last executing test programs: 4.588453125s ago: executing program 1 (id=7239): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0008000071107600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmmsg(r1, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000440)='Mt', 0x2}], 0x1}}], 0x1, 0x4040040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf25cf01eef04d2ff03614000200776731000000000002000000000000009184a2f4b99449d2e0720ce186983e43c7596c7078736887c27cc86c02257ec45604cf71ea52d87f040917460c2e893f9e6e45f2041585a7a2955fd2ce14a5d6a31b3e46e5b92c3c8571ee23263fe711e0fda8a88b233e5b4d2b66474ecf895dfa83e097c41a407f1ed2"], 0x2c}, 0x1, 0x0, 0x0, 0x4040014}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000940)={&(0x7f00000000c0), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x16c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffff8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x5c, 0x66, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0x1, 0xf}, {0x3, 0xb}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x3269d151}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) 1.841277432s ago: executing program 1 (id=7245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r1 = socket$inet_sctp(0x2, 0x400000000001, 0x84) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16, 0x9}]}, 0x10) sendto$inet(r1, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r1, 0xda8c) accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYRES16=r1], 0x84}, 0x1, 0x0, 0x0, 0x2002c0d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.840414322s ago: executing program 4 (id=7246): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001700)=@newtfilter={0x3d8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x3ac, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x80000000}, @TCA_U32_SEL={0x384, 0x5, {0x5, 0x4, 0x37, 0x5, 0x97, 0x1, 0x1, 0x3, [{0x0, 0x3, 0x2, 0x80}, {0x2, 0x7, 0xa3, 0x9}, {0xef4, 0x401, 0x4, 0x9}, {0x7, 0x40, 0x12af, 0x101}, {0x5, 0x6, 0x4664, 0x5}, {0x800, 0x9a83, 0x1ff, 0x4e6}, {0xfad, 0x5, 0x1, 0x9}, {0x5, 0xb9, 0x2, 0xfffffff7}, {0x2, 0x2, 0x4, 0x7}, {0x4, 0x401, 0x8, 0x2}, {0x7, 0x400, 0x2, 0x2}, {0x3, 0x0, 0x3, 0x7}, {0x9, 0x58128040, 0x5, 0xa}, {0x6, 0x0, 0x2, 0x1}, {0x7000, 0x6, 0x0, 0x4}, {0x8, 0x1, 0x1000, 0x1}, {0x6, 0x5, 0x8, 0x5}, {0x8000, 0x2980000, 0x1, 0x7}, {0x4, 0x3, 0x0, 0x2}, {0x2d, 0x401, 0x3, 0xffff0fb9}, {0x0, 0x7, 0x8, 0x1}, {0x83604ef, 0x1, 0x2, 0x5}, {0xe00, 0x3, 0x2, 0x8}, {0x1, 0xffffffff, 0x7, 0x3}, {0x7, 0x7, 0x4, 0xf}, {0x80, 0xb, 0x8000, 0xb8}, {0x0, 0x1, 0x7, 0x8}, {0xfffffffb, 0x9, 0x6, 0x1}, {0xe6a7, 0xffffffdd, 0x4, 0x3}, {0x4, 0x7f, 0x3}, {0x4, 0xfffffff8, 0x8ec, 0x7}, {0xffff9d69, 0x0, 0xe}, {0x3, 0x3, 0x80000001, 0x81}, {0x2, 0x7}, {0x7ff, 0x1, 0x3, 0x8}, {0x9, 0x6, 0x7, 0x44b}, {0x1, 0xda3, 0x2, 0x6}, {0xfffffff9, 0x9, 0x7b, 0x92}, {0x7, 0xfffffff9, 0x9, 0xb581}, {0xcd08, 0xb1f, 0x8001, 0xd}, {0x5c, 0x3, 0x7, 0xa2c}, {0x2, 0x6, 0x5, 0x3}, {0xfffffffa, 0x7, 0x10001, 0x6}, {0x8, 0x80000001}, {0x0, 0x6, 0x8, 0x5}, {0x6, 0x9, 0x1, 0x2}, {0xded, 0x8, 0x1ff, 0xfffffff9}, {0x0, 0x4, 0x6d7fffa0, 0x3}, {0x1, 0x40, 0x4, 0xf}, {0x80, 0x7, 0x34, 0x9}, {0x5, 0x1ff, 0x4, 0x2}, {0x9, 0x9, 0xe, 0x5}, {0x2, 0x10000, 0xfffffffe, 0x6}, {0x3, 0xf61c, 0x2, 0x8}, {0x7, 0x1, 0x1, 0x4}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}]}}]}, 0x3d8}}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r5 = accept4(r0, 0x0, 0x0, 0x5643069aa6c400a1) recvfrom$inet(r5, &(0x7f0000000480)=""/231, 0xe7, 0x1, 0x0, 0x0) (async) sendmsg$alg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) (async) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@delqdisc={0xb8, 0x25, 0x800, 0x78bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0xffe0, 0x9}, {0xd, 0x10}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) 1.839899989s ago: executing program 0 (id=7247): r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff}}) (async) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@deltclass={0x80, 0x29, 0x5, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0xb}, {0x5}, {0x10, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x80000001, 0x7, 0x9}}, @TCA_HFSC_RSC={0x10, 0x1, {0x8802, 0x80000001, 0x7fff}}]}}]}, 0x80}}, 0x2000400c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f0000000140)="abb5768c7c32932eb6ef550e4bdf8511b1e94eae3230906da3e1c17b4751478607dd43ea27787236c3d9388097f2dc47ca38b27a0c27782137731b42ee60f151018e1281b93c650189facfbd7367e8fea7e83fdd462a4b242d09e2bd86b535eb7dd91f85b4bfd9a9862135ca5e85cf3bcbfa751de92e4e28500735f7f98d3dac6ff56a1057f1081aa1ebf7bd98783c0b3413af3888e278a907a3719f272aac9c1f5ee984372190bc84cae9562675185d929b7da28a3f993469c5ac81", &(0x7f0000000440)=""/188, &(0x7f0000000500)="26d385ca7c9e4aa201e05d148277c678096695beeda2096d638c7c7b2b3f1440826e15eb2ec252a2ffd0af898d00f018df0bc09415aaa495be4c500fa09c2b8662f90893ea7ce38e3e3133ab9a12ac16057a1f0dcfa0cafe93a10fd48e58176cf839e2f9b36e19d16f6d78a03d040670c57ae36d5bbda71bf7384b4355427745d20a74a1803ac111f946559fa32f4e112e29ca99b573b26d8fb36f28adb1d35ada5f92f4e4cec41fa674e81c44c4f510da4935d6e30a4e1cfbfb5b9f369ed13db900b9a5b5f7cfe1083e58a2eff4d51cb45844a86d747916e4e666917378adfa9adfe57d363d82a720e8ec7575addc6b90e6fc", &(0x7f0000000600)="edc1bfb5f8a010fdb72a6d15f9e86454127b0302895baae49e017a73cc9304fa9b17dc07bfdbd16546cc918863fb7e277af32d15f234796bdc91124f1d06aa8f1347eab12b350c91ddcb47a23a1070cf0c5e4ce4fd783a956c13b92076a5d450cb034c00c9a31d5ef9dccdeb66c7464bb41fc06028245382e7d050e7da", 0x4, r5}, 0x38) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000040)=0x3, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000000141000000180017"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES16=r3, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000301003fd31340e92c4baf"], 0x48}, 0x300}, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x0) 1.637284942s ago: executing program 0 (id=7250): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x1bc, 0x30, 0x51b, 0x0, 0x0, {}, [{0x1a8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x9c, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x59, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xa8, 0x0, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}]}, {0x5f, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1bc}}, 0x0) (async) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x1800) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000000c0)={{0x62, @rand_addr=0x64010100, 0x4e20, 0x2, 'none\x00', 0x11, 0x1, 0x15}, {@broadcast, 0x4e23, 0xc88fae5cd07fc0e9, 0x4, 0x7, 0x3}}, 0x44) (async) r1 = socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040041) 1.584426103s ago: executing program 1 (id=7251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)=@tcp, 0x3}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.58315472s ago: executing program 4 (id=7252): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r4, r3, 0x4, r3}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.55425959s ago: executing program 0 (id=7254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x3, 0x14, 0x2, 0x64026, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0x2, 0x2, 0x0, 0x4, 0x1, 0xe7e, [{0xa, 0x5, 0x2}, {0xa, 0x1, 0x1}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x71]}}, &(0x7f0000000200)=""/137, 0x58, 0x89, 0x0, 0x6, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5, 0xf2, 0xe, 0x24034, r0, 0xffff, '\x00', 0x0, r1, 0x1, 0x0, 0x5, 0xf}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000000)=@tcp6, 0x3}, 0x20) 1.483919921s ago: executing program 1 (id=7255): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x1, @mcast1, 0x2}, {0xa, 0x4e21, 0x4, @remote, 0x7}, 0x0, {[0x2, 0x7, 0xfffffffe, 0x5, 0x6, 0x6, 0x0, 0x9]}}, 0x5c) 1.435686735s ago: executing program 4 (id=7257): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000000000006911ba000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.369959205s ago: executing program 0 (id=7259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24, r2}, 0x94) 1.300353867s ago: executing program 3 (id=7260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) write$nbd(r2, &(0x7f0000000400)=ANY=[], 0xb4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) 1.295064542s ago: executing program 4 (id=7261): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00 \x00'}) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r3) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) (async) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'vxcan1\x00', 0xdca0000}) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x810) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022abd7000fbdbdf25140000003c0007800c00030008000000000000000c000400ffffffff0000000008000200e53b0000080001005302000008000200030000000800010004000000"], 0x50}}, 0x44400) (async) sendmmsg$inet6(r8, &(0x7f0000000800)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @remote, 0x8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000200)="13d7bfaa33541243683b3c111b1fad57f9b7f279f4329de8b5baca9b4fef8f1a6bf3f2db33e26c314708a21b3a4436fa55ef739c9fa097bbc037a5b21e585543e4295abb73849a165eab50c9e309adca076b16a2878ad60c0a191a1aa6172e5d8b568026ca13c022d508f21adb82dd6e38b188ff477ec40744da7ab91859a63b89c803bca2d23db4d838fe9edc7961eb8a33fbcd7b6b18c28dc7c0481dd3489128601d034ce957c972fff0f6d3ff6971d89907fd", 0xb4}, {&(0x7f00000002c0)="aeecec9682faeb85a1a3551433e3dfdae67bac9d0c108d98da660cf00208", 0x1e}, {&(0x7f0000000300)="368a47e149e248bfab17c3ecd566eb4e8d0e6d2613034022f47499b674e8187fc94666c7596f75994c92642cc3b90ca4885392bca9fd371d27e5a845571ad03b6495224e0b1b0867bc92b5126c078aa1854316462c641f6ccd791909cc4474a7f7aca3c89ba8d7149a6d31fe72c9b257d407cf84c58d227d456cc0b47f020a8e1d4579e90560c69fd417c0bc169aa3259b437ef7bcc6e6b58e4f0d34d29897a342d65208a567a6e523fa9c4ced503da6df01", 0xb2}, {&(0x7f0000000600)="eb2f8c4b1133929d6ba92a7cd14e35b85f5bbb33deb55cf611372e7ed0cbf4e990a95ea8d0a4606342249e5fdcc8cee9fc977c8fca903a510b850617f44c1e3f167a48a3051be878c9c874cd6d24ac76947ec98dfb0b632374e3e087aa3167bf22e281c876042e9d032a2905142235918b9a29617f09076b92da7c8fcbb1d0f325be59d2b9a7a45ef5cc3f6e4e7e9233e13647", 0x93}, {&(0x7f00000006c0)="ea5395faa2684a7bc715c011957607fa2443f6f8e5ba14f9f401", 0x1a}, {&(0x7f0000000700)="5134e0aabd5e3194aabba113ddc5da6dba91cb403dc32f5fffaf4499785e4136550417f409914673ca", 0x29}], 0x6, &(0x7f00000007c0)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8001}}], 0x38}}], 0x1, 0x80) 1.294486719s ago: executing program 1 (id=7262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000001c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES16=0x0, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r6, &(0x7f0000000000), 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r2) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="24599100", @ANYRES16=r9, @ANYBLOB="00042bbd7000ffdbdf250300000006000a004e220000060001004e220000"], 0x24}, 0x1, 0x0, 0x0, 0x20004810}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x28, r8, 0x1, 0x2, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x74}}}}}, 0x28}}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xffffffffffffff8e, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="200029bd7000fcdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r13], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x4000010, r12, 0x100000000) socket(0x1, 0x803, 0x0) 1.187366147s ago: executing program 3 (id=7263): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.135354134s ago: executing program 2 (id=7264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3800084}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@dev, @initdev, 0x0}, &(0x7f0000000180)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x24, 0xd, 0x6, 0xc, @private1, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x80, 0x7e, 0x10}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000280)={@empty, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xba, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001bc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000640)={0x1504, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xf0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[@!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c2}]}]}, @ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "d983b5a5e192f0c2e72773bc2e0bb79e08f31a61d08b6c035d0e300a3840e16a27f95f9d8ab0bd80aed4b0ceee963e7ddd42d6e83911ae6b566563cb4642ca3f4dbbf422639b3150b859e53ded72e0c5c834f2a93e8da62b9ca11dc75111afa52a666c8fa37391c1c4f180acfbf12c3ff12b8b62afe09e4ffb8a2e73ff0e42e11fb97d59246e610a810d4639d8a4f1fee4b0b2eb321f79ef3039ea3b083af27f14285ecc4b73"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x1324, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '%'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf66}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "c6c23d5a39144cc6a3b353d7fdc71f4e6582839df9c3956d4ff0b1236b2450584b42c34468ed35f5707b0ac613578f1d3569afc05b68e2f725b22493ee1f02a22bd74c76bf1dbc1524c7864c6821f6a34c6dc068cb8f3d5ad800a9433dda670b0c4529f249e00baab48ba3b6e9aad221cc5f2496715b6b2e48baa5c8bdab84ecdd022e6120919e01d4ae3f7ecb2fd4ad1b34"}, @ETHTOOL_A_BITSET_VALUE={0xdc, 0x4, "9452b301a9cd08a7388527fa2e2498189991009915dd4eadd43ee63477c02e1875a67672ca761f797122bb173c5b02d383277799b5457a68314347c30048434b26b2497f9e42c2e32461852a7908f1b543a773d39bc709f5486973efd7820c27888e9ca8652a5251dcc171e99afab68df856483816bb76e0b52a5e6eaaf16d31049126349cc5fb11f7a31029c89664b335a10260c9968bbde8efb555052ddfb5a16c6c370604831b7fe54a4d0f57f3116a24c066750dd980fc5045ad81402b024efd6c774a4dd2a98e7e8d3a58fbc82895e03b9bc25103c5"}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "c0ade30c6f68fb6f210a4ba4d07ad94af4d36088c9cdc9a0ef012cb90ab5d446da6beb86d9aebcf4bbc545e1ba2621eb0fb928bb1220f1497fc9b44d00c420560923d2ed9117af793e3e13c524779ec9a1f79208bda68903411c260f263ad4f17f797399874488af2bb64d16337706"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "9b8996962d21aa26d0fa4a0b5a4fab37336190a8f8738976086889698fb149e74c0292f93993b065b42fc947d8958968be8b825bf06fcc91600365898d0bb619bb0c4dced3e627d2a270604169801b45888d7ce77fbb0a53b94881f90b7bbb14ee9f3a840316d8fb2d2161a0a04239aa7fc1cd07cfb6a2d4693f6a9b372b121b86fded6818184704a7bf13aa4f089b9c223bc9643029edd382c08b8d5774fb652be2bb421985841cb8edcc421bd87930cad2915bff3271d242d0b2970832054a85b55f46e8bad1"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1504}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c5) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00), 0x8) (rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c40), 0x440000, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x300) (async, rerun: 32) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x12, r7, 0xa814f000) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001c80)={'wg2\x00'}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001dc0)={r0, &(0x7f0000001cc0)='\x00', 0x20200, &(0x7f0000001d00)={@_ha_fsid={[0x7, 0x1]}, {0x8, 0x2, 0x7fff, 0x9}}, 0x3, &(0x7f0000001d40), &(0x7f0000001d80)=0x1}) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001e00)=0x0) (rerun: 32) connect$nfc_llcp(r8, &(0x7f0000001e40)={0x27, r9, 0x0, 0x2, 0x5, 0x9, "826c400c9e4a50334645750b7f22d9b3ff436e1c19b69faccbcd2fc8a841f5def1affa55ad0e49696b59ec2437efe3fb6c9b1dbb6ad18d073fb72c05a83e25", 0x3b}, 0x60) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001ec0)={'vxcan0\x00', 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000001f00)={{r8}, "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"}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000003000)={'gre0\x00', &(0x7f0000002f00)={'sit0\x00', r10, 0x7, 0x1, 0x8, 0x0, {{0x2c, 0x4, 0x0, 0x1, 0xb0, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_addr={0x44, 0x24, 0x5a, 0x1, 0x2, [{@loopback, 0xf26}, {@multicast1, 0x200}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfff}, {@multicast1, 0xfffffffc}]}, @end, @ssrr={0x89, 0x7, 0xd7, [@local]}, @timestamp_addr={0x44, 0x1c, 0x11, 0x1, 0x8, [{@private=0xa010100, 0xfffffff9}, {@multicast1, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xb}]}, @timestamp_addr={0x44, 0x4c, 0x7b, 0x1, 0x4, [{@private=0xa010101, 0xd072}, {@broadcast, 0x3}, {@broadcast, 0x2}, {@private=0xa010101, 0x2}, {@multicast2, 0x10}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@broadcast, 0x1}, {@multicast2, 0xfd}]}, @end, @generic={0x82, 0x5, "45288b"}]}}}}}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000030c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x40, r11, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x10000, 0x7e}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x6, 0xfff9, 0x1, 0x4, 0x390, 0x50c, 0x3, 0x78ab, 0x0]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x20000010) (async) sendmmsg$alg(r8, &(0x7f00000031c0), 0x0, 0x1) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003200)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x3, '\x00', 0x0, r8, 0x2, 0x1, 0x5}, 0x50) ioctl$BTRFS_IOC_SEND(r13, 0x40489426, &(0x7f0000003300)={{r8}, 0xa, &(0x7f0000003280)=[0xffffffffffffc4fe, 0x5, 0x0, 0x7fffffffffffffff, 0x8000, 0x3, 0x9, 0x4, 0x220, 0x1], 0x3, 0xe}) (async) accept4$unix(r8, &(0x7f0000003380), &(0x7f0000003400)=0x6e, 0x800) (async) r14 = socket(0xa, 0x3, 0x7) (async) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003480), r0) sendmsg$SEG6_CMD_SETHMAC(r14, &(0x7f0000003540)={&(0x7f0000003440), 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x14, r15, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40010) 1.031931084s ago: executing program 0 (id=7265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xb}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x4) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) (async) sendmsg$alg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) 1.031453542s ago: executing program 2 (id=7266): syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa07bb08004904003400650000042190780a010101ac14142a8308a464e654cfb786060000000200004e214e2204519078089cc7e80294125fad05b6a6cbd2e6014d8b56dc131d922b73605fd513d6a5e7a9c7687249a26b87be513c72822c88d899c00f03d664501e667b706f9d4b9055a3cd734e848178e375484413c2f61fb139ba6ce5121ae9e9378f36e845278b1078355e32b2070c492fa4093bfd42d63e71778aa5360657fbbe414f9482ecf7735b608785980bc309dfb7d680bd23a1aaa62f65eab0c2e4b0b57f4c6ba875a3fa"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x306, 0x0, 0x0, 0x2, 0x1, 0x1, 0x3, 0x2043, 0x1, 0x8, 'syz1\x00'}) shutdown(r0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES8=r2, @ANYBLOB="19219255ba0ac026cbc602e999ec6e3eb2de7c2a29100fef1f5474cf8a17a06ac8e82287ef53915b3bed195de05c354893769b04d6fd3152c030427c7691ece6bdef2242a708db6ed28cc9dee2f97d02e1db05c2bb559a84e46e17643b69c62e2cbe44983de01c7bd6955c2362e0485e6c20d7d47531016d4cfe0b0c00f6f6df7cfe957f1ad08c2818f452d8bd660eb93730bbb78b648618c6be05d68e9c6962ebf5852ca769fe94a622f1947b85c626ef1b477a08aeae"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0x91, 0xd0, &(0x7f0000000500)="f3f8faa927cd1ab107c218bc6bb7a3fa76333006668ea7eb30d50e0bd37fdcda0673ca5644eec49d0a044411e31cced1b026e822b4ce555e9d77aae92fb28e09cea03a6028f876628b6ab39208c9ca17639d9eef9cb6fa116348c4e42e3fb8e61884722bb0d2139a871ad66430fd01a07e44abac634529c30934294c3faf78cc03e345ce67be1f093a7e22e91d46ef6ce4", &(0x7f00000005c0)=""/208, 0x2, 0x0, 0xd5, 0xad, &(0x7f00000006c0)="646f42555edb28ef9afd31a81e49249a28e2a6f373ac65eedad2a36e40deedbc66ec3262460e454faa395dba3296bd24e641494c7db560d3ac3683dec74fa750defaf28b504da2af71d3182df53caec1f8d968d5772d62d172f568d34aaf53ef675dc996d285b3e93428553c192fb6fcb97c582c8de485533696412bfa0d3d0aab3207bb79f8a786f136a90b1d7d1cbbccfbf6c283e2e2e29de30dcda796870725ece9de8a274babcc90cb3291c763a5d6a8744acbeaeb1c10f6851bd943d3c920b3df9e4048640aeaeea8c3fa08592840e2c3bed3", &(0x7f00000007c0)="8b1f03abd10095d30e95ebb58c04045d716b691cb76072961541c5db1f360177ecf158529a8e00a5120565c0f71b92c06fd81d4f6a6f4b63cd2b6cf44e32ad7fae3355cf7dfaf62951ceae78d975faf145b7e5c1006b514d1b3bff08082db70cb71c820026b9550f6158c476d5554f20e2af0de72fe6b523c04d973e1ca5f06f22c05799a5d8b1f7060c9c5ef429671c3d580883bc33e6e3254fa3f122e2fee84867db5d49635e5b06f47a9b03", 0x3, 0x0, 0x2}, 0x50) 1.030528352s ago: executing program 4 (id=7267): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010727bd7000fbdbdf25190000002000018008000300040000001400020067726574617030"], 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf251a61ae99d6ff0c5af4f3803908bbc97b76de1e273428a2759ff4f3374e4f051edcdde4e7f538795d23aaad4a4302ad358d872f4308040f45dae8b3e4805c35bc17a2a5fbdc5225905ba687d1f6a7ad09baccee95abce2e115aaf0499dfe275798137b361f44c90e5e01cb6270f"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x114, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xe4, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x22f, 0xc, 0x100}}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x114}}, 0x0) 926.578224ms ago: executing program 3 (id=7268): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44011edc1000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) 839.270765ms ago: executing program 4 (id=7269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd25, 0x8, {0x2, 0x0, 0x0, 0x0, 0x40, 0xa8, 0xb}, [@NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008081}, 0x4040000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc86dd", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000006000000000000000100000d000000000b00000004000000000000000000000d04000000000000000700000d000000000f000000050000000400000004000000080000000000000007000000040000000700000002000000070000000300005bd900000003000000040000000000000f03000000000000006100"], 0x0, 0x8e}, 0x28) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x1}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002d0007012bbd7000fedbdf25087c0000080001800400dd80040003a50180"], 0x20}}, 0x4008030) 747.92612ms ago: executing program 2 (id=7270): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4ebe000200000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x3}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@offload={0xc, 0x1c, {0x0, 0x4}}]}, 0xc4}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, 0x0, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x0, 0x3, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000800100003c0012800b000100697036746e6c00002c000280140003002101000000000000000000000000000114000200fc000000000000000000000000000001"], 0xfffffe89}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@delqdisc={0x2c, 0x26, 0x309, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0x4}, {0x1, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x40000d4) r7 = accept4$alg(r2, 0x0, 0x0, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc020000000000000000000000000000000200000000000004010001010031"], 0x0) connect$inet(r8, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) (async) connect$inet(r8, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$alg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) (async) sendmsg$alg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f5a9496032", 0x5}], 0x1}, 0x55) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'hsr0\x00', {0x1}, 0x23}) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="f3"]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x41, 0x1, 0x70bd29, 0x4, {0x3}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x8, 0x0, 0x1, [@generic="f3"]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000504fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r8, @ANYRES32=r1, @ANYRES8=r8, @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 740.232855ms ago: executing program 3 (id=7271): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0xa, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000001c0), 0x2) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x1c, r4, 0x8c864ca4e0b522ed, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000040}, 0x20000000) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0xa, 0x9) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f00000001c0), 0x2) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x1c, r4, 0x8c864ca4e0b522ed, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000040}, 0x20000000) (async) 485.612735ms ago: executing program 3 (id=7272): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xbf4, @mcast2}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x12) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xfbff5257, 0x2e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) 429.75847ms ago: executing program 2 (id=7273): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="4647b4f3", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@ra={0x94, 0x4, 0x1}]}}, @echo={0x8, 0x0, 0x0, 0x5, 0x3}}}}}, 0x0) r2 = socket$kcm(0xa, 0x5, 0x11) socket(0x5, 0x803, 0x0) (async) r3 = socket(0x5, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000400)=""/152, 0x98}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}, 0x2040) (async) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/9, 0x9}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000400)=""/152, 0x98}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}, 0x2040) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@RTM_NEWMDB={0x58, 0x54, 0x400, 0x70bd2c, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x2, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@ip4=@local}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x40884) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x7, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x63}], 0x1}, 0x400800c) 307.885088ms ago: executing program 3 (id=7274): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r6) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r8, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r10, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) 155.55341ms ago: executing program 2 (id=7275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x3}, 0x20) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0xe, [@ext_channel_switch={0x1c, 0x4, {0x1, 0x0, 0x9d, 0x7}}]}]}, 0x20}}, 0x0) 98.707844ms ago: executing program 0 (id=7276): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x40031200) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r2], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x12, 0x8, "f76f4c6c9e3dee49ca0000000000"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 10.771096ms ago: executing program 1 (id=7277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0503000000f0ffffff000d000000"], 0x14}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd26, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000000000000000400"/20], 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYBLOB="7989"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x24000000) sendmsg$NL80211_CMD_GET_STATION(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x75}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x336}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x157}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000001540)}, 0x20) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001700)=0xffffffffffffffff, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r11, 0x2, 0x3, 0x4}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r13, 0x0, 0x0}, 0x20) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x28cf}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x15c, 0x0, 0x0, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x0, 0x1, 0x1, 0x8, 0x0, 0xfffffffffffffff4, 0x1}, @call={0x85, 0x0, 0x0, 0xb4}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xdf}, @jmp={0x5, 0x0, 0xa, 0x4, 0x5, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff2f7, 0x0, 0x0, 0x0, 0xfffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x5}, @ldst={0x0, 0x1, 0xf, 0x9, 0x0, 0x80, 0x4}]}, &(0x7f0000001680)='syzkaller\x00', 0x4, 0x3a, &(0x7f00000016c0)=""/58, 0x40f00, 0x42, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000001740)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0x8, 0x3, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001840)=[r12, r13, r14, 0x1], &(0x7f0000001880)=[{0x5, 0x5, 0x4, 0x6}], 0x10, 0x4}, 0x94) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 2 (id=7278): r0 = socket(0xa, 0x3, 0xff) sendmsg$unix(r0, &(0x7f0000001b40)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000280)="c0beeda5a486001300f2ceff3bcd14ee4a98a520780c268eef47650f17d0e9a03233378888c474c5", 0x28}], 0x1, &(0x7f0000001a00)=[@rights={{0x10}}], 0x10, 0x448f569fa84bd46c}, 0x20000840) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x530, 0xffffffff, 0x230, 0x230, 0x118, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @mcast1, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff, 0xff000000, 0x0, 0xffffff00], 'batadv0\x00', 'wg2\x00', {}, {0xff}, 0x2e, 0x81, 0x3}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, "1d3f"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'ipvlan0\x00'}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x4, 0x1, [0x8, 0x2, 0x1, 0x8001, 0x5, 0x4, 0x3, 0x5, 0xe, 0x8, 0x100, 0x43fd, 0x70, 0x400, 0x7, 0x4d], 0x6}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff000000, 0xff, 0xffffffff, 0xff000000], [0xff, 0xffffffff, 0xffffff00, 0xff], 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x2c, 0x80, 0x2, 0x5}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0xffffffff, [0x5, 0x6], 0x4c, 0x8, 0x4, [@remote, @empty, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, @dev={0xfe, 0x80, '\x00', 0x25}, @loopback, @mcast2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local], 0x1}}, @common=@hl={{0x28}, {0x0, 0xe}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x24, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async) write(r1, 0x0, 0x0) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="7105020903"], 0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) kernel console output (not intermixed with test programs): T29] audit: type=1800 audit(1783178764.641:15): pid=25885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5494" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2240 res=0 errno=0 [ 559.652462][T25901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5497'. [ 559.745048][T25907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5499'. [ 560.087116][T25926] team_slave_1: Caught tx_queue_len zero misconfig [ 560.413203][T25945] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 560.553198][T25953] netlink: 'syz.0.5515': attribute type 2 has an invalid length. [ 560.562613][T25953] netlink: 'syz.0.5515': attribute type 8 has an invalid length. [ 560.583364][T25953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5515'. [ 560.744527][T25966] sctp: [Deprecated]: syz.3.5519 (pid 25966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.744527][T25966] Use struct sctp_sack_info instead [ 560.793308][T25971] netlink: 'syz.1.5514': attribute type 1 has an invalid length. [ 560.843423][T25971] 8021q: adding VLAN 0 to HW filter on device bond12 [ 561.013969][T25988] vlan2: entered allmulticast mode [ 561.144473][T25997] sit0: Caught tx_queue_len zero misconfig [ 561.357234][T25951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.822391][T26023] syzkaller0: entered promiscuous mode [ 561.846936][T26023] syzkaller0: entered allmulticast mode [ 561.965349][T26023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5530'. [ 562.190348][T26048] netlink: 'syz.0.5538': attribute type 2 has an invalid length. [ 562.403272][T26066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.425138][T26067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.471032][T26058] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 562.484501][T26044] bond8: entered promiscuous mode [ 562.490407][T26044] bridge2: entered promiscuous mode [ 562.501529][T26044] bond8: entered allmulticast mode [ 562.508136][T26044] bridge2: entered allmulticast mode [ 562.515170][T26044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 562.551693][ T5630] block nbd7: Receive control failed (result -32) [ 562.799325][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.883109][T26097] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 562.892411][T26093] __nla_validate_parse: 8 callbacks suppressed [ 562.892430][T26093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5547'. [ 562.933676][T26099] xt_hashlimit: size too large, truncated to 1048576 [ 562.953273][T26093] team0 (unregistering): Port device team_slave_1 removed [ 563.024215][T26105] netlink: 'syz.4.5550': attribute type 18 has an invalid length. [ 563.049769][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5550'. [ 563.087568][T26105] netlink: 'syz.4.5550': attribute type 18 has an invalid length. [ 563.122934][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5550'. [ 563.383537][T26124] bridge5: entered promiscuous mode [ 563.407667][T26124] bridge5: entered allmulticast mode [ 564.040457][T26169] netlink: 'syz.3.5571': attribute type 1 has an invalid length. [ 564.043048][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5573'. [ 564.160512][T26167] 8021q: adding VLAN 0 to HW filter on device bond9 [ 564.187353][T26167] bond8: (slave bond9): making interface the new active one [ 564.195470][T26167] bond8: (slave bond9): Enslaving as an active interface with an up link [ 564.224327][T26186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5575'. [ 567.092169][T26175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 567.429839][T26243] netlink: 'syz.1.5594': attribute type 1 has an invalid length. [ 567.473444][T26243] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5594'. [ 567.584521][T26252] syzkaller1: entered allmulticast mode [ 567.646873][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5600'. [ 567.693298][T26258] openvswitch: netlink: Message has 12 unknown bytes. [ 567.705004][T26260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5602'. [ 567.723919][T26258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.760842][T26262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5601'. [ 567.797805][T26263] tunl0: Caught tx_queue_len zero misconfig [ 567.893780][T26272] netlink: 'syz.4.5605': attribute type 11 has an invalid length. [ 567.902073][T26272] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.5605'. [ 567.945108][T26272] netlink: 'syz.4.5605': attribute type 11 has an invalid length. [ 567.975901][T26272] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.5605'. [ 568.067728][T26284] team_slave_1: Caught tx_queue_len zero misconfig [ 568.167665][T26288] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 568.276641][ T29] audit: type=1804 audit(1783178773.541:16): pid=26300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5613" name="/newroot/443/cgroup.controllers" dev="tmpfs" ino=2291 res=1 errno=0 [ 568.300550][T26295] bond10: (slave gretap1): making interface the new active one [ 568.310392][T26295] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 568.320794][ T29] audit: type=1800 audit(1783178773.541:17): pid=26300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5613" name="cgroup.controllers" dev="tmpfs" ino=2291 res=0 errno=0 [ 568.345488][T26297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.371652][T26304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5614'. [ 568.381394][T26304] netlink: 'syz.4.5614': attribute type 5 has an invalid length. [ 568.389899][T26304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5614'. [ 568.439841][T26304] geneve4: entered promiscuous mode [ 568.445264][T26304] geneve4: entered allmulticast mode [ 568.465175][T26308] tipc: Enabling of bearer rejected, failed to enable media [ 568.475647][ T3332] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 568.490500][T26308] C: entered promiscuous mode [ 568.495362][T26308] C: left allmulticast mode [ 568.510785][T26308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 568.529237][ T3332] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 568.546442][ T3332] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 568.588590][ T3332] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 568.692027][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5619'. [ 568.754213][T26329] netlink: 'syz.4.5621': attribute type 10 has an invalid length. [ 568.779316][T26329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.792343][T26329] batadv0: entered allmulticast mode [ 568.799777][T26329] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 568.932544][T26329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.952761][T26337] netlink: 25 bytes leftover after parsing attributes in process `syz.2.5624'. [ 568.987992][T26329] bond_slave_0: left allmulticast mode [ 569.001064][T26329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.018218][T26329] bond_slave_1: left allmulticast mode [ 569.041303][T26329] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 569.065172][T26329] batadv0: left allmulticast mode [ 569.081546][T26329] bond0 (unregistering): Released all slaves [ 569.115576][T26349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5627'. [ 569.139572][T26349] openvswitch: netlink: Flow key attr not present in new flow. [ 569.282592][T26359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.316668][T26363] netlink: 'syz.0.5631': attribute type 1 has an invalid length. [ 569.353427][T26368] netlink: 'syz.4.5632': attribute type 5 has an invalid length. [ 569.355342][T26363] bond8: entered promiscuous mode [ 569.362421][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5630'. [ 569.368578][T26363] 8021q: adding VLAN 0 to HW filter on device bond8 [ 569.397843][T26363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5631'. [ 569.405601][T26374] netlink: 'syz.4.5632': attribute type 5 has an invalid length. [ 569.424002][T26363] bond8: entered allmulticast mode [ 569.457605][T26363] bond8: (slave bridge6): making interface the new active one [ 569.465586][T26363] bridge6: entered promiscuous mode [ 569.473571][T26363] bridge6: entered allmulticast mode [ 569.484277][T26363] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 569.584736][T26381] veth0_macvtap: Caught tx_queue_len zero misconfig [ 569.641219][T26383] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5637'. [ 570.179192][T26414] netlink: 'syz.4.5647': attribute type 1 has an invalid length. [ 570.190340][T26414] netlink: 'syz.4.5647': attribute type 2 has an invalid length. [ 570.218273][T26413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.292689][T23395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.321845][T26425] netlink: 'syz.4.5647': attribute type 9 has an invalid length. [ 570.344651][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.357494][T23395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.387192][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.420596][T26429] IPVS: length: 239 != 24 [ 570.428992][ T5636] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.719237][T26447] xt_policy: neither incoming nor outgoing policy selected [ 570.801921][T26445] bond0: entered promiscuous mode [ 570.813662][T26445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.387178][T26485] team0: Port device dummy0 added [ 571.412669][T26485] team0: Port device dummy0 removed [ 571.444417][T26498] veth1_to_team: Caught tx_queue_len zero misconfig [ 571.634658][T26505] 8021q: adding VLAN 0 to HW filter on device bond9 [ 571.762398][T26504] veth5: entered promiscuous mode [ 571.805478][T26504] bond9: (slave veth5): Enslaving as an active interface with a down link [ 572.191960][T26550] veth1_to_bond: Caught tx_queue_len zero misconfig [ 572.551816][T26562] batadv_slave_0: Caught tx_queue_len zero misconfig [ 572.928803][T26578] __nla_validate_parse: 17 callbacks suppressed [ 572.928821][T26578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5695'. [ 573.467839][T26620] veth0_macvtap: Caught tx_queue_len zero misconfig [ 573.630770][T26630] validate_nla: 6 callbacks suppressed [ 573.630789][T26630] netlink: 'syz.3.5712': attribute type 4 has an invalid length. [ 573.648762][T26631] xt_l2tp: invalid flags combination: 0 [ 573.719738][T26633] netlink: 'syz.2.5713': attribute type 1 has an invalid length. [ 573.813568][T26633] 8021q: adding VLAN 0 to HW filter on device bond11 [ 573.901252][T26640] bond11: (slave gretap2): making interface the new active one [ 573.966939][T26640] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 574.010694][T26651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5719'. [ 574.236166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.645259][T26680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5730'. [ 574.671033][T26680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5730'. [ 574.775381][T26672] syz_tun: refused to change device tx_queue_len [ 575.113005][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5737'. [ 575.119379][T26702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5736'. [ 575.179932][T26704] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 575.193223][T26706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5738'. [ 575.194368][T26704] bond10 (unregistering): Released all slaves [ 575.431271][T26710] syzkaller0: entered promiscuous mode [ 575.447833][T26710] syzkaller0: entered allmulticast mode [ 575.490229][T26710] xt_CONNSECMARK: invalid mode: 0 [ 575.631859][T26722] bond10: option min_links: invalid value (18446744073709551614) [ 575.654614][T26722] bond10: option min_links: allowed values 0 - 2147483647 [ 575.674202][T26722] bond10 (unregistering): Released all slaves [ 575.714676][T26729] ¾x9ÿ: Caught tx_queue_len zero misconfig [ 575.984826][T26761] netlink: 'syz.4.5753': attribute type 4 has an invalid length. [ 575.999679][T26761] netlink: 'syz.4.5753': attribute type 4 has an invalid length. [ 576.118029][T26770] syz_tun: left allmulticast mode [ 576.151092][T26770] team0: Port device syz_tun added [ 576.310969][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5758'. [ 576.512850][T26792] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5761'. [ 576.568868][T26779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.580683][T26779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.605201][T26798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5761'. [ 576.624158][T26799] veth0: entered promiscuous mode [ 576.644426][T26797] veth0: left promiscuous mode [ 576.814685][T26779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.827398][T26779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.845067][T26809] netlink: 'syz.3.5766': attribute type 1 has an invalid length. [ 576.982382][T26779] bond0: (slave netdevsim1): Releasing backup interface [ 577.004436][T26779] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 577.010707][T26818] nftables ruleset with unbound set [ 577.020743][T26779] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 577.032235][T26818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.074737][T26779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.110832][T26779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.281989][T26779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.317215][T26837] xt_hashlimit: size too large, truncated to 1048576 [ 577.324278][T26838] netlink: 'syz.3.5778': attribute type 1 has an invalid length. [ 577.340097][T26779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.494839][T26838] 8021q: adding VLAN 0 to HW filter on device bond11 [ 577.589823][T26843] vlan6: entered allmulticast mode [ 577.609870][T26843] bond11: entered allmulticast mode [ 577.630637][T26849] bond11: (slave geneve4): making interface the new active one [ 577.641195][T26849] geneve4: entered allmulticast mode [ 577.655580][T26849] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 577.907066][T23388] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.919688][T23388] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.020757][T23388] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.042840][T23388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.136019][ T6204] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.178855][ T6204] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.201317][ T6204] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.235404][ T6204] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.462430][T26906] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 578.702893][T26919] syz.0.5803 (26919) used obsolete PPPIOCDETACH ioctl [ 579.118530][T26939] lo: left promiscuous mode [ 579.137438][T26939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.214772][T26954] __nla_validate_parse: 12 callbacks suppressed [ 579.214791][T26954] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5809'. [ 579.294424][T26958] openvswitch: netlink: Missing key (keys=40, expected=100) [ 579.705146][T26983] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5824'. [ 579.730488][T26983] tipc: Failed to remove unknown binding: 66,1,1/0:176189839/176189841 [ 579.978784][T26999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5829'. [ 579.988829][T26999] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5829'. [ 580.060246][T27003] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 580.081738][T27004] netlink: 'syz.3.5829': attribute type 23 has an invalid length. [ 580.132230][T27008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5833'. [ 580.323648][T27023] batadv_slave_0: Caught tx_queue_len zero misconfig [ 580.356166][T27025] 8021q: VLANs not supported on sit0 [ 580.389672][T27025] netlink: 'syz.1.5838': attribute type 23 has an invalid length. [ 580.516922][T27037] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5842'. [ 580.648600][T27046] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5845'. [ 580.653773][T27047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5846'. [ 580.732725][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5847'. [ 580.760559][T27049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5847'. [ 580.890533][T27063] netlink: 'syz.1.5850': attribute type 24 has an invalid length. [ 581.437570][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888042b6f800: rx timeout, send abort [ 581.463704][T27084] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 581.473026][T27084] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 581.793951][T27104] veth5: entered allmulticast mode [ 581.802368][T27115] netlink: 'syz.3.5862': attribute type 1 has an invalid length. [ 582.176860][T27136] netlink: 'syz.0.5871': attribute type 1 has an invalid length. [ 582.280843][T27136] 8021q: adding VLAN 0 to HW filter on device bond9 [ 582.304403][T27136] nftables ruleset with unbound chain [ 582.322726][T27140] bond9: (slave veth0_to_bond): making interface the new active one [ 582.335485][T27140] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 582.384892][T27136] macvlan2: entered promiscuous mode [ 582.392239][T27136] macvlan2: entered allmulticast mode [ 582.400677][T27136] bond9: entered promiscuous mode [ 582.406502][T27136] veth0_to_bond: entered promiscuous mode [ 582.413185][T27136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.423366][T27136] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 582.441611][T27136] bond9: left promiscuous mode [ 582.447788][T27136] veth0_to_bond: left promiscuous mode [ 582.525535][T27145] bond0 (unregistering): Released all slaves [ 582.635937][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 582.852257][T27164] tipc: Enabled bearer , priority 0 [ 582.874535][T27164] syzkaller0: entered promiscuous mode [ 582.884198][T27164] syzkaller0: entered allmulticast mode [ 582.907422][T27164] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 582.990217][T27164] tipc: Resetting bearer [ 583.019235][T27162] tipc: Resetting bearer [ 583.088253][T27162] tipc: Disabling bearer [ 583.339340][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 583.352262][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 583.370433][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 583.382988][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 583.394240][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 583.586837][T27187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.293388][T27236] openvswitch: netlink: Message has 1 unknown bytes. [ 584.300764][T27236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.313224][T27239] openvswitch: netlink: Message has 1 unknown bytes. [ 584.336859][T27239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.414986][T27243] netlink: 'syz.0.5899': attribute type 19 has an invalid length. [ 584.779197][T27266] netlink: 'syz.4.5903': attribute type 1 has an invalid length. [ 584.790727][T27266] __nla_validate_parse: 10 callbacks suppressed [ 584.790745][T27266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5903'. [ 584.960817][T27274] netlink: 'syz.0.5908': attribute type 1 has an invalid length. [ 584.977500][T27277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5907'. [ 585.158492][T27274] 8021q: adding VLAN 0 to HW filter on device bond10 [ 585.303331][T27285] 8021q: VLANs not supported on gre0 [ 585.315179][T27292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5908'. [ 585.337724][T27295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5912'. [ 585.372682][T27295] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5912'. [ 585.507341][T27308] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5913'. [ 585.517661][ T5640] Bluetooth: hci1: command tx timeout [ 585.545100][T27295] veth7: entered promiscuous mode [ 585.558282][T27300] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode [ 585.580437][T27300] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode [ 585.628303][T27180] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.637129][T27180] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.644450][T27180] bridge_slave_0: entered allmulticast mode [ 585.652956][T27180] bridge_slave_0: entered promiscuous mode [ 585.662714][T27180] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.686011][T27180] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.694786][T27180] bridge_slave_1: entered allmulticast mode [ 585.715090][T27180] bridge_slave_1: entered promiscuous mode [ 585.797339][T27180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.818151][T27180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.948050][T27180] team0: Port device team_slave_0 added [ 585.965592][T27180] team0: Port device team_slave_1 added [ 586.029862][T27335] syz.3.5922: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 586.031927][T27180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.053296][T27180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.082007][T27180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.095564][T27180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.103376][T27180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.130201][T27335] CPU: 1 UID: 0 PID: 27335 Comm: syz.3.5922 Not tainted syzkaller #0 PREEMPT(full) [ 586.130230][T27335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.130243][T27335] Call Trace: [ 586.130250][T27335] [ 586.130258][T27335] dump_stack_lvl+0xe8/0x150 [ 586.130293][T27335] warn_alloc+0x24c/0x270 [ 586.130319][T27335] ? stack_depot_save_flags+0x33/0x800 [ 586.130352][T27335] ? __pfx_warn_alloc+0x10/0x10 [ 586.130376][T27335] ? kasan_save_track+0x3e/0x80 [ 586.130398][T27335] ? __kasan_kmalloc+0x93/0xb0 [ 586.130424][T27335] ? xsk_setsockopt+0x52a/0x960 [ 586.130447][T27335] ? do_sock_setsockopt+0x17c/0x1b0 [ 586.130474][T27335] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 586.130498][T27335] ? do_syscall_64+0x174/0x580 [ 586.130523][T27335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.130553][T27335] __vmalloc_node_range_noprof+0x12c/0x1730 [ 586.130605][T27335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 586.130631][T27335] ? __kasan_kmalloc+0x93/0xb0 [ 586.130657][T27335] ? __kmalloc_cache_noprof+0x32d/0x660 [ 586.130682][T27335] ? __kmalloc_cache_noprof+0x150/0x660 [ 586.130707][T27335] vmalloc_user_noprof+0xad/0xe0 [ 586.130730][T27335] ? xskq_create+0xbf/0x170 [ 586.130753][T27335] xskq_create+0xbf/0x170 [ 586.130778][T27335] xsk_init_queue+0x8a/0xe0 [ 586.130803][T27335] xsk_setsockopt+0x52a/0x960 [ 586.130823][T27335] ? __fget_files+0x2a/0x420 [ 586.130849][T27335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 586.130871][T27335] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.130911][T27335] ? aa_sock_opt_perm+0xff/0x1a0 [ 586.130933][T27335] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 586.130955][T27335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 586.130979][T27335] do_sock_setsockopt+0x17c/0x1b0 [ 586.131010][T27335] __x64_sys_setsockopt+0x13d/0x1b0 [ 586.131038][T27335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.131059][T27335] do_syscall_64+0x174/0x580 [ 586.131082][T27335] ? trace_irq_disable+0x3b/0x140 [ 586.131105][T27335] ? clear_bhb_loop+0x40/0x90 [ 586.131128][T27335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.131147][T27335] RIP: 0033:0x7fce9d39de59 [ 586.131165][T27335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.131181][T27335] RSP: 002b:00007fce9e1ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 586.131202][T27335] RAX: ffffffffffffffda RBX: 00007fce9d625fa0 RCX: 00007fce9d39de59 [ 586.131215][T27335] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 586.131227][T27335] RBP: 00007fce9d433e6f R08: 0000000000000004 R09: 0000000000000000 [ 586.131239][T27335] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.131251][T27335] R13: 00007fce9d626038 R14: 00007fce9d625fa0 R15: 00007ffdf71bf4a8 [ 586.131283][T27335] [ 586.134522][T27335] Mem-Info: [ 586.150652][T27180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.198968][T27335] active_anon:6073 inactive_anon:0 isolated_anon:0 [ 586.198968][T27335] active_file:0 inactive_file:43511 isolated_file:0 [ 586.198968][T27335] unevictable:768 dirty:102 writeback:0 [ 586.198968][T27335] slab_reclaimable:13275 slab_unreclaimable:133425 [ 586.198968][T27335] mapped:29402 shmem:1316 pagetables:1510 [ 586.198968][T27335] sec_pagetables:0 bounce:0 [ 586.198968][T27335] kernel_misc_reclaimable:0 [ 586.198968][T27335] free:1275297 free_pcp:13168 free_cma:0 [ 586.297391][T27180] hsr_slave_0: entered promiscuous mode [ 586.328499][T27335] Node 0 active_anon:24292kB inactive_anon:0kB active_file:0kB inactive_file:173848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117608kB dirty:408kB writeback:0kB shmem:3728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19124kB pagetables:5976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 586.351015][T27338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5922'. [ 586.352135][T27335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 586.374615][T27180] hsr_slave_1: entered promiscuous mode [ 586.443220][T27335] Node 0 [ 586.448043][T27180] debugfs: 'hsr0' already exists in 'hsr' [ 586.541191][T27335] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.575051][T27180] Cannot create hsr debugfs directory [ 586.620763][T27335] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 586.620827][T27335] Node 0 DMA32 free:1134848kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24192kB inactive_anon:0kB active_file:0kB inactive_file:173848kB unevictable:1536kB writepending:408kB zspages:0kB present:3129332kB managed:2548796kB mlocked:0kB bounce:0kB free_pcp:52224kB local_pcp:32988kB free_cma:0kB [ 586.620897][T27335] lowmem_reserve[]: 0 0 0 0 0 [ 586.620945][T27335] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.621004][T27335] lowmem_reserve[]: 0 0 0 0 0 [ 586.621046][T27335] Node 1 Normal free:3950724kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 586.621107][T27335] lowmem_reserve[]: 0 0 0 0 0 [ 586.621149][T27335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 586.621285][T27335] Node 0 DMA32: 1558*4kB (UM) 553*8kB (UE) 106*16kB (UM) 409*32kB (UE) 58*64kB (UM) 82*128kB (UE) 44*256kB (U) 21*512kB (UME) 6*1024kB (U) 5*2048kB (UME) 258*4096kB (UM) = 1134816kB [ 586.622116][T27335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 586.622228][T27335] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 6*32kB (UM) 9*64kB (UM) 6*128kB (UM) 4*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 963*4096kB (UM) = 3950724kB [ 586.622417][T27335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.622433][T27335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.622451][T27335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 586.622468][T27335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 586.622485][T27335] 44823 total pagecache pages [ 586.622494][T27335] 0 pages in swap cache [ 586.622503][T27335] Free swap = 124996kB [ 586.622511][T27335] Total swap = 124996kB [ 586.622519][T27335] 2097051 pages RAM [ 586.622527][T27335] 0 pages HighMem/MovableOnly [ 586.622534][T27335] 428171 pages reserved [ 586.622542][T27335] 0 pages cma reserved [ 586.856822][T27337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 587.340027][T27376] netlink: 'syz.0.5933': attribute type 10 has an invalid length. [ 587.370217][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5933'. [ 587.596693][ T5640] Bluetooth: hci1: command tx timeout [ 587.632007][T27396] x_tables: unsorted entry at hook 1 [ 587.803041][T27401] netlink: 'syz.2.5940': attribute type 1 has an invalid length. [ 588.094865][T27418] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 588.167732][T27423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5947'. [ 588.183226][T27423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5947'. [ 588.602553][T27447] team0: entered promiscuous mode [ 588.626391][T27447] team_slave_0: entered promiscuous mode [ 588.649256][T27447] team_slave_1: entered promiscuous mode [ 588.671648][T27447] geneve1: entered promiscuous mode [ 588.686542][T27447] syz_tun: entered promiscuous mode [ 588.730684][T27180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.751942][T27180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.761728][T27180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.808779][T27180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 588.841606][T27180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.868131][T27180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 588.886039][T27180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.909174][T27180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 589.083861][T27180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.119511][T27180] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.141287][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.148500][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.170579][T23395] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.177832][T23395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.228946][T27180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.241357][T27180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.686934][ T5640] Bluetooth: hci1: command tx timeout [ 589.707756][T27512] netlink: 'syz.3.5966': attribute type 1 has an invalid length. [ 590.023936][T27180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.082888][T27180] veth0_vlan: entered promiscuous mode [ 590.099857][T27180] veth1_vlan: entered promiscuous mode [ 590.130241][T27180] veth0_macvtap: entered promiscuous mode [ 590.140523][T27180] veth1_macvtap: entered promiscuous mode [ 590.158981][T27180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.178851][T27180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.194086][ T3332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.204790][ T3332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.214891][ T3332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.225698][ T3332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.755981][ T5640] Bluetooth: hci1: command tx timeout [ 591.969121][T27476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.147761][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.177923][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.231695][T23388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.266672][T23388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.466989][T27553] syzkaller0: entered promiscuous mode [ 592.486936][T27553] syzkaller0: entered allmulticast mode [ 592.507934][T27558] IPVS: set_ctl: invalid protocol: 25647 47.110.101.116:12148 [ 592.594842][T27565] __nla_validate_parse: 4 callbacks suppressed [ 592.594854][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5979'. [ 592.639773][T27565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.770973][T27557] syzkaller1: entered promiscuous mode [ 592.777906][T27557] syzkaller1: entered allmulticast mode [ 592.894120][T27572] veth0_to_bridge: entered promiscuous mode [ 592.967628][T27577] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5984'. [ 592.978257][T27571] veth0_to_bridge: left promiscuous mode [ 592.985312][T27577] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5984'. [ 593.107860][T27587] netlink: 'syz.3.5988': attribute type 1 has an invalid length. [ 593.126656][T27587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5988'. [ 593.445149][T27616] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5997'. [ 593.469227][T27616] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5997'. [ 593.493467][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5998'. [ 593.570792][T27622] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 593.756553][T27630] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 593.777990][ T5636] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 593.783752][T27634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6003'. [ 594.107895][T27657] lo speed is unknown, defaulting to 1000 [ 594.115095][T27657] lo speed is unknown, defaulting to 1000 [ 594.122554][T27657] lo speed is unknown, defaulting to 1000 [ 594.138732][T27657] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 594.163816][T27658] syzkaller1: entered promiscuous mode [ 594.185215][T27657] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 594.204204][T27658] syzkaller1: entered allmulticast mode [ 594.216823][T27661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 594.227490][T27657] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 594.313365][T27657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 594.321046][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 594.363030][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6015'. [ 594.425534][T27657] lo speed is unknown, defaulting to 1000 [ 594.442679][T27657] lo speed is unknown, defaulting to 1000 [ 594.460796][T27657] lo speed is unknown, defaulting to 1000 [ 594.487895][T27657] lo speed is unknown, defaulting to 1000 [ 594.508851][T27657] lo speed is unknown, defaulting to 1000 [ 594.528690][T27657] lo speed is unknown, defaulting to 1000 [ 594.545181][T27657] lo speed is unknown, defaulting to 1000 [ 594.557551][T27657] lo speed is unknown, defaulting to 1000 [ 594.577774][T27657] lo speed is unknown, defaulting to 1000 [ 594.590051][T27657] lo speed is unknown, defaulting to 1000 [ 594.600980][T27657] lo speed is unknown, defaulting to 1000 [ 594.717342][ T5636] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 594.762297][T27685] Cannot find set identified by id 65535 to match [ 594.891964][T27690] netlink: 'syz.4.6021': attribute type 1 has an invalid length. [ 594.951804][T27690] 8021q: adding VLAN 0 to HW filter on device bond10 [ 594.971395][T23413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.984219][T23413] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 594.996382][T25767] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.066742][T25766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.178978][T27709] bond10: (slave veth7): Enslaving as an active interface with a down link [ 595.217245][T27692] "syz.2.6024" (27692) uses obsolete ecb(arc4) skcipher [ 595.708467][T27743] lo: Caught tx_queue_len zero misconfig [ 595.775315][T27742] syzkaller0: entered promiscuous mode [ 595.800404][T27742] syzkaller0: entered allmulticast mode [ 595.836545][T25766] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 595.983216][T21293] IPVS: starting estimator thread 0... [ 595.989111][T27767] IPVS: ip_vs_edit_dest(): server weight less than zero [ 596.108299][T27768] IPVS: using max 40 ests per chain, 96000 per kthread [ 596.138424][T27758] vlan2: entered promiscuous mode [ 596.143525][T27758] geneve1: entered promiscuous mode [ 596.171774][T27758] vlan2: entered allmulticast mode [ 596.183296][T27758] geneve1: entered allmulticast mode [ 596.738062][T27815] netlink: 'syz.4.6057': attribute type 1 has an invalid length. [ 596.783018][T27818] netlink: 'syz.0.6058': attribute type 11 has an invalid length. [ 596.865072][T27815] bond11: entered promiscuous mode [ 596.899136][T27815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 597.079678][T27815] 8021q: adding VLAN 0 to HW filter on device bond11 [ 597.119466][T27815] bond11: (slave vti1): The slave device specified does not support setting the MAC address [ 597.138445][T27815] bond11: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 597.201688][T27815] bond11: (slave vti1): making interface the new active one [ 597.230420][T27815] vti1: entered promiscuous mode [ 597.232444][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 597.261448][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 597.271912][T27815] vti1: left promiscuous mode [ 597.277066][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 597.286957][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 597.298713][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 597.432345][T27842] syzkaller0: entered promiscuous mode [ 597.460004][T27835] nbd: nbd64 already in use [ 597.470247][T27842] syzkaller0: entered allmulticast mode [ 597.741060][T27864] __nla_validate_parse: 13 callbacks suppressed [ 597.741087][T27864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6070'. [ 598.271860][T27839] lo speed is unknown, defaulting to 1000 [ 598.283660][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6074'. [ 598.295077][T27886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6075'. [ 598.573671][T19662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 598.611760][T19662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.636259][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.039139][T19662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.053025][T19662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.113842][T27932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6084'. [ 599.218027][T19662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.230000][T19662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.260405][T27934] netlink: 'syz.3.6085': attribute type 4 has an invalid length. [ 599.323305][T27943] netlink: 'syz.3.6085': attribute type 4 has an invalid length. [ 599.357738][ T5640] Bluetooth: hci5: command tx timeout [ 599.438183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 599.465133][T19662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.476620][T19662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.598704][T27946] bond12: (slave ip6gretap2): making interface the new active one [ 599.608868][T27946] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 599.776535][T27969] netlink: zone id is out of range [ 599.790086][T27969] netlink: zone id is out of range [ 599.796130][T27969] netlink: zone id is out of range [ 599.801416][T27969] netlink: zone id is out of range [ 599.807863][T27969] netlink: zone id is out of range [ 599.813146][T27969] netlink: zone id is out of range [ 599.820350][T27969] netlink: zone id is out of range [ 599.835437][T27969] netlink: zone id is out of range [ 599.858608][T27969] netlink: zone id is out of range [ 599.861241][T27979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'. [ 599.869258][T27969] netlink: zone id is out of range [ 599.892924][T27979] bond0: ARP target 8.4.0.0 is already present [ 599.900107][T27979] bond0: option arp_ip_target: invalid value (1032) [ 599.914133][T27979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6096'. [ 599.951725][T27983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6097'. [ 600.047389][T27979] bond0: ARP target 8.4.0.0 is already present [ 600.053599][T27979] bond0: option arp_ip_target: invalid value (1032) [ 600.062876][T27839] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.083491][T27839] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.100544][T27839] bridge_slave_0: entered allmulticast mode [ 600.118031][T27839] bridge_slave_0: entered promiscuous mode [ 600.137413][T27839] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.160569][T27839] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.189558][T27994] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6098'. [ 600.191245][T27839] bridge_slave_1: entered allmulticast mode [ 600.234355][T27839] bridge_slave_1: entered promiscuous mode [ 600.302582][T27997] netlink: 'syz.3.6100': attribute type 21 has an invalid length. [ 600.345565][T27997] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6100'. [ 600.389906][T27839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.431299][T27839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.513630][T19662] dvmrp1: left allmulticast mode [ 600.833797][T19662] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 600.852727][T19662] ip6gre1 (unregistering): left promiscuous mode [ 600.893251][T28025] netlink: 'syz.2.6108': attribute type 1 has an invalid length. [ 601.124682][T19662] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 601.142694][T19662] bridge6 (unregistering): left promiscuous mode [ 601.149799][T19662] bridge6 (unregistering): left allmulticast mode [ 601.172094][T19662]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.185109][T19662]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.202415][T19662]  (unregistering): Released all slaves [ 601.219517][T19662] bond0 (unregistering): Released all slaves [ 601.245018][T19662] bond1 (unregistering): Released all slaves [ 601.270924][T19662] bond2 (unregistering): Released all slaves [ 601.285064][T19662] bond3 (unregistering): Released all slaves [ 601.303122][T19662] bond4 (unregistering): Released all slaves [ 601.321289][T19662] bond5 (unregistering): Released all slaves [ 601.340755][T19662] bond6 (unregistering): (slave ): Releasing active interface [ 601.362074][T19662] bond6 (unregistering): Released all slaves [ 601.384038][T19662] bond7 (unregistering): Released all slaves [ 601.400163][T19662] bond8 (unregistering): Released all slaves [ 601.415184][T19662] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 601.432402][T19662] bond9 (unregistering): Released all slaves [ 601.438817][ T5640] Bluetooth: hci5: command tx timeout [ 601.457968][T19662] bond10 (unregistering): Released all slaves [ 601.473876][T27839] team0: Port device team_slave_0 added [ 601.569036][T28025] 8021q: adding VLAN 0 to HW filter on device bond12 [ 601.696574][T27839] team0: Port device team_slave_1 added [ 601.788946][T28040] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6112'. [ 601.833834][T19662] tipc: Left network mode [ 601.849948][T28044] netlink: 'syz.4.6114': attribute type 11 has an invalid length. [ 601.880971][T27839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.888715][T27839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.933732][T27839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.982506][T27839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.017907][T27839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.048022][T19662] IPVS: stopping master sync thread 24089 ... [ 602.057298][T27839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.430626][T27839] hsr_slave_0: entered promiscuous mode [ 602.457794][T27839] hsr_slave_1: entered promiscuous mode [ 602.475469][T28071] netlink: 'syz.1.6120': attribute type 1 has an invalid length. [ 602.479000][T27839] debugfs: 'hsr0' already exists in 'hsr' [ 602.505243][T27839] Cannot create hsr debugfs directory [ 602.541967][T28075] netlink: 'syz.1.6120': attribute type 2 has an invalid length. [ 602.601455][T28075] netlink: 'syz.1.6120': attribute type 2 has an invalid length. [ 602.755017][T28071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 602.924298][T28091] bond1: (slave geneve2): making interface the new active one [ 602.949434][T28091] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 603.213947][T28108] netlink: 'syz.3.6127': attribute type 30 has an invalid length. [ 603.332095][T28108] bond0: option arp_missed_max: invalid value (0) [ 603.339338][T28108] bond0: option arp_missed_max: allowed values 1 - 255 [ 603.354886][T28108] bond0 (unregistering): Released all slaves [ 603.395842][T28125] __nla_validate_parse: 2 callbacks suppressed [ 603.395860][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6130'. [ 603.488848][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 603.522096][ T5640] Bluetooth: hci5: command tx timeout [ 603.727231][T28135] netlink: 'syz.2.6132': attribute type 39 has an invalid length. [ 604.218555][T28152] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6137'. [ 604.687379][T28185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6144'. [ 604.697749][T19662] hsr_slave_0: left promiscuous mode [ 604.707002][T19662] hsr_slave_1: left promiscuous mode [ 604.729317][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.748506][T19662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.770926][T19662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.786803][T19662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.829898][T19662] vlan0: left allmulticast mode [ 604.840681][T19662] veth0_vlan: left allmulticast mode [ 604.854877][T19662] veth0_macvtap: left allmulticast mode [ 604.872612][T19662] veth0_macvtap: left promiscuous mode [ 604.900523][T19662] veth1_vlan: left promiscuous mode [ 605.045414][T28204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6148'. [ 605.078090][T28204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6148'. [ 605.231435][T28206] netlink: 67 bytes leftover after parsing attributes in process `syz.3.6148'. [ 605.596952][ T5640] Bluetooth: hci5: command tx timeout [ 606.073415][T28202] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6149'. [ 606.092533][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 606.219226][T28210] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6150'. [ 606.504983][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6152'. [ 606.518080][T28226] net_ratelimit: 71 callbacks suppressed [ 606.518098][T28226] openvswitch: netlink: IP tunnel dst address not specified [ 606.989538][T28244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6159'. [ 607.141680][T19662] IPVS: stop unused estimator thread 0... [ 607.414549][T28257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.491061][T28256] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.787712][T28281] validate_nla: 2 callbacks suppressed [ 607.787731][T28281] netlink: 'syz.1.6168': attribute type 1 has an invalid length. [ 607.933347][T27839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 607.994844][T27839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 608.022491][T27839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.101438][T27839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 608.124296][T27839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.164544][T27839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 608.177636][T27839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.197226][T27839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 608.235843][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 608.621193][T27839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.692519][T27839] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.748250][T19662] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.755448][T19662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.834211][T19662] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.841407][T19662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.267790][T28356] netlink: 'syz.4.6187': attribute type 1 has an invalid length. [ 609.548644][T28361] bond14: entered allmulticast mode [ 609.788463][T28378] __nla_validate_parse: 4 callbacks suppressed [ 609.788482][T28378] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6192'. [ 609.959570][T28378] netlink: 'syz.4.6192': attribute type 11 has an invalid length. [ 609.990105][T28378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6192'. [ 610.278610][T28403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6197'. [ 610.310848][T28405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6195'. [ 610.339335][T27839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.490102][T27839] veth0_vlan: entered promiscuous mode [ 610.519511][T27839] veth1_vlan: entered promiscuous mode [ 610.607447][T27839] veth0_macvtap: entered promiscuous mode [ 610.642913][T27839] veth1_macvtap: entered promiscuous mode [ 610.692888][T27839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.713845][T27839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.757197][T19662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.779268][T19662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.805393][T19662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.820665][T19662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.029974][T19662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.072193][T19662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.195380][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.230538][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.829775][T28467] bridge0: port 3(syz_tun) entered blocking state [ 611.854876][T28467] bridge0: port 3(syz_tun) entered disabled state [ 611.878205][T28467] syz_tun: entered allmulticast mode [ 611.898406][T28467] syz_tun: entered promiscuous mode [ 611.907701][T28467] bridge0: port 3(syz_tun) entered blocking state [ 611.914270][T28467] bridge0: port 3(syz_tun) entered forwarding state [ 612.387400][T28489] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 612.927180][T28512] netlink: 'syz.4.6228': attribute type 39 has an invalid length. [ 612.948676][T28513] team0: Device gtp3 is up. Set it down before adding it as a team port [ 612.982346][T28514] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20004 [ 613.065348][T28519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6227'. [ 613.244659][T28523] openvswitch: netlink: Missing key (keys=40, expected=100) [ 613.321131][T28526] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6233'. [ 613.370692][T28526] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6233'. [ 613.443570][T28526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6233'. [ 613.574874][T28536] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 613.855320][T28540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6238'. [ 613.898637][T28540] netlink: 'syz.2.6238': attribute type 13 has an invalid length. [ 613.926843][T28540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6238'. [ 614.038137][T28540] netlink: 'syz.2.6238': attribute type 13 has an invalid length. [ 614.088967][T28548] netlink: 'syz.0.6241': attribute type 1 has an invalid length. [ 614.128350][T28544] lo speed is unknown, defaulting to 1000 [ 614.768956][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 614.785242][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 614.797374][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 614.809299][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 614.818448][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 614.960636][T28570] __nla_validate_parse: 2 callbacks suppressed [ 614.960656][T28570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6249'. [ 614.989513][T28579] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6248'. [ 615.172264][T28570] team0: Port device team_slave_0 removed [ 615.218899][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6250'. [ 615.455014][T28576] syzkaller0: entered promiscuous mode [ 615.474456][T28576] syzkaller0: entered allmulticast mode [ 616.882566][ T5630] Bluetooth: hci0: command tx timeout [ 618.482481][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 618.863105][T17281] syz_tun (unregistering): left promiscuous mode [ 618.889751][T17281] team0: Port device syz_tun removed [ 618.949721][T28614] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6257'. [ 618.967918][ T5630] Bluetooth: hci0: command tx timeout [ 618.979920][T28566] lo speed is unknown, defaulting to 1000 [ 618.992569][T28627] netlink: 'syz.1.6262': attribute type 11 has an invalid length. [ 619.094776][T28630] sctp: [Deprecated]: syz.3.6263 (pid 28630) Use of int in max_burst socket option deprecated. [ 619.094776][T28630] Use struct sctp_assoc_value instead [ 619.194094][T28634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6264'. [ 619.213067][T28637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6265'. [ 619.381040][T28645] netlink: 'syz.3.6267': attribute type 18 has an invalid length. [ 619.585529][T28654] Dead loop on virtual device ip6_vti0 (net 389), fix it urgently! [ 619.653315][T28657] vlan4: entered promiscuous mode [ 619.701941][T28566] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.709945][T28566] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.721131][T28566] bridge_slave_0: entered allmulticast mode [ 619.741044][T28566] bridge_slave_0: entered promiscuous mode [ 619.801574][T28566] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.842955][T28566] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.851596][T28566] bridge_slave_1: entered allmulticast mode [ 619.894062][T28566] bridge_slave_1: entered promiscuous mode [ 620.014627][T28566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.043603][T28566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.177926][T28566] team0: Port device team_slave_0 added [ 620.188307][T28670] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6277'. [ 620.210582][T28566] team0: Port device team_slave_1 added [ 620.338943][T28566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.359363][T28566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.392773][T28566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.415052][T28566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.424304][T28566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.453065][T28566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.680138][T28566] hsr_slave_0: entered promiscuous mode [ 620.735167][T28566] hsr_slave_1: entered promiscuous mode [ 620.754825][T28566] debugfs: 'hsr0' already exists in 'hsr' [ 620.761781][T28566] Cannot create hsr debugfs directory [ 620.813952][T28689] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6281'. [ 620.945222][T28698] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 621.009573][T28698] openvswitch: netlink: IP tunnel TTL not specified. [ 621.037143][ T5630] Bluetooth: hci0: command tx timeout [ 621.060098][T28700] lo: entered allmulticast mode [ 621.220578][T28566] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.247791][T28566] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.288568][T28711] bridge0: Caught tx_queue_len zero misconfig [ 621.308809][T28715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6290'. [ 621.438185][T28566] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.467985][T28566] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.657950][T28566] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.702603][T28566] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.815238][T28566] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.840934][T28566] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.063762][T28760] veth0_to_bridge: entered promiscuous mode [ 622.113406][T28760] veth0_to_bridge: left promiscuous mode [ 622.227174][T28764] netlink: 'syz.1.6307': attribute type 29 has an invalid length. [ 622.416988][T28566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 622.450789][T28566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.471250][T28566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 622.482208][T28780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6311'. [ 622.484480][T28566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.513452][T28566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 622.534003][T28781] netlink: 'syz.0.6312': attribute type 4 has an invalid length. [ 622.552874][T28566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.584478][T28566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 622.612163][T28566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.680187][T28785] netlink: 'syz.3.6313': attribute type 2 has an invalid length. [ 622.886872][T28805] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 622.910874][T28566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.935562][T28804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6318'. [ 622.947593][T28805] vlan4: entered allmulticast mode [ 622.950523][T28803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6318'. [ 622.953644][T28805] veth0_to_bond: entered allmulticast mode [ 623.054181][T28566] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.083157][ T597] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.090331][ T597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.165283][T23395] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.172538][T23395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.369792][T28566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.148691][T28875] x_tables: unsorted underflow at hook 2 [ 624.241266][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 624.474524][T28894] netlink: 'syz.3.6341': attribute type 2 has an invalid length. [ 624.508197][T28894] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6341'. [ 624.559992][T28566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.701201][T28566] veth0_vlan: entered promiscuous mode [ 624.751255][T28566] veth1_vlan: entered promiscuous mode [ 624.761811][T28907] netlink: 'syz.3.6346': attribute type 9 has an invalid length. [ 624.917732][T28566] veth0_macvtap: entered promiscuous mode [ 624.932636][T28566] veth1_macvtap: entered promiscuous mode [ 624.990822][T28566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.027560][T28566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.028442][T28921] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6351'. [ 625.065565][ T6196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.091778][ T6196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.119087][ T6196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.141736][ T6196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.488088][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.516266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.520361][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.620475][T28946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.661547][T28946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.691182][T28946] bond0 (unregistering): Released all slaves [ 625.715105][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.724432][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.025222][T28964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6365'. [ 626.058990][T28964] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6365'. [ 626.468663][T28976] syzkaller0: entered promiscuous mode [ 626.484172][T28976] syzkaller0: entered allmulticast mode [ 626.504283][ T5640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.520104][ T5640] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.531153][ T5640] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.554877][ T5640] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.556086][T28979] simple: basic_1 [ 626.567643][T28979] simple: basic_2 [ 626.571320][T28979] simple: basic_3 [ 626.574965][T28979] simple: basic_4 [ 626.578648][T28979] simple: basic_5 [ 626.582305][T28979] simple: basic_6 [ 626.585971][T28979] simple: basic_7 [ 626.589606][T28979] simple: basic_8 [ 626.593277][T28979] simple: basic_9 [ 626.596935][T28979] simple: basic_10 [ 626.600642][T28979] simple: basic_11 [ 626.604347][T28979] simple: basic_12 [ 626.608093][T28979] simple: basic_13 [ 626.611789][T28979] simple: basic_14 [ 626.615508][T28979] simple: basic_15 [ 626.619224][T28979] simple: basic_16 [ 626.622932][T28979] simple: basic_17 [ 626.626652][T28979] 0: reclassify loop, rule prio 0, protocol 800 [ 626.636869][ T5640] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 626.993190][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6373'. [ 627.003831][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6373'. [ 627.280482][T29004] xt_l2tp: missing protocol rule (udp|l2tpip) [ 627.309679][T29000] team0: Device ipvlan2 is already an upper device of the team interface [ 627.685417][T28977] lo speed is unknown, defaulting to 1000 [ 627.765028][T29044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6385'. [ 627.805577][T29047] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 627.878336][T29044] bond0: option xmit_hash_policy: invalid value (64) [ 627.890807][T29044] bond0 (unregistering): Released all slaves [ 627.925008][T29052] netlink: 'syz.2.6386': attribute type 10 has an invalid length. [ 627.993725][T29052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.007150][T29052] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 628.044221][T29052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.070922][T29052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.086003][T29052] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 628.097040][T29052] bond0 (unregistering): Released all slaves [ 628.615111][T29084] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6396'. [ 628.630339][T29091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6395'. [ 628.645553][T29091] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 628.659714][T28977] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.688299][T28977] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.704018][T28977] bridge_slave_0: entered allmulticast mode [ 628.719104][ T5630] Bluetooth: hci4: command tx timeout [ 628.732738][T28977] bridge_slave_0: entered promiscuous mode [ 628.745289][T28977] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.753327][T28977] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.761526][T28977] bridge_slave_1: entered allmulticast mode [ 628.769875][T28977] bridge_slave_1: entered promiscuous mode [ 628.835363][T28977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.862501][T28977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.868309][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 628.980464][T28977] team0: Port device team_slave_0 added [ 629.003088][T29108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6402'. [ 629.065053][T28977] team0: Port device team_slave_1 added [ 629.128621][T28977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.138464][T28977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.184498][T28977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.309372][T28977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.328072][T28977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.369779][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.405277][T28977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.638228][T29155] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6416'. [ 629.642571][T28977] hsr_slave_0: entered promiscuous mode [ 629.684722][T28977] hsr_slave_1: entered promiscuous mode [ 629.694026][T28977] debugfs: 'hsr0' already exists in 'hsr' [ 629.703523][T28977] Cannot create hsr debugfs directory [ 629.951396][T29171] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 629.964781][T29171] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 629.972871][T29171] gretap1: entered promiscuous mode [ 629.978525][T29171] gretap1: entered allmulticast mode [ 630.202501][T28977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.219346][T28977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 630.231685][T28977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.252774][T28977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.334288][T29189] netlink: zone id is out of range [ 630.339812][T29187] gtp0: entered allmulticast mode [ 630.348468][T29189] netlink: zone id is out of range [ 630.348677][T29187] team0: Device gtp0 is of different type [ 630.418497][T28977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.429654][T28977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 630.441231][T28977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.452684][T28977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.547995][T29194] veth0: entered promiscuous mode [ 630.601810][T29194] veth0: left promiscuous mode [ 630.633165][T28977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.649544][T28977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 630.660801][T28977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.682960][T28977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.799745][ T5630] Bluetooth: hci4: command tx timeout [ 630.866847][T28977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.879214][T28977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 630.890878][T28977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.904088][T28977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 630.958321][T29216] syzkaller0: entered promiscuous mode [ 630.972520][T29216] syzkaller0: entered allmulticast mode [ 631.133779][T29227] netlink: 'syz.0.6440': attribute type 39 has an invalid length. [ 631.170562][T29227] bridge0: port 3(syz_tun) entered disabled state [ 631.221075][T29227] syz_tun (unregistering): left allmulticast mode [ 631.233770][T29227] syz_tun (unregistering): left promiscuous mode [ 631.241105][T29227] bridge0: port 3(syz_tun) entered disabled state [ 631.278251][T29223] syzkaller1: entered promiscuous mode [ 631.284030][T29223] syzkaller1: entered allmulticast mode [ 631.558836][T28977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.586665][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.608458][T28977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.641207][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.674772][T28977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.690866][T29250] netlink: zone id is out of range [ 631.711035][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.719185][T29250] netlink: zone id is out of range [ 631.727418][T28977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 631.734820][T29250] netlink: zone id is out of range [ 631.744744][T28977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.750969][T29254] __nla_validate_parse: 5 callbacks suppressed [ 631.750985][T29254] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6450'. [ 631.754215][T29250] netlink: zone id is out of range [ 631.810837][T29250] netlink: zone id is out of range [ 631.828948][T29250] netlink: zone id is out of range [ 631.845006][T29249] syzkaller0: entered promiscuous mode [ 631.855825][T29250] netlink: zone id is out of range [ 631.864012][T29249] syzkaller0: entered allmulticast mode [ 631.871687][T29250] netlink: zone id is out of range [ 631.983392][T29268] netlink: 'syz.0.6452': attribute type 1 has an invalid length. [ 632.020753][T29270] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 632.043664][T29272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6454'. [ 632.055025][T29272] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6454'. [ 632.069004][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6454'. [ 632.080322][T29274] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6454'. [ 632.148292][T29273] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 632.202624][T29280] netlink: 'syz.2.6455': attribute type 1 has an invalid length. [ 632.231639][T28977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.244914][T29284] netlink: 'syz.0.6457': attribute type 11 has an invalid length. [ 632.258234][T29284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6457'. [ 632.290853][T28977] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.351909][ T597] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.359104][ T597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.431120][ T597] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.438348][ T597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.524520][T29298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6461'. [ 632.537024][T29300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6462'. [ 632.577612][T29301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6461'. [ 632.639657][T29301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6461'. [ 632.881623][ T5630] Bluetooth: hci4: command tx timeout [ 633.244163][T29341] netlink: 'syz.2.6472': attribute type 1 has an invalid length. [ 633.281085][T29341] bond0: entered promiscuous mode [ 633.291299][T29341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.330849][T29341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.360256][T29341] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 633.386629][T29341] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 633.423607][T29341] bond0: (slave ip6gre1): making interface the new active one [ 633.450381][T29341] ip6gre1: entered promiscuous mode [ 633.469060][T29341] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 633.494894][T29344] netlink: 'syz.0.6473': attribute type 1 has an invalid length. [ 633.504246][T29345] netlink: 'syz.0.6473': attribute type 1 has an invalid length. [ 633.650452][T29357] xt_hashlimit: size too large, truncated to 1048576 [ 633.693888][T28977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.709320][T29359] netlink: 'syz.0.6475': attribute type 7 has an invalid length. [ 633.732007][T29359] netlink: 'syz.0.6475': attribute type 8 has an invalid length. [ 633.794535][T29359] dummy0: entered promiscuous mode [ 633.810195][T29359] team0: entered promiscuous mode [ 633.810838][T29365] netlink: 'syz.1.6476': attribute type 11 has an invalid length. [ 633.815352][T29359] team_slave_1: entered promiscuous mode [ 633.839747][T29359] erspan0: entered promiscuous mode [ 633.920333][T28977] veth0_vlan: entered promiscuous mode [ 633.962195][T28977] veth1_vlan: entered promiscuous mode [ 634.202317][T28977] veth0_macvtap: entered promiscuous mode [ 634.284456][T28977] veth1_macvtap: entered promiscuous mode [ 634.344583][T28977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.397110][T28977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.429926][T29387] netlink: 'syz.0.6483': attribute type 5 has an invalid length. [ 634.459649][ T6196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.492738][ T6196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.522100][ T6196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.555369][ T6196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.944049][T23395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.956789][ T5630] Bluetooth: hci4: command tx timeout [ 634.987059][T23395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.078726][T23395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.108419][T23395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.569457][T29434] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 635.628001][T29440] net_ratelimit: 71 callbacks suppressed [ 635.628018][T29440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 635.740334][ T5640] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.771360][ T5640] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.783851][ T5640] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.795052][ T5640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.808420][ T5640] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 636.220149][T29466] team0: Device is already in use. [ 636.509741][T29482] netlink: 'syz.0.6506': attribute type 1 has an invalid length. [ 636.829225][T29497] syzkaller0: entered promiscuous mode [ 636.847604][T29497] syzkaller0: entered allmulticast mode [ 637.128117][T29515] __nla_validate_parse: 8 callbacks suppressed [ 637.128134][T29515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6511'. [ 637.165546][T29515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6511'. [ 637.181386][T29443] lo speed is unknown, defaulting to 1000 [ 637.395258][T29526] xt_TCPMSS: Only works on TCP SYN packets [ 637.508540][T29528] syzkaller0: entered promiscuous mode [ 637.534207][T29528] syzkaller0: entered allmulticast mode [ 637.739435][T29547] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6518'. [ 637.915990][ T5630] Bluetooth: hci3: command tx timeout [ 637.988890][T29559] syzkaller0: entered promiscuous mode [ 638.038646][T29559] syzkaller0: entered allmulticast mode [ 638.127405][T29559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'. [ 638.166749][T29559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'. [ 638.181621][T29559] netlink: 'syz.0.6523': attribute type 3 has an invalid length. [ 638.276429][T29567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6524'. [ 638.338078][T29443] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.345253][T29443] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.353386][T29443] bridge_slave_0: entered allmulticast mode [ 638.364428][T29443] bridge_slave_0: entered promiscuous mode [ 638.375482][T29443] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.384115][T29443] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.392148][T29443] bridge_slave_1: entered allmulticast mode [ 638.401280][T29443] bridge_slave_1: entered promiscuous mode [ 638.449367][T29443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.463708][T29443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.494382][T29443] team0: Port device team_slave_0 added [ 638.502901][T29443] team0: Port device team_slave_1 added [ 638.528074][T29443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.535055][T29443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.562421][T29443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.574803][T29443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.582131][T29443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 638.608789][T29443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.651081][T29443] hsr_slave_0: entered promiscuous mode [ 638.657782][T29443] hsr_slave_1: entered promiscuous mode [ 638.663934][T29443] debugfs: 'hsr0' already exists in 'hsr' [ 638.670572][T29443] Cannot create hsr debugfs directory [ 638.778992][T29443] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 638.839376][T29443] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 638.920869][T29443] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 638.982866][T29443] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 639.115406][T29443] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 639.127685][T29443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 639.135569][T29443] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 639.146421][T29443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 639.154268][T29443] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 639.166471][T29443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 639.174293][T29443] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 639.185465][T29443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 639.264432][T29443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.285100][T29443] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.299810][T23405] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.306961][T23405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.322780][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.329989][ T3332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.664903][T29443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.972315][T29443] veth0_vlan: entered promiscuous mode [ 639.983910][T29443] veth1_vlan: entered promiscuous mode [ 640.006596][ T5630] Bluetooth: hci3: command tx timeout [ 640.024620][T29443] veth0_macvtap: entered promiscuous mode [ 640.035072][T29443] veth1_macvtap: entered promiscuous mode [ 640.057069][T29443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.069902][T29443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.088004][ T3332] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.098523][ T3332] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.110585][ T3332] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.120594][ T3332] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.272697][T23405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.289430][T23405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.314685][ T597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.324942][ T597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.380910][T29599] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 642.077190][ T5630] Bluetooth: hci3: command tx timeout [ 644.159154][ T5630] Bluetooth: hci3: command tx timeout [ 648.556515][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 658.155964][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.114669][T29622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6527'. [ 661.134144][T29625] tipc: Enabling of bearer rejected, failed to enable media [ 661.152222][T29630] netlink: 'syz.4.6531': attribute type 2 has an invalid length. [ 661.158151][T29622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6527'. [ 661.295577][T29630] : entered promiscuous mode [ 661.364782][T29644] Bluetooth: MGMT ver 1.23 [ 661.386195][T29644] netlink: 'syz.0.6533': attribute type 1 has an invalid length. [ 661.403149][T29644] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6533'. [ 661.574982][T29657] Bluetooth: MGMT ver 1.23 [ 661.893229][T29670] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 661.903933][T29670] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 661.945272][T29672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6538'. [ 662.067813][T29676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6540'. [ 662.089510][T29675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 662.108851][T29674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6540'. [ 662.201890][T29683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6543'. [ 662.522885][T29703] netlink: 'syz.2.6549': attribute type 1 has an invalid length. [ 662.747432][T29710] syzkaller0: entered promiscuous mode [ 662.764868][T29710] syzkaller0: entered allmulticast mode [ 663.310651][T29753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6564'. [ 663.560292][T29765] netlink: 'syz.2.6568': attribute type 1 has an invalid length. [ 665.875534][T29728] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6558'. [ 665.890962][T29740] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 665.893920][T29765] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 666.018831][T29773] netlink: 'syz.1.6570': attribute type 18 has an invalid length. [ 666.094655][ T3332] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.152880][ T3332] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.183988][ T3332] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.210920][ T3332] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.257932][T29791] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 666.389323][T29795] macvlan0: mtu less than device minimum [ 666.457156][T29803] netlink: 'syz.3.6580': attribute type 61 has an invalid length. [ 666.836460][T29813] __nla_validate_parse: 2 callbacks suppressed [ 666.836480][T29813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6582'. [ 667.059159][T29830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6586'. [ 667.298112][T29843] netlink: 'syz.3.6592': attribute type 1 has an invalid length. [ 667.321595][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6591'. [ 667.349244][T29843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6592'. [ 667.574589][T29856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.639378][T29870] ip6t_srh: unknown srh match flags 4000 [ 667.919457][T29881] bridge0: port 3(gretap0) entered blocking state [ 667.928246][T29881] bridge0: port 3(gretap0) entered disabled state [ 667.936527][T29881] gretap0: entered allmulticast mode [ 667.944002][T29881] gretap0: entered promiscuous mode [ 667.950776][T29881] bridge0: port 3(gretap0) entered blocking state [ 667.957384][T29881] bridge0: port 3(gretap0) entered forwarding state [ 668.067615][T29890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6605'. [ 668.179990][T29893] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6607'. [ 668.193232][T29898] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6608'. [ 668.441468][T29908] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 668.468855][T29910] pim6reg: entered allmulticast mode [ 668.580805][T29919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6612'. [ 668.604420][T29920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6615'. [ 668.634733][T29920] netlink: 'syz.1.6615': attribute type 11 has an invalid length. [ 668.662002][T29921] syzkaller0: entered promiscuous mode [ 668.668726][T29921] syzkaller0: entered allmulticast mode [ 668.716358][T29926] RDS: rds_bind could not find a transport for fe80::23, load rds_tcp or rds_rdma? [ 668.839659][T21293] IPVS: starting estimator thread 0... [ 668.936927][T29933] IPVS: using max 31 ests per chain, 74400 per kthread [ 668.984744][T29935] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6620'. [ 669.233955][T29950] netlink: 'syz.4.6626': attribute type 1 has an invalid length. [ 669.342331][T29953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 669.374963][ T5636] lo speed is unknown, defaulting to 1000 [ 669.383743][ T5636] syz2: Port: 1 Link DOWN [ 669.508056][T29963] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 669.584804][T29957] ip6gretap0: entered promiscuous mode [ 669.765308][T29979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.867794][T29990] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 670.436843][T30015] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 670.605613][T30031] "syz.0.6651" (30031) uses obsolete ecb(arc4) skcipher [ 670.764802][T30041] netlink: 'syz.3.6655': attribute type 83 has an invalid length. [ 670.803127][T30046] netlink: 'syz.3.6655': attribute type 83 has an invalid length. [ 671.861363][T30106] __nla_validate_parse: 40 callbacks suppressed [ 671.861383][T30106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6677'. [ 672.125762][T30124] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 672.137787][T30124] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 672.309733][T30129] SET target dimension over the limit! [ 673.007379][T30138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6685'. [ 674.222402][T30078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 674.452102][T30149] ipvlan1: entered promiscuous mode [ 674.457712][T30149] ipvlan1: entered allmulticast mode [ 674.463125][T30149] veth0_vlan: entered allmulticast mode [ 674.603065][T30160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6691'. [ 674.703975][T30166] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6695'. [ 674.721126][T30166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6695'. [ 674.768546][T30169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6695'. [ 674.778995][T30170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6698'. [ 674.790098][T30171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6698'. [ 674.992933][T30191] netlink: 'syz.3.6703': attribute type 12 has an invalid length. [ 675.002527][T30184] netlink: 'syz.0.6701': attribute type 1 has an invalid length. [ 675.006706][T30191] netlink: 'syz.3.6703': attribute type 29 has an invalid length. [ 675.030066][T30191] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6703'. [ 675.057489][T30184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6701'. [ 675.061512][T30191] netlink: 'syz.3.6703': attribute type 3 has an invalid length. [ 675.097651][T30191] netlink: 'syz.3.6703': attribute type 2 has an invalid length. [ 675.332373][T30210] vcan0: entered allmulticast mode [ 675.401102][T30216] netlink: 'syz.3.6709': attribute type 30 has an invalid length. [ 675.439248][ T6204] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.450134][ T6204] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.474167][ T6204] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.494754][ T6204] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.514597][T30222] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 675.732785][T30231] netlink: 'syz.1.6715': attribute type 39 has an invalid length. [ 675.741815][T30231] hsr_slave_0: left promiscuous mode [ 675.749753][T30231] hsr_slave_1: left promiscuous mode [ 676.409965][T30260] xt_hashlimit: size too large, truncated to 1048576 [ 676.639102][T30272] netlink: 'syz.4.6726': attribute type 4 has an invalid length. [ 676.760025][T30271] gretap1: left promiscuous mode [ 676.773825][T30271] bond0: left promiscuous mode [ 676.791478][T30271] ip6gre1: left promiscuous mode [ 676.933720][T30282] netlink: 'syz.4.6731': attribute type 1 has an invalid length. [ 677.065328][T30292] bond2: (slave bridge1): making interface the new active one [ 677.077831][T30292] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 677.315391][T30308] __nla_validate_parse: 8 callbacks suppressed [ 677.315410][T30308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6738'. [ 677.369299][T30314] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6740'. [ 677.387721][T30308] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6738'. [ 677.399790][T30314] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6740'. [ 677.438441][T30316] netlink: 'syz.1.6741': attribute type 2 has an invalid length. [ 677.458973][T30316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6741'. [ 677.489549][T30320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6741'. [ 677.710436][T30327] macsec1: entered promiscuous mode [ 677.771184][T30331] syzkaller1: entered allmulticast mode [ 677.787655][T30331] veth0: entered promiscuous mode [ 677.812673][T30331] veth0: left promiscuous mode [ 677.940921][T30343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6751'. [ 677.984141][T30337] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6749'. [ 678.033255][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 678.086699][T30349] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 678.246523][T30358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6756'. [ 678.983572][T30405] siw: device registration error -23 [ 679.119642][T30415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.451599][T30439] bond2: option xmit_hash_policy: invalid value (64) [ 679.466693][T30439] bond2 (unregistering): Released all slaves [ 679.495150][T29775] block nbd64: NBD_DISCONNECT [ 679.867582][T29775] udevd[29775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 680.051784][T30458] bond3: Unable to set up delay as MII monitoring is disabled [ 680.130908][T30458] bond3 (unregistering): Released all slaves [ 680.549796][T30487] syzkaller0: entered promiscuous mode [ 680.562585][T30487] syzkaller0: entered allmulticast mode [ 680.727000][T30499] validate_nla: 5 callbacks suppressed [ 680.727017][T30499] netlink: 'syz.1.6797': attribute type 83 has an invalid length. [ 681.393217][T30546] netlink: 'syz.0.6810': attribute type 39 has an invalid length. [ 681.792552][T30572] openvswitch: netlink: Flow actions attr not present in new flow. [ 681.902106][T30581] lo speed is unknown, defaulting to 1000 [ 681.923583][T30583] bond0: entered allmulticast mode [ 681.936766][T30583] ip6gre1: entered allmulticast mode [ 681.954272][T30581] lo speed is unknown, defaulting to 1000 [ 681.982864][T30583] dvmrp8: entered allmulticast mode [ 681.991705][T30582] bond0: left allmulticast mode [ 681.999237][T30582] ip6gre1: left allmulticast mode [ 682.012867][T30585] ±ÿª¨úrBº“: renamed from lo (while UP) [ 682.042022][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.084428][T30581] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 682.115985][T30581] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 682.153623][T30581] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 682.180255][T30581] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 682.262512][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.272376][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.283256][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.293124][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.302930][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.326301][T30606] netlink: 'syz.1.6830': attribute type 4 has an invalid length. [ 682.337156][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.347530][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.367642][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.384837][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.402785][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.424155][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.439643][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.448511][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.459447][T30581] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 682.562588][T30617] nbd: must specify a size in bytes for the device [ 682.570129][T30617] block nbd3: NBD_DISCONNECT [ 682.575320][T30617] block nbd3: Send disconnect failed -32 [ 682.597678][T30617] block nbd3: shutting down sockets [ 682.694751][T30630] __nla_validate_parse: 19 callbacks suppressed [ 682.694824][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6834'. [ 683.192035][T30663] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6840'. [ 683.403270][T30675] erspan0: entered allmulticast mode [ 683.799595][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.822718][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6852'. [ 683.835330][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.860593][T30694] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 683.869148][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.874966][T21293] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 683.883355][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.890833][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.911692][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.927871][T30691] 8021q: VLANs not supported on ip_vti0 [ 683.939136][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6854'. [ 683.945793][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.026547][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.039976][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.048294][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.048890][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6854'. [ 684.054193][T30703] netlink: 'syz.3.6856': attribute type 21 has an invalid length. [ 684.101938][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.116185][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.125364][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.133383][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.157451][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.163395][T30703] netlink: 'syz.3.6856': attribute type 21 has an invalid length. [ 684.176585][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.200103][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.222806][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.236613][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.244631][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.277289][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.317225][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.334077][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.343952][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.357426][T30717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'. [ 684.366752][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.376881][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.392754][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.419419][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.443619][T30719] xt_HMARK: proto mask must be zero with L3 mode [ 684.453897][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.478405][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.492649][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.514612][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.532730][T30726] x_tables: duplicate underflow at hook 2 [ 684.532772][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.552867][T30691] 8021q: VLANs not supported on ip_vti0 [ 684.735077][T30737] netlink: 'syz.2.6866': attribute type 4 has an invalid length. [ 684.757703][T30737] netlink: 'syz.2.6866': attribute type 4 has an invalid length. [ 684.880158][T30743] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6868'. [ 684.900581][T30744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6869'. [ 685.246063][T30772] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.475059][T30781] IPVS: set_ctl: invalid protocol: 2 172.20.20.45:20000 [ 685.657956][T30788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6880'. [ 685.679358][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 685.861933][T30797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6883'. [ 685.883167][T30797] netlink: 'syz.4.6883': attribute type 1 has an invalid length. [ 686.031770][T30807] netlink: 'syz.0.6886': attribute type 2 has an invalid length. [ 686.040376][T30809] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 686.264990][T30826] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 686.388362][T30830] netlink: 'syz.0.6894': attribute type 75 has an invalid length. [ 686.401161][T30835] netlink: 'syz.2.6896': attribute type 21 has an invalid length. [ 686.573522][T30849] syz_tun: entered allmulticast mode [ 687.032541][T30879] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 687.055522][T30879] bond0 (unregistering): Released all slaves [ 687.514667][T30910] x_tables: unsorted underflow at hook 1 [ 687.536674][T30911] x_tables: unsorted underflow at hook 1 [ 687.686867][T30918] tipc: Enabling of bearer rejected, media not registered [ 687.971204][T30932] pimreg3: entered allmulticast mode [ 688.069113][T30943] openvswitch: netlink: IP tunnel dst address not specified [ 688.073049][T30934] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.081685][T30943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.084123][T30934] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.265115][T30934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.279026][T30934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.406943][ T3332] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.430085][ T3332] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.464827][ T3332] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.499062][ T3332] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.710858][T30971] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 688.713467][T30969] __nla_validate_parse: 14 callbacks suppressed [ 688.713485][T30969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.799000][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.829935][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.871935][T30978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.894470][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.917574][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 688.963573][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 689.000434][T30978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6933'. [ 689.026802][T30970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 689.038269][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6933'. [ 689.172821][T30994] netlink: 'syz.3.6937': attribute type 1 has an invalid length. [ 689.352325][T30994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.503932][T31024] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 689.559038][T31024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.624208][T31029] syzkaller0: entered promiscuous mode [ 689.630481][T31029] syzkaller0: entered allmulticast mode [ 689.682099][T31029] tipc: Started in network mode [ 689.687845][T31029] tipc: Node identity ce3b44e7d8b9, cluster identity 4711 [ 689.698978][T31029] tipc: Enabled bearer , priority 0 [ 689.709907][T31028] tipc: Resetting bearer [ 689.743226][T31028] tipc: Disabling bearer [ 689.950851][T31033] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.962541][T31033] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.016893][T31039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.079442][T31039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.703049][T31074] netlink: 'syz.4.6960': attribute type 12 has an invalid length. [ 690.917394][ T5630] Bluetooth: hci3: link tx timeout [ 690.930566][ T5630] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 690.950345][T31088] netlink: 'syz.2.6964': attribute type 8 has an invalid length. [ 691.470145][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.633025][T31127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.285066][T31153] openvswitch: netlink: Multiple metadata blocks provided [ 692.378519][T31156] netlink: 'syz.0.6982': attribute type 14 has an invalid length. [ 692.401520][T31156] netlink: 'syz.0.6982': attribute type 13 has an invalid length. [ 692.472049][T31160] bond0: entered allmulticast mode [ 692.497227][T31160] ip6gre1: entered allmulticast mode [ 692.539229][T31164] veth3: entered allmulticast mode [ 692.713337][T31158] bond0: left allmulticast mode [ 692.726289][T31158] ip6gre1: left allmulticast mode [ 692.791969][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 692.860180][T31172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.885042][T31172] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 692.901056][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 692.934125][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 692.956075][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 692.992742][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 693.008135][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 693.042880][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 693.077446][T31172] netlink: 'syz.1.6986': attribute type 10 has an invalid length. [ 693.297214][T31187] syzkaller0: entered promiscuous mode [ 693.318550][T31187] syzkaller0: entered allmulticast mode [ 693.324585][T31193] netlink: 'syz.1.6992': attribute type 11 has an invalid length. [ 693.542617][T31206] tipc: Started in network mode [ 693.554452][T31206] tipc: Node identity a2054928a14b, cluster identity 4711 [ 693.592018][T31206] tipc: Enabled bearer , priority 0 [ 693.617720][T31209] syzkaller0: entered promiscuous mode [ 693.630916][T31209] syzkaller0: entered allmulticast mode [ 693.649801][T31206] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 693.741233][T31206] tipc: Resetting bearer [ 693.764492][T31204] tipc: Resetting bearer [ 693.814540][T31204] tipc: Disabling bearer [ 694.338021][T31232] lo speed is unknown, defaulting to 1000 [ 694.343412][T31242] openvswitch: netlink: IPv4 tunnel dst address is zero [ 694.345552][T31232] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 694.371580][T31242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.578909][T31254] __nla_validate_parse: 10 callbacks suppressed [ 694.578921][T31254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7006'. [ 694.641556][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7008'. [ 694.648294][T31259] netlink: 'syz.1.7010': attribute type 11 has an invalid length. [ 694.659452][T31259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7010'. [ 694.674442][T31255] geneve2: entered promiscuous mode [ 694.685111][T31255] geneve2: entered allmulticast mode [ 694.704805][T31259] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7010'. [ 694.742122][T31264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7011'. [ 694.757731][T31264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7011'. [ 694.792899][T31264] bridge1: entered promiscuous mode [ 694.800518][T31264] bridge1: entered allmulticast mode [ 694.896909][T31270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7012'. [ 695.462006][T31292] openvswitch: netlink: Multiple metadata blocks provided [ 695.797094][T31314] vlan0: entered promiscuous mode [ 695.916178][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.029623][T31318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.215195][T31320] tun0: tun_chr_ioctl cmd 1074025675 [ 696.220876][T31320] tun0: persist disabled [ 696.343234][T31331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7034'. [ 696.377701][T31331] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7034'. [ 696.587760][T31346] macvtap0: entered promiscuous mode [ 696.603669][T31346] macvtap0: entered allmulticast mode [ 696.631355][T31346] veth0_macvtap: entered allmulticast mode [ 696.963588][T31364] validate_nla: 31 callbacks suppressed [ 696.963606][T31364] netlink: 'syz.1.7043': attribute type 9 has an invalid length. [ 697.067383][T31372] tipc: Enabling of bearer rejected, media not registered [ 697.493754][T31392] netlink: 'syz.0.7048': attribute type 3 has an invalid length. [ 697.641836][T31399] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 697.657120][T31400] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20002 [ 697.783827][T31405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7054'. [ 697.989139][T31416] netlink: 'syz.1.7059': attribute type 6 has an invalid length. [ 699.158491][T31450] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 699.443598][T31477] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:43812 [ 699.489670][T31483] 8021q: VLANs not supported on ip6gre0 [ 699.658022][T31492] netlink: 'syz.2.7082': attribute type 1 has an invalid length. [ 699.699184][T31497] __nla_validate_parse: 4 callbacks suppressed [ 699.699203][T31497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7084'. [ 699.782103][T31499] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7085'. [ 700.086306][T31519] mac80211_hwsim hwsim51 syzkaller0: left promiscuous mode [ 700.094586][T31519] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode [ 700.304675][T31530] netlink: 'syz.4.7096': attribute type 1 has an invalid length. [ 700.360776][T31537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7094'. [ 700.402745][T31535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7097'. [ 700.441969][T31535] x_tables: duplicate underflow at hook 3 [ 700.500842][T31543] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7095'. [ 700.608504][T31552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7101'. [ 700.649183][T31552] hsr_slave_0: left promiscuous mode [ 700.673372][T31552] hsr_slave_1: left promiscuous mode [ 701.325418][T31599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7111'. [ 701.414460][T31607] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7110'. [ 701.444830][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7113'. [ 701.501450][T31610] netlink: 'syz.0.7113': attribute type 3 has an invalid length. [ 701.595474][T31615] netlink: 'syz.2.7114': attribute type 4 has an invalid length. [ 701.604423][T31614] x_tables: duplicate underflow at hook 2 [ 701.617017][T31616] x_tables: duplicate underflow at hook 2 [ 701.662620][T31619] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7117'. [ 701.731591][T31615] syzkaller0: entered promiscuous mode [ 701.762738][T31615] syzkaller0: entered allmulticast mode [ 708.239228][ T5640] Bluetooth: hci1: command 0x0406 tx timeout [ 711.276534][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 723.472620][T31646] __nla_validate_parse: 3 callbacks suppressed [ 723.472642][T31646] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7123'. [ 723.506886][T31651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'. [ 723.533230][T31646] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 723.574145][T31658] netlink: 'syz.2.7122': attribute type 1 has an invalid length. [ 723.596496][ T5630] Bluetooth: hci5: command 0x0406 tx timeout [ 723.621436][T31659] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7123'. [ 724.302940][T31646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.519141][T31692] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 724.787647][ T6196] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 724.857589][T31720] netlink: 'syz.4.7140': attribute type 9 has an invalid length. [ 726.636054][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.680115][T31708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 727.874541][T31743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7146'. [ 727.943335][T31747] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 728.003412][T31750] netlink: 'syz.0.7147': attribute type 2 has an invalid length. [ 728.030215][T31750] netlink: 'syz.0.7147': attribute type 2 has an invalid length. [ 728.030277][T31747] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 728.047042][T31755] sctp: [Deprecated]: syz.3.7152 (pid 31755) Use of int in max_burst socket option. [ 728.047042][T31755] Use struct sctp_assoc_value instead [ 728.062690][T31747] gretap1: entered promiscuous mode [ 728.091327][T31747] gretap1: entered allmulticast mode [ 728.864704][T31806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.872026][T31806] IPv6: NLM_F_CREATE should be set when creating new route [ 728.883627][T31806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 729.070665][T31818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7170'. [ 729.183995][T31831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 729.231566][T31831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7174'. [ 729.332402][T31833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7175'. [ 729.342948][T31833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7175'. [ 729.433382][T31841] netlink: 268 bytes leftover after parsing attributes in process `syz.4.7177'. [ 729.484905][T31850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7179'. [ 729.519249][T31850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7179'. [ 729.691696][T31860] ip6gre0: Master is either lo or non-ether device [ 729.714780][T31862] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7185'. [ 729.750945][T31865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7186'. [ 729.763326][T31864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7186'. [ 729.776315][T31865] netlink: 'syz.1.7186': attribute type 13 has an invalid length. [ 729.784663][T31864] netlink: 'syz.1.7186': attribute type 13 has an invalid length. [ 729.799332][T31865] netlink: 'syz.1.7186': attribute type 13 has an invalid length. [ 729.813245][T31864] netlink: 'syz.1.7186': attribute type 13 has an invalid length. [ 729.991095][T31879] syzkaller1: entered promiscuous mode [ 729.999577][T31879] syzkaller1: entered allmulticast mode [ 730.013770][T31878] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 730.709811][T31918] netlink: 'syz.2.7202': attribute type 2 has an invalid length. [ 730.755253][T31923] netlink: 'syz.4.7204': attribute type 1 has an invalid length. [ 730.771569][T31920] bond4: Removing last ns target with arp_interval on [ 730.894614][T31927] bond3 (unregistering): Released all slaves [ 731.024436][T31933] syzkaller0: entered promiscuous mode [ 731.050318][T31933] syzkaller0: entered allmulticast mode [ 731.121404][T31944] netlink: 'syz.2.7211': attribute type 58 has an invalid length. [ 731.149853][T31942] vcan0 (unregistering): left allmulticast mode [ 731.347582][T31952] syzkaller0: entered promiscuous mode [ 731.382486][T31952] syzkaller0: entered allmulticast mode [ 734.759205][T32010] __nla_validate_parse: 17 callbacks suppressed [ 734.759224][T32010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7225'. [ 734.902218][T32010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7225'. [ 734.911287][T32015] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.954624][T32012] ip6t_srh: unknown srh match flags 4000 [ 735.159269][T32022] netlink: 'syz.4.7230': attribute type 1 has an invalid length. [ 735.169241][T32022] netlink: 'syz.4.7230': attribute type 1 has an invalid length. [ 735.170896][T32024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7229'. [ 735.211723][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7229'. [ 735.232694][T32026] IPVS: length: 25 != 24 [ 735.244714][T32027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7229'. [ 735.426820][T32045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7234'. [ 735.568816][T32006] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 735.578216][T32006] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 735.797165][T32058] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 735.804781][T32058] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 736.099936][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7240'. [ 736.109431][T32062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.214295][T32066] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 736.258215][T32068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7243'. [ 738.300435][T32030] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.354004][T32068] netlink: 'syz.2.7243': attribute type 1 has an invalid length. [ 738.366913][T32068] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7243'. [ 738.614381][T32086] sctp: [Deprecated]: syz.2.7248 (pid 32086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 738.614381][T32086] Use struct sctp_sack_info instead [ 738.995372][T32112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7258'. [ 739.033647][T32112] block nbd0: reconnected socket [ 739.044560][T32112] netlink: 'syz.2.7258': attribute type 1 has an invalid length. [ 739.052882][T32112] nbd: error processing sock list [ 739.067016][ T5640] block nbd0: Receive control failed (result -32) [ 739.329228][T32140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 739.629410][T32159] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 739.642551][T32160] netlink: 'syz.4.7269': attribute type 8 has an invalid length. [ 739.658226][T32161] netlink: 'syz.3.7271': attribute type 21 has an invalid length. [ 739.683170][T32153] netlink: 'syz.2.7270': attribute type 2 has an invalid length. [ 739.716528][T32153] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 739.738561][T32155] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 739.767026][T32153] __nla_validate_parse: 2 callbacks suppressed [ 739.767043][T32153] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7270'. [ 740.114831][T32176] syzkaller0: entered promiscuous mode [ 740.162889][T32176] syzkaller0: entered allmulticast mode [ 740.239200][T32176] xt_socket: unknown flags 0x8 [ 740.277899][T32181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7276'. [ 740.333321][T32185] x_tables: duplicate underflow at hook 2 [ 740.390126][T32181] [ 740.392499][T32181] ====================================================== [ 740.399522][T32181] WARNING: possible circular locking dependency detected [ 740.406556][T32181] syzkaller #0 Not tainted [ 740.410980][T32181] ------------------------------------------------------ [ 740.417998][T32181] syz.0.7276/32181 is trying to acquire lock: [ 740.424070][T32181] ffff88807790f618 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 740.433022][T32181] [ 740.433022][T32181] but task is already holding lock: [ 740.440390][T32181] ffff88802a9d5008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 740.449884][T32181] [ 740.449884][T32181] which lock already depends on the new lock. [ 740.449884][T32181] [ 740.460374][T32181] [ 740.460374][T32181] the existing dependency chain (in reverse order) is: [ 740.469387][T32181] [ 740.469387][T32181] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 740.477210][T32181] __mutex_lock+0x19d/0x1550 [ 740.482403][T32181] elevator_change+0x1af/0x480 [ 740.487698][T32181] elevator_set_none+0xb5/0x140 [ 740.493076][T32181] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 740.499491][T32181] nbd_start_device+0x189/0xb30 [ 740.504932][T32181] nbd_genl_connect+0x1597/0x1c10 [ 740.510474][T32181] genl_family_rcv_msg_doit+0x233/0x340 [ 740.516714][T32181] genl_rcv_msg+0x614/0x7a0 [ 740.521738][T32181] netlink_rcv_skb+0x226/0x4a0 [ 740.527099][T32181] genl_rcv+0x28/0x40 [ 740.531602][T32181] netlink_unicast+0x7bb/0x940 [ 740.536897][T32181] netlink_sendmsg+0x813/0xb40 [ 740.542186][T32181] sock_sendmsg_nosec+0x13a/0x180 [ 740.547783][T32181] ____sys_sendmsg+0x54e/0x850 [ 740.553070][T32181] ___sys_sendmsg+0x2a5/0x360 [ 740.558269][T32181] __x64_sys_sendmsg+0x1b1/0x290 [ 740.563777][T32181] do_syscall_64+0x174/0x580 [ 740.568885][T32181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.575292][T32181] [ 740.575292][T32181] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 740.583894][T32181] blk_alloc_queue+0x544/0x690 [ 740.589232][T32181] __blk_mq_alloc_disk+0x194/0x390 [ 740.594864][T32181] nbd_dev_add+0x494/0xb60 [ 740.599815][T32181] nbd_init+0x15f/0x1e0 [ 740.604610][T32181] do_one_initcall+0x250/0x870 [ 740.609904][T32181] do_initcall_level+0x10a/0x1a0 [ 740.615390][T32181] do_initcalls+0x59/0xa0 [ 740.620230][T32181] kernel_init_freeable+0x29d/0x3e0 [ 740.625944][T32181] kernel_init+0x1d/0x1d0 [ 740.630795][T32181] ret_from_fork+0x514/0xb70 [ 740.635931][T32181] ret_from_fork_asm+0x1a/0x30 [ 740.641216][T32181] [ 740.641216][T32181] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 740.648452][T32181] fs_reclaim_acquire+0x71/0x100 [ 740.653906][T32181] __kmalloc_cache_node_noprof+0x66/0x630 [ 740.660164][T32181] create_worker+0x112/0x7b0 [ 740.665300][T32181] workqueue_prepare_cpu+0xe4/0x170 [ 740.671016][T32181] cpuhp_invoke_callback+0x434/0x810 [ 740.676821][T32181] _cpu_up+0x2ce/0x5b0 [ 740.681401][T32181] cpu_up+0x1d2/0x220 [ 740.685895][T32181] cpuhp_bringup_mask+0xb2/0x1a0 [ 740.691453][T32181] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 740.697781][T32181] bringup_nonboot_cpus+0x17/0x30 [ 740.703325][T32181] smp_init+0x32/0x110 [ 740.707965][T32181] kernel_init_freeable+0x27f/0x3e0 [ 740.713687][T32181] kernel_init+0x1d/0x1d0 [ 740.718543][T32181] ret_from_fork+0x514/0xb70 [ 740.723660][T32181] ret_from_fork_asm+0x1a/0x30 [ 740.728942][T32181] [ 740.728942][T32181] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 740.736670][T32181] cpus_read_lock+0x42/0x160 [ 740.741780][T32181] static_key_slow_inc+0x12/0x30 [ 740.747261][T32181] nbd_genl_reconfigure+0x1301/0x1e80 [ 740.753148][T32181] genl_family_rcv_msg_doit+0x233/0x340 [ 740.759203][T32181] genl_rcv_msg+0x614/0x7a0 [ 740.764217][T32181] netlink_rcv_skb+0x226/0x4a0 [ 740.769498][T32181] genl_rcv+0x28/0x40 [ 740.774000][T32181] netlink_unicast+0x7bb/0x940 [ 740.779276][T32181] netlink_sendmsg+0x813/0xb40 [ 740.784554][T32181] sock_sendmsg_nosec+0x13a/0x180 [ 740.790085][T32181] ____sys_sendmsg+0x54e/0x850 [ 740.795371][T32181] ___sys_sendmsg+0x2a5/0x360 [ 740.800563][T32181] __x64_sys_sendmsg+0x1b1/0x290 [ 740.806034][T32181] do_syscall_64+0x174/0x580 [ 740.811151][T32181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.817557][T32181] [ 740.817557][T32181] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 740.825192][T32181] __mutex_lock+0x19d/0x1550 [ 740.830299][T32181] nbd_queue_rq+0x373/0x1150 [ 740.835406][T32181] blk_mq_dispatch_rq_list+0x499/0x1990 [ 740.841465][T32181] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 740.848388][T32181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 740.854969][T32181] blk_mq_run_work_fn+0x16c/0x300 [ 740.860502][T32181] process_scheduled_works+0xa8e/0x14e0 [ 740.866558][T32181] worker_thread+0xa47/0xfb0 [ 740.871660][T32181] kthread+0x388/0x470 [ 740.876244][T32181] ret_from_fork+0x514/0xb70 [ 740.881356][T32181] ret_from_fork_asm+0x1a/0x30 [ 740.886628][T32181] [ 740.886628][T32181] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 740.893828][T32181] __mutex_lock+0x19d/0x1550 [ 740.898936][T32181] nbd_queue_rq+0xc1/0x1150 [ 740.904131][T32181] blk_mq_dispatch_rq_list+0x499/0x1990 [ 740.910193][T32181] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 740.917043][T32181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 740.923539][T32181] blk_mq_run_work_fn+0x16c/0x300 [ 740.929071][T32181] process_scheduled_works+0xa8e/0x14e0 [ 740.935125][T32181] worker_thread+0xa47/0xfb0 [ 740.940227][T32181] kthread+0x388/0x470 [ 740.944846][T32181] ret_from_fork+0x514/0xb70 [ 740.949945][T32181] ret_from_fork_asm+0x1a/0x30 [ 740.955214][T32181] [ 740.955214][T32181] -> #0 (set->srcu){.+.+}-{0:0}: [ 740.962326][T32181] __lock_acquire+0x1520/0x2cf0 [ 740.967725][T32181] lock_sync+0x9d/0x120 [ 740.972403][T32181] __synchronize_srcu+0xc9/0x2f0 [ 740.977852][T32181] elevator_switch+0x1e8/0x7b0 [ 740.983132][T32181] elevator_change+0x2fa/0x480 [ 740.988406][T32181] elevator_set_default+0x375/0x440 [ 740.994113][T32181] blk_register_queue+0x3f3/0x4e0 [ 740.999718][T32181] __add_disk+0x6cb/0xe30 [ 741.004558][T32181] add_disk_fwnode+0xfb/0x4b0 [ 741.009744][T32181] nbd_dev_add+0x733/0xb60 [ 741.014680][T32181] nbd_genl_connect+0x992/0x1c10 [ 741.020137][T32181] genl_family_rcv_msg_doit+0x233/0x340 [ 741.026197][T32181] genl_rcv_msg+0x614/0x7a0 [ 741.031211][T32181] netlink_rcv_skb+0x226/0x4a0 [ 741.036489][T32181] genl_rcv+0x28/0x40 [ 741.040980][T32181] netlink_unicast+0x7bb/0x940 [ 741.046260][T32181] netlink_sendmsg+0x813/0xb40 [ 741.051546][T32181] sock_sendmsg_nosec+0x13a/0x180 [ 741.057080][T32181] ____sys_sendmsg+0x54e/0x850 [ 741.062360][T32181] ___sys_sendmsg+0x2a5/0x360 [ 741.067555][T32181] __x64_sys_sendmsg+0x1b1/0x290 [ 741.073005][T32181] do_syscall_64+0x174/0x580 [ 741.078105][T32181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.084508][T32181] [ 741.084508][T32181] other info that might help us debug this: [ 741.084508][T32181] [ 741.094734][T32181] Chain exists of: [ 741.094734][T32181] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 741.094734][T32181] [ 741.108385][T32181] Possible unsafe locking scenario: [ 741.108385][T32181] [ 741.115832][T32181] CPU0 CPU1 [ 741.121196][T32181] ---- ---- [ 741.126548][T32181] lock(&q->elevator_lock); [ 741.131129][T32181] lock(&q->q_usage_counter(io)#51); [ 741.139015][T32181] lock(&q->elevator_lock); [ 741.146112][T32181] sync(set->srcu); [ 741.149998][T32181] [ 741.149998][T32181] *** DEADLOCK *** [ 741.149998][T32181] [ 741.158126][T32181] 6 locks held by syz.0.7276/32181: [ 741.163305][T32181] #0: ffffffff9009c2a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 741.171487][T32181] #1: ffffffff9009c0e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 741.180444][T32181] #2: ffff8880280939c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0 [ 741.190791][T32181] #3: ffff88802a9d5090 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 741.200628][T32181] #4: ffff88802a9d4b18 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 741.211536][T32181] #5: ffff88802a9d5008 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 741.221382][T32181] [ 741.221382][T32181] stack backtrace: [ 741.227263][T32181] CPU: 1 UID: 0 PID: 32181 Comm: syz.0.7276 Not tainted syzkaller #0 PREEMPT(full) [ 741.227283][T32181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.227294][T32181] Call Trace: [ 741.227301][T32181] [ 741.227308][T32181] dump_stack_lvl+0xe8/0x150 [ 741.227335][T32181] print_circular_bug+0x2e1/0x300 [ 741.227353][T32181] check_noncircular+0x12e/0x150 [ 741.227395][T32181] __lock_acquire+0x1520/0x2cf0 [ 741.227416][T32181] ? check_noncircular+0xda/0x150 [ 741.227441][T32181] ? lockdep_unlock+0x5d/0xd0 [ 741.227458][T32181] ? __lock_acquire+0x13e8/0x2cf0 [ 741.227478][T32181] ? __lock_acquire+0x13e8/0x2cf0 [ 741.227499][T32181] ? __synchronize_srcu+0xb5/0x2f0 [ 741.227517][T32181] lock_sync+0x9d/0x120 [ 741.227536][T32181] ? __synchronize_srcu+0xb5/0x2f0 [ 741.227557][T32181] __synchronize_srcu+0xc9/0x2f0 [ 741.227577][T32181] ? __pfx___synchronize_srcu+0x10/0x10 [ 741.227596][T32181] ? do_raw_spin_lock+0x12b/0x2f0 [ 741.227615][T32181] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 741.227691][T32181] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 741.227712][T32181] ? synchronize_srcu+0x20a/0x260 [ 741.227732][T32181] elevator_switch+0x1e8/0x7b0 [ 741.227750][T32181] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 741.227774][T32181] elevator_change+0x2fa/0x480 [ 741.227792][T32181] ? do_raw_spin_unlock+0xf5/0x210 [ 741.227810][T32181] elevator_set_default+0x375/0x440 [ 741.227830][T32181] ? __pfx_elevator_set_default+0x10/0x10 [ 741.227852][T32181] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 741.227905][T32181] ? blk_crypto_sysfs_register+0x11c/0x170 [ 741.227971][T32181] blk_register_queue+0x3f3/0x4e0 [ 741.227995][T32181] __add_disk+0x6cb/0xe30 [ 741.228012][T32181] add_disk_fwnode+0xfb/0x4b0 [ 741.228028][T32181] nbd_dev_add+0x733/0xb60 [ 741.228053][T32181] ? __pfx_nbd_dev_add+0x10/0x10 [ 741.228082][T32181] ? bpf_lsm_capable+0x9/0x20 [ 741.228101][T32181] ? security_capable+0x7e/0x2c0 [ 741.228171][T32181] ? radix_tree_lookup+0x25c/0x290 [ 741.228217][T32181] nbd_genl_connect+0x992/0x1c10 [ 741.228242][T32181] ? __pfx_nbd_genl_connect+0x10/0x10 [ 741.228263][T32181] ? rcu_is_watching+0x15/0xb0 [ 741.228285][T32181] ? trace_kmalloc+0x2a/0xf0 [ 741.228305][T32181] ? __kmalloc_noprof+0x396/0x720 [ 741.228324][T32181] ? __nla_parse+0x40/0x60 [ 741.228352][T32181] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 741.228373][T32181] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 741.228395][T32181] genl_family_rcv_msg_doit+0x233/0x340 [ 741.228416][T32181] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.228437][T32181] ? __lock_acquire+0x683/0x2cf0 [ 741.228460][T32181] genl_rcv_msg+0x614/0x7a0 [ 741.228479][T32181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.228496][T32181] ? __pfx_nbd_genl_connect+0x10/0x10 [ 741.228522][T32181] netlink_rcv_skb+0x226/0x4a0 [ 741.228543][T32181] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.228561][T32181] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.228587][T32181] ? down_read+0x2be/0x330 [ 741.228609][T32181] genl_rcv+0x28/0x40 [ 741.228624][T32181] netlink_unicast+0x7bb/0x940 [ 741.228647][T32181] netlink_sendmsg+0x813/0xb40 [ 741.228673][T32181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.228697][T32181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 741.228714][T32181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.228735][T32181] sock_sendmsg_nosec+0x13a/0x180 [ 741.228753][T32181] ____sys_sendmsg+0x54e/0x850 [ 741.228776][T32181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.228801][T32181] ? import_iovec+0x73/0xa0 [ 741.228850][T32181] ___sys_sendmsg+0x2a5/0x360 [ 741.228877][T32181] ? __lock_acquire+0x683/0x2cf0 [ 741.228898][T32181] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.228920][T32181] ? futex_wait+0x2a2/0x390 [ 741.228956][T32181] ? __fget_files+0x2a/0x420 [ 741.228976][T32181] ? __fget_files+0x3a2/0x420 [ 741.228998][T32181] __x64_sys_sendmsg+0x1b1/0x290 [ 741.229020][T32181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.229048][T32181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.229064][T32181] do_syscall_64+0x174/0x580 [ 741.229084][T32181] ? trace_irq_disable+0x3b/0x140 [ 741.229103][T32181] ? clear_bhb_loop+0x40/0x90 [ 741.229120][T32181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.229135][T32181] RIP: 0033:0x7fba05d9de59 [ 741.229151][T32181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.229166][T32181] RSP: 002b:00007fba06b95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.229183][T32181] RAX: ffffffffffffffda RBX: 00007fba06025fa0 RCX: 00007fba05d9de59 [ 741.229195][T32181] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 741.229205][T32181] RBP: 00007fba05e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 741.229216][T32181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.229225][T32181] R13: 00007fba06026038 R14: 00007fba06025fa0 R15: 00007ffd4ee7b058 [ 741.229243][T32181] [ 741.710545][T32190] sctp: [Deprecated]: syz.1.7277 (pid 32190) Use of int in max_burst socket option. [ 741.710545][T32190] Use struct sctp_assoc_value instead [ 741.793102][T32188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7276'. [ 741.809670][T32188] nbd: device at index 64 is going down [ 741.897746][T32036] udevd[32036]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 741.910631][T32193] udevd[32193]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 747.117898][ T1317] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 749.197655][ T5630] Bluetooth: hci4: command 0x0406 tx timeout