last executing test programs: 9.514360525s ago: executing program 0 (id=2704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8", 0x4d}], 0x1, 0x0, 0x1148}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18) r3 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) pipe(&(0x7f0000000180)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140)={0x2, 'bridge0\x00', {0x30}, 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x200}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) (async) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8", 0x4d}], 0x1, 0x0, 0x1148}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18) (async) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) (async) pipe(&(0x7f0000000180)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140)={0x2, 'bridge0\x00', {0x30}, 0x8}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'geneve0\x00', 0x200}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) 9.28346977s ago: executing program 0 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x50}}, 0xc080) 9.011928363s ago: executing program 0 (id=2709): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) (async) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0xe000}, 0x5}], 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400080, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 32) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) (async, rerun: 32) unshare(0x2020400) (async, rerun: 32) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) 8.712213784s ago: executing program 0 (id=2714): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x35}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.510293996s ago: executing program 0 (id=2718): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r4, &(0x7f0000000100)=""/60, 0x3c, 0x140, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000400)="b9ffe4306844268cb89914f00800e2c65db7b2e96a07df741f051a1d4ab600df7dfa", 0x0, 0x80000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.108683045s ago: executing program 0 (id=2736): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x8, 0xfa04, 0xd0, 0x6c02, 0x1a0, 0x194, 0x194, 0x1a0, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xd0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x1, 0x33, 0x5, 0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x1}, {0x4, 0x4}, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x7, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000)=0x6, 0x4) 2.790850723s ago: executing program 1 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="7743a6ed04b0328226c34fd8bc95d363b2714428c33a4c117e684ba11950f3190f644a767f19aebaf279b532016a6b3fe469247d0d710350d85c", 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="24000000240035b900000008000000000700000006000400", @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0xceef82a0aa724dc3) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c00000000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) 2.649106417s ago: executing program 1 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000240)=0x10003, 0xfffffffffffffd66) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x5}, 0xffffffffffffffff, {[0x3ffffc, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x2]}}, 0x5c) r3 = socket(0x1e, 0x4, 0x0) unshare(0x22020400) r4 = socket(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="20000000680000022abd7000fedbde250a000000220000000400040004000b00"], 0x20}, 0x1, 0x0, 0x0, 0x4810}, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6400000002060500000000000000000000000001142b052cf86cd6fe5a9c05db0007800800080000000089080006400000012505000100060000000500050002000000050004000200000009000200000015000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) r9 = accept$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) ioctl$int_in(r9, 0x5452, &(0x7f0000000140)=0x9) recvmmsg(r7, &(0x7f0000000280), 0x0, 0x10142, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r10, 0x27, 0x22, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351f20c83a50ee033cf5f0759cfc67cb3a4", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRESOCT=r2, @ANYRES64=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) 2.13932492s ago: executing program 3 (id=2770): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x10700, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x40000008}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000000c0)=0x1, 0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x1004}, {r2, 0x2006}], 0x2, 0x0, 0x0, 0x0) 1.996449201s ago: executing program 1 (id=2773): socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0x5}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfc1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x8) r4 = socket(0x21, 0x80000, 0x0) r5 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0xffff, 0x4) write(r4, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=""/17, 0x11}}], 0x1, 0x2002, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)={0x260, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x13df47b}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8d64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf25}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbc}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffec2d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5e9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x26054c1c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4ea}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x802}, 0x80a1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000880)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000980)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) r11 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000001300)=@broute={'broute\x00', 0x20, 0x5, 0x856, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000a80], 0x0, &(0x7f00000002c0), &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11]}, 0x846) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.928009335s ago: executing program 3 (id=2774): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f00000001c0)={@val={0x0, 0x17}, @void, @eth={@broadcast, @empty, @val={@void, {0x8100, 0x6, 0x0, 0x5}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x84, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @private=0xa010102}}}}}}, 0x2a) 1.811934308s ago: executing program 4 (id=2775): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="10797fcd6cd957d2b903c6bf4670c8274986f09ff075475e4bd6e43be1712bf8b4dc00"/48, 0x30) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xe}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.562356922s ago: executing program 3 (id=2777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x2}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004020}, 0x44040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xffffffffffffff9f, 0x912c94b97690a017, &(0x7f00000002c0)="c35fb080cd21d308098ee68886ddff57ef61be24317112f824d17d94600da47d1ac9552009d8591666ce94c36651db2f5025e74531fd23d09f47934a0db07e140c844f26e729cb20747d5726ed469cce6555b44528ec1ac34aeb2131cf024f725b42cf73a96f6ccbd4731109cac8895b1b0581ced936bb1b36eb5eb1a9fbe3b19f710f606cd8bd125594798de386fbf915baa8cc16118cb6", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x1ff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f0000000040), 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabbb698159419ceb9480e5da5580f0186dd60122d9200283afffe8000f60b00000000000000000000bbff0200000000000000000000000000018900907800000000fc01000000000000000000000000000100000000000000000000ffffac1414aa"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}], 0x1, 0x24040800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000180)={r9, 0x1}, 0x8) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, &(0x7f0000000680)=""/73, &(0x7f00000004c0)=0x49) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="0204d14a00ea0e0000100000001eafbcea06e105000000000000001104ee16064efb96d78207f0ffff74c43824cee806279a4cf8eeec80d28e8a88eec779bf572c82f76d46b5c0808fccfe62bf737fdc4544e1", 0x53}, {&(0x7f0000000380)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51661e4124fcea96a87fa10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3bbf6a08bb2ef30f60a36e46adeebd494b222d60881a63f65d968e05b274106e421dbd8ad3f536e98bf8b773fd816fd534638a8ff8007cdfaa1fbbecbc1f5dad2e0bc498a196c8933c827a", 0x94}, {&(0x7f00000001c0)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000040)="df3b46a13300"/18, 0x12}, {&(0x7f0000001440)="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", 0xe9a}], 0x5}, 0x24040041) 1.291888614s ago: executing program 1 (id=2778): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="052b33d061000016300012800b0001006272696467650000200002800c002efdffff"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) (async) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x4a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) socket(0x26, 0x6, 0xcf9) (async) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) (async, rerun: 32) r8 = socket$inet(0x2, 0x802, 0x1) (rerun: 32) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) write(r8, &(0x7f0000000080)="08008edf773c8000", 0xfd) 1.289925575s ago: executing program 4 (id=2780): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000c4fabd490165c2636d0b93048d3d8fe674189c46b3dabcdac1bb475c67e98d076cd0517f714d817e4f06c7737f2b959763ddf757b6bf4be6cfeeaab450f9e5a185f78aadf0339dd620f04af0255bc48dd56c0bc0657440c2"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x42000000) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x220, 0x0, 0x308, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) 1.27313153s ago: executing program 3 (id=2781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff0000000059aeff170000000000000000fe80000000000000000000000000001dfffc0000000100000a00e0a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000ac1414aa0000000000000000000000003c000000000000000a000a00fe8000000000000000000000000000aae0000002000000000000000000000000fe880000000000000000000000000101000000000000000000000000000000012b010000043500000a000200"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7630, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x0, 0x1, 0x1, 0xe, 0x4, 0x20, 0x1}, @jmp={0x5, 0x1, 0x8, 0x6, 0x6, 0x50, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000200)={0x9, 0x1, {0x5, @usage=0xff, 0x0, 0x2, 0x9, 0x4, 0x6, 0x2, 0x400, @usage=0xffffffffffffff88, 0x932, 0x1, [0xd, 0x10001, 0x10, 0x400, 0xfffffffffffffffd]}, {0xde65, @struct={0x9, 0x9}, 0x0, 0x2, 0x1, 0x6, 0x6, 0x6, 0x7, @struct={0x8, 0x77}, 0x5, 0x5, [0xfee, 0x883, 0x3, 0x8, 0x4bb, 0x6]}, {0x2, @struct={0x80, 0xc}, 0x0, 0x9, 0x10001, 0x0, 0x4, 0x7, 0x0, @struct={0x3, 0x9}, 0x1, 0x6, [0x100000001, 0x8, 0xffff, 0x1, 0x1, 0x6]}, {0xb51, 0x2, 0x9}}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000e80)={0x2, 0x10000, @start={r4, 0x1, "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", "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"}, [0xd232, 0xc4aa, 0x282, 0x5, 0x3, 0x1, 0x8, 0x0, 0x3d, 0x2, 0x8, 0x8000000000000001, 0xfff, 0x1, 0x5, 0xd, 0x7, 0x6, 0x94e, 0x1ff, 0x8, 0x9, 0x800, 0x442, 0x0, 0x8, 0x3, 0x8dc, 0x7, 0x8, 0x7df0, 0x6202, 0xfffffffffffffff9, 0x8, 0x4, 0x80000001, 0x347, 0x7, 0x16dd, 0x4, 0x8, 0x3aa7, 0x1, 0x0, 0x376, 0x2, 0x7ff, 0x100000001, 0x2a, 0x4, 0x7479, 0xffffffff, 0x6, 0x3, 0x7fff, 0x4, 0x100, 0xfffffffffffffff9, 0x8, 0xd82, 0x7, 0xfffffffffffffff7, 0x8, 0x7]}) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000008c0)=@allocspi={0x104, 0x16, 0x1, 0x70bd28, 0x25dfdbfc, {{{@in=@multicast1, @in=@remote, 0x4e21, 0x3, 0x4e22, 0x10, 0x2, 0x80, 0x80, 0x3b}, {@in=@remote, 0x4d4, 0x32}, @in6=@rand_addr=' \x01\x00', {0x373a, 0x4, 0x6, 0xab8, 0x8, 0x1, 0x4, 0x3}, {0x22, 0xd2, 0x4, 0x3}, {0x0, 0xce, 0x7}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x2c}, 0x1, 0x2}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r2, 0x36, 0x4, 0x0, @void, @value=r2}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 1.081162366s ago: executing program 3 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000400)) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000040)='\x00', 0xc600, &(0x7f0000000180)={@align=0x8, {0x2, 0x4, 0x8, 0x7b000000}}, 0x7, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0xfffffffa}, {[0xbf, 0x4, 0x10, 0xbf0]}, 0x7, 0x9c, &(0x7f0000000240)=""/156}) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000380)=0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, 0x5}, 0x0, {[0x3ffffc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2]}}, 0x5c) socket(0x1e, 0x4, 0x0) close(0x3) 1.036522147s ago: executing program 1 (id=2783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/403], 0x10c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000140)=0xb053, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000b00)=0x40) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r3 = accept(r2, &(0x7f0000000380)=@generic, &(0x7f0000000400)=0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) write(r0, &(0x7f0000000000)='\x00', 0x35) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket(0x1d, 0x2, 0x6) splice(r5, 0x0, r6, 0x0, 0x1100000000f336, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x1f, 0x0, 0x0) 1.016616362s ago: executing program 4 (id=2784): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000080000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000b40)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) listen(r1, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000000000000050000000900020073797a3200000000080004400000000009000100"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) 835.753376ms ago: executing program 2 (id=2786): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e", 0x15}], 0x1}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x5}, {0x6, 0xfd}]}) write$ppp(r0, &(0x7f0000000140)="1e08", 0x23) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x709) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 752.372686ms ago: executing program 4 (id=2787): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x8001, 0x4) (async) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @null, @rose, @netrom, @null, @bcast, @null, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000100)) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000140)='\'\x00', 0x200000, &(0x7f0000000180)={@align=0xf, {0x1f20, 0x9, 0x3, 0x9}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x3}) (rerun: 32) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000340)={@l2={0x1f, 0xf, @any, 0x1000, 0x2}, {&(0x7f0000000280)=""/80, 0x50}, &(0x7f0000000300), 0x50}, 0xa0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) (async) r4 = gettid() sendmsg$nl_route(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@bridge_setlink={0x28, 0x13, 0x100, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x41009, 0x20}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040041) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000540)={0x0, 0x0, "af7fdd5ebfcba4bc3a21ca271faf4dcd"}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r2) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x138, r6, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3061}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x355b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x575}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4044001}, 0x40) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880dd}, 0x8094) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'gre0\x00', 0x0, 0x8, 0x80, 0x7, 0x7fffffff, {{0x9, 0x4, 0x2, 0xb, 0x24, 0x68, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x20}, {[@ssrr={0x89, 0xf, 0x61, [@multicast1, @multicast1, @private=0xa010100]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@getstats={0x1c, 0x5e, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x5}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@ipv6_getroute={0x28, 0x1a, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x14, 0x6, 0xfc, 0x0, 0xfd, 0x1, 0x100}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x4b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48814}, 0x24008810) (async, rerun: 64) r9 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000bc0)={{{@in6=@ipv4={""/10, ""/2, @multicast2}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000cc0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000d00)={{{@in=@multicast2, @in=@rand_addr=0x64010100, 0x4e22, 0x1000, 0x4e22, 0x9, 0x2, 0x20, 0x80, 0x3b, r8, r10}, {0x100, 0x6, 0x4f3f, 0x9, 0x7fff, 0x8000, 0x2, 0x65}, {0x8, 0x4, 0x2, 0xf}, 0x8, 0x6e6bbb, 0x0, 0x3, 0x2, 0x2}, {{@in6=@private2, 0x4d6, 0x6c}, 0x2, @in=@loopback, 0x3503, 0x2, 0x1, 0xf9, 0x8, 0x80, 0x3}}, 0xe8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000e00)) r11 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'syztnl1\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x10, 0xb, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7800, 0x700, 0xd4, 0x5}}) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xcb, &(0x7f0000000f00)={0xffffffffffffffff, 0x0, 0x0, r12, 0xf7}, 0xc) bind$netrom(r2, &(0x7f0000000f40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x34, r13, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe0}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24040000) 630.442625ms ago: executing program 2 (id=2788): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x81}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 571.65453ms ago: executing program 4 (id=2789): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003640)={@cgroup, 0xffffffffffffffff, 0x16, 0x20}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x35f9affe, 0x6}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2f, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x0, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x80000000}}, 0x20) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x14, 0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 480.777559ms ago: executing program 2 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000008000000000000d0000009111760000000000958ad1e1986d3c5047aa02aa9f7386257f22428232c8c8ce1b9dbe83205a98d1b8146fc1386389898466606eb085f637c1f634d49b0fe59c740c4a4a25d15ee6c68f35aad3bf08993b7ce274b32c6753ff655f7c6976c64bcf3d8c8d85b7d59e3ab794bb18d7bf3dc7cd614a6a06e86419733e7b3a13ea628127"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000a00000000000000000000fa00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000100000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'dvmrp0\x00', @ifru_map={0xffffffffffffffff, 0xc381, 0x7, 0x1, 0x8, 0x2}}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) socketpair(0x25, 0x4, 0xffff8000, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000001d00)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000005c0)=""/142, 0x8e}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)=""/64, 0x40}, {&(0x7f0000001a00)=""/70, 0x46}, {&(0x7f0000001a80)=""/88, 0x58}, {&(0x7f0000001b00)=""/44, 0x2c}, {&(0x7f0000001b40)=""/169, 0xa9}, {&(0x7f0000001c00)=""/15, 0xf}], 0x8, &(0x7f0000001cc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x10023, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 32) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000001d80)=0x8000, 0x4) socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}}, 0x884) (async) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) 480.485716ms ago: executing program 3 (id=2791): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9df}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket(0x1d, 0x80802, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0xa16c2832e573d1ad) 367.353899ms ago: executing program 4 (id=2792): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/8, 0x8, 0x2, 0x0, 0x0) 231.942505ms ago: executing program 2 (id=2793): r0 = socket(0xa, 0x1, 0x84) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x54, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8951}]}, 0x54}}, 0x4000000) 220.252846ms ago: executing program 2 (id=2794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000002b000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000002000000000000000000000000000000000000000000000000080000000000a15d5eb94c2c888f0000020000000000100000010000000000c4000500ac1414aa000000000000000000000000000000003300"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 128.22688ms ago: executing program 2 (id=2795): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xf4280f8a05a83c7b}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000700000061117b000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111c9000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x4c, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=2796): syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010101, @multicast2}, "0018630100000003"}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600008b1f030000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x802) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r6, @ANYBLOB="e7b2dcc0907f191bccc7ba7ea8db34094f34c84d89fc5e8652457ee69b9ab1a224c2590e1cfa57d14cd2bcc7ef47a9636085ea403e978a3b32f8491144b129f3f30ee6113cf8de651cd1fd88e1e1523817bbc453d5a32441a50a71603dd5c660391842067eb5b17903be7e35a0cd8e18c0d809d79e630ec80709e197016643ef3dd2ebaa2a8d78faab7a32fbec1bdc14c4c72d0714", @ANYRESHEX], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @multicast1, {[@generic={0x7, 0xf, "04760b1e4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x4, 0xb}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a00000004000000080100000c"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f00000005c0), 0x0}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) kernel console output (not intermixed with test programs): identity 4711 [ 182.165086][ T9617] tipc: Enabled bearer , priority 0 [ 182.238355][ T9626] bridge_slave_0 (unregistering): left allmulticast mode [ 182.245531][ T9626] bridge_slave_0 (unregistering): left promiscuous mode [ 182.252911][ T9626] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.334252][ T9631] netlink: 'syz.4.997': attribute type 13 has an invalid length. [ 182.566200][ T9649] __nla_validate_parse: 5 callbacks suppressed [ 182.566236][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 183.091832][ T9672] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.1012'. [ 183.289169][ T5947] tipc: Node number set to 134418688 [ 183.490583][ T9690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1017'. [ 183.630820][ T9688] lo: Caught tx_queue_len zero misconfig [ 183.877520][ T9705] team0 (unregistering): Failed to send options change via netlink (err -105) [ 183.896592][ T9705] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 183.908431][ T9705] team0 (unregistering): Port device team_slave_0 removed [ 183.920394][ T9705] team0 (unregistering): Failed to send options change via netlink (err -105) [ 183.940920][ T9705] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 183.965433][ T9705] team0 (unregistering): Port device team_slave_1 removed [ 184.356580][ T9719] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1024'. [ 184.657490][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.811411][ T9723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.906036][ T9739] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 184.963075][ T9739] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.126630][ T9751] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 185.366831][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1038'. [ 185.377927][ T9754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1037'. [ 185.431478][ T9759] smc: net device wlan0 applied user defined pnetid SYZ0 [ 185.772932][ T9766] bridge6: entered promiscuous mode [ 185.819848][ T9766] bridge6: entered allmulticast mode [ 185.854166][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 185.911303][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1046'. [ 186.019416][ T9781] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1048'. [ 186.441376][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 186.905547][ T9808] IPv6: NLM_F_REPLACE set, but no existing node found! [ 186.929764][ T9803] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 187.229666][ T9812] netlink: 'syz.1.1058': attribute type 33 has an invalid length. [ 187.267395][ T9812] `: renamed from team0 (while UP) [ 187.364619][ T9823] netlink: 'syz.2.1061': attribute type 13 has an invalid length. [ 187.379791][ T9824] netlink: 'syz.2.1061': attribute type 13 has an invalid length. [ 187.548643][ T9374] bond7: (slave ip6gretap1): link status up again after 0 ms [ 187.557409][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 187.677238][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 187.797227][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 187.879722][ T9840] syzkaller1: entered promiscuous mode [ 187.886502][ T9840] syzkaller1: entered allmulticast mode [ 187.947047][ T9812] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.041075][ T9845] tipc: Resetting bearer [ 188.137269][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 188.258349][ T180] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 188.367211][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 188.448952][ T9858] syzkaller0: entered promiscuous mode [ 188.478177][ T9858] syzkaller0: entered allmulticast mode [ 188.534706][ T5947] IPVS: starting estimator thread 0... [ 188.557490][ T180] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 188.627309][ T9864] IPVS: using max 28 ests per chain, 67200 per kthread [ 188.703078][ T9858] __nla_validate_parse: 5 callbacks suppressed [ 188.703098][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1071'. [ 188.738284][ T9865] tipc: Started in network mode [ 188.754602][ T9865] tipc: Node identity 2a20bd5825d6, cluster identity 4711 [ 188.778773][ T9865] tipc: Enabled bearer , priority 0 [ 188.815512][ T9856] tipc: Resetting bearer [ 188.876407][ T9856] tipc: Disabling bearer [ 188.967450][ T180] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.167208][ T6182] net_ratelimit: 8 callbacks suppressed [ 190.167227][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.193905][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 190.256669][ T9930] bond9: option updelay: invalid value (18446744072924056005) [ 190.269199][ T9930] bond9: option updelay: allowed values 0 - 2147483647 [ 190.281910][ T9930] bond9 (unregistering): Released all slaves [ 190.322162][ T9929] ipvlan2: entered promiscuous mode [ 190.327687][ T9929] ipvlan2: entered allmulticast mode [ 190.333007][ T9929] gretap0: entered allmulticast mode [ 190.357356][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.436720][ T9941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 190.452981][ T9941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 190.477283][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.589434][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.697282][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.807216][ T180] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 190.970682][ T180] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 191.098831][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 191.237615][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 191.347228][ T6182] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 192.464269][ T9902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.666315][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1094'. [ 192.877379][ T9970] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 192.898865][ T9970] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 193.059328][ T9981] netlink: 'syz.4.1103': attribute type 13 has an invalid length. [ 193.097935][ T9981] netlink: 'syz.4.1103': attribute type 17 has an invalid length. [ 193.124035][ T9986] netlink: 'syz.1.1105': attribute type 21 has an invalid length. [ 193.211679][ T9991] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 193.228189][ T9991] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1105'. [ 193.366933][ T9981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.392198][ T9981] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.404674][ T180] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.423088][ T180] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.437258][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 193.447791][ T9992] tunl0: Caught tx_queue_len zero misconfig [ 193.521956][ T180] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.594121][ T180] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 193.708730][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1113'. [ 193.866847][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 193.909164][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 193.974519][T10028] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 193.985630][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'. [ 194.270184][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434479][T10052] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1127'. [ 194.509073][T10057] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1126'. [ 194.667530][T10062] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.690838][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 195.237294][ T6171] net_ratelimit: 28 callbacks suppressed [ 195.237315][ T6171] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 195.400842][T10053] lo: Caught tx_queue_len zero misconfig [ 195.550634][T10098] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 195.571578][T10101] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 195.604403][T10101] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1134'. [ 195.617479][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 195.656952][T10098] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1134'. [ 195.727272][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 195.837246][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 195.968646][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 196.077920][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 196.204912][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 196.225496][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 196.368311][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 196.479239][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 196.610097][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 197.550553][T10168] can: request_module (can-proto-0) failed. [ 198.199137][T10202] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.261730][T10251] __nla_validate_parse: 5 callbacks suppressed [ 199.261751][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 199.404799][T10256] netlink: 'syz.1.1174': attribute type 8 has an invalid length. [ 199.412710][T10256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 199.430329][T10256] bond0: entered promiscuous mode [ 199.435527][T10256] bond_slave_0: entered promiscuous mode [ 199.442006][T10256] bond_slave_1: entered promiscuous mode [ 199.450062][T10256] gretap0: entered promiscuous mode [ 199.458986][T10256] gretap0: left promiscuous mode [ 199.465640][T10256] bond0: left promiscuous mode [ 199.470939][T10256] bond_slave_0: left promiscuous mode [ 199.478342][T10256] bond_slave_1: left promiscuous mode [ 199.645883][T10262] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 199.667794][T10260] netlink: 'syz.1.1175': attribute type 1 has an invalid length. [ 199.685140][T10260] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1175'. [ 199.727078][T10262] bond8: (slave geneve4): making interface the new active one [ 199.790449][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1176'. [ 199.801489][T10262] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 199.827541][ T3020] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 199.846656][ T3020] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 199.863107][T10265] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.981245][ T3020] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 200.024797][ T6183] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 200.142570][T10276] tipc: Started in network mode [ 200.159807][T10276] tipc: Node identity 4274876f85f3, cluster identity 4711 [ 200.171497][T10276] tipc: Enabled bearer , priority 0 [ 200.265879][T10276] syzkaller0: entered promiscuous mode [ 200.271961][T10276] syzkaller0: entered allmulticast mode [ 200.279151][T10276] tipc: Resetting bearer [ 200.286796][T10274] tipc: Resetting bearer [ 200.810540][T10292] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 200.937700][T10296] net_ratelimit: 29 callbacks suppressed [ 200.937718][T10296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.463356][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 201.463439][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 201.469485][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 202.121437][T10274] tipc: Disabling bearer [ 202.162516][T10292] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.188963][T10302] tipc: Started in network mode [ 202.198862][T10302] tipc: Node identity ba5a4b0056cd, cluster identity 4711 [ 202.218111][T10302] tipc: Enabled bearer , priority 0 [ 202.233194][ T7964] tipc: Node number set to 3347548015 [ 202.241966][T10303] syzkaller0: entered promiscuous mode [ 202.279659][T10303] syzkaller0: entered allmulticast mode [ 202.300252][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 202.365482][T10311] tipc: Resetting bearer [ 202.441512][T10311] tipc: Disabling bearer [ 202.487659][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 202.615653][T10347] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1196'. [ 202.627232][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 202.661291][T10347] IPv6: sit2: Disabled Multicast RS [ 202.671937][T10347] sit2: entered allmulticast mode [ 202.757506][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 202.870858][T10356] batadv_slave_0: entered promiscuous mode [ 202.906905][T10340] syzkaller1: entered promiscuous mode [ 202.917211][T10340] syzkaller1: entered allmulticast mode [ 202.989206][T10359] batadv_slave_0: left promiscuous mode [ 202.997315][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 203.107227][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 203.247463][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 203.259779][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 203.368386][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 203.494048][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 203.684703][T10391] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 203.958595][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'. [ 204.018936][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 204.069006][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'. [ 204.111504][T10403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'. [ 204.936083][T10437] sctp: [Deprecated]: syz.1.1221 (pid 10437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.936083][T10437] Use struct sctp_sack_info instead [ 204.956445][T10436] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1222'. [ 205.089310][T10441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 205.098614][T10441] bond0: Unable to set up delay as MII monitoring is disabled [ 205.154245][T10447] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 205.251854][T10451] netlink: 'syz.3.1227': attribute type 4 has an invalid length. [ 205.405017][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1230'. [ 206.178716][T10492] bridge0: port 3(vlan2) entered blocking state [ 206.187025][T10492] bridge0: port 3(vlan2) entered disabled state [ 206.207571][T10492] vlan2: entered allmulticast mode [ 206.212744][T10492] dummy0: entered allmulticast mode [ 206.250787][T10492] vlan2: entered promiscuous mode [ 206.274998][T10492] dummy0: entered promiscuous mode [ 206.337354][ T6181] net_ratelimit: 18 callbacks suppressed [ 206.337376][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 206.406516][T10507] veth0: entered promiscuous mode [ 206.412759][T10507] bond0: entered promiscuous mode [ 206.431326][T10507] bond_slave_0: entered promiscuous mode [ 206.463719][T10507] bond_slave_1: entered promiscuous mode [ 206.491080][T10507] batadv0: entered promiscuous mode [ 206.518831][T10506] bond0: left promiscuous mode [ 206.535481][T10506] bond_slave_0: left promiscuous mode [ 206.558251][T10506] bond_slave_1: left promiscuous mode [ 206.579271][T10506] batadv0: left promiscuous mode [ 206.607884][T10506] veth0: left promiscuous mode [ 206.623700][T10512] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1244'. [ 206.633598][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 206.638223][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 206.808629][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 206.846888][T10533] netlink: 'syz.3.1250': attribute type 1 has an invalid length. [ 206.917270][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 207.016118][T10536] vlan3: entered allmulticast mode [ 207.033947][T10536] bond0: entered allmulticast mode [ 207.040634][T10537] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1251'. [ 207.051590][T10536] bond_slave_0: entered allmulticast mode [ 207.072446][T10536] bond_slave_1: entered allmulticast mode [ 207.079076][T10536] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 207.088512][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 207.168046][T10537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.207464][T10537] bond_slave_0: left allmulticast mode [ 207.253201][T10537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.271504][T10537] bond_slave_1: left allmulticast mode [ 207.282300][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 207.286595][T10537] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 207.317683][T10537] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 207.343733][T10537] bond0 (unregistering): Released all slaves [ 207.377421][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 207.517488][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 207.574180][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.604017][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.625090][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.653753][T10553] bond9: Unable to set up delay as MII monitoring is disabled [ 207.686333][T10553] bond9 (unregistering): Released all slaves [ 208.298456][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 208.310818][T10584] syzkaller0: entered promiscuous mode [ 208.316327][T10584] syzkaller0: entered allmulticast mode [ 208.401360][T10586] netlink: 'syz.2.1267': attribute type 2 has an invalid length. [ 208.604059][T10595] bond8: (slave syz_tun): Releasing backup interface [ 208.647074][T10595] team0: Port device syz_tun added [ 208.744064][T10599] team0: Port device syz_tun removed [ 208.779234][T10599] bond0: (slave batadv0): Releasing backup interface [ 208.801369][T10599] bridge_slave_0: left allmulticast mode [ 208.817374][T10599] bridge_slave_0: left promiscuous mode [ 208.825546][T10599] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.849298][T10599] bridge_slave_1: left allmulticast mode [ 208.861766][T10599] bridge_slave_1: left promiscuous mode [ 208.871648][T10605] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1272'. [ 208.879470][T10599] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.904960][T10599] bond0: (slave bond_slave_0): Releasing backup interface [ 208.931475][T10599] bond0: (slave bond_slave_1): Releasing backup interface [ 208.954288][T10599] team0: Port device team_slave_0 removed [ 208.965968][T10599] team0: Port device team_slave_1 removed [ 208.977348][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.985678][T10599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.008489][T10599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.317797][T10623] xt_recent: Unsupported userspace flags (000000b1) [ 209.364188][T10626] netlink: 'syz.3.1279': attribute type 3 has an invalid length. [ 209.372754][T10626] netlink: 772 bytes leftover after parsing attributes in process `syz.3.1279'. [ 209.390250][T10626] netlink: 'syz.3.1279': attribute type 3 has an invalid length. [ 209.835679][T10639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.869129][T10639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.996864][T10656] vcan1: entered promiscuous mode [ 210.002219][T10656] vcan1: entered allmulticast mode [ 210.016188][T10650] syzkaller1: entered promiscuous mode [ 210.022038][T10650] syzkaller1: entered allmulticast mode [ 210.081474][T10639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.092195][T10639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.179685][T10639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.190466][T10639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.285417][T10639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.299100][T10639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.379603][T10664] __nla_validate_parse: 3 callbacks suppressed [ 210.379624][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1287'. [ 210.434227][T10667] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 210.539973][ T6181] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.548427][ T6181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.566131][T10669] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1289'. [ 210.592284][ T6183] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.602871][ T6183] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.639452][ T6183] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.654430][ T6183] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.691316][ T6183] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.708133][ T6183] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.834071][T10678] netlink: 'syz.1.1293': attribute type 2 has an invalid length. [ 210.835982][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 210.844611][T10678] netlink: 95 bytes leftover after parsing attributes in process `syz.1.1293'. [ 210.868795][T10683] netlink: 'syz.3.1295': attribute type 12 has an invalid length. [ 210.882353][T10683] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1295'. [ 210.939686][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.979601][T10689] tipc: Can't bind to reserved service type 2 [ 211.012603][T10692] ip6t_srh: unknown srh match flags 4000 [ 211.181514][T10701] erspan0: entered promiscuous mode [ 211.316159][T10712] netlink: 'syz.1.1304': attribute type 10 has an invalid length. [ 211.328339][T10712] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1304'. [ 211.396437][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1303'. [ 211.451031][T10712] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 211.527290][ T6181] net_ratelimit: 54 callbacks suppressed [ 211.527310][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 211.648236][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 211.787380][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 211.860971][T10730] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 211.997707][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 212.063167][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.130359][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 212.177306][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 212.233786][T10748] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 212.267244][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 212.286957][ T30] audit: type=1804 audit(1775036466.946:3): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1312" name="/newroot/291/memory.events" dev="tmpfs" ino=1508 res=1 errno=0 [ 212.366543][ T30] audit: type=1800 audit(1775036466.946:4): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1312" name="memory.events" dev="tmpfs" ino=1508 res=0 errno=0 [ 212.455574][ T30] audit: type=1804 audit(1775036466.956:5): pid=10748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1312" name="/newroot/291/memory.events" dev="tmpfs" ino=1508 res=1 errno=0 [ 212.489522][T10759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1315'. [ 212.503581][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 212.511316][T10761] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1315'. [ 212.617412][T10765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1316'. [ 212.647478][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 212.981257][T10788] xt_bpf: check failed: parse error [ 212.986926][T10787] xt_bpf: check failed: parse error [ 212.993763][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 213.013459][T10780] syzkaller1: entered promiscuous mode [ 213.027537][T10780] syzkaller1: entered allmulticast mode [ 213.813824][T10828] `: Port device team_slave_0 removed [ 213.849254][T10831] geneve5: entered promiscuous mode [ 214.388351][T10875] netlink: 'syz.1.1341': attribute type 2 has an invalid length. [ 215.489043][T10924] netlink: 'syz.3.1349': attribute type 4 has an invalid length. [ 215.595731][T10926] __nla_validate_parse: 9 callbacks suppressed [ 215.595750][T10926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1350'. [ 215.815599][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 215.868478][T10936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 216.218957][T10950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1355'. [ 216.265947][T10950] TCP: TCP_TX_DELAY enabled [ 216.332279][T10956] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1356'. [ 216.343322][T10956] netlink: 245 bytes leftover after parsing attributes in process `syz.1.1356'. [ 216.516650][T10960] ipvlan2: entered promiscuous mode [ 216.549775][T10960] ipvlan2: entered allmulticast mode [ 216.575862][T10960] team0: entered allmulticast mode [ 216.586821][T10960] team_slave_0: entered allmulticast mode [ 216.612139][T10960] team_slave_1: entered allmulticast mode [ 216.652559][T10960] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 216.668419][T10960] team0: Device ipvlan2 is already an upper device of the team interface [ 216.763245][T10980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1362'. [ 216.857261][ T6181] net_ratelimit: 26 callbacks suppressed [ 216.857282][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 216.986978][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.040794][T10992] syzkaller0: entered promiscuous mode [ 217.046334][T10992] syzkaller0: entered allmulticast mode [ 217.093821][T10994] syz_tun: mtu greater than device maximum [ 217.217342][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.227355][T10998] bond1: option mode: unable to set because the bond device has slaves [ 217.246180][T11001] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 217.338824][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.448965][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.604467][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.653459][T11018] sctp: [Deprecated]: syz.4.1372 (pid 11018) Use of int in max_burst socket option deprecated. [ 217.653459][T11018] Use struct sctp_assoc_value instead [ 217.747226][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.858942][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 217.987568][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 218.162030][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 218.177230][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1378'. [ 218.193350][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 218.221977][T11044] netlink: 'syz.1.1379': attribute type 83 has an invalid length. [ 218.287565][T11039] bond0: entered allmulticast mode [ 218.297684][T11039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.321719][T11039] tipc: Started in network mode [ 218.326677][T11039] tipc: Node identity 0000000000002e000000000000000001, cluster identity 4711 [ 218.348040][T11039] tipc: Enabling of bearer rejected, failed to enable media [ 220.034948][T11112] hsr0: entered promiscuous mode [ 220.100929][T11117] hsr_slave_0: left promiscuous mode [ 220.121600][T11117] hsr_slave_1: left promiscuous mode [ 220.143277][T11117] hsr0 (unregistering): left promiscuous mode [ 220.520752][T11145] netlink: 'syz.0.1403': attribute type 62 has an invalid length. [ 220.588916][T11142] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 220.611158][T11142] bond5 (unregistering): Released all slaves [ 220.951647][T11166] __nla_validate_parse: 7 callbacks suppressed [ 220.951667][T11166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1405'. [ 221.226260][ T8449] IPVS: starting estimator thread 0... [ 221.234097][T11131] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.241253][T11131] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 221.266610][T11131] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.277673][T11131] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 221.293358][T11131] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 221.312968][T11131] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 221.338953][T11179] IPVS: using max 28 ests per chain, 67200 per kthread [ 221.359748][T11131] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.375270][T11131] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 221.414318][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 221.652324][T11131] tipc: Resetting bearer [ 221.937585][ T9374] net_ratelimit: 26 callbacks suppressed [ 221.937606][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 221.999374][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 222.028255][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 222.317266][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 222.375382][T11234] netlink: 'syz.0.1418': attribute type 30 has an invalid length. [ 222.535118][T11234] bond5: option arp_missed_max: invalid value (0) [ 222.554224][T11234] bond5: option arp_missed_max: allowed values 1 - 255 [ 222.582789][T11234] bond5 (unregistering): Released all slaves [ 222.747220][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 222.861301][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 222.977767][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 223.086935][T11266] tipc: New replicast peer: 255.255.255.255 [ 223.104291][T11266] tipc: Enabled bearer , priority 6 [ 223.131856][T11264] syzkaller0: entered promiscuous mode [ 223.145168][T11264] syzkaller0: entered allmulticast mode [ 223.177262][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 223.354524][T11284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1429'. [ 223.386275][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1429'. [ 223.413269][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1427'. [ 223.428452][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 223.434340][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1429'. [ 223.484964][T11280] 8021q: VLANs not supported on vcan0 [ 223.557590][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 223.624967][T11296] netlink: 'syz.2.1431': attribute type 3 has an invalid length. [ 223.686747][T11298] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1432'. [ 223.720914][T11296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.752369][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 223.954662][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'. [ 224.262774][T11329] ve: renamed from sit0 [ 224.306142][ T8455] tipc: Node number set to 11777 [ 224.532340][T11339] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 224.975657][T11356] netlink: 'syz.3.1449': attribute type 2 has an invalid length. [ 225.005773][T11358] xt_hashlimit: size too large, truncated to 1048576 [ 225.116824][T11362] netlink: 'syz.0.1451': attribute type 13 has an invalid length. [ 225.322406][T11362] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig [ 225.591021][T11382] veth0_virt_wifi: entered allmulticast mode [ 226.163323][T11425] __nla_validate_parse: 8 callbacks suppressed [ 226.163344][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 226.776758][T11446] netlink: 504 bytes leftover after parsing attributes in process `syz.4.1475'. [ 226.811842][T11452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1477'. [ 226.847405][T11446] tipc: Enabled bearer , priority 14 [ 227.083775][T11463] ip6gre1: entered promiscuous mode [ 227.103328][T11463] ip6gre1: entered allmulticast mode [ 227.126582][ T85] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.137683][ T85] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.157482][ T8455] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.345551][T11478] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1481'. [ 227.416707][ T9374] net_ratelimit: 20 callbacks suppressed [ 227.416729][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 227.538880][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 227.679530][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.695294][T11494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'. [ 227.722633][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 227.756064][T11494] lo: Caught tx_queue_len zero misconfig [ 227.821416][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'. [ 227.945036][ T5947] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.990705][T11497] bond5: entered promiscuous mode [ 227.996179][T11497] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.053849][ T5947] tipc: Node number set to 3969338112 [ 228.077215][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 228.197490][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 228.387802][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 228.425697][T11531] team0: entered promiscuous mode [ 228.435685][T11531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 228.646415][T11532] syzkaller0: entered promiscuous mode [ 228.728160][T11532] syzkaller0: entered allmulticast mode [ 228.757262][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 229.109363][T11569] netlink: 'syz.4.1500': attribute type 1 has an invalid length. [ 230.444166][T11569] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 230.452205][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 230.598468][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 230.837267][T11596] netlink: 'syz.4.1507': attribute type 2 has an invalid length. [ 231.025843][T11596] hmac(sha224: entered promiscuous mode [ 231.048736][T11611] Cannot find add_set index 0 as target [ 231.070681][T11611] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 231.261781][T11611] bond4: entered promiscuous mode [ 231.267499][T11611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.297304][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 231.490282][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'. [ 231.509868][T11630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1515'. [ 231.559559][T11627] vlan3: entered promiscuous mode [ 231.575386][T11627] bridge0: entered promiscuous mode [ 232.643035][T11673] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 232.651468][ T6179] net_ratelimit: 10 callbacks suppressed [ 232.651485][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 232.665307][T11673] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1527'. [ 232.802326][T11673] bond5 (unregistering): Released all slaves [ 232.837333][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 233.117773][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 233.214734][T11682] netlink: 'syz.2.1529': attribute type 21 has an invalid length. [ 233.223429][T11682] netlink: 'syz.2.1529': attribute type 22 has an invalid length. [ 233.232010][T11682] netlink: 'syz.2.1529': attribute type 23 has an invalid length. [ 233.240736][T11682] netlink: 'syz.2.1529': attribute type 25 has an invalid length. [ 233.255844][T11682] netlink: 'syz.2.1529': attribute type 26 has an invalid length. [ 233.278029][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 233.286952][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1529'. [ 233.303114][T11686] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 233.311672][T11686] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1529'. [ 233.461952][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1531'. [ 233.547601][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 233.607791][T11691] nbd2: detected capacity change from 0 to 63 [ 233.657265][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 233.767217][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 234.047360][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 234.128952][ T5143] block nbd2: Receive control failed (result -104) [ 234.217277][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 234.337914][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 237.747332][ T85] net_ratelimit: 30 callbacks suppressed [ 237.747356][ T85] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 237.867318][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 237.977274][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.087297][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.197425][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.307312][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.417373][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.527339][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.637321][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 238.747295][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 239.067413][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.817802][ T6179] net_ratelimit: 36 callbacks suppressed [ 242.817824][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 242.937266][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.047390][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.157273][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.267276][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.377331][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.487295][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.597304][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.707345][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 243.817314][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 247.897285][ T9374] net_ratelimit: 36 callbacks suppressed [ 247.897312][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.017870][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.127251][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.237311][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.347345][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.457306][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.567349][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.677290][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.787263][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 248.897378][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 252.967326][ T3020] net_ratelimit: 36 callbacks suppressed [ 252.967345][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.087332][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.197334][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.307302][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.417332][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.527274][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.637342][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 253.742322][T11715] netlink: zone id is out of range [ 253.744221][T11719] netlink: 'syz.1.1534': attribute type 62 has an invalid length. [ 253.747723][T11715] netlink: zone id is out of range [ 253.760807][T11715] netlink: zone id is out of range [ 253.888934][T11732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 254.355890][T11764] syzkaller0: entered promiscuous mode [ 254.366867][T11764] syzkaller0: entered allmulticast mode [ 254.417859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.485192][T11773] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1549'. [ 254.518791][T11773] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1549'. [ 254.676770][T11783] PKCS7: Unknown OID: [4] (bad) [ 254.686907][T11783] PKCS7: Only support pkcs7_signedData type [ 254.718013][T11777] geneve2: entered promiscuous mode [ 254.726138][ T6179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.735411][ T6179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.745395][ T6179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.765790][ T6179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.929139][T11797] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.1553'. [ 255.042918][T11793] x_tables: duplicate underflow at hook 2 [ 255.323162][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1560'. [ 255.703314][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.977405][T11861] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1574'. [ 256.002387][T11867] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1574'. [ 256.123504][T11875] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1577'. [ 256.426216][T11898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1580'. [ 256.476368][T11900] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1585'. [ 256.529936][T11900] netlink: 'syz.1.1585': attribute type 9 has an invalid length. [ 256.559057][T11904] bridge15: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 257.509822][T11950] netlink: 'syz.0.1601': attribute type 1 has an invalid length. [ 257.986338][T11975] netlink: 'syz.4.1607': attribute type 4 has an invalid length. [ 258.077561][ T6179] net_ratelimit: 431 callbacks suppressed [ 258.077582][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 258.198996][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 258.311867][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 258.428014][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 258.945901][T12001] __nla_validate_parse: 12 callbacks suppressed [ 258.945924][T12001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1614'. [ 259.071367][T12008] bond0: Caught tx_queue_len zero misconfig [ 259.087290][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 259.170205][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 259.212362][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1618'. [ 259.222356][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 259.240951][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 259.347168][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 259.457702][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 259.579080][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 259.718154][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 260.187415][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1627'. [ 260.216791][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 260.246924][T12054] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 260.316076][T12059] netlink: 'syz.2.1629': attribute type 39 has an invalid length. [ 260.704374][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1622'. [ 260.773708][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1634'. [ 260.827195][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1635'. [ 260.836483][T12083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1635'. [ 260.847043][T12080] gre1: entered allmulticast mode [ 261.493196][T12107] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 261.505731][T12107] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 261.682105][T12109] sctp: [Deprecated]: syz.2.1642 (pid 12109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.682105][T12109] Use struct sctp_sack_info instead [ 261.737819][T12110] sctp: [Deprecated]: syz.2.1642 (pid 12110) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.737819][T12110] Use struct sctp_sack_info instead [ 262.002925][T12116] bond9: Unable to set up delay as MII monitoring is disabled [ 262.030688][T12116] bond9 (unregistering): Released all slaves [ 262.634255][T12138] netlink: 'syz.2.1650': attribute type 2 has an invalid length. [ 262.657663][T12138] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 262.687245][T12138] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 262.725626][T12138] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 262.776213][T12138] netlink: 'syz.2.1650': attribute type 2 has an invalid length. [ 262.807921][T12138] netlink: 'syz.2.1650': attribute type 2 has an invalid length. [ 262.969856][T12148] ip6tnl2: entered promiscuous mode [ 263.032683][T12152] netlink: 'syz.4.1653': attribute type 2 has an invalid length. [ 263.107267][ T6179] net_ratelimit: 24 callbacks suppressed [ 263.107288][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 263.121932][T12154] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 263.287372][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 263.457506][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 263.569780][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 263.717243][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 263.829085][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 264.018898][ T1789] block nbd2: Possible stuck request ffff888027208000: control (read@0,1024B). Runtime 30 seconds [ 264.031553][ T1789] block nbd2: Possible stuck request ffff888027208200: control (read@1024,1024B). Runtime 30 seconds [ 264.043022][ T1789] block nbd2: Possible stuck request ffff888027208400: control (read@2048,1024B). Runtime 30 seconds [ 264.054323][ T1789] block nbd2: Possible stuck request ffff888027208600: control (read@3072,1024B). Runtime 30 seconds [ 264.079764][T12182] __nla_validate_parse: 9 callbacks suppressed [ 264.079782][T12182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1662'. [ 264.127271][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 264.347586][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 264.358341][T12194] syzkaller0: entered promiscuous mode [ 264.363850][T12194] syzkaller0: entered allmulticast mode [ 264.404993][T12194] tipc: Enabled bearer , priority 0 [ 264.461969][T12194] tipc: Resetting bearer [ 264.497697][T12198] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1668'. [ 264.550733][T12194] tipc: Disabling bearer [ 264.630235][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 264.807717][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 264.867921][T12205] syzkaller1: entered promiscuous mode [ 264.883315][T12205] syzkaller1: entered allmulticast mode [ 265.413848][T12254] xt_hashlimit: max too large, truncated to 1048576 [ 265.420571][T12238] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.421556][T12238] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.624987][T12238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.639800][T12238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.710765][T12243] syzkaller0: entered promiscuous mode [ 265.716324][T12243] syzkaller0: entered allmulticast mode [ 265.768473][ T9368] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.790067][ T9368] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.937387][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.983499][T12279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.991539][T12279] IPv6: NLM_F_CREATE should be set when creating new route [ 265.999144][T12279] IPv6: NLM_F_CREATE should be set when creating new route [ 266.006416][T12279] IPv6: NLM_F_CREATE should be set when creating new route [ 266.273234][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'. [ 266.285930][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1691'. [ 266.349689][ T9368] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.368652][ T9368] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.417312][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1690'. [ 266.426526][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1690'. [ 266.480583][T12293] ip6tnl2: entered promiscuous mode [ 266.485851][T12293] ip6tnl2: entered allmulticast mode [ 266.550860][ T9368] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.566470][ T9368] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.576981][ T9368] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.585706][ T9368] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.721874][T12312] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1697'. [ 266.799939][T12310] bond9: Unable to set up delay as MII monitoring is disabled [ 266.832525][T12316] xt_policy: neither incoming nor outgoing policy selected [ 266.850818][T12310] bond9 (unregistering): Released all slaves [ 267.295116][T12354] tipc: Enabling of bearer rejected, already enabled [ 267.499272][T12370] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1712'. [ 267.521437][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 267.569029][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 267.660668][T12362] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 267.670557][T12362] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 267.703506][T12381] validate_nla: 2 callbacks suppressed [ 267.703523][T12381] netlink: 'syz.3.1717': attribute type 4 has an invalid length. [ 267.831503][T12383] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 268.173858][T12404] vcan0: Caught tx_queue_len zero misconfig [ 268.189215][T12414] net_ratelimit: 15 callbacks suppressed [ 268.189233][T12414] netlink: zone id is out of range [ 268.211209][T12416] netlink: 'syz.2.1730': attribute type 2 has an invalid length. [ 268.224385][T12414] netlink: get zone limit has 4 unknown bytes [ 268.231064][T12416] netlink: 'syz.2.1730': attribute type 8 has an invalid length. [ 268.447234][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 268.569166][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 268.677233][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 268.787191][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 268.912935][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 269.177911][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 269.299998][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 269.350584][T12468] __nla_validate_parse: 5 callbacks suppressed [ 269.350603][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 269.427382][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 270.182885][T12495] bond0: Caught tx_queue_len zero misconfig [ 270.249796][T12502] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.1749'. [ 270.466757][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 270.476780][ T30] audit: type=1804 audit(1775036525.126:6): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1753" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2017 res=1 errno=0 [ 270.541020][ T30] audit: type=1800 audit(1775036525.126:7): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1753" name="cgroup.controllers" dev="tmpfs" ino=2017 res=0 errno=0 [ 270.927445][T12525] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1759'. [ 271.125224][T12532] bond7: option packets_per_slave: invalid value (1048582) [ 271.162897][T12537] netlink: 'syz.0.1762': attribute type 16 has an invalid length. [ 271.207196][T12532] bond7: option packets_per_slave: allowed values 0 - 65535 [ 271.245485][T12532] bond7 (unregistering): Released all slaves [ 271.839084][T12566] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 272.694421][T12599] bond1: option mode: unable to set because the bond device has slaves [ 272.928675][T12614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1774'. [ 273.227646][ T9374] net_ratelimit: 24 callbacks suppressed [ 273.227668][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 273.281978][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1777'. [ 273.426329][T12627] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.477278][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 273.587244][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 273.697367][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 273.817269][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 273.899354][T12654] sctp: [Deprecated]: syz.3.1784 (pid 12654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.899354][T12654] Use struct sctp_sack_info instead [ 273.948340][T12656] sctp: [Deprecated]: syz.4.1785 (pid 12656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.948340][T12656] Use struct sctp_sack_info instead [ 273.964908][ T9368] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 274.098622][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 274.133891][T12665] bond5: entered allmulticast mode [ 274.160809][T12665] 8021q: adding VLAN 0 to HW filter on device bond5 [ 274.257897][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 274.350874][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 274.377223][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 274.397321][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1781'. [ 274.406244][T12644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1781'. [ 274.492614][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 274.565037][T12678] xt_CT: No such helper "netbios-ns" [ 274.639199][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 275.222111][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 275.303505][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1797'. [ 276.068059][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 276.358379][T12732] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.404420][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.445284][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.487055][T12732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1800'. [ 276.538564][T12745] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 276.790821][T12756] netlink: 'syz.0.1803': attribute type 21 has an invalid length. [ 276.809831][T12756] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.840258][T12756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.847615][T12756] IPv6: NLM_F_CREATE should be set when creating new route [ 276.854922][T12756] IPv6: NLM_F_CREATE should be set when creating new route [ 276.862204][T12756] IPv6: NLM_F_CREATE should be set when creating new route [ 276.884164][T12760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1805'. [ 276.896643][T12760] netlink: 'syz.1.1805': attribute type 5 has an invalid length. [ 276.905642][T12762] netlink: 'syz.0.1803': attribute type 21 has an invalid length. [ 276.935617][T12762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.255156][T12773] syzkaller0: entered promiscuous mode [ 277.262882][T12773] syzkaller0: entered allmulticast mode [ 277.478439][T12785] netlink: 'syz.1.1811': attribute type 2 has an invalid length. [ 277.498002][T12786] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 277.864403][T12798] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 278.260486][T12815] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 278.418601][ T6179] net_ratelimit: 29 callbacks suppressed [ 278.418652][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 278.579920][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 278.729216][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 278.887222][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 278.908550][T12799] can: request_module (can-proto-0) failed. [ 278.997289][ T9374] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 279.058369][T12862] netlink: 'syz.4.1828': attribute type 2 has an invalid length. [ 279.107281][ T3020] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 279.115681][T12862] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 279.173016][T12869] netlink: 'syz.4.1828': attribute type 2 has an invalid length. [ 279.222471][T12869] netlink: 'syz.4.1828': attribute type 1 has an invalid length. [ 279.228207][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 279.244272][T12871] xfrm0: entered allmulticast mode [ 279.256840][T12871] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 279.347210][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 279.467338][ T6183] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 279.568497][T12890] __nla_validate_parse: 7 callbacks suppressed [ 279.568517][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 280.054971][T12913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1842'. [ 280.324884][T12921] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1845'. [ 280.373815][T12919] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1845'. [ 280.483717][T12928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1847'. [ 280.522150][T12928] syzkaller0: entered promiscuous mode [ 280.539138][T12928] syzkaller0: entered allmulticast mode [ 280.548796][T12930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1846'. [ 280.567549][T12930] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1846'. [ 280.644382][T12935] ip6tnl0: Caught tx_queue_len zero misconfig [ 280.870666][T12947] pim6reg: entered allmulticast mode [ 280.901498][T12942] pim6reg: left allmulticast mode [ 281.121746][T12956] bond9: entered promiscuous mode [ 281.128334][T12956] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.180231][T12966] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1857'. [ 281.380340][T12982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 281.399512][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 281.499494][T12975] bond7: option lacp_active: invalid value (8) [ 281.508867][T12975] bond7 (unregistering): Released all slaves [ 281.838981][T13002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.204494][T12982] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 282.222249][T12981] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 282.599752][T13037] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 282.922464][T13058] Cannot find add_set index 3 as target [ 283.429587][ T6181] net_ratelimit: 29 callbacks suppressed [ 283.429610][ T6181] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 283.567424][ T6179] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 283.700617][T13075] bridge_slave_0 (unregistering): left allmulticast mode [ 283.709111][T13075] bridge_slave_0 (unregistering): left promiscuous mode [ 283.712289][T13080] validate_nla: 3 callbacks suppressed [ 283.712333][T13080] netlink: 'syz.2.1890': attribute type 1 has an invalid length. [ 283.716292][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.809287][T13081] geneve3: entered promiscuous mode [ 283.814821][T13081] geneve3: entered allmulticast mode [ 283.835361][T13080] vlan3: entered promiscuous mode [ 283.845272][T13080] team0: entered promiscuous mode [ 283.856278][T13080] team_slave_0: entered promiscuous mode [ 283.862247][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 283.928678][T13086] netlink: zone id is out of range [ 283.934081][T13086] netlink: zone id is out of range [ 283.939851][T13086] netlink: zone id is out of range [ 283.945230][T13086] netlink: zone id is out of range [ 283.951010][T13086] netlink: zone id is out of range [ 283.956385][T13086] netlink: zone id is out of range [ 283.962542][T13080] team_slave_1: entered promiscuous mode [ 283.971091][T13086] netlink: zone id is out of range [ 283.976309][T13086] netlink: zone id is out of range [ 284.294279][T13093] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 284.315609][T13093] bond7 (unregistering): Released all slaves [ 284.379140][T13102] bridge2: entered promiscuous mode [ 284.766880][T13122] __nla_validate_parse: 13 callbacks suppressed [ 284.766899][T13122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 284.895776][T13128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1905'. [ 285.248446][T13142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 285.289343][T13142] : entered promiscuous mode [ 285.875701][T13184] ip6gre2: entered promiscuous mode [ 285.903480][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 285.917280][T13184] ip6gre2: entered allmulticast mode [ 285.934700][ T9374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.946129][ T9374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.967493][ T8449] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.017840][ T7951] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.294327][T13202] veth1_macvtap: renamed from veth0_vlan [ 286.397711][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 286.880192][T13228] netlink: 'syz.0.1933': attribute type 3 has an invalid length. [ 286.900150][ T7951] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 286.993350][T13205] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1928'. [ 287.122859][T13240] netlink: 'syz.0.1936': attribute type 4 has an invalid length. [ 287.156121][T13240] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1936'. [ 287.197895][T13240] dummy0: Caught tx_queue_len zero misconfig [ 287.223003][T13252] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1937'. [ 287.235806][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1936'. [ 287.568938][ T5490] veth1_macvtap: left promiscuous mode [ 287.598538][ T5490] veth1_macvtap: entered promiscuous mode [ 287.735991][T13269] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 287.818105][T13269] 8021q: adding VLAN 0 to HW filter on device bond12 [ 287.848089][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 287.893931][T13269] 8021q: VLANs not supported on lo [ 288.360605][T13303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 288.458899][T13242] net_ratelimit: 43 callbacks suppressed [ 288.458921][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 288.543054][T13319] nbd: socks must be embedded in a SOCK_ITEM attr [ 288.577617][T13244] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 288.592873][T13319] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 288.688087][T13247] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 288.818660][T13247] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 288.885365][T13335] dvmrp0: entered allmulticast mode [ 288.967241][T13244] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 289.087699][T13245] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 289.207198][T13244] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 289.350878][T13358] ipt_ECN: cannot use operation on non-tcp rule [ 289.367922][T13356] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 289.416616][T13356] bond5 (unregistering): Released all slaves [ 289.458125][T13358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.488723][T13247] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 289.648056][T13244] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 289.937352][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 290.019353][T13404] __nla_validate_parse: 2 callbacks suppressed [ 290.019373][T13404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 290.247789][T13406] tap0: tun_chr_ioctl cmd 1074025677 [ 290.253320][T13406] tap0: linktype set to 6 [ 290.313062][T13418] 8021q: VLANs not supported on nlmon0 [ 290.945004][T13452] netlink: 'syz.1.1988': attribute type 3 has an invalid length. [ 291.108577][T13466] bridge0: entered promiscuous mode [ 291.142783][T13470] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1992'. [ 291.152141][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1992'. [ 291.196243][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1995'. [ 291.245396][T13473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1995'. [ 291.386942][T13483] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1998'. [ 291.597852][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'. [ 291.683457][T13505] bond0: entered promiscuous mode [ 291.723466][T13505] bond0: left promiscuous mode [ 292.062194][T13532] bond0: entered promiscuous mode [ 292.077055][T13532] €Â: entered promiscuous mode [ 292.087785][T13532] bond_slave_1: entered promiscuous mode [ 292.095500][T13532] batadv0: entered promiscuous mode [ 292.111855][T13541] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2009'. [ 293.477499][T13246] net_ratelimit: 373 callbacks suppressed [ 293.477521][T13246] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 293.597243][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 293.727450][T13246] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 293.796478][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 293.809077][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 293.857271][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 293.967177][T13246] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.071796][T13608] bond7: entered promiscuous mode [ 294.098189][ T1789] block nbd2: Possible stuck request ffff888027208000: control (read@0,1024B). Runtime 60 seconds [ 294.111265][ T1789] block nbd2: Possible stuck request ffff888027208200: control (read@1024,1024B). Runtime 60 seconds [ 294.114101][T13615] macsec1: entered promiscuous mode [ 294.122433][ T1789] block nbd2: Possible stuck request ffff888027208400: control (read@2048,1024B). Runtime 60 seconds [ 294.128005][T13615] bridge0: entered promiscuous mode [ 294.140369][ T1789] block nbd2: Possible stuck request ffff888027208600: control (read@3072,1024B). Runtime 60 seconds [ 294.161977][T13616] vcan1: entered promiscuous mode [ 294.167263][T13616] vcan1: entered allmulticast mode [ 294.172891][T13616] bond7: (slave vcan1): The slave device specified does not support setting the MAC address [ 294.185206][T13616] bond7: (slave vcan1): Error -95 calling set_mac_address [ 294.236574][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.347199][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.457680][T13246] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.567187][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.583971][T13642] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 294.610021][T13639] erspan0: entered promiscuous mode [ 294.680289][T13242] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 294.900628][T13661] netlink: 'syz.0.2048': attribute type 13 has an invalid length. [ 294.990672][T13661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.058988][T13673] tipc: Resetting bearer [ 295.068813][T13676] xt_TCPMSS: Only works on TCP SYN packets [ 295.098293][T13673] veth1_macvtap: left promiscuous mode [ 295.124437][T13673] bridge0: left promiscuous mode [ 295.140465][ T1241] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.151843][ T1241] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.168998][ T1241] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.200673][ T1241] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.656756][T13702] __nla_validate_parse: 4 callbacks suppressed [ 295.656776][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 296.530198][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 296.548296][T13741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 297.083820][T13752] ip6gretap0: entered promiscuous mode [ 297.116747][T13754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2072'. [ 297.126928][T13752] macvtap1: entered allmulticast mode [ 297.132843][T13752] ip6gretap0: entered allmulticast mode [ 297.198958][T13752] ip6gretap0: left allmulticast mode [ 297.216727][T13752] ip6gretap0: left promiscuous mode [ 297.271374][T13763] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2075'. [ 297.328504][T13754] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 297.335776][T13754] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 297.368475][T13765] batadv0: entered promiscuous mode [ 297.384268][T13765] batadv0: entered allmulticast mode [ 297.404901][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.595493][T13772] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 297.603538][T13772] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2079'. [ 297.668058][T13777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 297.677742][T13777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2080'. [ 297.692470][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2080'. [ 297.723714][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2080'. [ 297.812359][T13241] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.821457][T13241] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.840896][T13241] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.870203][T13241] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.954199][T13792] xt_hashlimit: size too large, truncated to 1048576 [ 297.971667][T13793] bond10: entered allmulticast mode [ 297.984181][T13793] netlink: 'syz.2.2084': attribute type 4 has an invalid length. [ 298.001820][T13793] bridge3: entered promiscuous mode [ 298.007485][T13793] bridge3: entered allmulticast mode [ 298.018699][T13793] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 298.105027][T13795] ¾x9ÿ: renamed from bridge_slave_0 [ 298.332849][T13806] dummy0: entered promiscuous mode [ 298.353256][T13806] macsec1: entered promiscuous mode [ 298.388305][T13806] dummy0: left promiscuous mode [ 298.537264][ T1241] net_ratelimit: 28 callbacks suppressed [ 298.537284][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 298.657250][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 298.847863][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 298.918390][T13843] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 299.015230][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.144397][T13850] xt_hashlimit: size too large, truncated to 1048576 [ 299.157472][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.277446][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.417327][ T9370] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.547424][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.667325][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.778491][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 299.978896][T13900] bond7 (unregistering): Released all slaves [ 300.777723][T13954] can: request_module (can-proto-5) failed. [ 301.070021][T13979] macvtap1: entered promiscuous mode [ 301.075878][T13979] macvtap1: entered allmulticast mode [ 301.081575][T13979] veth1_vlan: entered allmulticast mode [ 301.437483][T14005] tipc: Enabling of bearer rejected, failed to enable media [ 301.645400][T14021] delete_channel: no stack [ 301.788828][T14026] xt_bpf: check failed: parse error [ 301.881880][T14029] veth1_to_batadv: Caught tx_queue_len zero misconfig [ 301.952544][T14030] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 301.996888][T14026] syzkaller0: entered promiscuous mode [ 302.003336][T14026] syzkaller0: entered allmulticast mode [ 302.024451][T14026] tipc: Enabled bearer , priority 0 [ 302.068596][T14024] tipc: Resetting bearer [ 302.153185][T14024] tipc: Disabling bearer [ 302.488904][ T7964] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.522234][T14057] __nla_validate_parse: 42 callbacks suppressed [ 302.522255][T14057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2159'. [ 302.911819][T14078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2163'. [ 302.967942][ T7951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.029063][T14089] netlink: 'syz.0.2167': attribute type 33 has an invalid length. [ 303.491250][T14108] netlink: 'syz.0.2172': attribute type 10 has an invalid length. [ 303.597718][T13241] net_ratelimit: 26 callbacks suppressed [ 303.597741][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 303.854738][T14124] vti0: entered promiscuous mode [ 303.861463][T14124] vti0: entered allmulticast mode [ 303.873639][T14124] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2177'. [ 304.037987][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 304.053365][T14127] netlink: 'syz.2.2178': attribute type 1 has an invalid length. [ 304.107812][T14127] 8021q: adding VLAN 0 to HW filter on device bond11 [ 304.160895][T14140] bond11: (slave dummy0): making interface the new active one [ 304.190226][T14140] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 304.238073][T14127] bond11 (unregistering): (slave dummy0): Releasing active interface [ 304.275497][T14127] bond11 (unregistering): Released all slaves [ 304.410777][T14144] lo: Caught tx_queue_len zero misconfig [ 304.432092][T14144] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 304.458285][T14144] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 304.466302][T14144] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2181'. [ 304.478785][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 304.504033][T14144] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 304.520089][T14144] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 304.528107][T14144] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2181'. [ 304.547609][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 304.660278][T13660] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 304.698400][T14152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'. [ 304.797613][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 304.906804][T14160] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 304.939472][T14160] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 304.957659][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 305.067229][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 305.153418][T14169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.177309][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 305.207225][T14172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2190'. [ 305.347341][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 305.462877][T13660] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 305.613617][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 305.657905][T14196] batadv_slave_1: entered promiscuous mode [ 305.671936][T14195] batadv_slave_1: left promiscuous mode [ 306.001811][T14212] netlink: 'syz.0.2202': attribute type 1 has an invalid length. [ 306.027360][T14212] netlink: 'syz.0.2202': attribute type 3 has an invalid length. [ 306.587687][T14241] syzkaller0: entered promiscuous mode [ 306.597493][T14241] syzkaller0: entered allmulticast mode [ 307.476072][T14287] netlink: 'syz.3.2223': attribute type 13 has an invalid length. [ 307.498277][T14269] IPVS: set_ctl: invalid protocol: 8 172.20.20.45:20004 [ 307.579990][T14289] mac80211_hwsim hwsim9 ªªªªª;: renamed from wlan0 [ 307.608264][T14292] __nla_validate_parse: 77 callbacks suppressed [ 307.608284][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 307.653252][T14292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'. [ 307.817757][T14303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2227'. [ 307.970675][T13660] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.979318][T13660] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.991756][T13660] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.000571][T13660] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.151569][T14317] batadv1: entered promiscuous mode [ 308.156963][T14317] batadv1: entered allmulticast mode [ 308.687680][T13241] net_ratelimit: 26 callbacks suppressed [ 308.687701][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 308.758523][T14346] netlink: 'syz.1.2242': attribute type 62 has an invalid length. [ 308.837728][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 308.933418][T14355] openvswitch: netlink: Flow key attr not present in new flow. [ 308.947434][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.057417][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.132971][T14363] syzkaller0: entered promiscuous mode [ 309.148548][T14363] syzkaller0: entered allmulticast mode [ 309.166287][T14363] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 309.175479][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.287309][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.321773][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'. [ 309.417191][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.589576][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 309.605807][T14375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2250'. [ 309.697884][T13241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 310.167241][T14413] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2261'. [ 310.204621][T14415] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2262'. [ 310.225046][T14415] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2262'. [ 310.366972][T14420] netlink: 'syz.1.2263': attribute type 1 has an invalid length. [ 310.534797][T14429] netlink: 'syz.3.2266': attribute type 3 has an invalid length. [ 310.623359][T14443] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 310.745558][T14451] netlink: 'syz.3.2272': attribute type 89 has an invalid length. [ 311.064808][T14469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2275'. [ 311.090226][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2277'. [ 311.113027][T14468] netlink: 'syz.0.2275': attribute type 4 has an invalid length. [ 311.130031][T14473] netlink: 'syz.1.2276': attribute type 21 has an invalid length. [ 311.152485][T14473] netlink: 'syz.1.2276': attribute type 4 has an invalid length. [ 311.185259][T14473] netlink: 'syz.1.2276': attribute type 5 has an invalid length. [ 311.520326][T14492] C: renamed from team_slave_0 [ 311.544011][T14492] netlink: 'syz.2.2282': attribute type 8 has an invalid length. [ 311.655789][T14499] syzkaller0: entered promiscuous mode [ 311.661544][T14499] syzkaller0: entered allmulticast mode [ 311.919731][T14508] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 311.933759][T14508] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 311.986921][T14503] IPVS: Scheduler module ip_vs_sip not found [ 312.059164][T14514] delete_channel: no stack [ 312.135931][T14518] netlink: 'syz.1.2290': attribute type 4 has an invalid length. [ 312.215268][ T30] audit: type=1800 audit(1775036566.856:8): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2291" name="memory.events" dev="tmpfs" ino=2198 res=0 errno=0 [ 312.248307][ T30] audit: type=1804 audit(1775036566.856:9): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2291" name="/newroot/426/memory.events" dev="tmpfs" ino=2198 res=1 errno=0 [ 312.782607][T14550] __nla_validate_parse: 7 callbacks suppressed [ 312.782627][T14550] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2301'. [ 312.895525][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 312.934649][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 312.963492][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 312.984673][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 312.994116][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 313.004673][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 313.014153][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 313.026282][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 313.080470][T14559] Cannot find set identified by id 65534 to match [ 313.097824][T14554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 313.141181][ T7951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.153873][ T7951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.207350][ T7951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 313.337850][T14566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.396579][T14566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.439377][T14566] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 313.458278][T14589] SET target dimension over the limit! [ 313.474122][T14566] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 313.513202][T14566] bond0 (unregistering): Released all slaves [ 313.529462][T14583] ip6tnl0: Caught tx_queue_len zero misconfig [ 313.537934][T14583] netem: change failed [ 313.647193][T14593] sctp: [Deprecated]: syz.1.2314 (pid 14593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.647193][T14593] Use struct sctp_sack_info instead [ 313.747417][ T7951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.807560][ T1241] net_ratelimit: 27 callbacks suppressed [ 313.807582][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 313.928875][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.049149][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.087009][T14607] validate_nla: 1 callbacks suppressed [ 314.087030][T14607] netlink: 'syz.4.2318': attribute type 3 has an invalid length. [ 314.167240][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.288452][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.417484][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.548477][T13660] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.659107][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.827393][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 314.948212][ T1241] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 315.113657][T14650] netlink: 'syz.4.2331': attribute type 2 has an invalid length. [ 315.126932][T14650] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 315.290244][T14656] netlink: 'syz.1.2335': attribute type 4 has an invalid length. [ 315.752619][T14680] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 316.202480][T14702] netlink: 'syz.2.2347': attribute type 39 has an invalid length. [ 316.413635][T14712] tipc: Enabling of bearer rejected, already enabled [ 317.033195][T14740] pim6reg: entered allmulticast mode [ 317.073653][T14740] pim6reg: left allmulticast mode [ 317.155072][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.070766][T14800] __nla_validate_parse: 114 callbacks suppressed [ 318.070787][T14800] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.2372'. [ 318.298821][T14813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2376'. [ 318.386085][T14770] lec:lec_atm_send: lec0: Unknown message type -251 [ 318.535671][T14834] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 318.544035][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 318.561058][T14828] lo: entered allmulticast mode [ 318.568802][T14769] lec:lec_atm_close: lec0: Shut down! [ 318.619833][T14828] tunl0: entered allmulticast mode [ 318.654291][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.672154][T14837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.692198][T14828] gre0: entered allmulticast mode [ 318.730391][T14828] gretap0: entered allmulticast mode [ 318.883788][T14828] erspan0: entered allmulticast mode [ 318.969550][T14828] ip_vti0: entered allmulticast mode [ 318.997463][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2381'. [ 319.018734][T14828] ip6_vti0: entered allmulticast mode [ 319.029981][T14828] sit0: entered allmulticast mode [ 319.085146][T14828] ip6tnl0: entered allmulticast mode [ 319.274266][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2381'. [ 319.279807][T14828] ip6gre0: entered allmulticast mode [ 319.317148][T14828] ip6gretap0: entered allmulticast mode [ 319.330708][T14828] bridge0: left promiscuous mode [ 319.335699][T14828] bridge0: entered allmulticast mode [ 319.348502][T14828] vcan0: entered allmulticast mode [ 319.366070][T14828] team0: entered allmulticast mode [ 319.372962][T14828] C: entered allmulticast mode [ 319.381625][T14828] team_slave_1: entered allmulticast mode [ 319.392205][T14828] dummy0: entered allmulticast mode [ 319.398435][T14828] nlmon0: entered allmulticast mode [ 319.405106][T14828] caif0: entered allmulticast mode [ 319.417910][T14828] batadv0: left promiscuous mode [ 319.426117][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 319.444905][T14828] veth0: entered allmulticast mode [ 319.458598][T14828] veth1: entered allmulticast mode [ 319.473863][T14828] wg1: left promiscuous mode [ 319.488286][T14828] wg2: entered allmulticast mode [ 319.493473][T14828] veth1_to_bridge: entered allmulticast mode [ 319.509711][T14828] bond_slave_0: entered allmulticast mode [ 319.515699][T14828] veth1_to_bond: entered allmulticast mode [ 319.523120][T14828] bond_slave_1: entered allmulticast mode [ 319.529564][T14828] veth0_to_team: entered allmulticast mode [ 319.535798][T14828] veth1_to_team: entered allmulticast mode [ 319.542079][T14828] veth0_to_batadv: entered allmulticast mode [ 319.548715][T14828] batadv_slave_0: entered allmulticast mode [ 319.554771][T14828] veth1_to_batadv: entered allmulticast mode [ 319.561215][T14828] batadv_slave_1: entered allmulticast mode [ 319.567438][T14828] xfrm0: entered allmulticast mode [ 319.572747][T14828] veth0_to_hsr: entered allmulticast mode [ 319.579169][T14828] hsr_slave_0: entered allmulticast mode [ 319.585732][T14828] hsr_slave_1: entered allmulticast mode [ 319.591898][T14828] hsr0: entered allmulticast mode [ 319.597327][T14828] veth1_virt_wifi: entered allmulticast mode [ 319.603518][T14828] veth0_virt_wifi: entered allmulticast mode [ 319.609800][T14828] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 319.618194][T14828] veth1_vlan: entered allmulticast mode [ 319.624162][T14828] veth0_vlan: entered allmulticast mode [ 319.630194][T14828] vlan0: entered allmulticast mode [ 319.635527][T14828] vlan1: entered allmulticast mode [ 319.641265][T14828] macvlan0: entered allmulticast mode [ 319.646876][T14828] macvlan1: entered allmulticast mode [ 319.652762][T14828] ipvlan0: entered allmulticast mode [ 319.659009][T14828] ipvlan1: entered allmulticast mode [ 319.664565][T14828] veth1_macvtap: entered allmulticast mode [ 319.670698][T14828] veth0_macvtap: entered allmulticast mode [ 319.676738][T14828] macvtap0: entered allmulticast mode [ 319.682496][T14828] macsec0: entered allmulticast mode [ 319.688308][T14828] geneve0: entered allmulticast mode [ 319.693814][T14828] geneve1: entered allmulticast mode [ 319.700122][T14828] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 319.707877][T14828] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 319.715473][T14828] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 319.723213][T14828] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 319.731067][T14828] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 319.738520][T14828] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 319.745745][T14828] syztnl0: entered allmulticast mode [ 319.751400][T14828] bond1: entered allmulticast mode [ 319.756779][T14828] : entered allmulticast mode [ 319.761957][T14828] vxlan0: entered allmulticast mode [ 319.767526][T14828] veth0_to_team.4: entered allmulticast mode [ 319.773843][T14828] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 319.781855][T14828] bond2: entered allmulticast mode [ 319.787226][T14828] geneve2: entered allmulticast mode [ 319.808738][T14828] bond3: entered allmulticast mode [ 319.821268][T14828] veth2: entered allmulticast mode [ 319.833668][T14828] veth3: entered allmulticast mode [ 319.846133][T14828] !: entered allmulticast mode [ 319.851957][T14828] bond4: entered allmulticast mode [ 319.878269][T14828] vlan0000: entered allmulticast mode [ 319.884278][T14828] macsec1: entered allmulticast mode [ 319.904598][T14828] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 319.917031][T14828] geneve3: left promiscuous mode [ 319.923149][T14828] geneve3: entered allmulticast mode [ 319.938597][T14828] bridge1: entered allmulticast mode [ 319.947484][T14828] bond5: entered allmulticast mode [ 319.966865][T14828] bond6: entered allmulticast mode [ 319.973365][T14828] veth4: entered allmulticast mode [ 319.979791][T14828] veth5: entered allmulticast mode [ 319.986726][T14828] veth6: entered allmulticast mode [ 319.993237][T14828] veth7: entered allmulticast mode [ 320.005898][T14828] veth1_to_hsr: left promiscuous mode [ 320.011963][T14828] macvtap1: left promiscuous mode [ 320.024060][T14828] bond7: entered allmulticast mode [ 320.029795][T14828] ip6gretap1: entered allmulticast mode [ 320.035463][T14828] veth9: entered allmulticast mode [ 320.049722][T14828] veth8: entered allmulticast mode [ 320.055454][T14828] veth9: left promiscuous mode [ 320.061860][T14828] vlan2: entered allmulticast mode [ 320.067660][T14828] gtp0: entered allmulticast mode [ 320.077840][T14828] bond8: entered allmulticast mode [ 320.083031][T14828] geneve4: entered allmulticast mode [ 320.111190][T14828] ip6tnl1: entered allmulticast mode [ 320.116911][T14828] macsec2: entered allmulticast mode [ 320.128206][T14828] geneve5: left promiscuous mode [ 320.138176][T14828] geneve5: entered allmulticast mode [ 320.159276][T14828] bond9: left promiscuous mode [ 320.164080][T14828] bond9: entered allmulticast mode [ 320.174761][T14828] bridge2: entered allmulticast mode [ 320.185627][T14828] macsec3: entered allmulticast mode [ 320.195630][T14828] syztnl2: entered allmulticast mode [ 320.204622][T14828] bridge3: left promiscuous mode [ 320.214478][T14828] ip6tnl2: entered allmulticast mode [ 320.299825][T14857] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 320.307343][T14858] vcan1: entered promiscuous mode [ 320.321775][T14858] vcan1: entered allmulticast mode [ 320.356049][T14861] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 320.357911][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.397879][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 39114 - 0 [ 320.417716][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 320.426936][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.468706][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 39114 - 0 [ 320.487356][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 320.512435][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.529982][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 39114 - 0 [ 320.539449][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 320.551264][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.566948][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 39114 - 0 [ 320.576614][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 320.665597][T14879] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 320.682926][T14879] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2388'. [ 320.692532][T14879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.722276][T14879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.734532][T14879] hsr0: entered promiscuous mode [ 320.747519][T14879] bridge0: port 3(hsr0) entered blocking state [ 320.759187][T14879] bridge0: port 3(hsr0) entered disabled state [ 320.769861][T14879] hsr0: entered allmulticast mode [ 320.774952][T14879] hsr_slave_0: entered allmulticast mode [ 320.797506][T14879] hsr_slave_1: entered allmulticast mode [ 320.837417][ T7966] lec:lec_start_xmit: lec0:No lecd attached [ 321.001084][T14898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2393'. [ 321.375047][T14925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2400'. [ 321.553001][T14937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2401'. [ 322.192260][T14976] vlan6: entered promiscuous mode [ 322.207177][T14976] batadv_slave_1: entered promiscuous mode [ 322.694437][T15009] netlink: 'syz.3.2420': attribute type 29 has an invalid length. [ 323.193109][T15035] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 323.603229][T15054] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 323.800937][T15068] x_tables: duplicate underflow at hook 3 [ 324.060953][T15078] netlink: 'syz.0.2440': attribute type 10 has an invalid length. [ 324.086558][T15078] __nla_validate_parse: 6 callbacks suppressed [ 324.086581][T15078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2440'. [ 324.143404][T15078] net_ratelimit: 21 callbacks suppressed [ 324.143425][T15078] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 324.182893][ T1789] block nbd2: Possible stuck request ffff888027208000: control (read@0,1024B). Runtime 90 seconds [ 324.194569][ T1789] block nbd2: Possible stuck request ffff888027208200: control (read@1024,1024B). Runtime 90 seconds [ 324.206019][ T1789] block nbd2: Possible stuck request ffff888027208400: control (read@2048,1024B). Runtime 90 seconds [ 324.217187][ T1789] block nbd2: Possible stuck request ffff888027208600: control (read@3072,1024B). Runtime 90 seconds [ 324.228049][T15082] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2442'. [ 324.242727][T15082] netlink: 'syz.2.2442': attribute type 11 has an invalid length. [ 324.250794][T15082] netlink: 'syz.2.2442': attribute type 23 has an invalid length. [ 324.261033][T15082] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2442'. [ 324.528461][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2444'. [ 324.801505][T15101] netlink: 'syz.0.2449': attribute type 25 has an invalid length. [ 324.825503][T15101] netlink: 'syz.0.2449': attribute type 3 has an invalid length. [ 324.848823][T15101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2449'. [ 324.925868][T15101] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2449'. [ 324.998261][T15110] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.2452'. [ 325.026757][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 325.082043][T15110] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2452'. [ 325.127583][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 325.421450][T15125] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 325.604591][T15135] netlink: 'syz.3.2459': attribute type 2 has an invalid length. [ 325.619697][T15135] netlink: 'syz.3.2459': attribute type 1 has an invalid length. [ 325.864222][T15139] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 325.882090][T15139] bridge16: entered allmulticast mode [ 326.097119][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 326.106007][ C0] lec:lec_tx_timeout: lec0 [ 326.117188][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 326.161796][T15148] xt_hashlimit: size too large, truncated to 1048576 [ 326.185788][T15154] syzkaller1: entered promiscuous mode [ 326.194098][T15154] syzkaller1: entered allmulticast mode [ 326.318082][T15160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.357889][T15160] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 326.633583][T15164] syzkaller0: entered promiscuous mode [ 326.646819][T15164] syzkaller0: entered allmulticast mode [ 327.194727][T15187] bridge0: port 1(gretap0) entered blocking state [ 327.227423][T15187] bridge0: port 1(gretap0) entered disabled state [ 327.244872][T15187] gretap0: entered allmulticast mode [ 327.260953][T15187] gretap0: entered promiscuous mode [ 328.468206][ T7955] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 328.827389][ T7955] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 328.836863][T13248] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 329.408770][T15289] __nla_validate_parse: 2 callbacks suppressed [ 329.408791][T15289] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2506'. [ 329.443712][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2506'. [ 329.932272][T13248] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 329.957468][T13248] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 330.024540][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 330.357763][T15311] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 330.472315][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'. [ 330.567579][ T7955] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 330.826671][T15335] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 330.939099][T15335] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 331.123111][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 331.174749][T15353] xt_bpf: check failed: parse error [ 331.385814][T15359] netlink: 'syz.2.2526': attribute type 16 has an invalid length. [ 331.394463][T15359] netlink: 63410 bytes leftover after parsing attributes in process `syz.2.2526'. [ 331.585887][T15369] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2530'. [ 331.813518][T15381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2533'. [ 331.857192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 331.865351][ C0] lec:lec_tx_timeout: lec0 [ 331.870179][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.409819][T15405] delete_channel: no stack [ 332.427706][T15405] delete_channel: no stack [ 332.660870][T15423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2543'. [ 333.613718][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 333.884908][T15474] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 333.944545][T15476] netlink: 'syz.0.2558': attribute type 10 has an invalid length. [ 334.417690][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 334.728901][T15514] __nla_validate_parse: 2 callbacks suppressed [ 334.728923][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2566'. [ 334.908518][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 335.137269][T15524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2568'. [ 335.146452][T15524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2568'. [ 335.464133][T15543] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 335.474717][T15540] netlink: 'syz.2.2572': attribute type 13 has an invalid length. [ 335.532483][T15540] netlink: 'syz.2.2572': attribute type 17 has an invalid length. [ 335.725566][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 335.734724][T15552] openvswitch: netlink: Invalid VLAN frame [ 335.865087][T15540] gretap0: left promiscuous mode [ 335.942756][T15554] netlink: 'syz.1.2576': attribute type 3 has an invalid length. [ 335.961849][T15555] netlink: 'syz.1.2576': attribute type 3 has an invalid length. [ 336.009011][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2577'. [ 336.055647][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'. [ 336.081993][T15540] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.120832][T15540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 336.293455][T15554] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 336.330233][T15574] netlink: 'syz.2.2581': attribute type 2 has an invalid length. [ 336.368633][T15570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.378233][T15570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.411159][T15570] batadv0 (unregistering): left promiscuous mode [ 336.434293][T15579] bridge0: entered allmulticast mode [ 336.440261][T15579] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 336.489357][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2582'. [ 336.537625][T15576] hsr_slave_0: left promiscuous mode [ 336.575667][T15576] hsr_slave_1: left promiscuous mode [ 336.734672][T15592] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 336.897192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 336.905271][ C0] lec:lec_tx_timeout: lec0 [ 336.910193][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 337.274860][T15616] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 337.303142][T15616] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 337.411632][T13660] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.433610][T13660] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.466530][T13660] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.485192][T13660] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.640867][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 337.684970][T15642] xt_policy: neither incoming nor outgoing policy selected [ 338.010003][T15653] syzkaller1: entered promiscuous mode [ 338.015682][T15653] syzkaller1: entered allmulticast mode [ 338.054763][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2610'. [ 338.363869][T15657] netlink: 'syz.4.2611': attribute type 28 has an invalid length. [ 339.257484][T15703] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 339.531875][T15716] netlink: 'syz.0.2626': attribute type 2 has an invalid length. [ 339.895587][T15733] FAULT_INJECTION: forcing a failure. [ 339.895587][T15733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.919890][T15734] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.938138][T15733] CPU: 1 UID: 0 PID: 15733 Comm: syz.0.2629 Not tainted syzkaller #0 PREEMPT(full) [ 339.938169][T15733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.938188][T15733] Call Trace: [ 339.938195][T15733] [ 339.938203][T15733] dump_stack_lvl+0xe8/0x150 [ 339.938235][T15733] should_fail_ex+0x412/0x560 [ 339.938268][T15733] _copy_to_user+0x31/0xb0 [ 339.938293][T15733] simple_read_from_buffer+0xe1/0x170 [ 339.938331][T15733] proc_fail_nth_read+0x1bb/0x230 [ 339.938364][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.938396][T15733] ? rw_verify_area+0x2a6/0x4d0 [ 339.938414][T15733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.938444][T15733] vfs_read+0x20c/0xa70 [ 339.938462][T15733] ? fdget_pos+0x246/0x320 [ 339.938484][T15733] ? __pfx___mutex_lock+0x10/0x10 [ 339.938515][T15733] ? __pfx_vfs_read+0x10/0x10 [ 339.938540][T15733] ? __fget_files+0x2a/0x420 [ 339.938575][T15733] ? __fget_files+0x3a0/0x420 [ 339.938606][T15733] ? __fget_files+0x2a/0x420 [ 339.938647][T15733] ksys_read+0x150/0x270 [ 339.938674][T15733] ? __pfx_ksys_read+0x10/0x10 [ 339.938710][T15733] do_syscall_64+0x14d/0xf80 [ 339.938740][T15733] ? trace_irq_disable+0x3b/0x150 [ 339.938759][T15733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.938781][T15733] ? clear_bhb_loop+0x40/0x90 [ 339.938807][T15733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.938828][T15733] RIP: 0033:0x7f70efd5d04e [ 339.938849][T15733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.938867][T15733] RSP: 002b:00007f70f0c9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.938890][T15733] RAX: ffffffffffffffda RBX: 00007f70f0c9e6c0 RCX: 00007f70efd5d04e [ 339.938906][T15733] RDX: 000000000000000f RSI: 00007f70f0c9e0a0 RDI: 0000000000000004 [ 339.938920][T15733] RBP: 00007f70f0c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.938933][T15733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.938945][T15733] R13: 00007f70f0016218 R14: 00007f70f0016180 R15: 00007ffd924fc438 [ 339.938980][T15733] [ 340.157946][T15734] __nla_validate_parse: 7 callbacks suppressed [ 340.157964][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2630'. [ 340.312474][T15738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2632'. [ 340.449806][T15748] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2634'. [ 340.466112][T15738] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 340.765266][ T30] audit: type=1800 audit(1775036595.416:10): pid=15755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2636" name="memory.events" dev="tmpfs" ino=2997 res=0 errno=0 [ 340.979880][T15757] syzkaller0: entered promiscuous mode [ 340.985437][T15757] syzkaller0: entered allmulticast mode [ 341.061090][T15771] "syz.1.2640" (15771) uses obsolete ecb(arc4) skcipher [ 341.125609][T15774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 341.264691][T15780] ip6t_srh: unknown srh invflags 4000 [ 341.545898][T15795] bond0: Caught tx_queue_len zero misconfig [ 341.802026][T15810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2649'. [ 341.917123][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 341.925219][ C0] lec:lec_tx_timeout: lec0 [ 341.937299][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 342.005478][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2649'. [ 342.087345][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 342.212391][T15818] C (unregistering): left promiscuous mode [ 342.248327][T15818] team0: Port device C removed [ 342.315209][T15821] batman_adv: batadv0: Adding interface: ipvlan2 [ 342.332104][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 342.346681][T15832] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2654'. [ 342.358968][T15821] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.415236][T15821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.449590][T15821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.478601][T15821] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 342.484257][T15835] validate_nla: 1 callbacks suppressed [ 342.484330][T15835] netlink: 'syz.4.2653': attribute type 10 has an invalid length. [ 342.533666][T15832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 342.545887][T15835] team0: left promiscuous mode [ 342.551597][T15835] team0: Cannot enslave team device to itself [ 342.737275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.847239][T15852] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2659'. [ 342.931177][T15856] Unsupported ieee802154 address type: 0 [ 343.014640][T15854] netlink: 'syz.3.2661': attribute type 21 has an invalid length. [ 343.174520][T15864] openvswitch: netlink: Flow actions attr not present in new flow. [ 343.256128][T15871] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.263546][T15871] IPv6: NLM_F_CREATE should be set when creating new route [ 343.387293][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 343.616634][T15890] ip6gre0: Caught tx_queue_len zero misconfig [ 343.646867][T15888] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 343.670323][T15888] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 343.809924][T15902] netlink: 'syz.4.2676': attribute type 8 has an invalid length. [ 343.967949][T15911] pim6reg1: entered promiscuous mode [ 343.974159][T15911] pim6reg1: entered allmulticast mode [ 344.010911][T15910] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 344.021084][T15910] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 344.031369][T15910] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 344.248904][T15922] syzkaller1: entered promiscuous mode [ 344.254416][T15922] syzkaller1: entered allmulticast mode [ 344.262050][T15922] netlink: 'syz.1.2685': attribute type 1 has an invalid length. [ 344.272387][T15932] x_tables: duplicate underflow at hook 1 [ 344.278966][T15930] x_tables: duplicate underflow at hook 1 [ 344.460647][T15939] xt_l2tp: wrong L2TP version: 0 [ 344.465924][T15939] xt_l2tp: wrong L2TP version: 0 [ 344.676091][T15950] dvmrp1: entered allmulticast mode [ 344.707816][T15950] dvmrp1: left allmulticast mode [ 344.942377][T15959] batadv_slave_0: Caught tx_queue_len zero misconfig [ 344.951616][T15960] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 345.252568][T15985] __nla_validate_parse: 16 callbacks suppressed [ 345.252595][T15985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2698'. [ 345.480203][T15989] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.790531][T15992] IPVS: set_ctl: invalid protocol: 2 172.20.20.46:20000 [ 345.925571][T16023] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2708'. [ 346.126950][T16026] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 346.168675][T16026] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 346.174829][T16039] gtp1: entered promiscuous mode [ 346.184094][T16039] gtp1: entered allmulticast mode [ 346.194237][T16032] syzkaller0: entered promiscuous mode [ 346.200478][T16032] syzkaller0: entered allmulticast mode [ 346.818952][T16068] netlink: 'syz.3.2720': attribute type 8 has an invalid length. [ 346.856144][T16070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2721'. [ 346.888543][T16068] openvswitch: netlink: IPv4 tun info is not correct [ 346.947109][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 346.955205][ C0] lec:lec_tx_timeout: lec0 [ 346.959975][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 350.266181][T16143] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 350.354173][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.371887][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.381244][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.407547][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.415670][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 350.446165][ T5143] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.455964][ T5143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.464629][ T5143] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.482045][ T5143] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.490758][ T5143] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.767365][T16206] netlink: 'syz.2.2757': attribute type 21 has an invalid length. [ 351.795806][T16206] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.803126][T16206] IPv6: NLM_F_CREATE should be set when creating new route [ 351.810487][T16206] IPv6: NLM_F_CREATE should be set when creating new route [ 351.817786][T16206] IPv6: NLM_F_CREATE should be set when creating new route [ 351.926741][T16211] SET target dimension over the limit! [ 351.967132][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 351.975218][ C0] lec:lec_tx_timeout: lec0 [ 351.980184][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 352.058905][T16216] openvswitch: netlink: IPv4 tun info is not correct [ 352.242864][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 352.283541][T16232] vlan3: entered promiscuous mode [ 352.292189][T16232] batadv0: entered promiscuous mode [ 352.564845][T16147] chnl_net:caif_netlink_parms(): no params data found [ 352.587187][ T5838] Bluetooth: hci5: command tx timeout [ 352.608830][T16241] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2765'. [ 353.130331][T16147] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.175255][T16147] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.204076][T16147] bridge_slave_0: entered allmulticast mode [ 353.232736][T16147] bridge_slave_0: entered promiscuous mode [ 353.261498][T16288] team_slave_1: Caught tx_queue_len zero misconfig [ 353.317477][T16147] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.367354][T16147] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.374668][T16147] bridge_slave_1: entered allmulticast mode [ 353.427986][T16147] bridge_slave_1: entered promiscuous mode [ 353.508902][T16293] batadv_slave_0: Caught tx_queue_len zero misconfig [ 353.561651][T16147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.574775][T16147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.634521][T16147] team0: Port device team_slave_0 added [ 353.660360][T16147] team0: Port device team_slave_1 added [ 353.717650][T16302] netlink: 'syz.2.2779': attribute type 1 has an invalid length. [ 353.750866][T16305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 353.782749][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2778'. [ 353.792118][T16302] 8021q: adding VLAN 0 to HW filter on device bond11 [ 353.796226][T16147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.806185][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.832791][T16147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.885575][T16147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.907415][T16147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.984438][T16147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.992025][T16319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2783'. [ 354.008654][T16322] netlink: 'syz.4.2784': attribute type 3 has an invalid length. [ 354.025744][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2783'. [ 354.032711][T16322] netlink: 'syz.4.2784': attribute type 1 has an invalid length. [ 354.068674][T16322] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2784'. [ 354.095257][T16147] hsr_slave_0: entered promiscuous mode [ 354.106055][T16147] hsr_slave_1: entered promiscuous mode [ 354.113167][T16147] debugfs: 'hsr0' already exists in 'hsr' [ 354.119040][T16147] Cannot create hsr debugfs directory [ 354.176671][T16324] netlink: 196032 bytes leftover after parsing attributes in process `syz.1.2783'. [ 354.186841][T16324] netlink: Unknown conntrack attr (type=2304, max=9) [ 354.277379][ T1789] block nbd2: Possible stuck request ffff888027208000: control (read@0,1024B). Runtime 120 seconds [ 354.288372][ T1789] block nbd2: Possible stuck request ffff888027208200: control (read@1024,1024B). Runtime 120 seconds [ 354.300084][ T1789] block nbd2: Possible stuck request ffff888027208400: control (read@2048,1024B). Runtime 120 seconds [ 354.311639][ T1789] block nbd2: Possible stuck request ffff888027208600: control (read@3072,1024B). Runtime 120 seconds [ 354.481236][T16147] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.578663][T16147] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.649546][T16147] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.657745][ T5838] Bluetooth: hci5: command tx timeout [ 354.756652][T16357] netlink: 'syz.3.2791': attribute type 9 has an invalid length. [ 354.783803][T16147] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.898455][T16362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'. [ 354.963979][ T5838] block nbd5: Receive control failed (result -1) [ 355.016797][T16147] [ 355.019193][T16147] ====================================================== [ 355.026237][T16147] WARNING: possible circular locking dependency detected [ 355.033304][T16147] syzkaller #0 Not tainted [ 355.037755][T16147] ------------------------------------------------------ [ 355.044799][T16147] syz-executor/16147 is trying to acquire lock: [ 355.051069][T16147] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 355.060450][T16147] [ 355.060450][T16147] but task is already holding lock: [ 355.067844][T16147] ffffffff8f17c048 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 355.076797][T16147] [ 355.076797][T16147] which lock already depends on the new lock. [ 355.076797][T16147] [ 355.087227][T16147] [ 355.087227][T16147] the existing dependency chain (in reverse order) is: [ 355.096351][T16147] [ 355.096351][T16147] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 355.103519][T16147] __mutex_lock+0x19f/0x1300 [ 355.108694][T16147] get_device_parent+0x16f/0x3a0 [ 355.114196][T16147] device_add+0x2e1/0xb70 [ 355.119086][T16147] device_create+0x269/0x300 [ 355.124247][T16147] msr_device_create+0x33/0x50 [ 355.129554][T16147] cpuhp_invoke_callback+0x445/0x860 [ 355.135399][T16147] cpuhp_thread_fun+0x36b/0x780 [ 355.140792][T16147] smpboot_thread_fn+0x541/0xa50 [ 355.146536][T16147] kthread+0x388/0x470 [ 355.151173][T16147] ret_from_fork+0x51e/0xb90 [ 355.156332][T16147] ret_from_fork_asm+0x1a/0x30 [ 355.161646][T16147] [ 355.161646][T16147] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 355.169224][T16147] cpuhp_thread_fun+0x127/0x780 [ 355.174634][T16147] smpboot_thread_fn+0x541/0xa50 [ 355.180118][T16147] kthread+0x388/0x470 [ 355.184724][T16147] ret_from_fork+0x51e/0xb90 [ 355.189851][T16147] ret_from_fork_asm+0x1a/0x30 [ 355.195177][T16147] [ 355.195177][T16147] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 355.202950][T16147] cpus_read_lock+0x42/0x160 [ 355.208100][T16147] static_key_slow_inc+0x12/0x30 [ 355.213593][T16147] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 355.219374][T16147] do_ipv6_setsockopt+0xd9f/0x3150 [ 355.225048][T16147] ipv6_setsockopt+0x59/0x170 [ 355.230287][T16147] do_sock_setsockopt+0x17c/0x1b0 [ 355.235970][T16147] __x64_sys_setsockopt+0x13d/0x1b0 [ 355.242062][T16147] do_syscall_64+0x14d/0xf80 [ 355.247203][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.253630][T16147] [ 355.253630][T16147] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 355.261386][T16147] lock_sock_nested+0x41/0x100 [ 355.266692][T16147] inet_shutdown+0x6a/0x390 [ 355.271754][T16147] nbd_mark_nsock_dead+0x2e9/0x560 [ 355.277402][T16147] recv_work+0x1c7f/0x1d90 [ 355.282353][T16147] process_scheduled_works+0xb6e/0x18c0 [ 355.288443][T16147] worker_thread+0xa53/0xfc0 [ 355.293587][T16147] kthread+0x388/0x470 [ 355.298193][T16147] ret_from_fork+0x51e/0xb90 [ 355.303335][T16147] ret_from_fork_asm+0x1a/0x30 [ 355.308641][T16147] [ 355.308641][T16147] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 355.316422][T16147] __mutex_lock+0x19f/0x1300 [ 355.321556][T16147] nbd_queue_rq+0x37b/0x1100 [ 355.326728][T16147] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 355.332830][T16147] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 355.339720][T16147] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 355.346351][T16147] blk_mq_run_hw_queue+0x348/0x4f0 [ 355.352000][T16147] blk_mq_dispatch_list+0xd16/0xe10 [ 355.357743][T16147] blk_mq_flush_plug_list+0x48d/0x570 [ 355.363660][T16147] __blk_flush_plug+0x3ed/0x4d0 [ 355.369229][T16147] __submit_bio+0x28d/0x580 [ 355.374282][T16147] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 355.380454][T16147] block_read_full_folio+0x599/0x830 [ 355.386276][T16147] filemap_read_folio+0x137/0x3b0 [ 355.391869][T16147] do_read_cache_folio+0x358/0x590 [ 355.397530][T16147] read_part_sector+0xb6/0x2b0 [ 355.402831][T16147] adfspart_check_ICS+0xa5/0xa40 [ 355.408402][T16147] bdev_disk_changed+0x7ba/0x1550 [ 355.413968][T16147] blkdev_get_whole+0x380/0x510 [ 355.419372][T16147] bdev_open+0x31e/0xd30 [ 355.424154][T16147] blkdev_open+0x470/0x610 [ 355.429114][T16147] do_dentry_open+0x785/0x14e0 [ 355.434436][T16147] vfs_open+0x3b/0x340 [ 355.439047][T16147] path_openat+0x2e08/0x3860 [ 355.444178][T16147] do_file_open+0x23e/0x4a0 [ 355.449218][T16147] do_sys_openat2+0x113/0x200 [ 355.454452][T16147] __x64_sys_openat+0x138/0x170 [ 355.459846][T16147] do_syscall_64+0x14d/0xf80 [ 355.464983][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.471412][T16147] [ 355.471412][T16147] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 355.478645][T16147] __mutex_lock+0x19f/0x1300 [ 355.483780][T16147] nbd_queue_rq+0xc6/0x1100 [ 355.488831][T16147] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 355.494927][T16147] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 355.501886][T16147] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 355.508414][T16147] blk_mq_run_hw_queue+0x348/0x4f0 [ 355.514078][T16147] blk_mq_dispatch_list+0xd16/0xe10 [ 355.519999][T16147] blk_mq_flush_plug_list+0x48d/0x570 [ 355.525929][T16147] __blk_flush_plug+0x3ed/0x4d0 [ 355.531323][T16147] __submit_bio+0x28d/0x580 [ 355.536379][T16147] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 355.542553][T16147] block_read_full_folio+0x599/0x830 [ 355.548382][T16147] filemap_read_folio+0x137/0x3b0 [ 355.553954][T16147] do_read_cache_folio+0x358/0x590 [ 355.559688][T16147] read_part_sector+0xb6/0x2b0 [ 355.564987][T16147] adfspart_check_ICS+0xa5/0xa40 [ 355.570463][T16147] bdev_disk_changed+0x7ba/0x1550 [ 355.576114][T16147] blkdev_get_whole+0x380/0x510 [ 355.581511][T16147] bdev_open+0x31e/0xd30 [ 355.586289][T16147] blkdev_open+0x470/0x610 [ 355.591245][T16147] do_dentry_open+0x785/0x14e0 [ 355.596552][T16147] vfs_open+0x3b/0x340 [ 355.601167][T16147] path_openat+0x2e08/0x3860 [ 355.606300][T16147] do_file_open+0x23e/0x4a0 [ 355.611350][T16147] do_sys_openat2+0x113/0x200 [ 355.616665][T16147] __x64_sys_openat+0x138/0x170 [ 355.622233][T16147] do_syscall_64+0x14d/0xf80 [ 355.627373][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.633817][T16147] [ 355.633817][T16147] -> #3 (set->srcu){.+.+}-{0:0}: [ 355.640970][T16147] __synchronize_srcu+0xca/0x300 [ 355.646450][T16147] elevator_switch+0x1e8/0x7a0 [ 355.651751][T16147] elevator_change+0x2cc/0x450 [ 355.657051][T16147] elevator_set_default+0x36c/0x430 [ 355.662900][T16147] blk_register_queue+0x366/0x430 [ 355.668470][T16147] __add_disk+0x677/0xd50 [ 355.673459][T16147] add_disk_fwnode+0xfb/0x480 [ 355.678769][T16147] nbd_dev_add+0x72c/0xb50 [ 355.683724][T16147] nbd_init+0x168/0x1f0 [ 355.688513][T16147] do_one_initcall+0x250/0x8d0 [ 355.694187][T16147] do_initcall_level+0x104/0x190 [ 355.700019][T16147] do_initcalls+0x59/0xa0 [ 355.705065][T16147] kernel_init_freeable+0x2a6/0x3e0 [ 355.710802][T16147] kernel_init+0x1d/0x1d0 [ 355.715674][T16147] ret_from_fork+0x51e/0xb90 [ 355.720806][T16147] ret_from_fork_asm+0x1a/0x30 [ 355.726123][T16147] [ 355.726123][T16147] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 355.733981][T16147] __mutex_lock+0x19f/0x1300 [ 355.739385][T16147] elevator_change+0x1b3/0x450 [ 355.744781][T16147] elevator_set_none+0xb5/0x140 [ 355.750172][T16147] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 355.756522][T16147] nbd_start_device+0x17f/0xb10 [ 355.761912][T16147] nbd_genl_connect+0x165b/0x1cf0 [ 355.767477][T16147] genl_family_rcv_msg_doit+0x22a/0x330 [ 355.773573][T16147] genl_rcv_msg+0x61c/0x7a0 [ 355.778621][T16147] netlink_rcv_skb+0x232/0x4b0 [ 355.783927][T16147] genl_rcv+0x28/0x40 [ 355.788463][T16147] netlink_unicast+0x80f/0x9b0 [ 355.793777][T16147] netlink_sendmsg+0x813/0xb40 [ 355.799170][T16147] ____sys_sendmsg+0x972/0x9f0 [ 355.804479][T16147] ___sys_sendmsg+0x2a5/0x360 [ 355.809703][T16147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 355.815703][T16147] do_syscall_64+0x14d/0xf80 [ 355.820939][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.827370][T16147] [ 355.827370][T16147] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 355.836084][T16147] blk_alloc_queue+0x546/0x680 [ 355.841411][T16147] __blk_mq_alloc_disk+0x197/0x390 [ 355.847062][T16147] nbd_dev_add+0x499/0xb50 [ 355.852116][T16147] nbd_init+0x168/0x1f0 [ 355.856828][T16147] do_one_initcall+0x250/0x8d0 [ 355.862139][T16147] do_initcall_level+0x104/0x190 [ 355.867633][T16147] do_initcalls+0x59/0xa0 [ 355.872505][T16147] kernel_init_freeable+0x2a6/0x3e0 [ 355.878327][T16147] kernel_init+0x1d/0x1d0 [ 355.883204][T16147] ret_from_fork+0x51e/0xb90 [ 355.888346][T16147] ret_from_fork_asm+0x1a/0x30 [ 355.893656][T16147] [ 355.893656][T16147] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 355.900885][T16147] __lock_acquire+0x15a5/0x2cf0 [ 355.906281][T16147] lock_acquire+0xf0/0x2e0 [ 355.911240][T16147] fs_reclaim_acquire+0x71/0x100 [ 355.916720][T16147] __kmalloc_cache_noprof+0x40/0x660 [ 355.922548][T16147] get_device_parent+0x255/0x3a0 [ 355.928030][T16147] device_add+0x2e1/0xb70 [ 355.932909][T16147] netdev_register_kobject+0x178/0x310 [ 355.938908][T16147] register_netdevice+0x12c0/0x1cf0 [ 355.944651][T16147] nsim_create+0xb92/0x1100 [ 355.949700][T16147] __nsim_dev_port_add+0x72a/0xb50 [ 355.955357][T16147] nsim_dev_port_add_all+0x37/0xf0 [ 355.961016][T16147] nsim_drv_probe+0x905/0xc20 [ 355.966238][T16147] really_probe+0x267/0xaf0 [ 355.971284][T16147] __driver_probe_device+0x18c/0x320 [ 355.977121][T16147] driver_probe_device+0x4f/0x240 [ 355.982694][T16147] __device_attach_driver+0x279/0x430 [ 355.988609][T16147] bus_for_each_drv+0x258/0x2f0 [ 355.994002][T16147] __device_attach+0x2c5/0x450 [ 355.999313][T16147] device_initial_probe+0xa1/0xd0 [ 356.004880][T16147] bus_probe_device+0x12a/0x220 [ 356.010299][T16147] device_add+0x7b6/0xb70 [ 356.015197][T16147] new_device_store+0x37b/0x710 [ 356.020590][T16147] kernfs_fop_write_iter+0x3af/0x540 [ 356.026416][T16147] vfs_write+0x61d/0xb90 [ 356.031296][T16147] ksys_write+0x150/0x270 [ 356.036183][T16147] do_syscall_64+0x14d/0xf80 [ 356.041368][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.047809][T16147] [ 356.047809][T16147] other info that might help us debug this: [ 356.047809][T16147] [ 356.058074][T16147] Chain exists of: [ 356.058074][T16147] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 356.058074][T16147] [ 356.070186][T16147] Possible unsafe locking scenario: [ 356.070186][T16147] [ 356.077649][T16147] CPU0 CPU1 [ 356.083029][T16147] ---- ---- [ 356.088409][T16147] lock(gdp_mutex); [ 356.092410][T16147] lock(cpuhp_state-up); [ 356.099277][T16147] lock(gdp_mutex); [ 356.105721][T16147] lock(fs_reclaim); [ 356.109718][T16147] [ 356.109718][T16147] *** DEADLOCK *** [ 356.109718][T16147] [ 356.117875][T16147] 8 locks held by syz-executor/16147: [ 356.123291][T16147] #0: ffff888021f72420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 356.132229][T16147] #1: ffff888069704888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 356.141995][T16147] #2: ffff8880296af0f8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 356.152036][T16147] #3: ffffffff8f43d968 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 356.162427][T16147] #4: ffff888045120130 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 356.171695][T16147] #5: ffff888045122260 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc20 [ 356.181743][T16147] #6: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x839/0x1100 [ 356.190746][T16147] #7: ffffffff8f17c048 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 356.200110][T16147] [ 356.200110][T16147] stack backtrace: [ 356.206032][T16147] CPU: 1 UID: 0 PID: 16147 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 356.206058][T16147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.206069][T16147] Call Trace: [ 356.206079][T16147] [ 356.206088][T16147] dump_stack_lvl+0xe8/0x150 [ 356.206117][T16147] print_circular_bug+0x2e1/0x300 [ 356.206148][T16147] check_noncircular+0x12e/0x150 [ 356.206177][T16147] __lock_acquire+0x15a5/0x2cf0 [ 356.206203][T16147] ? lockdep_unlock+0x5d/0xd0 [ 356.206222][T16147] ? __lock_acquire+0x146e/0x2cf0 [ 356.206250][T16147] lock_acquire+0xf0/0x2e0 [ 356.206271][T16147] ? __kmalloc_cache_noprof+0x40/0x660 [ 356.206295][T16147] fs_reclaim_acquire+0x71/0x100 [ 356.206315][T16147] ? __kmalloc_cache_noprof+0x40/0x660 [ 356.206334][T16147] __kmalloc_cache_noprof+0x40/0x660 [ 356.206353][T16147] ? get_device_parent+0x255/0x3a0 [ 356.206375][T16147] ? do_raw_spin_unlock+0xf5/0x210 [ 356.206394][T16147] get_device_parent+0x255/0x3a0 [ 356.206417][T16147] device_add+0x2e1/0xb70 [ 356.206438][T16147] ? device_initialize+0x26a/0x460 [ 356.206460][T16147] netdev_register_kobject+0x178/0x310 [ 356.206488][T16147] register_netdevice+0x12c0/0x1cf0 [ 356.206512][T16147] ? dput+0x37/0x1a0 [ 356.206543][T16147] ? __pfx_register_netdevice+0x10/0x10 [ 356.206566][T16147] ? __debugfs_create_file+0x34f/0x400 [ 356.206586][T16147] ? debugfs_create_file_full+0x3f/0x60 [ 356.206606][T16147] nsim_create+0xb92/0x1100 [ 356.206644][T16147] __nsim_dev_port_add+0x72a/0xb50 [ 356.206672][T16147] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 356.206709][T16147] ? queue_delayed_work_on+0x171/0x1e0 [ 356.206738][T16147] nsim_dev_port_add_all+0x37/0xf0 [ 356.206763][T16147] nsim_drv_probe+0x905/0xc20 [ 356.206785][T16147] ? up_write+0x1ab/0x410 [ 356.206810][T16147] ? __pfx_nsim_drv_probe+0x10/0x10 [ 356.206834][T16147] ? kernfs_create_link+0x187/0x200 [ 356.206858][T16147] ? driver_sysfs_add+0x1fe/0x210 [ 356.206882][T16147] ? __pfx_nsim_bus_probe+0x10/0x10 [ 356.206900][T16147] really_probe+0x267/0xaf0 [ 356.206927][T16147] __driver_probe_device+0x18c/0x320 [ 356.206953][T16147] driver_probe_device+0x4f/0x240 [ 356.206978][T16147] __device_attach_driver+0x279/0x430 [ 356.207005][T16147] bus_for_each_drv+0x258/0x2f0 [ 356.207023][T16147] ? __pfx___device_attach_driver+0x10/0x10 [ 356.207050][T16147] ? __pfx_bus_for_each_drv+0x10/0x10 [ 356.207075][T16147] __device_attach+0x2c5/0x450 [ 356.207101][T16147] ? __pfx___device_attach+0x10/0x10 [ 356.207126][T16147] ? _raw_spin_unlock+0x28/0x50 [ 356.207150][T16147] device_initial_probe+0xa1/0xd0 [ 356.207175][T16147] bus_probe_device+0x12a/0x220 [ 356.207191][T16147] ? device_add+0x726/0xb70 [ 356.207212][T16147] device_add+0x7b6/0xb70 [ 356.207234][T16147] new_device_store+0x37b/0x710 [ 356.207256][T16147] ? __pfx_new_device_store+0x10/0x10 [ 356.207274][T16147] ? sysfs_file_kobj+0x1a/0x230 [ 356.207296][T16147] ? sysfs_file_kobj+0x1e4/0x230 [ 356.207318][T16147] ? sysfs_kf_write+0x166/0x260 [ 356.207341][T16147] ? __pfx_sysfs_kf_write+0x10/0x10 [ 356.207363][T16147] kernfs_fop_write_iter+0x3af/0x540 [ 356.207385][T16147] vfs_write+0x61d/0xb90 [ 356.207406][T16147] ? __pfx_vfs_write+0x10/0x10 [ 356.207426][T16147] ? kmem_cache_free+0x187/0x630 [ 356.207448][T16147] ? fd_install+0x94/0x3d0 [ 356.207472][T16147] ? do_sys_openat2+0x14c/0x200 [ 356.207503][T16147] ksys_write+0x150/0x270 [ 356.207522][T16147] ? __pfx_ksys_write+0x10/0x10 [ 356.207546][T16147] do_syscall_64+0x14d/0xf80 [ 356.207577][T16147] ? trace_irq_disable+0x3b/0x150 [ 356.207592][T16147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.207609][T16147] ? clear_bhb_loop+0x40/0x90 [ 356.207628][T16147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.207646][T16147] RIP: 0033:0x7ff3ca35d04e [ 356.207664][T16147] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.207680][T16147] RSP: 002b:00007ffd9aab00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.207699][T16147] RAX: ffffffffffffffda RBX: 000055557288d500 RCX: 00007ff3ca35d04e [ 356.207712][T16147] RDX: 0000000000000003 RSI: 00007ffd9aab0150 RDI: 0000000000000005 [ 356.207723][T16147] RBP: 00007ff3ca433538 R08: 0000000000000000 R09: 0000000000000000 [ 356.207734][T16147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 356.207744][T16147] R13: 00007ffd9aab0150 R14: 00007ff3cb144620 R15: 0000000000000003 [ 356.207763][T16147] [ 356.796014][ T5838] Bluetooth: hci5: command tx timeout [ 356.834165][T16147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.894607][T16147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.916183][T16147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.934680][T16147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.987096][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 356.995169][ C0] lec:lec_tx_timeout: lec0 [ 357.000067][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 357.014787][T16147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.033434][T16147] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.045607][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.052735][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.127368][T16147] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.138060][T16147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.151002][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.158154][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.282326][T16147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.314632][T16147] veth0_vlan: entered promiscuous mode [ 357.324251][T16147] veth1_vlan: entered promiscuous mode [ 357.345364][T16147] veth0_macvtap: entered promiscuous mode [ 357.354766][T16147] veth1_macvtap: entered promiscuous mode [ 357.370408][T16147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.382900][T16147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.395157][ T6177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.404778][ T6177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.418513][ T6177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.427588][ T6177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.450423][T16147] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 357.473374][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.480218][T16147] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 357.492040][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.512587][ T9369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.520620][ T9369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.817256][ T5838] Bluetooth: hci5: command tx timeout [ 360.507988][ T5194] udevd[5194]: worker [11202] /devices/virtual/block/nbd2 is taking a long time [ 361.297289][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 362.007112][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 362.015184][ C0] lec:lec_tx_timeout: lec0 [ 362.020015][ C0] lec:lec_start_xmit: lec0:No lecd attached