netlink: set zone limit has 4 unknown bytes [ 334.895575][T15169] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 334.902963][T15169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.621050][T15203] sctp: [Deprecated]: syz.4.2367 (pid 15203) Use of int in max_burst socket option. [ 335.621050][T15203] Use struct sctp_assoc_value instead [ 335.987462][T15216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2372'. [ 336.098868][ T29] audit: type=1800 audit(1777825420.410:9): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2375" name="r" dev="tmpfs" ino=2440 res=0 errno=0 [ 336.438860][T15235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2378'. [ 337.959795][T15172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.246335][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 338.420351][T15261] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2387'. [ 338.716793][T15280] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2393'. [ 338.783786][T15280] dummy0 (unregistering): left allmulticast mode [ 338.877413][T15292] netlink: 'syz.4.2396': attribute type 21 has an invalid length. [ 338.997833][T15284] netlink: 3496 bytes leftover after parsing attributes in process `syz.0.2394'. [ 339.018882][T15292] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2396'. [ 339.178417][T15303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 339.261797][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 339.272205][T15304] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 339.297820][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 339.309065][T15304] netlink: 'syz.1.2400': attribute type 2 has an invalid length. [ 339.321665][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2403'. [ 339.327556][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 339.369890][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 339.634869][T15335] netlink: 'syz.2.2408': attribute type 13 has an invalid length. [ 339.661301][T15335] netlink: 'syz.2.2408': attribute type 17 has an invalid length. [ 339.773669][T15330] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.781299][T15330] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.933247][T15348] netlink: 'syz.3.2411': attribute type 30 has an invalid length. [ 339.937509][T15330] veth1_macvtap: left allmulticast mode [ 340.002815][T15330] macsec0: left allmulticast mode [ 340.098598][T15335] bridge0: left promiscuous mode [ 340.110881][T15335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.129196][T15335] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.173815][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2412'. [ 340.180279][T15335] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.190204][T15335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.222447][T15335] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.229719][T15335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.299088][T15335] 0·: left allmulticast mode [ 340.314320][T15335] hsr_slave_1: left allmulticast mode [ 340.340447][T15335] veth1_vlan: left promiscuous mode [ 340.362943][T15335] veth0_vlan: left promiscuous mode [ 340.379990][T15335] veth0_vlan: entered promiscuous mode [ 340.391869][T15335] veth1_vlan: entered promiscuous mode [ 340.402979][T15361] netlink: 'syz.1.2415': attribute type 1 has an invalid length. [ 340.412796][T15335] veth1_macvtap: left promiscuous mode [ 340.421092][T15335] veth0_macvtap: left promiscuous mode [ 340.428302][T15335] veth0_macvtap: entered promiscuous mode [ 340.436864][T15335] veth1_macvtap: entered promiscuous mode [ 340.452560][T15335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.466100][T15335] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 340.491294][ T5734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.747193][T15361] bond12: entered promiscuous mode [ 340.790834][T15361] 8021q: adding VLAN 0 to HW filter on device bond12 [ 340.835533][ T5734] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.876770][T15384] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 340.910916][T15384] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 340.967643][ T1121] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 340.994814][ T1121] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.275711][T15393] syzkaller1: entered promiscuous mode [ 341.312212][T15393] syzkaller1: entered allmulticast mode [ 341.726676][ T42] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 341.772038][T15430] __nla_validate_parse: 4 callbacks suppressed [ 341.772058][T15430] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2425'. [ 342.025426][T15441] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2429'. [ 342.042922][T15441] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2429'. [ 342.149760][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 342.375118][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 342.490565][T15465] bond0: entered promiscuous mode [ 342.511921][T15465] batadv0: entered promiscuous mode [ 343.322591][T15476] tap0: tun_chr_ioctl cmd 1074025677 [ 343.344093][T15476] tap0: linktype set to 776 [ 343.470506][T15486] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2443'. [ 343.500221][T15486] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2443'. [ 343.537232][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2444'. [ 343.701869][T15505] netlink: 'syz.4.2442': attribute type 16 has an invalid length. [ 343.702426][T15504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2445'. [ 343.825616][T15505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.847755][T15505] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.905232][T15505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.960908][T15505] veth0_to_team: left promiscuous mode [ 343.979925][T15505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 343.991350][T15505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.007578][T15505] veth1_macvtap: left promiscuous mode [ 344.014196][T15505] veth0_macvtap: left promiscuous mode [ 344.021529][T15505] veth0_macvtap: entered promiscuous mode [ 344.028542][T15505] veth1_macvtap: entered promiscuous mode [ 344.072703][T15505] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.090670][T15505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.118177][T15505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.131047][T15505] veth0_to_team: entered promiscuous mode [ 344.141994][T15505] 8021q: adding VLAN 0 to HW filter on device bond4 [ 344.168611][T15505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.176979][T15505] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.195636][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.225015][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.241919][T15505] 8021q: adding VLAN 0 to HW filter on device eth0 [ 344.254662][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.266819][T15505] 8021q: adding VLAN 0 to HW filter on device eth1 [ 344.275001][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.286193][T15505] 8021q: adding VLAN 0 to HW filter on device eth2 [ 344.295256][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.305493][T15505] 8021q: adding VLAN 0 to HW filter on device eth3 [ 344.314646][ T35] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.325816][T15505] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 344.337092][T15505] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 344.345047][ T459] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.365817][ T5872] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.404951][ T5872] bond2: (slave ip6gretap1): link status up again after 0 ms [ 344.479140][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.487832][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.497321][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.506267][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.515739][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.527045][ T13] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.537764][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.561612][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.580802][ T13] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.600560][T15520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2448'. [ 344.657237][T15526] validate_nla: 1 callbacks suppressed [ 344.657254][T15526] netlink: 'syz.1.2450': attribute type 13 has an invalid length. [ 344.671104][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.684663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.695281][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.703513][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 344.870956][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.899743][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.908935][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.315126][T15556] tipc: Enabling of bearer rejected, media not registered [ 345.340784][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 345.351016][ T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 345.575525][ T5818] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 345.575540][ T5818] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.723140][T15582] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 345.769949][T15582] bond9 (unregistering): Released all slaves [ 345.866028][ T459] net_ratelimit: 18 callbacks suppressed [ 345.866042][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.892242][ T5818] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 345.976326][ T42] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 345.996452][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.115387][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.244891][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.368747][ T35] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.497394][ T5879] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.521811][T15634] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 346.656488][ T35] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.875286][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.064169][T15674] __nla_validate_parse: 40 callbacks suppressed [ 347.064189][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 347.081216][T15676] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 347.273052][T15684] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 347.281400][T15684] netlink: 'syz.0.2488': attribute type 3 has an invalid length. [ 347.290654][T15684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2488'. [ 347.315870][T15690] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2489'. [ 347.332557][T15690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2489'. [ 347.343045][T15676] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.366903][T15695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2486'. [ 347.411006][T15674] tunl0: Caught tx_queue_len zero misconfig [ 347.446583][T15678] bond7: (slave veth11): Enslaving as an active interface with a down link [ 347.462661][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2489'. [ 347.497662][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 347.771855][ T1121] tipc: Subscription rejected, illegal request [ 347.818397][T15721] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2494'. [ 347.873274][T15724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 348.085252][T15736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2499'. [ 348.096772][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2498'. [ 348.635926][T15762] Dropped outbound packet type=806 [ 348.844600][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.404696][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 349.644572][ C0] Dropped outbound packet type=806 [ 349.987130][T15831] batadv_slave_0: Caught tx_queue_len zero misconfig [ 350.684777][ C0] Dropped outbound packet type=806 [ 350.915574][ T459] net_ratelimit: 20 callbacks suppressed [ 350.915593][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.066791][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.188858][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.301460][T15896] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 351.398891][T15903] bond9: (slave bridge7): making interface the new active one [ 351.430699][T15903] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 351.476706][T15896] bond9: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.744992][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 351.920959][T15886] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 352.103014][T15925] syzkaller1: entered promiscuous mode [ 352.116948][T15925] syzkaller1: entered allmulticast mode [ 352.152807][T15938] tap0: tun_chr_ioctl cmd 1074025677 [ 352.160441][T15931] __nla_validate_parse: 12 callbacks suppressed [ 352.160459][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 352.161344][T15938] tap0: linktype set to 776 [ 352.211633][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 352.233863][T15931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.264586][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.295679][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 352.375491][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.486692][T15943] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2557'. [ 352.634601][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 352.921399][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 352.965822][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2563'. [ 352.986202][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2563'. [ 353.038144][T15976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2563'. [ 353.074553][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.164894][ T5631] Bluetooth: hci1: command 0x0406 tx timeout [ 353.275876][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.322852][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 353.359048][T16000] veth1_to_batadv: entered allmulticast mode [ 353.435889][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.599289][T16015] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2573'. [ 353.636715][T16015] netlink: 35 bytes leftover after parsing attributes in process `syz.4.2573'. [ 354.023281][T16041] x_tables: unsorted underflow at hook 3 [ 354.043858][T16041] netlink: 'syz.4.2580': attribute type 1 has an invalid length. [ 354.309145][T16012] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 354.370614][T16065] netlink: 'syz.4.2584': attribute type 21 has an invalid length. [ 354.381225][T16065] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.823181][T16087] team0: entered promiscuous mode [ 354.829498][T16087] team0: entered allmulticast mode [ 354.835566][T16087] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.075763][T16091] x_tables: ip_tables: osf match: only valid for protocol 6 [ 356.024914][ T48] net_ratelimit: 21 callbacks suppressed [ 356.024932][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.154643][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.298704][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.420333][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.444642][ T5631] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 356.544637][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.675394][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.764654][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.814719][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.826657][T16184] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 356.956754][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.084917][ T459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.225157][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.471685][T16221] __nla_validate_parse: 17 callbacks suppressed [ 357.471706][T16221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2623'. [ 358.020598][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 358.045185][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 358.054599][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 358.080867][T16256] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2631'. [ 358.162527][T16262] lo speed is unknown, defaulting to 1000 [ 358.228411][T16262] lo speed is unknown, defaulting to 1000 [ 358.294150][T16262] lo speed is unknown, defaulting to 1000 [ 359.186569][T16315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2645'. [ 359.221636][T16324] trusted_key: syz.3.2648 sent an empty control message without MSG_MORE. [ 359.323915][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 359.336554][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 359.352095][T16262] infiniband sqz0: set active [ 359.376702][T16262] infiniband sqz0: added lo [ 359.378490][T16331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 359.405580][ T1223] lo speed is unknown, defaulting to 1000 [ 359.413081][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 359.418823][T16262] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 359.423301][T16332] netlink: 'syz.4.2649': attribute type 5 has an invalid length. [ 359.441332][T16262] infiniband sqz0: Couldn't open port 1 [ 359.441913][T16331] netlink: 'syz.4.2649': attribute type 5 has an invalid length. [ 359.463722][T16262] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 359.479235][T16262] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 359.495506][T16334] bond13: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 359.497559][T16262] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 359.531013][T16334] bond13 (unregistering): Released all slaves [ 359.553815][T16262] RDS/IB: sqz0: added [ 359.568426][T16262] smc: adding ib device sqz0 with port count 1 [ 359.589664][T16262] smc: ib device sqz0 port 1 has no pnetid [ 359.619151][ T809] lo speed is unknown, defaulting to 1000 [ 359.687176][T16262] lo speed is unknown, defaulting to 1000 [ 360.509512][T16353] lo speed is unknown, defaulting to 1000 [ 360.582418][T16361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2656'. [ 360.615612][T16361] netlink: 'syz.3.2656': attribute type 8 has an invalid length. [ 360.644871][T16361] netlink: 70 bytes leftover after parsing attributes in process `syz.3.2656'. [ 361.113642][T16379] bridge0: Caught tx_queue_len zero misconfig [ 361.151518][T16262] lo speed is unknown, defaulting to 1000 [ 361.155105][ T48] net_ratelimit: 22 callbacks suppressed [ 361.155123][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.355364][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.490632][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.633118][T16391] 8021q: adding VLAN 0 to HW filter on device bond10 [ 361.640576][T16262] lo speed is unknown, defaulting to 1000 [ 361.664892][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.795431][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.954703][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.007749][T16262] lo speed is unknown, defaulting to 1000 [ 362.224650][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.273885][T16262] lo speed is unknown, defaulting to 1000 [ 362.334633][ T254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.403583][T16262] lo speed is unknown, defaulting to 1000 [ 362.444740][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 362.540093][T16262] lo speed is unknown, defaulting to 1000 [ 362.554731][ T254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 363.007965][T16421] __nla_validate_parse: 2 callbacks suppressed [ 363.007984][T16421] netlink: 712 bytes leftover after parsing attributes in process `syz.2.2672'. [ 363.041306][T16421] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.2672'. [ 363.064242][T16421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2672'. [ 363.510904][T16441] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 363.966987][T16442] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 363.979448][T16442] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 364.021756][T16445] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 364.027913][T16445] syzkaller1: Refused to change device type [ 364.043233][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.051219][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.233715][T16458] bridge0: port 3(team0) entered blocking state [ 364.251078][T16458] bridge0: port 3(team0) entered disabled state [ 364.266455][T16458] team0: entered allmulticast mode [ 364.273219][T16458] team_slave_0: entered allmulticast mode [ 364.283421][T16458] team_slave_1: entered allmulticast mode [ 364.310561][T16458] syz_tun: entered allmulticast mode [ 364.529253][T16478] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 364.814051][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2689'. [ 365.185438][T16494] tipc: Disabling bearer [ 365.638149][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2700'. [ 365.656546][T16531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2701'. [ 365.749811][T16533] netlink: 'syz.4.2702': attribute type 11 has an invalid length. [ 365.800428][T16502] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 365.911524][T16540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2705'. [ 366.061238][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2707'. [ 366.177142][ T48] net_ratelimit: 14 callbacks suppressed [ 366.177167][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.234745][T16555] netlink: 'syz.1.2707': attribute type 5 has an invalid length. [ 366.266135][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2707'. [ 366.337224][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.364762][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 366.449535][T16566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2712'. [ 366.478509][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.549834][T16580] 8021q: VLANs not supported on wg0 [ 366.618509][ T5884] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 366.799448][T16590] FAULT_INJECTION: forcing a failure. [ 366.799448][T16590] name failslab, interval 1, probability 0, space 0, times 0 [ 366.839717][T16590] CPU: 0 UID: 0 PID: 16590 Comm: syz.0.2719 Not tainted syzkaller #0 PREEMPT(full) [ 366.839766][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.839792][T16590] Call Trace: [ 366.839803][T16590] [ 366.839810][T16590] dump_stack_lvl+0xe8/0x150 [ 366.839838][T16590] should_fail_ex+0x412/0x560 [ 366.839864][T16590] ? __d_alloc+0x37/0x6f0 [ 366.839905][T16590] should_failslab+0xa8/0x100 [ 366.839932][T16590] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 366.839962][T16590] __d_alloc+0x37/0x6f0 [ 366.839992][T16590] d_alloc+0x4b/0x190 [ 366.840012][T16590] ? lookup_one_qstr_excl+0xc4/0x360 [ 366.840038][T16590] lookup_one_qstr_excl+0xd8/0x360 [ 366.840061][T16590] ? lookup_noperm_common+0x245/0x430 [ 366.840087][T16590] start_dirop+0x5c/0x90 [ 366.840109][T16590] simple_start_creating+0xcc/0x110 [ 366.840134][T16590] ? __pfx_simple_start_creating+0x10/0x10 [ 366.840158][T16590] ? do_raw_spin_unlock+0xf5/0x210 [ 366.840184][T16590] ? mntput+0x65/0xc0 [ 366.840215][T16590] debugfs_start_creating+0xdb/0x1a0 [ 366.840245][T16590] __debugfs_create_file+0x6f/0x400 [ 366.840277][T16590] debugfs_create_file_full+0x3f/0x60 [ 366.840307][T16590] ref_tracker_dir_debugfs+0x197/0x360 [ 366.840338][T16590] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 366.840389][T16590] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 366.840414][T16590] ? alloc_netdev_mqs+0xa8/0x1210 [ 366.840443][T16590] ? __raw_spin_lock_init+0x45/0x100 [ 366.840471][T16590] alloc_netdev_mqs+0x274/0x1210 [ 366.840495][T16590] ? __pfx_macvlan_setup+0x10/0x10 [ 366.840524][T16590] rtnl_create_link+0x31f/0xd70 [ 366.840557][T16590] rtnl_newlink_create+0x277/0xb70 [ 366.840580][T16590] ? __pfx___nla_validate_parse+0x10/0x10 [ 366.840616][T16590] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 366.840643][T16590] ? __pfx___mutex_lock+0x10/0x10 [ 366.840676][T16590] ? ns_capable+0x89/0xe0 [ 366.840703][T16590] rtnl_newlink+0x166a/0x1bb0 [ 366.840741][T16590] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.840758][T16590] ? do_syscall_64+0x15f/0xf80 [ 366.840778][T16590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.840836][T16590] ? kasan_quarantine_put+0xbb/0x1f0 [ 366.840858][T16590] ? lockdep_hardirqs_on+0x7a/0x110 [ 366.840883][T16590] ? nlmon_xmit+0xb0/0x100 [ 366.840902][T16590] ? kmem_cache_free+0x182/0x650 [ 366.840939][T16590] ? __lock_acquire+0x6b5/0x2cf0 [ 366.840963][T16590] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.840990][T16590] ? __local_bh_enable_ip+0xd0/0x130 [ 366.841010][T16590] ? lockdep_hardirqs_on+0x7a/0x110 [ 366.841029][T16590] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.841050][T16590] ? __local_bh_enable_ip+0xd0/0x130 [ 366.841067][T16590] ? __dev_queue_xmit+0x2b6/0x3950 [ 366.841098][T16590] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 366.841134][T16590] ? __pfx_rtnl_newlink+0x10/0x10 [ 366.841153][T16590] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 366.841177][T16590] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 366.841196][T16590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.841213][T16590] ? ref_tracker_free+0x693/0x840 [ 366.841237][T16590] ? __pfx_ref_tracker_free+0x10/0x10 [ 366.841269][T16590] netlink_rcv_skb+0x232/0x4b0 [ 366.841293][T16590] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.841320][T16590] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.841355][T16590] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.841376][T16590] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.841403][T16590] netlink_unicast+0x75c/0x8e0 [ 366.841434][T16590] netlink_sendmsg+0x813/0xb40 [ 366.841465][T16590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.841491][T16590] ? aa_sock_msg_perm+0xf1/0x1b0 [ 366.841514][T16590] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 366.841541][T16590] ____sys_sendmsg+0x972/0x9f0 [ 366.841564][T16590] ? __might_fault+0xaf/0x130 [ 366.841591][T16590] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.841623][T16590] ? import_iovec+0x73/0xa0 [ 366.841650][T16590] ___sys_sendmsg+0x2a5/0x360 [ 366.841671][T16590] ? __lock_acquire+0x6b5/0x2cf0 [ 366.841694][T16590] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.841721][T16590] ? kstrtouint+0x6e/0xe0 [ 366.841769][T16590] ? __fget_files+0x2a/0x420 [ 366.841790][T16590] ? __fget_files+0x3a0/0x420 [ 366.841822][T16590] __sys_sendmmsg+0x27c/0x4e0 [ 366.841852][T16590] ? __pfx___sys_sendmmsg+0x10/0x10 [ 366.841871][T16590] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 366.841917][T16590] ? ksys_write+0x242/0x270 [ 366.841944][T16590] ? __pfx_ksys_write+0x10/0x10 [ 366.841975][T16590] __x64_sys_sendmmsg+0xa0/0xc0 [ 366.841997][T16590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.842015][T16590] do_syscall_64+0x15f/0xf80 [ 366.842035][T16590] ? trace_irq_disable+0x3b/0x140 [ 366.842060][T16590] ? clear_bhb_loop+0x40/0x90 [ 366.842082][T16590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.842098][T16590] RIP: 0033:0x7fc9cdf9cdd9 [ 366.842117][T16590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.842131][T16590] RSP: 002b:00007fc9cee23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.842150][T16590] RAX: ffffffffffffffda RBX: 00007fc9ce215fa0 RCX: 00007fc9cdf9cdd9 [ 366.842163][T16590] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 366.842175][T16590] RBP: 00007fc9cee23090 R08: 0000000000000000 R09: 0000000000000000 [ 366.842186][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.842197][T16590] R13: 00007fc9ce216038 R14: 00007fc9ce215fa0 R15: 00007ffc1c5bcbf8 [ 366.842228][T16590] [ 367.440856][T16602] veth13: entered promiscuous mode [ 367.494882][ T254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.715557][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 367.844664][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.072218][T16640] bond13: entered promiscuous mode [ 368.099964][T16640] 8021q: adding VLAN 0 to HW filter on device bond13 [ 368.195722][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.307662][T16655] syzkaller1: entered promiscuous mode [ 368.355591][T16655] syzkaller1: entered allmulticast mode [ 368.386731][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.432459][T16666] __nla_validate_parse: 4 callbacks suppressed [ 368.432476][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2735'. [ 368.482356][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2737'. [ 368.487669][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 368.506178][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 368.614313][T16678] ip6tnl3: entered promiscuous mode [ 368.820425][T16692] netlink: 'syz.1.2744': attribute type 7 has an invalid length. [ 368.829337][T16692] netlink: 'syz.1.2744': attribute type 23 has an invalid length. [ 368.848743][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.869263][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.878978][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.888352][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.899654][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.909219][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2743'. [ 368.934745][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 369.354956][T16713] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 369.361137][T16713] syzkaller1: linktype set to 1 [ 369.558366][T16684] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.821707][ T29] audit: type=1804 audit(1777825454.130:10): pid=16718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2751" name="/newroot/557/memory.events" dev="tmpfs" ino=2901 res=1 errno=0 [ 369.888109][ T29] audit: type=1800 audit(1777825454.130:11): pid=16718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2751" name="memory.events" dev="tmpfs" ino=2901 res=0 errno=0 [ 369.968103][T16731] netlink: 'syz.2.2754': attribute type 2 has an invalid length. [ 369.998522][ T42] lo speed is unknown, defaulting to 1000 [ 370.241562][T16748] xt_hashlimit: overflow, try lower: 6/0 [ 370.245122][T16733] bond9: entered promiscuous mode [ 371.205805][T16798] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.223219][T16798] bond8: (slave lo): Enslaving as an active interface with an up link [ 371.233832][T16798] net_ratelimit: 25 callbacks suppressed [ 371.233844][T16798] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 371.274587][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.301179][T16763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.440349][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.565529][ T5872] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.586009][T16808] netlink: 'syz.1.2773': attribute type 11 has an invalid length. [ 371.704890][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 371.758329][T16816] netlink: zone id is out of range [ 371.786106][T16816] netlink: zone id is out of range [ 371.809601][T16815] syzkaller0: entered promiscuous mode [ 371.811075][T16816] netlink: zone id is out of range [ 371.817296][T16815] syzkaller0: entered allmulticast mode [ 371.851935][T16816] netlink: zone id is out of range [ 371.864745][T16816] netlink: zone id is out of range [ 372.228862][T16839] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 372.490905][T16862] netlink: 'syz.1.2789': attribute type 1 has an invalid length. [ 372.542138][T16862] 8021q: adding VLAN 0 to HW filter on device bond14 [ 372.674255][T16868] bond14: (slave veth15): Enslaving as an active interface with a down link [ 372.759218][T16862] bond14: (slave dummy0): making interface the new active one [ 372.779888][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.791373][T16862] dummy0: entered promiscuous mode [ 372.809744][T16862] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 372.842472][T16875] syzkaller1: entered allmulticast mode [ 372.902122][T16880] bond14: (slave dummy0): Releasing active interface [ 372.909161][T16880] dummy0 (unregistering): left promiscuous mode [ 373.063749][T16893] ip6gre2: entered promiscuous mode [ 373.069422][T16893] ip6gre2: entered allmulticast mode [ 373.457931][T16906] lo speed is unknown, defaulting to 1000 [ 373.717593][T16926] team0: Mode changed to "broadcast" [ 373.849054][T16932] __nla_validate_parse: 18 callbacks suppressed [ 373.849074][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 373.867071][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'. [ 373.876247][T16932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2806'. [ 373.888442][T16932] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2806'. [ 374.008848][T16914] lo speed is unknown, defaulting to 1000 [ 374.045944][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 374.359138][T16950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2811'. [ 374.957474][T16965] tipc: Can't bind to reserved service type 2 [ 375.521437][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2822'. [ 376.035206][T17016] netlink: 'syz.3.2828': attribute type 15 has an invalid length. [ 376.161341][T17018] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2829'. [ 376.171635][T17018] netlink: 'syz.1.2829': attribute type 11 has an invalid length. [ 376.314573][ T1121] net_ratelimit: 77 callbacks suppressed [ 376.314595][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.434563][ T254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.554598][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.674669][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.784771][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 376.895650][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.004814][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.142124][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.260359][ T254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.387588][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 377.398508][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.407572][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 377.674758][ T42] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.215083][ T1223] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 378.522234][T16996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.705749][T17042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2835'. [ 378.921186][T17052] vlan0: entered promiscuous mode [ 379.408086][T17047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2839'. [ 379.408205][T17043] xt_hashlimit: size too large, truncated to 1048576 [ 379.432586][T17072] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2845'. [ 379.442418][T17043] xt_hashlimit: max too large, truncated to 1048576 [ 379.459258][T17072] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.2845'. [ 379.469677][T17043] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2836'. [ 379.477276][T17075] netlink: 62967 bytes leftover after parsing attributes in process `syz.1.2845'. [ 379.503123][T17072] netlink: 'syz.1.2845': attribute type 1 has an invalid length. [ 379.557231][T17072] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.855847][T17089] netlink: 'syz.4.2849': attribute type 61 has an invalid length. [ 380.209525][T17104] bridge_slave_0: left allmulticast mode [ 380.215769][T17104] bridge_slave_0: left promiscuous mode [ 380.221642][T17104] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.241653][T17104] bridge_slave_1: left allmulticast mode [ 380.251337][T17104] bridge_slave_1: left promiscuous mode [ 380.270580][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.319116][T17104] team0: Port device team_slave_0 removed [ 380.381746][T17104] team0: Port device team_slave_1 removed [ 380.402991][T17104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.412306][T17104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.421885][T17104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.432252][T17104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.539181][T17115] lo speed is unknown, defaulting to 1000 [ 380.553347][ T29] audit: type=1107 audit(1777825464.840:12): pid=17119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 380.891447][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 381.039132][T17145] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 381.208413][T17154] lo speed is unknown, defaulting to 1000 [ 381.484767][ T48] net_ratelimit: 38 callbacks suppressed [ 381.484784][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.601297][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2869'. [ 381.605377][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.625267][T17176] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2869'. [ 381.735027][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 381.791812][T17185] ip6t_srh: unknown srh invflags 4000 [ 381.964860][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.184881][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.291632][T17200] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2871'. [ 382.344753][ T1121] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.471881][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.554962][T17208] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 382.610233][ T5881] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.751840][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2875'. [ 382.785328][ T5891] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 382.914645][ T48] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 383.334666][T17233] 8021q: adding VLAN 0 to HW filter on device bond17 [ 383.360355][T17233] bond17 (unregistering): Released all slaves [ 383.644972][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.158816][T17158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.356240][T17244] netlink: 'syz.0.2882': attribute type 1 has an invalid length. [ 384.527503][T17256] __nla_validate_parse: 5 callbacks suppressed [ 384.527522][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2886'. [ 384.604358][T17259] netlink: 'syz.0.2885': attribute type 3 has an invalid length. [ 384.620200][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2885'. [ 384.859756][T17268] netlink: 'syz.2.2886': attribute type 9 has an invalid length. [ 384.872232][T17268] netlink: 182632 bytes leftover after parsing attributes in process `syz.2.2886'. [ 385.570456][ T5891] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.579355][ T5891] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.587931][ T5891] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.596755][ T5891] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.605715][ T5891] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.614243][ T5891] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.625995][ T5891] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.645685][ T5891] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.661684][ T5891] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.670890][ T5891] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.721076][ T5891] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.740334][ T5891] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.853129][T17294] No such timeout policy "syz1" [ 385.974123][T17304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2895'. [ 386.172683][T17311] lo speed is unknown, defaulting to 1000 [ 386.352296][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2900'. [ 386.753436][T17341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2906'. [ 386.755349][T17342] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2907'. [ 386.773335][T17342] netlink: 'syz.0.2907': attribute type 2 has an invalid length. [ 387.008223][ T5734] net_ratelimit: 15 callbacks suppressed [ 387.008240][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.223324][T17362] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 387.500307][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.513298][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.522101][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.533972][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.544249][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.673183][T17377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.326861][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.341248][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.379317][T17398] netlink: 'syz.2.2921': attribute type 21 has an invalid length. [ 388.416731][T17398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2921'. [ 388.529973][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.555222][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.631051][T17367] lo speed is unknown, defaulting to 1000 [ 388.698483][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.730180][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.838147][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2928'. [ 389.045099][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.074970][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.419005][ T254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.522504][ T254] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.545764][ T254] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.583196][ T254] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 389.645170][ T5635] Bluetooth: hci5: command tx timeout [ 389.693741][ T254] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.702525][ T254] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.760357][T17452] tipc: Trying to set illegal importance in message [ 389.780051][T17449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2934'. [ 389.805160][ T254] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.816594][ T254] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.853600][ T254] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.868115][ T254] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.936608][T17461] netlink: 'syz.2.2936': attribute type 30 has an invalid length. [ 390.045459][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.463228][ T5881] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 390.830677][ T5881] bond0 (unregistering): Released all slaves [ 390.841684][ T5881] bond1 (unregistering): Released all slaves [ 390.856240][ T5881] bond2 (unregistering): Released all slaves [ 390.871391][ T5881] bond3 (unregistering): Released all slaves [ 390.887804][ T5881] bond4 (unregistering): Released all slaves [ 390.905196][ T5881] bond5 (unregistering): Released all slaves [ 390.923321][ T5881] bond6 (unregistering): Released all slaves [ 390.941296][ T5881] bond7 (unregistering): (slave wireguard1): Releasing backup interface [ 390.949921][ T5881] wireguard1: left promiscuous mode [ 390.963501][ T5881] bond7 (unregistering): Released all slaves [ 390.987747][ T5881] bond8 (unregistering): Released all slaves [ 391.003444][ T5881] bond9 (unregistering): Released all slaves [ 391.016848][ T5881] bond10 (unregistering): Released all slaves [ 391.039494][ T5881] bond11 (unregistering): Released all slaves [ 391.059310][T17461] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 391.067169][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.274813][T17503] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 391.373262][ T5881] tipc: Disabling bearer [ 391.409667][ T5881] tipc: Left network mode [ 391.634905][T17520] netlink: 'syz.3.2945': attribute type 10 has an invalid length. [ 391.735195][ T5635] Bluetooth: hci5: command tx timeout [ 392.359467][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 392.390812][T17367] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.401194][T17367] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.413966][T17367] bridge_slave_0: entered allmulticast mode [ 392.422173][T17367] bridge_slave_0: entered promiscuous mode [ 392.549814][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2951'. [ 392.551755][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 392.576366][ T1223] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 392.733965][T17367] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.752139][T17367] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.761209][T17367] bridge_slave_1: entered allmulticast mode [ 392.770043][T17367] bridge_slave_1: entered promiscuous mode [ 392.806797][T17569] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2955'. [ 393.087157][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.115515][T17367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.205544][T17367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.301020][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 393.338380][T17597] netlink: 'syz.1.2958': attribute type 30 has an invalid length. [ 393.466949][T17367] team0: Port device team_slave_0 added [ 393.486746][ T1223] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 393.572072][T17367] team0: Port device team_slave_1 added [ 393.723615][ T48] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 393.781669][T17367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.804766][ T5635] Bluetooth: hci5: command tx timeout [ 393.813251][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.839846][T17367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.861272][T17367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.879674][T17367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.971017][T17367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.993866][ T48] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 394.005791][ T48] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 394.063137][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2966'. [ 394.119897][ T1121] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 394.133234][T17639] netlink: 'syz.1.2967': attribute type 12 has an invalid length. [ 394.230709][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.286712][ T5881] hsr_slave_0: left promiscuous mode [ 394.370036][ T5881] veth1_macvtap: left promiscuous mode [ 394.524821][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.914222][T17367] hsr_slave_0: entered promiscuous mode [ 394.943956][T17367] hsr_slave_1: entered promiscuous mode [ 394.969502][T17367] debugfs: 'hsr0' already exists in 'hsr' [ 394.982238][T17367] Cannot create hsr debugfs directory [ 395.117723][T17681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 395.171827][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.322259][T17694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'. [ 395.360930][T17691] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.375865][T17691] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.546814][T17691] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.556999][T17691] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.678689][T17691] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.710484][T17691] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.806750][T17691] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.858364][T17691] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.885886][ T5635] Bluetooth: hci5: command tx timeout [ 395.967638][T17724] syz_tun: entered promiscuous mode [ 396.011525][T17724] macsec1: entered promiscuous mode [ 396.037096][T17724] syz_tun: left promiscuous mode [ 396.127523][ T5726] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.192764][T17367] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.204872][T17367] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.307856][ T5881] IPVS: stop unused estimator thread 0... [ 396.326261][ T254] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.367766][ T254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.447181][T17736] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2988'. [ 396.466469][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.480852][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.488734][T17736] netlink: Unknown conntrack attr (0) [ 396.547581][ T29] audit: type=1800 audit(1777825480.860:13): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2987" name="memory.events" dev="tmpfs" ino=3135 res=0 errno=0 [ 396.597373][T17367] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.630089][T17367] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.897928][T17367] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.938503][T17367] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.996270][ T63] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.009630][ T63] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.041752][T17762] bond0: entered promiscuous mode [ 397.070132][T17734] lo speed is unknown, defaulting to 1000 [ 397.144966][T17367] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.159072][T17367] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.227512][ T63] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.252449][ T63] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.270445][T17755] bond0: left promiscuous mode [ 397.277152][T17767] tipc: Enabling of bearer rejected, failed to enable media [ 398.466289][T17367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 398.523056][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.543414][T17367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 398.633353][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.666479][T17814] lo speed is unknown, defaulting to 1000 [ 398.672952][T17367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 398.721423][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.745384][T17367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.767238][T17367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.078774][T17367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.159389][T17367] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.212227][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.219457][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.262255][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.269498][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.443196][T17840] lo speed is unknown, defaulting to 1000 [ 399.619627][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3008'. [ 400.711598][T17924] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3014'. [ 400.753156][T17367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.974771][T17367] veth0_vlan: entered promiscuous mode [ 401.013165][T17367] veth1_vlan: entered promiscuous mode [ 401.055993][T17933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3015'. [ 401.137451][T17367] veth0_macvtap: entered promiscuous mode [ 401.182643][T17367] veth1_macvtap: entered promiscuous mode [ 401.263598][T17367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.306104][T17367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.341141][ T5881] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.389106][ T5881] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.410313][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.430420][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.468386][T17948] mac80211_hwsim hwsim16 ªªªªª;: renamed from wlan0 [ 401.746245][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.793417][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.914986][ T5881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.931335][ T5881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.352344][T17990] erspan0: entered promiscuous mode [ 402.440074][T17990] syzkaller1: entered promiscuous mode [ 402.476536][T17990] syzkaller1: entered allmulticast mode [ 402.647615][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'. [ 402.671416][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'. [ 402.756422][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.782244][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.790912][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.802860][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.816612][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.854575][ T5631] Bluetooth: hci1: command tx timeout [ 405.332749][T18045] openvswitch: netlink: Duplicate or invalid key (type 0). [ 405.342757][T18045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.422168][T18043] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3033'. [ 405.475798][T18043] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3033'. [ 405.529462][T18043] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 405.628354][T18040] lo speed is unknown, defaulting to 1000 [ 406.363891][T18062] lo speed is unknown, defaulting to 1000 [ 406.477349][T18089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3040'. [ 406.927056][ T5631] Bluetooth: hci1: command tx timeout [ 407.078437][T18002] lo speed is unknown, defaulting to 1000 [ 407.343319][T18115] syzkaller0: entered promiscuous mode [ 407.354696][T18115] syzkaller0: entered allmulticast mode [ 407.370565][T18119] netlink: 'syz.3.3046': attribute type 1 has an invalid length. [ 409.014725][ T5631] Bluetooth: hci1: command tx timeout [ 411.084649][ T5631] Bluetooth: hci1: command tx timeout [ 411.125685][T18194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3052'. [ 411.391134][T18206] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 411.392152][T18002] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.409120][T18002] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.417782][T18002] bridge_slave_0: entered allmulticast mode [ 411.428633][T18002] bridge_slave_0: entered promiscuous mode [ 411.451772][T18002] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.464620][T18002] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.477706][T18002] bridge_slave_1: entered allmulticast mode [ 411.498983][T18002] bridge_slave_1: entered promiscuous mode [ 411.659373][T18002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.698467][T18002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.735750][T18230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'. [ 411.910252][T18002] team0: Port device team_slave_0 added [ 411.937486][T18002] team0: Port device team_slave_1 added [ 411.957273][T18237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3061'. [ 412.045638][T18002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.053339][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.080742][T18002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.126976][T18002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.141011][T18002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.194245][T18002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.410591][T18002] hsr_slave_0: entered promiscuous mode [ 412.426369][T18002] hsr_slave_1: entered promiscuous mode [ 412.441528][T18002] debugfs: 'hsr0' already exists in 'hsr' [ 412.462729][T18002] Cannot create hsr debugfs directory [ 412.606382][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 412.790095][T18254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.822758][T18254] batadv0: entered promiscuous mode [ 412.846467][T18254] batadv0: entered allmulticast mode [ 412.868869][T18254] team0: Port device batadv0 added [ 412.920250][T18252] bridge0: port 1(team0) entered blocking state [ 412.937598][T18252] bridge0: port 1(team0) entered disabled state [ 412.963610][ T5874] bridge0: port 1(team0) entered blocking state [ 412.970077][ T5874] bridge0: port 1(team0) entered forwarding state [ 413.445476][ T5881] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 413.455174][ T5881] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 413.539964][T18288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3073'. [ 413.596853][T18288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3073'. [ 413.645250][ T5726] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.923004][T18293] pim6reg1: entered promiscuous mode [ 413.945547][T18293] pim6reg1: entered allmulticast mode [ 414.137158][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 414.473513][T18002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.514901][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.538310][T18002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 414.571681][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.590353][T18002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 414.619937][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.646597][T18002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.692008][T18002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.878940][T18002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.947571][T18002] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.974081][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.981295][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.057719][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.064946][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.123299][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3083'. [ 415.480952][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 415.934224][T18349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'. [ 415.959837][T18362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.239750][T18002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.898224][T18002] veth0_vlan: entered promiscuous mode [ 416.947059][T18002] veth1_vlan: entered promiscuous mode [ 417.082016][T18396] syzkaller0: entered promiscuous mode [ 417.104650][T18396] syzkaller0: entered allmulticast mode [ 417.170423][T18002] veth0_macvtap: entered promiscuous mode [ 417.203170][T18002] veth1_macvtap: entered promiscuous mode [ 420.243101][T18431] ip6gre4: entered promiscuous mode [ 420.249218][T18431] ip6gre4: entered allmulticast mode [ 420.335225][T18002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.380377][T18002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.427631][ T5891] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.468966][ T5891] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.491367][ T5891] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.523067][ T5891] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.618864][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 420.656101][T18447] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3112'. [ 420.761099][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3114'. [ 420.810096][T18458] xt_TCPMSS: Only works on TCP SYN packets [ 420.883138][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.916396][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.986511][T18458] bridge0: port 1(team0) entered disabled state [ 421.154138][ T5874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.162941][ T48] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 421.165538][ T5874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.173906][ T48] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 421.185816][ T5734] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 421.199699][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 421.326329][ T5726] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 421.718036][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'. [ 421.829002][T18494] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 421.930367][T18505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3124'. [ 421.942514][T18505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3124'. [ 422.044819][ T5726] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 422.115935][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 422.128923][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 422.140727][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 422.157271][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 422.167755][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 422.226542][T18512] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 422.244048][T18512] netlink: 'syz.3.3129': attribute type 4 has an invalid length. [ 422.275825][T18512] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3129'. [ 422.312186][T18520] netlink: 'syz.4.3131': attribute type 11 has an invalid length. [ 422.697020][T18539] lo speed is unknown, defaulting to 1000 [ 422.777539][T18546] netlink: 'syz.4.3135': attribute type 58 has an invalid length. [ 422.932133][T18535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3134'. [ 423.308800][T18571] netlink: 'syz.4.3141': attribute type 3 has an invalid length. [ 423.389511][T18509] lo speed is unknown, defaulting to 1000 [ 423.612316][T18581] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 424.000698][T18595] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.013706][T18595] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 424.024297][T18595] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 424.043806][T18585] lo speed is unknown, defaulting to 1000 [ 424.116676][T18595] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.127537][T18595] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 424.138843][T18595] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 424.206222][ T5631] Bluetooth: hci3: command tx timeout [ 424.220884][T18595] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.247022][T18595] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 424.269239][T18595] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 424.517143][T18595] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.530666][T18595] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44526 - 0 [ 424.542059][T18595] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 424.901999][ T5872] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.912148][ T5872] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44526 - 0 [ 424.920644][ T5872] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 424.978537][ T5872] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.989954][ T5872] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44526 - 0 [ 425.001711][ T5872] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 425.143199][T18629] netlink: 560 bytes leftover after parsing attributes in process `syz.2.3153'. [ 425.172182][ T5872] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.201775][ T5872] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44526 - 0 [ 425.245205][ T5872] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 425.324768][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 425.424577][ T48] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.441220][ T48] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44526 - 0 [ 425.450697][ T48] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 425.507047][T18644] netlink: 'syz.0.3158': attribute type 30 has an invalid length. [ 425.550758][T18509] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.559643][T18509] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.560999][T18644] netlink: 'syz.0.3158': attribute type 30 has an invalid length. [ 425.568305][T18509] bridge_slave_0: entered allmulticast mode [ 425.583507][T18509] bridge_slave_0: entered promiscuous mode [ 425.596041][T18509] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.610807][T18509] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.618395][T18509] bridge_slave_1: entered allmulticast mode [ 425.627610][T18509] bridge_slave_1: entered promiscuous mode [ 425.721857][ T5881] [ 425.724232][ T5881] ============================================ [ 425.730387][ T5881] WARNING: possible recursive locking detected [ 425.736554][ T5881] syzkaller #0 Not tainted [ 425.741136][ T5881] -------------------------------------------- [ 425.747267][ T5881] kworker/u8:13/5881 is trying to acquire lock: [ 425.753485][ T5881] ffff888029c05d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 425.763310][ T5881] [ 425.763310][ T5881] but task is already holding lock: [ 425.770661][ T5881] ffff888031c7a158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 425.780488][ T5881] [ 425.780488][ T5881] other info that might help us debug this: [ 425.788531][ T5881] Possible unsafe locking scenario: [ 425.788531][ T5881] [ 425.796052][ T5881] CPU0 [ 425.799318][ T5881] ---- [ 425.802582][ T5881] lock(&qdisc_xmit_lock_key#4); [ 425.807599][ T5881] lock(&qdisc_xmit_lock_key#4); [ 425.812617][ T5881] [ 425.812617][ T5881] *** DEADLOCK *** [ 425.812617][ T5881] [ 425.820743][ T5881] May be due to missing lock nesting notation [ 425.820743][ T5881] [ 425.829043][ T5881] 11 locks held by kworker/u8:13/5881: [ 425.834484][ T5881] #0: ffff8880364e2940 ((wq_completion)bond7#4){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 425.845549][ T5881] #1: ffffc90005497c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 425.858413][ T5881] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 425.867977][ T5881] #3: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 425.877889][ T5881] #4: ffff8880409fb228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 425.890500][ T5881] #5: ffff888031c7a158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 425.900763][ T5881] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 425.909628][ T5881] #7: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 425.919362][ T5881] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 425.928139][ T5881] #9: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 425.938050][ T5881] #10: ffff888034b7d228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 425.950740][ T5881] [ 425.950740][ T5881] stack backtrace: [ 425.956613][ T5881] CPU: 1 UID: 0 PID: 5881 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 425.956630][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 425.956640][ T5881] Workqueue: bond7 bond_alb_monitor [ 425.956660][ T5881] Call Trace: [ 425.956667][ T5881] [ 425.956674][ T5881] dump_stack_lvl+0xe8/0x150 [ 425.956690][ T5881] print_deadlock_bug+0x279/0x290 [ 425.956708][ T5881] __lock_acquire+0x253f/0x2cf0 [ 425.956726][ T5881] ? unwind_next_frame+0xa6/0x2550 [ 425.956747][ T5881] ? sch_direct_xmit+0x15f/0x4c0 [ 425.956760][ T5881] lock_acquire+0x106/0x350 [ 425.956774][ T5881] ? sch_direct_xmit+0x15f/0x4c0 [ 425.956792][ T5881] _raw_spin_lock+0x2e/0x40 [ 425.956805][ T5881] ? sch_direct_xmit+0x15f/0x4c0 [ 425.956818][ T5881] sch_direct_xmit+0x15f/0x4c0 [ 425.956834][ T5881] ? __pfx_sch_direct_xmit+0x10/0x10 [ 425.956848][ T5881] ? arp_create+0xa0/0x980 [ 425.956868][ T5881] __dev_queue_xmit+0x180f/0x3950 [ 425.956889][ T5881] ? __dev_queue_xmit+0x2b6/0x3950 [ 425.956909][ T5881] ? arpt_do_table+0x256/0x1e30 [ 425.956926][ T5881] ? __pfx___dev_queue_xmit+0x10/0x10 [ 425.956947][ T5881] ? __pfx_arpt_do_table+0x10/0x10 [ 425.956961][ T5881] ? trace_kmem_cache_alloc+0x29/0xe0 [ 425.956985][ T5881] ? NF_HOOK+0xa2/0x3c0 [ 425.957002][ T5881] NF_HOOK+0x33a/0x3c0 [ 425.957020][ T5881] ? __pfx_arp_xmit_finish+0x10/0x10 [ 425.957037][ T5881] ? NF_HOOK+0xa2/0x3c0 [ 425.957053][ T5881] ? __pfx_NF_HOOK+0x10/0x10 [ 425.957070][ T5881] ? lock_acquire+0x106/0x350 [ 425.957083][ T5881] ? __pfx_arp_xmit_finish+0x10/0x10 [ 425.957102][ T5881] ? inet_addr_type_dev_table+0x25/0x190 [ 425.957122][ T5881] arp_xmit+0x16c/0x270 [ 425.957139][ T5881] ? arp_xmit+0x23/0x270 [ 425.957156][ T5881] arp_solicit+0xbe0/0xe40 [ 425.957175][ T5881] ? arp_solicit+0x119/0xe40 [ 425.957194][ T5881] ? __pfx_arp_solicit+0x10/0x10 [ 425.957215][ T5881] ? __pfx_arp_solicit+0x10/0x10 [ 425.957232][ T5881] __neigh_event_send+0xf05/0x14d0 [ 425.957251][ T5881] neigh_resolve_output+0x198/0x750 [ 425.957267][ T5881] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 425.957289][ T5881] ? ip_finish_output2+0x3c2/0x1070 [ 425.957308][ T5881] ip_finish_output2+0xca9/0x1070 [ 425.957328][ T5881] ? ip_skb_dst_mtu+0x80b/0xa50 [ 425.957347][ T5881] ? ip_finish_output+0x40e/0x530 [ 425.957365][ T5881] ip_output+0x29f/0x450 [ 425.957383][ T5881] ? ip_output+0x5b/0x450 [ 425.957400][ T5881] iptunnel_xmit+0x621/0xd10 [ 425.957425][ T5881] ip_tunnel_xmit+0x193a/0x1f20 [ 425.957450][ T5881] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 425.957469][ T5881] ? __pfx_gre_build_header+0x10/0x10 [ 425.957486][ T5881] ? kfree+0x1c5/0x640 [ 425.957500][ T5881] ? pskb_expand_head+0x458/0x1390 [ 425.957520][ T5881] __gre_xmit+0x19e/0x240 [ 425.957543][ T5881] ? __pfx___gre_xmit+0x10/0x10 [ 425.957568][ T5881] erspan_xmit+0xa41/0x14d0 [ 425.957587][ T5881] ? ret_from_fork_asm+0x1a/0x30 [ 425.957604][ T5881] ? __pfx_erspan_xmit+0x10/0x10 [ 425.957623][ T5881] dev_hard_start_xmit+0x2cd/0x830 [ 425.957646][ T5881] sch_direct_xmit+0x251/0x4c0 [ 425.957662][ T5881] ? __pfx_sch_direct_xmit+0x10/0x10 [ 425.957676][ T5881] ? kthread+0x370/0x470 [ 425.957694][ T5881] __dev_queue_xmit+0x180f/0x3950 [ 425.957715][ T5881] ? __dev_queue_xmit+0x2b6/0x3950 [ 425.957738][ T5881] ? __pfx___dev_queue_xmit+0x10/0x10 [ 425.957756][ T5881] ? rcu_is_watching+0x15/0xb0 [ 425.957773][ T5881] ? trace_kmem_cache_alloc+0x29/0xe0 [ 425.957790][ T5881] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 425.957814][ T5881] ? alb_send_lp_vid+0x14e/0x550 [ 425.957832][ T5881] alb_send_lp_vid+0x348/0x550 [ 425.957851][ T5881] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 425.957873][ T5881] alb_send_learning_packets+0x12c/0x300 [ 425.957892][ T5881] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 425.957909][ T5881] ? bond_alb_monitor+0xf8/0x17e0 [ 425.957927][ T5881] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 425.957944][ T5881] bond_alb_monitor+0x3d5/0x17e0 [ 425.957963][ T5881] ? bond_alb_monitor+0xf8/0x17e0 [ 425.957979][ T5881] ? __pfx_bond_alb_monitor+0x10/0x10 [ 425.957996][ T5881] ? process_scheduled_works+0xa70/0x1860 [ 425.958010][ T5881] ? process_scheduled_works+0xa70/0x1860 [ 425.958023][ T5881] process_scheduled_works+0xb5d/0x1860 [ 425.958047][ T5881] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.958063][ T5881] ? assign_work+0x3d5/0x5e0 [ 425.958077][ T5881] worker_thread+0xa53/0xfc0 [ 425.958100][ T5881] kthread+0x388/0x470 [ 425.958116][ T5881] ? __pfx_worker_thread+0x10/0x10 [ 425.958129][ T5881] ? __pfx_kthread+0x10/0x10 [ 425.958146][ T5881] ret_from_fork+0x514/0xb70 [ 425.958162][ T5881] ? __pfx_ret_from_fork+0x10/0x10 [ 425.958175][ T5881] ? __switch_to+0xc79/0x1410 [ 425.958195][ T5881] ? __pfx_kthread+0x10/0x10 [ 425.958212][ T5881] ret_from_fork_asm+0x1a/0x30 [ 425.958233][ T5881] [ 426.416419][ T5631] Bluetooth: hci3: command tx timeout [ 426.441817][T18655] __nla_validate_parse: 4 callbacks suppressed [ 426.441835][T18655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3157'. [ 426.842546][T18651] veth0_to_hsr: left promiscuous mode [ 426.848723][T18651] veth0_to_hsr: left allmulticast mode [ 427.055574][T18651] bond2: left promiscuous mode [ 427.074464][T18651] ip6gre1: left promiscuous mode [ 427.132169][T18651] geneve2: left promiscuous mode [ 427.309322][T18651] ip6gre3: left promiscuous mode [ 427.347866][T18651] bond7: left promiscuous mode [ 427.354514][T18651] erspan2: left promiscuous mode [ 427.359697][T18651] bond7: left allmulticast mode [ 427.367721][T18651] erspan2: left allmulticast mode [ 427.384299][T18651] bond8: left promiscuous mode [ 427.389309][T18651] bridge7: left promiscuous mode [ 427.405519][T18651] ip6tnl3: left promiscuous mode [ 427.428406][T18651] bond9: left promiscuous mode [ 427.446302][T18651] ip6gre4: left promiscuous mode [ 427.458707][T18651] ip6gre4: left allmulticast mode [ 427.507599][ T5874] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.522574][ T5874] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 44526 - 0 [ 427.531467][ T5874] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.541605][T18509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.552338][ T5874] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.561435][ T5874] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 44526 - 0 [ 427.570080][ T5874] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.581373][T18509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.597391][ T5874] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.606354][ T5874] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 44526 - 0 [ 427.615302][ T5874] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.623689][ T5874] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.632104][ T5874] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 44526 - 0 [ 427.640920][ T5874] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 427.655385][T18509] team0: Port device team_slave_0 added [ 427.662328][T18509] team0: Port device team_slave_1 added [ 427.676859][T18509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.683828][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.709887][T18509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.721677][T18509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.728965][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.755321][T18509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.780737][T18509] hsr_slave_0: entered promiscuous mode [ 427.786883][T18509] hsr_slave_1: entered promiscuous mode [ 427.792819][T18509] debugfs: 'hsr0' already exists in 'hsr' [ 427.798661][T18509] Cannot create hsr debugfs directory [ 427.864327][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 427.874889][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 427.885385][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 427.896191][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.906566][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.916986][T18509] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 427.981865][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 427.992483][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 428.003119][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 428.013717][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.025176][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 428.035646][T18509] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 428.103086][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 428.113619][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 428.124383][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 428.135998][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.146687][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 428.157156][T18509] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 428.221525][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 428.232203][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 428.242509][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 428.252844][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.263263][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 428.274133][T18509] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 428.347619][T18509] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.356510][T18509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.364113][T18509] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.383901][T18509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.391722][T18509] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.400252][T18509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.407898][T18509] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.416652][T18509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 428.445666][ T5631] Bluetooth: hci3: command tx timeout [ 428.467173][T18509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.482244][T18509] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.492754][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.499888][ T5872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.511985][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.519126][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.715964][T18509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.742224][T18509] veth0_vlan: entered promiscuous mode [ 428.751432][T18509] veth1_vlan: entered promiscuous mode [ 428.772655][T18509] veth0_macvtap: entered promiscuous mode [ 428.781249][T18509] veth1_macvtap: entered promiscuous mode [ 428.793556][T18509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.806655][T18509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.818647][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.828211][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.838540][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.848404][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.874726][T18509] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 428.893904][ T5872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.896022][T18509] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 428.903759][ T5872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.928212][ T5872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.936328][ T5872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.524628][ T5631] Bluetooth: hci3: command tx timeout