last executing test programs: 5.872426657s ago: executing program 0 (id=1140): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/217, 0xd9}, {&(0x7f0000000900)=""/236, 0xec}], 0x2, &(0x7f0000000400)=""/97, 0x61}, 0xfffffffe}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x19, 0x0, &(0x7f0000000280)) recvfrom$unix(r0, &(0x7f0000000380)=""/74, 0x4a, 0x40010000, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'team0\x00', &(0x7f0000000a80)=@ethtool_rxnfc={0x2d, 0x7, 0x1ff, {0xa, @ah_ip4_spec={@private=0xa010102, @rand_addr=0x64010100, 0x0, 0xd2}, {0x0, @broadcast, 0xffff, 0xa140, [0x4, 0x8001]}, @usr_ip4_spec={@private=0xa010102, @private=0xa010101, 0x2, 0x1, 0x1, 0x8}, {0x0, @multicast, 0x4, 0x7fff, [0x3, 0x3]}, 0x80000000}, 0x6, [0x0, 0xfffffffe, 0x1, 0x9a70, 0x4e05, 0xef5]}}) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001400b59500000000000000000a40000056e1bbdffeb6b2501ad0d9a8be4518c70a7587fecfbbe202010ec9f9a7380718c9aa4b1e5ba8b9e17416a56e393c4b3b66e907baca85086a5071591733e9f29728c9917af469114841c96a83a07fe670eb944c2cb421097fd4786f08f151ef66c6868fc0b6fa7c824ee83dae260b74c25bdef60d060000000000007a99321602672d2a307157943d0c3a8e93d5ae20dbe4ec851e70c087", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fe80000000000000000000000000000a"], 0x40}}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x22, &(0x7f00000006c0)=ANY=[@ANYBLOB="ff06007ab55ac59eb2fff5ab325f8d63080045e10014006500436edb296466bbd9b3fa00ef2b"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b0000000a000000050000000100000001000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00{:dQxi\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009'], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x24000044) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="779a312517f7b63a07328c6704516769248b386058cdf6d0c116b2c7355af9270a89d7adee8897eb97cd0fcfb8c8488168e18392a64cc462b30a9567422935706ce3df7a4113db7cdc58edf2fbdf2145b9324e3c8159ca69af88fbff7a31377c8d1f3cef4209fdb5b0077364f262482ec7bb0ff263dcc0929bf52309753aa2b021519a57c580333e8a7e6624f1ac3f6628b2357f25b3566e917248103ef74be89809cafcf46b4afff96f9b81ce7156946acf73f19a820c1b852fd7", @ANYRES32=r7, @ANYRES16=r1], 0x40}}, 0x0) 5.858816008s ago: executing program 4 (id=1142): syz_emit_ethernet(0x4e, &(0x7f0000000400)={@local, @random="b331687b8145", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "62d308", 0x18, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffd, {[@eol]}}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x8, 0x90, [0x0, 0x200000000040, 0x2000000003e4, 0x200000000600], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x108) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x80) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000000c0)=0x3, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x80, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x78, 0x3, 0x0, 0x0, {{0x100, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x53, 0x5, "dd1b10796f1d8e1030b18e47a7626d086cb854deec0347bb34b02755eabc9578879353e7dd2ebe292e4a0e79e20614bce1d659a9ad4a604a364e9752b4b3cab4fd97de547863373719ef6d09ae120f"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='wg0\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x800, @local, 0x9}]}, &(0x7f0000000480)=0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', r3, 0x29, 0x4, 0x0, 0x1, 0x0, @loopback, @mcast1, 0xaf, 0x80, 0x8, 0x6}}) 4.811209976s ago: executing program 4 (id=1147): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500000000003c0012800b000100697036746e6c00002c00028014000300ff02000000000000000000000000000114000200ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x804) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500000000003c0012800b000100697036746e6c00002c00028014000300ff02000000000000000000000000000114000200ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x804) r2 = epoll_create1(0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x3, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x20, 0x17, {0x17, 0x3, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008810}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000600)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r4, &(0x7f0000000040)="6e1a560a0f598f3b6225d0fdf4b73fb334dd3fb333a9bae46f6d092374aef9ee09513dd741ca89e36b45f94b9a3401aacc041cd16f9b5cf2f080d83d8341515e2617dd1ec09496bccd02f5f999b4d76e2ad93de6c02597704afb11b24ca6a3887749d998d9c6d27ab6aa07623b1cf6919bc3d7869fd3f0de28a5a3f5c7b0e0ac90fae83aab5317d7b1ffba647bb86c824a6d0c00cda1a6febf3d5a8a46becd96769ffc7d541e1a9a12d2d74f052b3edb7ab5b33f3dd5ad70e8b11ec5e78b1888c76bbea44618bea095b3fb0748e2d96da07ae7e45361bf", 0xd7, 0x811, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0), 0x8) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0xffff, 0xc4, 0x10}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x4, 0xd6, 0x65, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x1d, 0x80, 0x7, 0x0, 0x9, {[@mptcp=@remove_addr={0x1e, 0x59, 0x6, 0x0, "3bcc55e2fb4b662a463b24b28a4fafb428a89d60f9547d33690c48bf9581455479f14cea31faf5212327c508ed14d3cc9f1b20adaecc3b4c664e61295f92adc7b03928e6f24a8ee8e299effe97537d57096d808d21b4"}, @exp_fastopen={0xfe, 0x4}]}}, {"13d3b3875dfd9a3f6328f33f09ceec09986b30406704e2560f04592cb4869c77658fcb3eca004c77b183c5840dbb0fd30bcd067737d3f07dff1755aac0e628d921d141b089c15306c066b177aab8"}}}}, 0xe4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r7 = socket(0x27, 0x1, 0x4) bind$can_raw(r7, &(0x7f0000000580), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) connect$can_j1939(r7, &(0x7f0000000640)={0x1d, r8, 0x0, {0x0, 0x2e703b9ee5869039, 0x1}, 0x1}, 0x18) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c8, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf3, 0x14}}}}, [@NL80211_ATTR_IE={0x125, 0x2a, [@perr={0x84, 0x108, {0xa, 0x10, [{{0x0, 0x1}, @device_b, 0x1000, @value=@broadcast, 0x2a}, {{}, @device_b, 0x0, @void, 0x25}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0x18}, {{0x0, 0x1}, @device_b, 0x7fffffff, @value=@device_b, 0x3b}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x2a}, {{}, @device_b, 0x8000, @void, 0x12}, {{0x0, 0x1}, @device_b, 0x1, @value=@broadcast, 0x3d}, {{0x0, 0x1}, @broadcast, 0xfff, @value=@device_b, 0x2b}, {{}, @broadcast, 0x1, @void, 0x18}, {{}, @broadcast, 0x0, @void, 0x16}, {{0x0, 0x1}, @device_a, 0xdc, @value=@device_b, 0x3c}, {{}, @device_b, 0x3, @void, 0x40}, {{}, @broadcast, 0x4, @void, 0x3}, {{0x0, 0x1}, @broadcast, 0x10000, @value=@device_b, 0x32}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0x21}, {{}, @broadcast, 0x3, @void, 0x25}]}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x5, 0xfe, @device_a, 0x405b, 0xa, 0x2}}]}, @NL80211_ATTR_IE={0x17f, 0x2a, [@mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0xf3a, "d819dbb052be", @short="59e2fe650950f126"}}, @perr={0x84, 0x5b, {0xfc, 0x5, [{{0x0, 0x1}, @device_b, 0x2, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @broadcast, 0x8000, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x11}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x8}, {{}, @device_a, 0xeb, @void, 0x42}]}}, @fast_bss_trans={0x37, 0xdf, {0xa3, 0x8, "eb9d6af6c39221f5eede651cdd2ac15a", "1e69f5b321ec1f6a76552079883526adb6bc20a4c78bd7bb9859188a0a617439", "7b31db15ea56ba5ba55feece512481dc4191074f4b0f07a6f172e6437a624bb5", [{0x2, 0xb, "cc17ecc07be9a383f18825"}, {0x1, 0x13, "93d67a351287a17da35d87010dd25c01d70a80"}, {0x4, 0xa, "eb0947ad5e43a48af81c"}, {0x1, 0x13, "c097631689322d559c971c7144d53f8fbc2e0b"}, {0x1, 0x5, "b443539f84"}, {0x1, 0x1c, "f6bb0abe28001a52d25a8da0a95bea1a36e3b40525f31c20913faeb4"}, {0x1, 0xa, "5763336ab6fc4f516c62"}, {0x2, 0x17, "cc2d21e74e1fc162428694f5c88bce5576d2b9f9af9085"}]}}, @ibss={0x6, 0x2}, @challenge={0x10, 0x1, 0x8b}, @mesh_chsw={0x76, 0x6, {0xcd, 0x2, 0x39, 0x4}}, @link_id={0x65, 0x12, {@random="6c6b51dce64a", @device_b}}]}]}, 0x2c8}}, 0x4000) 4.594602028s ago: executing program 0 (id=1152): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.376318487s ago: executing program 0 (id=1154): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) listen(r2, 0x401) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "d9ee3d202ba2878a9f1e89d14773f777df3d"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x0) connect$ax25(r2, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 4.375627133s ago: executing program 4 (id=1155): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32) close(0x4) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000090601020000000000000000020000000900020073797a31008900000500010007000000980007800c0001800800164064010100060004404e220000e3b6d8c5d9e2cfdb56e5fcc42198eb146be85c73c94431020d506e39056c5d54f0ed0e4fb91ba5ca469032e0902085e699f2f18e63d66070cf43acdadddbf3a0666a31012d2e77b5c5eea4165b86d2fb91528d032a2e0cfed8b51772bd7ecb584c5f1e531534c37c0c040e34d600"/184], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async) unshare(0x6a040000) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r5, &(0x7f0000000080)={0x27, r4, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, 0x0, &(0x7f0000000180)) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40844}}], 0x1, 0x1) r11 = accept4$alg(r1, 0x0, 0x0, 0x80800) (async, rerun: 64) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4844}, 0x10) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000041f9a0001800900010068617368000000001c0002800800034000000066080001400000001308000240000000000900010073797a300000000009000200730cb53b2e797a3200000000140000001100010000000000000000003f550adabae18fcf8073ba5833191e298b0754d45b0745e2"], 0x84}, 0x1, 0x0, 0x0, 0x20014}, 0x0) sendmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="c7", 0x1}, {&(0x7f0000000280)='\\', 0x1}], 0x2}}], 0x1, 0x0) (async) r13 = socket$kcm(0x10, 0x2, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100001c0400000004f4ffff080000000000000069c8211a02fcb28245c3293a6cf993e5106bccbb9002fc09fdabf84788ee848f7c503e1c6b12c77c2742a70a848725f0bd0b39225f167243819185f7fa9a244b9abd5be35c7e3b870b1eb5dec65e64282778", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r14, &(0x7f0000000000), &(0x7f0000000200)=@tcp, 0x3}, 0x20) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000008000000050000000800000000580000", @ANYRES32, @ANYBLOB="bbcb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) 3.405363941s ago: executing program 0 (id=1168): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040824}, 0x8040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r3, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r5}, @void}}, [""]}, 0x24}}, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) accept4(r7, 0x0, 0x0, 0x800) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000004800)={{{@in=@remote, @in=@multicast2, 0x4e21, 0x12, 0x4e21, 0x8, 0xc84009923b5694b, 0x20, 0xa0}, {0x5, 0x2, 0x100000000, 0x67e, 0x7, 0x0, 0x4, 0x5}, {0xffffffff, 0x6, 0x80000001}, 0x5, 0x6e6bb1, 0x2, 0x0, 0x3, 0x2}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3503, 0x1, 0x2, 0xd, 0x8, 0x1c, 0x9}}, 0xe8) 3.198353618s ago: executing program 2 (id=1171): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c000000170a010800000000000000000200000809000200c7797a30040000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) socket(0x11, 0x80a, 0x0) (async) r4 = socket(0x11, 0x80a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000943b2a63c78205fbf697cfca23081ef421ce91ec6e18ebe1b74bba2eeda882dacbf89e783ab83f904bb18fc102ff0b871e0a82b9821c75e653a10019f44cb188e2320000dd"]}, 0x13f) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x30}}], 0x1, 0xc080) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xffffffffffffff8b, &(0x7f0000000400)={&(0x7f0000000180)=@ipmr_newroute={0x0, 0x18, 0x800, 0x70bd2a, 0x25dfdbff, {0x80, 0x80, 0x0, 0x49, 0xfc, 0x4, 0xfe, 0x2}, [@RTA_SRC={0x0, 0x2, @local}, @RTA_UID, @RTA_SRC={0x0, 0x2, @remote}, @RTA_IIF={0x0, 0x3, r1}, @RTA_SPORT={0x0, 0x1c, 0x4e20}, @RTA_IP_PROTO={0x0, 0x1b, 0x11}, @RTA_IP_PROTO={0x0, 0x1b, 0x11}, @RTA_TABLE={0x0, 0xf, 0xc}]}, 0x48}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bind$inet6(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) 2.930608305s ago: executing program 3 (id=1173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$isdn(0x22, 0x3, 0x10) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0x7, 0x1000009}, {0x6, 0x0, 0x0, 0x8eb6}]}) write(r2, &(0x7f00000004c0)="7438c5", 0x3) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000001040000050000004300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1100000f000000000000002000000100189100"/28], 0x48) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x30) (async) sendto$inet(r3, 0x0, 0xc3012aa9b37dbc88, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x840) 2.571779413s ago: executing program 3 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0xffef, 0x0, 0x1}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.571211888s ago: executing program 1 (id=1176): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5}}, 0x14}}, 0x20000000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000480006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7e4cd07ec3ee777de774fc7987cca41989080006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x2, 0x1, 0x1}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000800000000e0fc463cd1fb569607b50a0000000c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f00000014c0)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 2.424205342s ago: executing program 3 (id=1177): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) listen(r2, 0x401) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "d9ee3d202ba2878a9f1e89d14773f777df3d"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 2.366698083s ago: executing program 4 (id=1178): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x400) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) pwrite64(r3, 0x0, 0x0, 0x6) (async) pwrite64(r3, 0x0, 0x0, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r4, @ANYRES32=r4], 0xfc}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0xa800}, 0x20000000) 1.989906917s ago: executing program 4 (id=1179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r0, 0x0, 0x7c, 0x8) write(r2, &(0x7f0000003300)="ac", 0x1) r3 = accept4$rose(r2, 0x0, &(0x7f0000000080), 0x800) write(r3, 0x0, 0x63) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000600)="3c0dfe", 0x3}], 0x1}}], 0x2, 0x4000880) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x1ff, 0x30}, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000001c0)=0x1b75, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x40, 0x6, 0x8001, 0x10, 0x9, 0x0, 0x8, 0x7, r6}, 0x20) 1.987083051s ago: executing program 1 (id=1180): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) epoll_create1(0x80000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x140052, r3, 0xe44bc000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYRES32=r7, @ANYRESHEX=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c00000008000300e8396cada5f0f8695ffc0ee83468714c20fcbe86351724e466b5385ec44ba6b9ec90e891d8219e94936d13f0c70af747d82495dd6d46046292535d6aa4543457b7a26a9592a323769d22", @ANYRES64=r1, @ANYRES8=r2, @ANYBLOB="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"], 0x50}}, 0x2) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000640)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x3, 'syz1\x00', @default, 0xfffffff7, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000013c0)={0xac, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x28}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x48800}, 0x2000e0c0) write$cgroup_subtree(r9, &(0x7f00000003c0)={[{0x2b, 'cpuacct'}, {0x2b, 'blkio'}, {0x2d, 'devices'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2d, 'cpuacct'}, {0x2d, 'pids'}, {0x2b, 'cpuacct'}, {0x2b, 'cpuset'}]}, 0x41) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r8}], 0x1, 0x4) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1.984885147s ago: executing program 3 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x10001, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000700000000060015000400000014001680100008800c0002c0"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0xff, 0xfd, 0x5, 0x4, 0x2, 0x4, 0x28, 0x1, 0x3, [0x1, 0x6, 0x2, 0x200, 0x81, 0x8001, 0x5]}}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r10}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x20004081) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r11, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)={0x13c, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x104, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20000}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tunl0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "5d5b405df35d91860ebd78ce69147c01ed27c788172fca4c0c7d5354c05dfc1f196a8b47f5261f145e95744aad707dc19625d5e10f518c51c5205943a2edab927cc675e0406de157545d32d9b403a731990dad7ed2f309ea864f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x13c}}, 0x4040004) sendmmsg$inet(r0, &(0x7f0000005200), 0x0, 0x0) 1.380256082s ago: executing program 2 (id=1182): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) 1.126253578s ago: executing program 1 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00e4ff00000000000000000080000000020000", @ANYRES32, @ANYBLOB="c50400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x3, 0x8, &(0x7f00000002c0)="b80000", &(0x7f0000000380)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, 0xa8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x20000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000800000000000000000000500010006000000"], 0x1c}}, 0x0) read(r6, &(0x7f00000000c0)=""/81, 0x51) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, 0x0, 0x4881) setsockopt$inet_tcp_int(r2, 0x29, 0x6, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8924, &(0x7f0000001300)={'nr0\x00'}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_type(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000280), 0x9) 1.048623169s ago: executing program 4 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a01040000000008000000020000000907020073797a32000000000900010073797a3000000000"], 0x2c}}, 0x8004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r4, r5, 0x100000af5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x140, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x110, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x3c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0xd0, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x80000001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa518}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7f}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb}]}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 884.539904ms ago: executing program 2 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$ax25(r1, &(0x7f0000000000)={{0x3, @bcast, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x48, 0x4, 0x6, 0x101, 0x0, 0x0, {0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 834.149583ms ago: executing program 1 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3, 0x1f}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x41, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000000000000002000003c22b86cbfaac9faffffff85e4bd73a30dcffd0900000000000000c3120587de6a07644665fa0f015e9d5245f7683b2de2d684a72eb9785308c75a3a7c656305e5571773ac502fb0165133f937af6bdff52074825127763aaa1028019ae7b83ba2e64c2a841fa29d1065bc3dd3b83c9ad9fbac53c52720cc90bb5f680901a8cb72db65b187b8a6e707ca5f6f47f6b68b07db858ba0b5371aa65a730c16450c7efb1b7b74e7c1bc093bb3c637fdb42f1a189cddf365593ba8"], 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES8=r6], &(0x7f00000004c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffa, 0x7, 0x6361, 0x5, 0x0, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xdb, 0x2, 0x7, 0x41, 0x7dd, 0x1}, {0xb2, 0x1, 0x2, 0x1000, 0x3, 0x6}, 0xcf0, 0x5, 0xd65}}, @TCA_TBF_RATE64={0xc, 0x4, 0xafdc78dbe0554eb6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee7f8a24a6399ccf}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) 826.491663ms ago: executing program 2 (id=1187): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="1463562289f427791a000000000000000000000a20000000120a01010000000000000000070000080c0006400000000000000001b5260000020a030000000000000000000a0000020900010073797a3100000000146a00001000010000000000000000000384000a"], 0x68}, 0x1, 0x0, 0x0, 0x44014}, 0x20050800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@gettaction={0x14, 0x32, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x40c4) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) sendfile(r2, r6, &(0x7f0000000240)=0x6, 0x9) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@local, @broadcast, r9}, 0xc) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x2, 0x4) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 516.431025ms ago: executing program 0 (id=1188): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}]}}}]}, 0x44}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r1, r2}, 0xc) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000076000d0b00400000000000030000000000000000"], 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) accept(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7f0a00ff00000000701078000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 460.015595ms ago: executing program 3 (id=1189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000480)={0x4, 0x10, 0x3, 0x4, 0x2, 0x0, [{0x4, 0xa4, 0xffffffffffffffff, '\x00', 0x880}, {0x4, 0x7, 0x2, '\x00', 0x7}]}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110c1000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 346.993148ms ago: executing program 2 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x201}}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 326.040969ms ago: executing program 0 (id=1191): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) listen(r2, 0x401) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "d9ee3d202ba2878a9f1e89d14773f777df3d"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x0) bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 191.666866ms ago: executing program 2 (id=1192): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a2", 0x9}], 0x1}}], 0x1, 0x20008000) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000780), &(0x7f00000007c0)=0xc) (async) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1805000000000000000000000000000018360000050000000000000006"], &(0x7f0000000540)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYRES32=r2, @ANYRESHEX=r3, @ANYRESHEX=r3, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00', r4}, 0x18) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r7 = socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x400c0) (async) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014"], 0x48}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000180)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0x50, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x8084) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000100)={@any, 0x9}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000500)={@mcast2, 0x1ff, 0x0, 0x2, 0x4, 0x4, 0x3}, 0x20) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x10) (rerun: 64) 187.893509ms ago: executing program 1 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x3, 0x7) getsockopt(r1, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 186.73106ms ago: executing program 3 (id=1194): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003040000", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x7, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x40110}, 0xc084) 0s ago: executing program 1 (id=1195): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 82.104715][ T5814] cgroup: Unknown subsys name 'net' [ 82.249446][ T5814] cgroup: Unknown subsys name 'cpuset' [ 82.257824][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.666421][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.771864][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.780360][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.788640][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.797045][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.806268][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.813800][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.827711][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.835194][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.845045][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.851046][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.854315][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.865247][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.867384][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.883126][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.883367][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.890884][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.903369][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.906544][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.913048][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.927044][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.935692][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.940972][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.950784][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.959250][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.968181][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.631438][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 86.702126][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 86.768060][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 86.790910][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.801466][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.961988][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.969264][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.977598][ T5836] bridge_slave_0: entered allmulticast mode [ 86.984705][ T5836] bridge_slave_0: entered promiscuous mode [ 87.026767][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.033932][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.041728][ T5836] bridge_slave_1: entered allmulticast mode [ 87.049132][ T5836] bridge_slave_1: entered promiscuous mode [ 87.114010][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.121491][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.128850][ T5838] bridge_slave_0: entered allmulticast mode [ 87.135739][ T5838] bridge_slave_0: entered promiscuous mode [ 87.183142][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.190403][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.198066][ T5838] bridge_slave_1: entered allmulticast mode [ 87.204985][ T5838] bridge_slave_1: entered promiscuous mode [ 87.212291][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.219412][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.226632][ T5832] bridge_slave_0: entered allmulticast mode [ 87.233566][ T5832] bridge_slave_0: entered promiscuous mode [ 87.241001][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.248269][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.255479][ T5824] bridge_slave_0: entered allmulticast mode [ 87.262647][ T5824] bridge_slave_0: entered promiscuous mode [ 87.273301][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.283386][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.290579][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.298513][ T5825] bridge_slave_0: entered allmulticast mode [ 87.305488][ T5825] bridge_slave_0: entered promiscuous mode [ 87.322875][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.330042][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.337340][ T5832] bridge_slave_1: entered allmulticast mode [ 87.344246][ T5832] bridge_slave_1: entered promiscuous mode [ 87.351299][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.358903][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.366331][ T5824] bridge_slave_1: entered allmulticast mode [ 87.373356][ T5824] bridge_slave_1: entered promiscuous mode [ 87.381881][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.405412][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.412688][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.420030][ T5825] bridge_slave_1: entered allmulticast mode [ 87.427263][ T5825] bridge_slave_1: entered promiscuous mode [ 87.485466][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.516846][ T5836] team0: Port device team_slave_0 added [ 87.534964][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.547590][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.561582][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.572698][ T5836] team0: Port device team_slave_1 added [ 87.580625][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.603116][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.614077][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.634929][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.695693][ T5838] team0: Port device team_slave_0 added [ 87.723604][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.730694][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.757278][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.782867][ T5838] team0: Port device team_slave_1 added [ 87.790171][ T5832] team0: Port device team_slave_0 added [ 87.797934][ T5824] team0: Port device team_slave_0 added [ 87.804269][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.811938][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.838290][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.850705][ T5825] team0: Port device team_slave_0 added [ 87.869443][ T5832] team0: Port device team_slave_1 added [ 87.876893][ T5824] team0: Port device team_slave_1 added [ 87.891246][ T5825] team0: Port device team_slave_1 added [ 87.945319][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.952396][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.979708][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.997303][ T5835] Bluetooth: hci0: command tx timeout [ 87.997307][ T5843] Bluetooth: hci2: command tx timeout [ 87.997548][ T5833] Bluetooth: hci4: command tx timeout [ 88.006135][ T5843] Bluetooth: hci3: command tx timeout [ 88.008997][ T5835] Bluetooth: hci1: command tx timeout [ 88.038352][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.045318][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.071705][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.094189][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.101589][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.127638][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.139503][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.146901][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.173636][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.195297][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.202280][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.228282][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.239903][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.247166][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.273538][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.290806][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.297850][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.323991][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.352214][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.359236][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.385703][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.411132][ T5836] hsr_slave_0: entered promiscuous mode [ 88.418187][ T5836] hsr_slave_1: entered promiscuous mode [ 88.480998][ T5838] hsr_slave_0: entered promiscuous mode [ 88.487743][ T5838] hsr_slave_1: entered promiscuous mode [ 88.494094][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 88.499986][ T5838] Cannot create hsr debugfs directory [ 88.602149][ T5824] hsr_slave_0: entered promiscuous mode [ 88.608741][ T5824] hsr_slave_1: entered promiscuous mode [ 88.614849][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 88.621452][ T5824] Cannot create hsr debugfs directory [ 88.646975][ T5832] hsr_slave_0: entered promiscuous mode [ 88.653261][ T5832] hsr_slave_1: entered promiscuous mode [ 88.659668][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 88.665416][ T5832] Cannot create hsr debugfs directory [ 88.690543][ T5825] hsr_slave_0: entered promiscuous mode [ 88.697058][ T5825] hsr_slave_1: entered promiscuous mode [ 88.703079][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 88.708970][ T5825] Cannot create hsr debugfs directory [ 89.154396][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.168511][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.181665][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.201236][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.268464][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.283101][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.293647][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.305377][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.390132][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.411607][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.433815][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.444390][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.528820][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.558137][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.573626][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.602737][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.624299][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.660179][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.695190][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.702443][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.744132][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.760143][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.767273][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.781703][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.792987][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.803254][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.863644][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.920406][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.980775][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.987978][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.003152][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.057446][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.064618][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.076663][ T5835] Bluetooth: hci2: command tx timeout [ 90.078866][ T5843] Bluetooth: hci4: command tx timeout [ 90.082605][ T5841] Bluetooth: hci0: command tx timeout [ 90.094456][ T52] Bluetooth: hci1: command tx timeout [ 90.100265][ T5833] Bluetooth: hci3: command tx timeout [ 90.140281][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.180756][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.212717][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.219966][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.288102][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.295791][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.319120][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.375558][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.383281][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.399446][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.432117][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.439308][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.498304][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.562973][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.570181][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.613845][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.659683][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.666876][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.839152][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.937390][ T5836] veth0_vlan: entered promiscuous mode [ 90.972758][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.008533][ T5836] veth1_vlan: entered promiscuous mode [ 91.108152][ T5838] veth0_vlan: entered promiscuous mode [ 91.145629][ T5824] veth0_vlan: entered promiscuous mode [ 91.161857][ T5836] veth0_macvtap: entered promiscuous mode [ 91.173135][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.181284][ T5838] veth1_vlan: entered promiscuous mode [ 91.219149][ T5824] veth1_vlan: entered promiscuous mode [ 91.231757][ T5836] veth1_macvtap: entered promiscuous mode [ 91.260235][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.309879][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.349737][ T5824] veth0_macvtap: entered promiscuous mode [ 91.361533][ T5838] veth0_macvtap: entered promiscuous mode [ 91.372032][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.406084][ T5838] veth1_macvtap: entered promiscuous mode [ 91.414340][ T5824] veth1_macvtap: entered promiscuous mode [ 91.454383][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.482182][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.511319][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.521682][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.550514][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.563311][ T5825] veth0_vlan: entered promiscuous mode [ 91.574839][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.591262][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.615658][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.637486][ T1152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.648040][ T5825] veth1_vlan: entered promiscuous mode [ 91.667103][ T1152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675873][ T1152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.705382][ T2983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723750][ T2983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.753472][ T2983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.763027][ T2983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.773561][ T2983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.815139][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.825244][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.842417][ T5832] veth0_vlan: entered promiscuous mode [ 91.903616][ T5832] veth1_vlan: entered promiscuous mode [ 91.928775][ T5825] veth0_macvtap: entered promiscuous mode [ 91.948675][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.956685][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.980878][ T5825] veth1_macvtap: entered promiscuous mode [ 92.020136][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.030351][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.067654][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.079878][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.107025][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.124017][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.156778][ T5833] Bluetooth: hci3: command tx timeout [ 92.158840][ T5835] Bluetooth: hci1: command tx timeout [ 92.162202][ T5841] Bluetooth: hci0: command tx timeout [ 92.169715][ T5835] Bluetooth: hci2: command tx timeout [ 92.173098][ T5833] Bluetooth: hci4: command tx timeout [ 92.224450][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.244605][ T4347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.269530][ T4347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.291509][ T5832] veth0_macvtap: entered promiscuous mode [ 92.302215][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.312174][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.333971][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.346617][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.362446][ T5947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.378913][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.388080][ T5832] veth1_macvtap: entered promiscuous mode [ 92.414887][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.501762][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.611204][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.685265][ T1130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.733622][ T1130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.745494][ T1130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.761737][ T1130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794305][ T5957] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.857286][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.874566][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.924686][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.039793][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.094967][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.153627][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 93.226919][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.250867][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.413574][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.427129][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.592561][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.795331][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8'. [ 93.880158][ T5979] Zero length message leads to an empty skb [ 93.953063][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8'. [ 94.008675][ T5976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.133894][ T5984] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 94.198238][ T5984] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 94.205835][ T5984] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7'. [ 94.237636][ T52] Bluetooth: hci2: command tx timeout [ 94.240906][ T5843] Bluetooth: hci1: command tx timeout [ 94.246594][ T5833] Bluetooth: hci4: command tx timeout [ 94.248841][ T5835] Bluetooth: hci3: command tx timeout [ 94.254110][ T5841] Bluetooth: hci0: command tx timeout [ 94.587544][ T979] cfg80211: failed to load regulatory.db [ 94.663696][ T5967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.782141][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 94.929149][ T6002] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.238384][ T6011] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 95.758973][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 96.284531][ T6030] x_tables: ip_tables: osf match: only valid for protocol 6 [ 96.313783][ T6028] bridge0: entered promiscuous mode [ 96.584449][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19'. [ 96.974308][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.982709][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.118367][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.138470][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.392580][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.420340][ T50] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.430097][ T50] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.443344][ T50] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.592645][ T6045] netlink: 'syz.2.21': attribute type 13 has an invalid length. [ 97.694722][ T6049] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 97.763119][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 98.170577][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 98.432094][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 98.447456][ T6072] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.491608][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 98.521644][ T6075] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.783490][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.929299][ T6099] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32'. [ 99.155861][ T6106] batadv1: entered promiscuous mode [ 99.164340][ T6103] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 99.305316][ T6103] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 99.372377][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.397496][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.399132][ T6114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.36'. [ 99.441390][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.565512][ T137] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.576036][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.597138][ T137] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.605915][ T137] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.624410][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.662874][ T137] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.422340][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.478110][ T6142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.252307][ T5997] Set syz1 is full, maxelem 65536 reached [ 101.320248][ T6171] netlink: 'syz.1.50': attribute type 16 has an invalid length. [ 101.351271][ T6171] netlink: 'syz.1.50': attribute type 17 has an invalid length. [ 101.383335][ T6172] xt_hashlimit: max too large, truncated to 1048576 [ 101.680416][ T6171] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.688160][ T6171] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.917097][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.934098][ T6171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.056868][ T1101] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.071487][ T1101] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.126176][ T1101] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.165287][ T1101] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.319572][ T6212] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 102.430582][ T6212] bond1: option lacp_rate: invalid value (255) [ 102.439170][ T6212] bond1 (unregistering): Released all slaves [ 102.945794][ T6236] netlink: 'syz.3.67': attribute type 11 has an invalid length. [ 102.955596][ T6237] Cannot find set identified by id 0 to match [ 102.962231][ T6236] netlink: 'syz.3.67': attribute type 11 has an invalid length. [ 103.123029][ T6243] ip6t_rpfilter: unknown options [ 103.274429][ T6249] __nla_validate_parse: 6 callbacks suppressed [ 103.274460][ T6249] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.72'. [ 103.709274][ T6262] bridge1: entered promiscuous mode [ 103.714532][ T6262] bridge1: entered allmulticast mode [ 103.740340][ T6263] netlink: 388 bytes leftover after parsing attributes in process `syz.0.78'. [ 103.759781][ T6262] IPVS: length: 35 != 1272 [ 103.928889][ T6271] can: request_module (can-proto-3) failed. [ 104.056142][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 104.068105][ T6281] IPVS: length: 132 != 8 [ 104.242754][ T6286] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 104.839333][ T6313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.882407][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.93'. [ 104.909799][ T6318] netlink: 80 bytes leftover after parsing attributes in process `syz.4.94'. [ 105.227520][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 105.244455][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 105.451473][ T6337] lo: entered promiscuous mode [ 105.468635][ T6337] tunl0: entered promiscuous mode [ 105.496873][ T6337] gre0: entered promiscuous mode [ 105.513867][ T6337] gretap0: entered promiscuous mode [ 105.563869][ T6337] erspan0: entered promiscuous mode [ 105.569919][ T6342] Cannot find set identified by id 0 to match [ 105.583050][ T6351] Cannot find set identified by id 0 to match [ 105.601046][ T6337] ip_vti0: entered promiscuous mode [ 105.634624][ T6337] ip6_vti0: entered promiscuous mode [ 105.645745][ T6337] sit0: entered promiscuous mode [ 105.668526][ T6337] ip6tnl0: entered promiscuous mode [ 105.713206][ T6337] ip6gre0: entered promiscuous mode [ 105.732355][ T6337] syz_tun: entered promiscuous mode [ 105.762220][ T6337] ip6gretap0: entered promiscuous mode [ 105.785136][ T6337] bridge0: entered promiscuous mode [ 105.799081][ T6337] vcan0: entered promiscuous mode [ 105.812035][ T6337] bond0: entered promiscuous mode [ 105.821122][ T6337] bond_slave_0: entered promiscuous mode [ 105.843528][ T6337] bond_slave_1: entered promiscuous mode [ 105.850550][ T6337] team0: entered promiscuous mode [ 105.855613][ T6337] team_slave_0: entered promiscuous mode [ 105.867259][ T6337] team_slave_1: entered promiscuous mode [ 105.874224][ T6337] dummy0: entered promiscuous mode [ 105.893136][ T6337] nlmon0: entered promiscuous mode [ 105.901760][ T6337] caif0: entered promiscuous mode [ 105.919793][ T6337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.103422][ T6351] vlan2: entered promiscuous mode [ 106.113380][ T6351] geneve1: entered promiscuous mode [ 106.122244][ T6351] vlan2: entered allmulticast mode [ 106.130652][ T6351] geneve1: entered allmulticast mode [ 106.384832][ T6382] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.463398][ T6387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 107.082989][ T6414] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 107.093597][ T10] IPVS: starting estimator thread 0... [ 107.137368][ T6414] bridge_slave_0: left allmulticast mode [ 107.147215][ T6414] bridge_slave_0: left promiscuous mode [ 107.154029][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.217690][ T6416] IPVS: using max 34 ests per chain, 81600 per kthread [ 107.242709][ T6414] bridge_slave_1: left allmulticast mode [ 107.279601][ T6414] bridge_slave_1: left promiscuous mode [ 107.285407][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.302918][ T6414] bond0: (slave bond_slave_0): Releasing backup interface [ 107.370413][ T6414] bond0: (slave bond_slave_1): Releasing backup interface [ 107.405162][ T6414] team0: Port device team_slave_0 removed [ 107.414275][ T6414] team0: Port device team_slave_1 removed [ 107.420557][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.431711][ T6428] netlink: 'syz.1.125': attribute type 33 has an invalid length. [ 107.442477][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.458542][ T6428] netlink: 152 bytes leftover after parsing attributes in process `syz.1.125'. [ 107.472834][ T6414] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.476703][ T6461] Cannot find add_set index 2 as target [ 108.593080][ T6469] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.656592][ T6469] netlink: 'syz.1.136': attribute type 21 has an invalid length. [ 108.686249][ T6469] __nla_validate_parse: 3 callbacks suppressed [ 108.686267][ T6469] netlink: 132 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.899170][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 108.920283][ T6469] netlink: 116 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.949071][ T6490] openvswitch: netlink: Invalid VLAN frame [ 109.001543][ T6491] tipc: Enabling of bearer rejected, failed to enable media [ 109.029174][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'. [ 109.365195][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 109.389843][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.146'. [ 109.564887][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 109.575344][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 109.648759][ T6520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.718725][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 109.919762][ T6537] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 109.946946][ T6539] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 109.990327][ T6539] bond1 (unregistering): Released all slaves [ 110.087873][ T6546] dvmrp12: entered allmulticast mode [ 110.119141][ T6542] dvmrp12: left allmulticast mode [ 110.273065][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 110.305723][ T6559] sctp: [Deprecated]: syz.0.158 (pid 6559) Use of int in maxseg socket option. [ 110.305723][ T6559] Use struct sctp_assoc_value instead [ 110.632512][ T6578] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 110.698606][ T6583] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 110.932482][ T6583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.957377][ T6581] netlink: 'syz.2.162': attribute type 13 has an invalid length. [ 111.027984][ T6598] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.042095][ T5943] IPVS: starting estimator thread 0... [ 111.156212][ T6601] IPVS: using max 34 ests per chain, 81600 per kthread [ 111.989066][ T6591] sit0: entered promiscuous mode [ 112.064656][ T6603] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 112.080861][ T6603] netlink: 'syz.0.166': attribute type 2 has an invalid length. [ 112.102399][ T6600] bridge_slave_0: left allmulticast mode [ 112.119624][ T6600] bridge_slave_0: left promiscuous mode [ 112.133158][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.159303][ T6600] bridge_slave_1: left allmulticast mode [ 112.165103][ T6600] bridge_slave_1: left promiscuous mode [ 112.173417][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.219525][ T6605] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 112.228052][ T5904] IPVS: starting estimator thread 0... [ 112.240061][ T6600] bond0: (slave bond_slave_0): Releasing backup interface [ 112.255220][ T6600] bond0: (slave bond_slave_1): Releasing backup interface [ 112.271994][ T6600] team0: Port device team_slave_0 removed [ 112.281503][ T6600] team0: Port device team_slave_1 removed [ 112.290202][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.299326][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.310538][ T6600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.319655][ T6600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.331744][ T6600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 112.337931][ T6608] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.512380][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.546086][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.574458][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.615820][ T6616] netlink: 'syz.0.169': attribute type 12 has an invalid length. [ 112.637861][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.954913][ T6636] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.012678][ T6637] x_tables: duplicate underflow at hook 1 [ 113.073113][ T6636] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.321971][ T6650] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.435676][ T6648] xt_connbytes: Forcing CT accounting to be enabled [ 113.808465][ T6658] __nla_validate_parse: 7 callbacks suppressed [ 113.808482][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.1.180'. [ 113.861153][ T6666] netlink: 'syz.2.181': attribute type 39 has an invalid length. [ 114.287746][ T6677] netlink: 64 bytes leftover after parsing attributes in process `syz.0.184'. [ 114.299370][ T6677] block nbd0: not configured, cannot reconfigure [ 114.323795][ T30] audit: type=1804 audit(1768273147.982:2): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.184" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=210 res=1 errno=0 [ 114.347331][ T30] audit: type=1800 audit(1768273147.982:3): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.184" name="cgroup.controllers" dev="tmpfs" ino=210 res=0 errno=0 [ 114.369248][ T30] audit: type=1804 audit(1768273147.982:4): pid=6677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.184" name="/newroot/38/cgroup.controllers" dev="tmpfs" ino=210 res=1 errno=0 [ 115.017707][ T6690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.188'. [ 115.068711][ T6690] openvswitch: netlink: Flow key attr not present in new flow. [ 115.231986][ T6696] Cannot find set identified by id 0 to match [ 115.240354][ T6705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 115.253464][ T6704] vlan2: entered promiscuous mode [ 115.269924][ T6704] bond0: entered promiscuous mode [ 115.306560][ T6708] netlink: 'syz.3.190': attribute type 19 has an invalid length. [ 115.320042][ T6707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'. [ 115.359015][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 115.466887][ T76] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.497716][ T76] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.533335][ T76] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.543912][ T6722] netlink: 'syz.1.196': attribute type 39 has an invalid length. [ 115.556115][ T76] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.609650][ T6727] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 115.739642][ T6734] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 115.766879][ T6734] bond2 (unregistering): Released all slaves [ 116.141096][ T6747] xt_time: unknown flags 0xf4 [ 116.897954][ T6777] netlink: 10 bytes leftover after parsing attributes in process `syz.3.209'. [ 117.336888][ T6796] bridge0: entered promiscuous mode [ 117.410921][ T6796] bridge0: port 1(macvtap1) entered blocking state [ 117.426201][ T6796] bridge0: port 1(macvtap1) entered disabled state [ 117.468806][ T6796] macvtap1: entered allmulticast mode [ 117.483827][ T6796] bridge0: entered allmulticast mode [ 117.525699][ T6796] macvtap1: left allmulticast mode [ 117.531432][ T6796] bridge0: left allmulticast mode [ 117.539324][ T6796] bridge0: left promiscuous mode [ 117.639959][ T6808] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 117.944836][ T6822] netlink: 108 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.958729][ T6822] netlink: 108 bytes leftover after parsing attributes in process `syz.1.219'. [ 117.976138][ T6822] netlink: 84 bytes leftover after parsing attributes in process `syz.1.219'. [ 118.033955][ T6827] netlink: 'syz.2.217': attribute type 39 has an invalid length. [ 118.308903][ T6843] IPVS: Error connecting to the multicast addr [ 118.524825][ T6849] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 118.584044][ T6849] bridge0: port 3(macsec0) entered blocking state [ 118.593292][ T6849] bridge0: port 3(macsec0) entered disabled state [ 118.608384][ T6849] macsec0: entered allmulticast mode [ 118.614156][ T6849] veth1_macvtap: entered allmulticast mode [ 118.621860][ T6849] macsec0: entered promiscuous mode [ 118.667205][ T6853] geneve2: entered promiscuous mode [ 118.868356][ T6853] __nla_validate_parse: 3 callbacks suppressed [ 118.868375][ T6853] netlink: 100 bytes leftover after parsing attributes in process `syz.4.227'. [ 119.692288][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 119.765788][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 119.785664][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'. [ 119.794900][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'. [ 119.891971][ T6888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.920344][ T6888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.234'. [ 120.016656][ T6910] netlink: 204 bytes leftover after parsing attributes in process `syz.2.240'. [ 120.025654][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.240'. [ 120.274930][ T6924] netlink: 'syz.2.241': attribute type 39 has an invalid length. [ 120.285531][ T6926] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 120.324028][ T6926] team0: Port device netdevsim0 added [ 121.320772][ T6968] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 121.326625][ T6968] dvmrp1: linktype set to 270 [ 121.332263][ T6953] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 121.344219][ T6953] dvmrp1: linktype set to 270 [ 121.526109][ T6976] netlink: 'syz.2.258': attribute type 6 has an invalid length. [ 121.821577][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 121.894801][ T6986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.262'. [ 122.365395][ T6998] netlink: 'syz.1.264': attribute type 39 has an invalid length. [ 122.520109][ T7003] ipt_REJECT: ECHOREPLY no longer supported. [ 122.527821][ T7004] ipt_REJECT: ECHOREPLY no longer supported. [ 122.534393][ T7004] netlink: 'syz.0.266': attribute type 28 has an invalid length. [ 123.350810][ T7039] sctp: [Deprecated]: syz.2.275 (pid 7039) Use of int in max_burst socket option deprecated. [ 123.350810][ T7039] Use struct sctp_assoc_value instead [ 123.397828][ T7041] sctp: [Deprecated]: syz.3.276 (pid 7041) Use of int in max_burst socket option deprecated. [ 123.397828][ T7041] Use struct sctp_assoc_value instead [ 123.552308][ T7048] dvmrp0: entered allmulticast mode [ 124.196520][ T7079] netlink: 'syz.2.284': attribute type 39 has an invalid length. [ 124.207156][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.363201][ T7084] __nla_validate_parse: 6 callbacks suppressed [ 124.363287][ T7084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 125.076649][ T7110] netlink: 'syz.0.295': attribute type 2 has an invalid length. [ 125.104208][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.295'. [ 125.125904][ T7110] tipc: Can't bind to reserved service type 2 [ 125.245644][ T7122] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 125.312634][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.332684][ T7126] vlan0: entered promiscuous mode [ 125.338076][ T7126] bond1: entered promiscuous mode [ 125.344797][ T7126] vlan0: entered allmulticast mode [ 125.353874][ T7126] bond1: entered allmulticast mode [ 125.478797][ T7122] af_packet: tpacket_rcv: packet too big, clamped from 92 to 4294967272. macoff=96 [ 125.523721][ T7122] bond1: (slave gretap1): making interface the new active one [ 125.533059][ T7126] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.298'. [ 125.549598][ T7122] gretap1: entered promiscuous mode [ 125.555475][ T7122] gretap1: entered allmulticast mode [ 125.565649][ T7122] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 125.697620][ T7122] syz.3.298 (7122) used greatest stack depth: 18776 bytes left [ 125.831654][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.303'. [ 126.118575][ T7152] netlink: 'syz.3.306': attribute type 39 has an invalid length. [ 126.143189][ T7152] veth0_macvtap: left promiscuous mode [ 126.416476][ T7163] ipt_REJECT: TCP_RESET invalid for non-tcp [ 127.152597][ T7200] bridge0: entered promiscuous mode [ 127.306614][ T7206] netlink: 'syz.3.319': attribute type 1 has an invalid length. [ 127.333172][ T7206] netlink: 224 bytes leftover after parsing attributes in process `syz.3.319'. [ 127.654268][ T7213] syz.4.321 (7213) used greatest stack depth: 16904 bytes left [ 127.681246][ T7221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 127.771972][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 127.824286][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.825740][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.323'. [ 127.833592][ T7220] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.855950][ T7220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.875319][ T7230] netlink: 'syz.4.325': attribute type 39 has an invalid length. [ 127.885518][ T7230] veth0_macvtap: left promiscuous mode [ 128.003128][ T7221] hsr_slave_1 (unregistering): left promiscuous mode [ 128.552721][ T7245] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 128.583834][ T7245] netlink: 'syz.2.329': attribute type 2 has an invalid length. [ 128.764858][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.331'. [ 128.780670][ T7250] bond2: option min_links: invalid value (18446744073709551612) [ 128.788863][ T7250] bond2: option min_links: allowed values 0 - 2147483647 [ 128.799378][ T7250] bond2 (unregistering): Released all slaves [ 128.822783][ T7253] bridge0: entered promiscuous mode [ 128.834305][ T7255] ip6gretap0: entered promiscuous mode [ 128.841857][ T7255] macvtap0: entered promiscuous mode [ 128.848335][ T7255] macvtap0: entered allmulticast mode [ 128.853853][ T7255] ip6gretap0: entered allmulticast mode [ 128.876753][ T7257] ip6gretap0: left allmulticast mode [ 128.890049][ T7257] ip6gretap0: left promiscuous mode [ 129.161655][ T7267] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.171833][ T7259] netlink: 'syz.0.333': attribute type 2 has an invalid length. [ 129.213900][ T7266] bridge0: port 1(erspan0) entered blocking state [ 129.227871][ T7266] bridge0: port 1(erspan0) entered disabled state [ 129.234772][ T7266] erspan0: entered allmulticast mode [ 129.260753][ T7266] erspan0: entered promiscuous mode [ 129.270565][ T7266] bridge0: port 1(erspan0) entered blocking state [ 129.277353][ T7266] bridge0: port 1(erspan0) entered forwarding state [ 129.294824][ T7270] erspan0: left allmulticast mode [ 129.302161][ T7270] erspan0: left promiscuous mode [ 129.307863][ T7270] bridge0: port 1(erspan0) entered disabled state [ 129.441421][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 129.607644][ T7284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.340'. [ 129.747304][ T7293] netlink: 'syz.2.341': attribute type 39 has an invalid length. [ 130.001341][ T7301] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 130.050907][ T7301] !: entered promiscuous mode [ 130.125103][ T7301] netlink: 'syz.0.344': attribute type 2 has an invalid length. [ 130.144409][ T7301] !: left promiscuous mode [ 130.451928][ T7318] lo: left promiscuous mode [ 130.461765][ T7318] tunl0: left promiscuous mode [ 130.467672][ T7318] gre0: left promiscuous mode [ 130.473120][ T7318] gretap0: left promiscuous mode [ 130.517871][ T7318] erspan0: left promiscuous mode [ 130.523590][ T7318] ip_vti0: left promiscuous mode [ 130.530727][ T7318] ip6_vti0: left promiscuous mode [ 130.547293][ T7318] sit0: left promiscuous mode [ 130.578710][ T7318] ip6tnl0: left promiscuous mode [ 130.588200][ T7318] ip6gre0: left promiscuous mode [ 130.609333][ T7318] syz_tun: left promiscuous mode [ 130.628887][ T7318] ip6gretap0: left promiscuous mode [ 130.640708][ T7318] vcan0: left promiscuous mode [ 130.647378][ T7318] bond0: left promiscuous mode [ 130.656367][ T7318] bond_slave_0: left promiscuous mode [ 130.667122][ T7318] bond_slave_1: left promiscuous mode [ 130.684364][ T7318] team0: left promiscuous mode [ 130.696113][ T7318] team_slave_0: left promiscuous mode [ 130.702462][ T7318] team_slave_1: left promiscuous mode [ 130.711749][ T7318] dummy0: left promiscuous mode [ 130.718307][ T7318] nlmon0: left promiscuous mode [ 130.724607][ T7318] caif0: left promiscuous mode [ 130.733043][ T7318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.158320][ T7335] bond2: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 131.176561][ T7335] bond2 (unregistering): Released all slaves [ 131.403648][ T7347] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 131.428180][ T7345] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 131.518642][ T7351] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 131.788619][ T7359] netlink: 'syz.0.361': attribute type 39 has an invalid length. [ 131.808071][ T7359] veth0_macvtap: left promiscuous mode [ 132.179361][ T7366] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 132.207676][ T7367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.308810][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.587126][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.629273][ T7370] netlink: 28 bytes leftover after parsing attributes in process `syz.3.365'. [ 132.672323][ T7384] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 133.714561][ T7417] vlan0: entered promiscuous mode [ 133.737724][ T7417] geneve1: entered promiscuous mode [ 133.743166][ T7417] vlan0: entered allmulticast mode [ 133.779140][ T7417] geneve1: entered allmulticast mode [ 134.524941][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.533901][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.577846][ T7425] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.768696][ T7444] netlink: 'syz.0.380': attribute type 39 has an invalid length. [ 134.894088][ T7449] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.970002][ T7451] syzkaller1: entered promiscuous mode [ 134.975524][ T7451] syzkaller1: entered allmulticast mode [ 135.041892][ T7455] netlink: 408 bytes leftover after parsing attributes in process `syz.3.386'. [ 135.108872][ T7461] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 135.508661][ T7486] netlink: 100 bytes leftover after parsing attributes in process `syz.1.390'. [ 135.557356][ T7486] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 135.824917][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 135.847537][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.856321][ T7503] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 135.863489][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 135.896071][ T7499] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 135.921417][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.929633][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.937870][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.124714][ T7497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.229469][ T7514] netlink: 56 bytes leftover after parsing attributes in process `syz.1.394'. [ 136.275191][ T7514] netlink: 'syz.1.394': attribute type 5 has an invalid length. [ 136.284621][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 136.369731][ T7511] syzkaller0: entered promiscuous mode [ 136.375365][ T7511] syzkaller0: entered allmulticast mode [ 136.713120][ T7544] netlink: 'syz.3.402': attribute type 39 has an invalid length. [ 136.794032][ T7547] netlink: 'syz.4.403': attribute type 2 has an invalid length. [ 139.274957][ T7574] sctp: [Deprecated]: syz.0.410 (pid 7574) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.274957][ T7574] Use struct sctp_sack_info instead [ 139.375545][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.409'. [ 139.529172][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 139.565722][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.414'. [ 139.590651][ T7579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.622497][ T7591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 139.665592][ T7594] netlink: 128 bytes leftover after parsing attributes in process `syz.4.415'. [ 139.731348][ T7596] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 139.744662][ T7585] hsr_slave_1 (unregistering): left promiscuous mode [ 139.788245][ T7594] nbd0: detected capacity change from 0 to 127 [ 139.817922][ T5841] block nbd0: Receive control failed (result -32) [ 139.830373][ T5846] block nbd0: Dead connection, failed to find a fallback [ 140.064444][ T7610] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 140.112940][ T7610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.504324][ T7633] tipc: Enabling of bearer rejected, failed to enable media [ 140.572323][ T7636] macvlan2: entered promiscuous mode [ 140.594570][ T7636] bond0: entered promiscuous mode [ 140.605474][ T7636] bond_slave_0: entered promiscuous mode [ 140.616556][ T7636] bond_slave_1: entered promiscuous mode [ 140.628253][ T7636] macvlan2: entered allmulticast mode [ 140.654082][ T7636] bond0: entered allmulticast mode [ 140.667952][ T7636] bond_slave_0: entered allmulticast mode [ 140.681534][ T7636] bond_slave_1: entered allmulticast mode [ 140.699972][ T7636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 140.731280][ T7636] bond0: left allmulticast mode [ 140.743750][ T7636] bond_slave_0: left allmulticast mode [ 140.765624][ T7636] bond_slave_1: left allmulticast mode [ 140.779005][ T7636] bond0: left promiscuous mode [ 140.792839][ T7636] bond_slave_0: left promiscuous mode [ 140.843703][ T7636] bond_slave_1: left promiscuous mode [ 140.943921][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.430'. [ 141.158118][ T7657] netlink: 27 bytes leftover after parsing attributes in process `syz.2.433'. [ 141.181461][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'. [ 141.228823][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.433'. [ 141.379595][ T7675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.437'. [ 141.404186][ T7675] bridge0: entered allmulticast mode [ 141.418518][ T7675] bridge0: left allmulticast mode [ 141.455642][ T7675] netlink: 84 bytes leftover after parsing attributes in process `syz.0.437'. [ 142.022350][ T7707] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 142.045580][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 142.087199][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.126661][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.150112][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.178259][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.252639][ T7713] syzkaller0: entered promiscuous mode [ 142.266098][ T7713] syzkaller0: entered allmulticast mode [ 142.320632][ T7720] netlink: 'syz.4.450': attribute type 1 has an invalid length. [ 142.329684][ T7684] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 142.380102][ T7716] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 142.406704][ T7684] team0: Port device dummy0 added [ 142.412582][ T7720] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 142.471781][ T7716] team0: Port device dummy0 removed [ 142.511438][ T7716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.715366][ T7748] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 142.811695][ T7748] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 143.124899][ T7760] netlink: 'syz.1.458': attribute type 8 has an invalid length. [ 143.130788][ T7775] netlink: 'syz.2.463': attribute type 13 has an invalid length. [ 143.204551][ T7775] netlink: 'syz.2.463': attribute type 17 has an invalid length. [ 143.236255][ T7775] netlink: 'syz.2.463': attribute type 27 has an invalid length. [ 143.252651][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 143.302812][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 143.502961][ T7781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'. [ 143.624354][ T7793] No such timeout policy "syz1" [ 143.748079][ T7798] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 143.777224][ T7798] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 143.808659][ T7798] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 144.268347][ T7818] batadv0: mtu less than device minimum [ 144.710330][ T7839] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 145.452981][ T7861] Bluetooth: MGMT ver 1.23 [ 145.505132][ T7860] bridge0: entered promiscuous mode [ 146.050877][ T7886] validate_nla: 2 callbacks suppressed [ 146.050907][ T7886] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 146.065328][ T7886] __nla_validate_parse: 8 callbacks suppressed [ 146.065344][ T7886] netlink: 224 bytes leftover after parsing attributes in process `syz.4.490'. [ 146.104850][ T7885] netlink: 144 bytes leftover after parsing attributes in process `syz.1.491'. [ 146.302227][ T7882] can: request_module (can-proto-0) failed. [ 146.653886][ T7903] netlink: 'syz.2.493': attribute type 39 has an invalid length. [ 146.677506][ T7904] netlink: 'syz.1.494': attribute type 39 has an invalid length. [ 146.768144][ T7908] veth1_macvtap: left promiscuous mode [ 146.776452][ T7908] macsec0: entered allmulticast mode [ 146.803233][ T7908] veth1_macvtap: entered promiscuous mode [ 146.830235][ T7908] veth1_macvtap: entered allmulticast mode [ 146.848306][ T7908] macsec0: left allmulticast mode [ 146.856957][ T7908] veth1_macvtap: left allmulticast mode [ 146.991920][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.582664][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.498'. [ 147.703052][ T7930] bond1: entered promiscuous mode [ 147.708846][ T7930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.760165][ T7932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.787221][ T7932] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 147.799400][ T7932] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 148.200605][ T7953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 148.229922][ T7956] ip6gretap1: entered promiscuous mode [ 148.273453][ T7952] tipc: Started in network mode [ 148.280098][ T7952] tipc: Node identity 9ef8cdca9c17, cluster identity 4711 [ 148.288490][ T7952] tipc: Enabled bearer , priority 0 [ 148.328701][ T7952] syzkaller0: entered promiscuous mode [ 148.334306][ T7952] syzkaller0: entered allmulticast mode [ 148.372084][ T7952] tipc: Resetting bearer [ 148.515659][ T7952] tipc: Resetting bearer [ 148.563439][ T7973] netlink: 'syz.4.507': attribute type 39 has an invalid length. [ 148.589096][ T7952] tipc: Disabling bearer [ 148.998989][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 149.038418][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 149.614342][ T8010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.519'. [ 149.698156][ T8006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.821706][ T8006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.898489][ T8028] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 149.910022][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 149.920611][ T8016] ip6_vti0: entered promiscuous mode [ 149.940152][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 149.965277][ T8032] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 150.060644][ T8028] syz_tun: entered promiscuous mode [ 150.088004][ T8028] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 151.048713][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 151.069402][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 151.189053][ T8091] netlink: 'syz.1.534': attribute type 13 has an invalid length. [ 151.630604][ T8109] tipc: Started in network mode [ 151.639876][ T8109] tipc: Node identity 0ea915bb000c, cluster identity 4711 [ 151.680599][ T8109] tipc: Enabled bearer , priority 0 [ 151.842698][ T8104] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.878226][ T8104] syzkaller0: entered promiscuous mode [ 151.888322][ T8104] syzkaller0: entered allmulticast mode [ 152.023895][ T8079] tipc: Resetting bearer [ 152.093117][ T8079] tipc: Disabling bearer [ 152.864177][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.546'. [ 152.978181][ T8171] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 152.992374][ T8171] netlink: 'syz.2.548': attribute type 10 has an invalid length. [ 153.029852][ T8171] team0: Port device dummy0 added [ 153.036554][ T8171] netlink: 'syz.2.548': attribute type 10 has an invalid length. [ 153.053119][ T8171] team0: Port device dummy0 removed [ 153.080261][ T8171] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.157937][ T8174] ip6_vti0: left promiscuous mode [ 153.213487][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.221392][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.284481][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.550'. [ 153.458649][ T8174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.704604][ T8174] vlan2: left promiscuous mode [ 153.710284][ T8174] geneve1: left promiscuous mode [ 153.715768][ T8174] vlan2: left allmulticast mode [ 153.726698][ T8174] geneve1: left allmulticast mode [ 153.829952][ T8184] hsr_slave_0: left promiscuous mode [ 153.905773][ T8187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.930070][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.952795][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.964223][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.975196][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.015554][ T8191] m1Ie5n: entered promiscuous mode [ 154.021413][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.030713][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.073841][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.126362][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.156263][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 154.279234][ T5827] udevd[5827]: failed to send result of seq 17008 to main daemon: Connection refused [ 154.414640][ T8206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.556'. [ 154.478166][ T8197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.556'. [ 154.503186][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 154.698689][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 154.835343][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 154.882617][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 154.934670][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 155.468697][ T8244] sit0: left promiscuous mode [ 155.531891][ T8244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.494335][ T8293] __nla_validate_parse: 30 callbacks suppressed [ 156.494354][ T8293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.579'. [ 156.709686][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 156.760108][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.582'. [ 157.124963][ T8321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.161930][ T8327] netlink: 104 bytes leftover after parsing attributes in process `syz.3.587'. [ 157.396884][ T8342] –: renamed from veth1_to_team [ 157.426151][ T8340] netlink: zone id is out of range [ 157.445503][ T8340] netlink: zone id is out of range [ 157.458579][ T8340] netlink: zone id is out of range [ 157.464699][ T8340] netlink: zone id is out of range [ 157.470959][ T8340] netlink: get zone limit has 4 unknown bytes [ 157.621090][ T8363] netlink: 3 bytes leftover after parsing attributes in process `syz.3.595'. [ 157.684211][ T8368] netlink: 'syz.1.592': attribute type 10 has an invalid length. [ 157.692377][ T8368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.592'. [ 157.709885][ T8368] dummy0: entered promiscuous mode [ 157.716465][ T8368] bridge0: port 4(dummy0) entered blocking state [ 157.737635][ T8368] bridge0: port 4(dummy0) entered disabled state [ 157.745498][ T8368] dummy0: entered allmulticast mode [ 157.821395][ T8367] syzkaller0: entered promiscuous mode [ 157.845000][ T8367] syzkaller0: entered allmulticast mode [ 157.915788][ T8377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 157.931594][ T10] IPVS: starting estimator thread 0... [ 157.978240][ T8367] 0: reclassify loop, rule prio 0, protocol 800 [ 157.984204][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.597'. [ 157.994617][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 158.015711][ T8376] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 158.026166][ T8378] IPVS: using max 30 ests per chain, 72000 per kthread [ 158.082381][ T8376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.325142][ T8386] netlink: 'syz.2.602': attribute type 2 has an invalid length. [ 158.534095][ T8391] bond0: (slave dummy0): Releasing backup interface [ 158.689616][ T8400] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 158.715060][ T8400] bond4 (unregistering): Released all slaves [ 158.806817][ T8404] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 158.813071][ T8404] syzkaller1: linktype set to 769 [ 160.352161][ T8466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.404509][ T8467] netlink: 'syz.4.622': attribute type 13 has an invalid length. [ 160.467790][ T8467] netlink: 'syz.4.622': attribute type 17 has an invalid length. [ 160.708307][ T8467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.714757][ T8484] netlink: 'syz.0.624': attribute type 4 has an invalid length. [ 160.789485][ T8485] netlink: 'syz.0.624': attribute type 4 has an invalid length. [ 161.043207][ T8501] team0: Mode changed to "broadcast" [ 161.060893][ T8501] x_tables: duplicate underflow at hook 2 [ 161.388118][ T8524] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.401293][ T8524] netlink: 'syz.3.636': attribute type 2 has an invalid length. [ 161.415278][ T8524] : entered promiscuous mode [ 161.421964][ T8524] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.497868][ T8526] veth1_macvtap: left allmulticast mode [ 161.599916][ T8531] netlink: 'syz.0.639': attribute type 23 has an invalid length. [ 161.611186][ T8526] __nla_validate_parse: 9 callbacks suppressed [ 161.611204][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'. [ 161.638218][ T8526] hsr_slave_0: left promiscuous mode [ 161.833105][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 161.843268][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 162.029259][ T8545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'. [ 162.338751][ T8570] team_slave_1: Caught tx_queue_len zero misconfig [ 162.381075][ T8554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 162.423185][ T8574] gtp0: entered promiscuous mode [ 162.443299][ T8574] gtp0: entered allmulticast mode [ 162.869824][ T8589] netlink: 'syz.3.653': attribute type 13 has an invalid length. [ 162.886585][ T8589] netlink: 'syz.3.653': attribute type 17 has an invalid length. [ 163.203308][ T8609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.209462][ T8589] bridge0: left promiscuous mode [ 163.263243][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.302586][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.333818][ T8589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.384293][ T8602] lo: Caught tx_queue_len zero misconfig [ 163.481587][ T8619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.658'. [ 163.800573][ T8642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 164.128899][ T8660] netlink: 'syz.4.669': attribute type 2 has an invalid length. [ 164.150475][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.669'. [ 164.183820][ T8660] !: entered promiscuous mode [ 164.198908][ T8661] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 164.314082][ T8678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.672'. [ 164.323184][ T8678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.672'. [ 164.345079][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 164.374235][ T8678] netlink: 'syz.2.672': attribute type 4 has an invalid length. [ 164.732607][ T8704] x_tables: duplicate underflow at hook 1 [ 165.203662][ T8703] infiniband syz1: set active [ 165.226460][ T8703] infiniband syz1: added bond0 [ 165.231507][ T8726] nbd: must specify a device to reconfigure [ 165.279680][ T8703] RDS/IB: syz1: added [ 165.285259][ T8703] smc: adding ib device syz1 with port count 1 [ 165.293055][ T8703] smc: ib device syz1 port 1 has no pnetid [ 165.777515][ T8743] tipc: Started in network mode [ 165.782543][ T8743] tipc: Node identity b244379cfa37, cluster identity 4711 [ 165.794764][ T8743] tipc: Enabled bearer , priority 0 [ 165.907684][ T8742] tipc: Disabling bearer [ 166.539640][ T8772] sctp: [Deprecated]: syz.4.699 (pid 8772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.539640][ T8772] Use struct sctp_sack_info instead [ 166.617469][ T8778] __nla_validate_parse: 5 callbacks suppressed [ 166.617488][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 166.638442][ T8779] vlan0: entered allmulticast mode [ 166.645818][ T8779] bridge0: entered allmulticast mode [ 166.900650][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 166.933041][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.0.706'. [ 167.507323][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 167.548808][ T8818] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 167.564389][ T8816] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.714'. [ 167.573951][ T8816] openvswitch: netlink: Message has 6 unknown bytes. [ 168.080668][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 168.169234][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 168.232637][ T8847] batadv0: entered promiscuous mode [ 168.258878][ T8847] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 168.288129][ T8847] batadv0: left promiscuous mode [ 168.523465][ T8861] bridge0: port 3(erspan0) entered blocking state [ 168.530919][ T8861] bridge0: port 3(erspan0) entered disabled state [ 168.539094][ T8861] erspan0: entered allmulticast mode [ 168.545698][ T8861] erspan0: entered promiscuous mode [ 168.561983][ T8861] bridge0: port 3(erspan0) entered blocking state [ 168.568592][ T8861] bridge0: port 3(erspan0) entered forwarding state [ 168.593064][ T8863] erspan0: left allmulticast mode [ 168.605477][ T8863] erspan0: left promiscuous mode [ 168.612835][ T8863] bridge0: port 3(erspan0) entered disabled state [ 168.704049][ T8868] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 168.721277][ T8866] IPVS: rr: FWM 3 0x00000003 - no destination available [ 168.845650][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.729'. [ 168.877546][ T8878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.730'. [ 168.936913][ T8881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.731'. [ 169.060005][ T8879] bridge0: entered allmulticast mode [ 169.264055][ T8890] tipc: Started in network mode [ 169.280408][ T8890] tipc: Node identity d2df1e04c184, cluster identity 4711 [ 169.298687][ T8890] tipc: Enabled bearer , priority 0 [ 169.349994][ T8892] bond2: option arp_interval: invalid value (18446744073709551615) [ 169.376076][ T8892] bond2: option arp_interval: allowed values 0 - 2147483647 [ 169.385909][ T8892] bond2 (unregistering): Released all slaves [ 169.413905][ T8890] syzkaller0: entered promiscuous mode [ 169.415378][ T8896] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 169.432121][ T8890] syzkaller0: entered allmulticast mode [ 169.473529][ T8890] tipc: Resetting bearer [ 169.480060][ T8890] syzkaller0: tun_net_xmit 90 [ 169.501477][ T8888] tipc: Resetting bearer [ 169.535823][ T8888] tipc: Disabling bearer [ 169.727376][ T8904] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 169.978095][ T8916] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 170.010245][ T8916] bond1 (unregistering): Released all slaves [ 170.246067][ T8922] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 170.323032][ T8926] bridge_slave_0: left allmulticast mode [ 170.330865][ T8926] bridge_slave_0: left promiscuous mode [ 170.339621][ T8926] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.370211][ T8926] bridge_slave_1: left allmulticast mode [ 170.375876][ T8926] bridge_slave_1: left promiscuous mode [ 170.436381][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.475387][ T8926] bond0: (slave bond_slave_0): Releasing backup interface [ 170.514535][ T8926] bond0: (slave bond_slave_1): Releasing backup interface [ 170.540165][ T8926] team0: Port device team_slave_0 removed [ 170.559227][ T8926] team0: Port device team_slave_1 removed [ 170.566936][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.574453][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.584473][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.593393][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.608212][ T8926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.848457][ T8947] IPv6: Can't replace route, no match found [ 170.948378][ T8943] tipc: Enabled bearer , priority 0 [ 170.959040][ T8943] syzkaller0: entered promiscuous mode [ 170.964548][ T8943] syzkaller0: entered allmulticast mode [ 171.002981][ T8943] tipc: Resetting bearer [ 171.019611][ T8953] : renamed from veth0_to_bond [ 171.136789][ T8942] tipc: Resetting bearer [ 171.167323][ T8942] tipc: Disabling bearer [ 171.527125][ T8965] netlink: 'syz.1.760': attribute type 33 has an invalid length. [ 172.009129][ T8986] __nla_validate_parse: 10 callbacks suppressed [ 172.009148][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 172.339199][ T1152] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.386205][ T1152] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.420862][ T1152] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.444126][ T1152] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.540457][ T9004] netlink: 24 bytes leftover after parsing attributes in process `syz.4.775'. [ 172.672951][ T9011] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 172.694623][ T9011] netlink: 240 bytes leftover after parsing attributes in process `syz.0.777'. [ 172.724932][ T9013] netlink: 'syz.2.779': attribute type 5 has an invalid length. [ 172.907470][ T9022] x_tables: unsorted underflow at hook 2 [ 173.703892][ T9047] syzkaller0: entered promiscuous mode [ 173.723930][ T9047] syzkaller0: entered allmulticast mode [ 175.223300][ T9072] dvmrp0: entered allmulticast mode [ 175.426453][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.796'. [ 176.888522][ T9142] netlink: 'syz.1.812': attribute type 14 has an invalid length. [ 176.908897][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'. [ 176.928257][ T9142] bond0: option xmit_hash_policy: invalid value (8) [ 177.364709][ T9148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.813'. [ 177.467253][ T9158] netlink: 196 bytes leftover after parsing attributes in process `syz.3.816'. [ 177.555670][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.817'. [ 177.755239][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.818'. [ 177.971335][ T9174] netlink: 'syz.4.821': attribute type 178 has an invalid length. [ 177.989472][ T9179] netlink: 'syz.4.821': attribute type 178 has an invalid length. [ 178.138765][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 178.221278][ T9190] netlink: 68 bytes leftover after parsing attributes in process `syz.4.826'. [ 178.288431][ T9192] bridge0: entered promiscuous mode [ 178.866167][ T9220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.046831][ T9203] netlink: 'syz.4.826': attribute type 6 has an invalid length. [ 179.180110][ T9232] tipc: Failed to remove unknown binding: 66,1,1/0:3933161056/3933161058 [ 179.196541][ T9232] tipc: Failed to remove unknown binding: 66,1,1/0:3933161056/3933161058 [ 179.220722][ T9232] tipc: Failed to remove unknown binding: 66,1,1/0:3933161056/3933161058 [ 179.237765][ T9220] netlink: 76 bytes leftover after parsing attributes in process `syz.0.836'. [ 179.540357][ T9244] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 179.596239][ T9246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 179.630259][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.844'. [ 179.671544][ T9244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.719340][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 179.780342][ T9250] bond5: (slave ip6gretap1): making interface the new active one [ 179.794359][ T9250] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 179.845222][ T9255] veth3: entered promiscuous mode [ 180.012031][ T9274] netlink: Unknown conntrack attr (0) [ 180.155620][ T9282] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 180.171550][ T9278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.183010][ T9278] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.309160][ T9278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.328099][ T9278] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.421026][ T9278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.456277][ T9278] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.471099][ T9290] netlink: 'syz.4.855': attribute type 27 has an invalid length. [ 180.564873][ T9295] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 180.590089][ T9278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.600631][ T9278] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.701640][ T9295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.738002][ T9296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.757383][ T9296] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.797082][ T9296] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 180.922905][ T9298] veth3: entered promiscuous mode [ 180.952123][ T9298] bond2: (slave veth3): Enslaving as an active interface with a down link [ 180.989799][ T4347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.009039][ T4347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.274763][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.283486][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.358543][ T4347] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.390304][ T9323] xt_hashlimit: max too large, truncated to 1048576 [ 181.397570][ T4347] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.589460][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.613601][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.652606][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.672163][ T76] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.499990][ T9372] x_tables: duplicate underflow at hook 1 [ 182.863058][ T9370] __nla_validate_parse: 6 callbacks suppressed [ 182.863079][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.875'. [ 182.960386][ T9390] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 183.035122][ T9392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.883'. [ 183.063480][ T9395] ipt_ECN: cannot use operation on non-tcp rule [ 183.102380][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 183.481782][ T9415] netlink: 'syz.4.887': attribute type 2 has an invalid length. [ 183.764702][ T9375] infiniband syz2: set down [ 183.797068][ T9375] infiniband syz2: added ipvlan0 [ 183.950446][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 183.959700][ T9437] netlink: 'syz.2.894': attribute type 7 has an invalid length. [ 183.985050][ T2983] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.994687][ T2983] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.008128][ T9375] RDS/IB: syz2: added [ 184.030236][ T2983] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.040660][ T9375] smc: adding ib device syz2 with port count 1 [ 184.058253][ T2983] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.071480][ T9375] smc: ib device syz2 port 1 has no pnetid [ 184.256964][ T9446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.899'. [ 184.259154][ T9444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.898'. [ 184.867065][ T9465] netlink: 'syz.3.904': attribute type 33 has an invalid length. [ 184.875342][ T9467] netlink: 'syz.2.905': attribute type 21 has an invalid length. [ 184.912080][ T9465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.904'. [ 184.960151][ T9468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.539847][ T9485] netlink: 60 bytes leftover after parsing attributes in process `syz.0.910'. [ 185.659383][ T9492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.126256][ T9506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.356056][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.914'. [ 187.574242][ T9558] netlink: 'syz.2.923': attribute type 1 has an invalid length. [ 187.669802][ T9561] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.923'. [ 187.697867][ T9561] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 188.205915][ T9578] netlink: 'syz.1.925': attribute type 33 has an invalid length. [ 188.224078][ T9578] netlink: 152 bytes leftover after parsing attributes in process `syz.1.925'. [ 189.296061][ T9471] Set syz1 is full, maxelem 65536 reached [ 189.431236][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.927'. [ 189.724752][ T9594] netlink: 188 bytes leftover after parsing attributes in process `syz.4.928'. [ 189.962174][ T9600] netlink: 2 bytes leftover after parsing attributes in process `syz.4.930'. [ 190.554062][ T9628] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 190.572746][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 190.576814][ T9623] netlink: 'syz.2.937': attribute type 33 has an invalid length. [ 190.591221][ T9623] netlink: 152 bytes leftover after parsing attributes in process `syz.2.937'. [ 190.821978][ T9633] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 190.858593][ T9633] netlink: 224 bytes leftover after parsing attributes in process `syz.3.939'. [ 191.035215][ T9646] smc: ib device syz1 ibport 2 applied user defined pnetid SYZ0 [ 191.701864][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.946'. [ 191.702786][ T9661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.945'. [ 192.004140][ T9661] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 192.342784][ T9679] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 192.351896][ T9679] netlink: 'syz.4.949': attribute type 2 has an invalid length. [ 192.361079][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.949'. [ 192.464644][ T9681] netlink: 'syz.1.950': attribute type 33 has an invalid length. [ 192.858441][ T9713] netlink: 'syz.3.959': attribute type 21 has an invalid length. [ 192.890983][ T9713] netlink: 'syz.3.959': attribute type 4 has an invalid length. [ 192.904598][ T9713] netlink: 'syz.3.959': attribute type 5 has an invalid length. [ 193.110900][ T9727] batadv1: entered promiscuous mode [ 193.730370][ T9734] __nla_validate_parse: 7 callbacks suppressed [ 193.730389][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.964'. [ 193.821727][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'. [ 193.841415][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'. [ 194.436159][ T9760] netlink: 68 bytes leftover after parsing attributes in process `syz.1.975'. [ 194.567233][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 194.577140][ T9764] chnl_net:caif_netlink_parms(): no params data found [ 194.909113][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'. [ 195.128387][ T9773] xt_nat: multiple ranges no longer supported [ 195.608445][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.986'. [ 195.648546][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.982'. [ 195.770587][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 195.854106][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 196.157661][ T9824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.447458][ T9843] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.625065][ T9847] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.664554][ T9847] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.787692][ T9847] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.869046][ T9847] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.035372][ T9847] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.048176][ T9847] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.127368][ T9847] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.141169][ T9847] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.175466][ T9876] netlink: 'syz.4.1008': attribute type 3 has an invalid length. [ 197.183745][ T9876] netlink: 'syz.4.1008': attribute type 5 has an invalid length. [ 197.252519][ T2983] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.261063][ T2983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.283546][ T2983] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.292180][ T2983] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.302074][ T9881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.335008][ T2983] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.343934][ T2983] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.360401][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.390663][ T2983] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.404874][ T2983] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.485309][ T9883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.548038][ T9886] block nbd3: not configured, cannot reconfigure [ 197.797854][ T10] IPVS: starting estimator thread 0... [ 197.910581][ T9908] IPVS: using max 32 ests per chain, 76800 per kthread [ 198.037456][ T9914] nbd2: detected capacity change from 0 to 63 [ 198.069228][ T9919] block nbd2: NBD_DISCONNECT [ 198.098505][ T9919] block nbd2: Disconnected due to user request. [ 198.140781][ T9919] block nbd2: shutting down sockets [ 198.601766][ T9938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.630626][ T9909] delete_channel: no stack [ 199.321087][ T9982] __nla_validate_parse: 10 callbacks suppressed [ 199.321106][ T9982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 200.106683][T10029] dvmrp0: left allmulticast mode [ 200.243978][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1052'. [ 200.266267][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 200.388403][T10033] hsr_slave_1 (unregistering): left promiscuous mode [ 200.485068][T10041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.579628][T10035] netlink: 'syz.1.1053': attribute type 39 has an invalid length. [ 200.887580][T10050] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1057'. [ 200.925282][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 200.962523][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 200.970887][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 200.982348][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 200.989214][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 200.996125][ C1] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 201.338002][T10060] only policy match revision 0 supported [ 201.338028][T10060] unable to load match [ 201.379842][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1060'. [ 201.510391][T10052] tipc: Enabled bearer , priority 0 [ 201.540318][T10065] netlink: 'syz.4.1062': attribute type 33 has an invalid length. [ 201.580929][T10065] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1062'. [ 201.651925][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1064'. [ 201.973740][T10047] tipc: Disabling bearer [ 202.195597][T10095] sctp: [Deprecated]: syz.4.1070 (pid 10095) Use of int in maxseg socket option. [ 202.195597][T10095] Use struct sctp_assoc_value instead [ 202.249234][T10092] netem: incorrect gi model size [ 202.254686][T10092] netem: change failed [ 202.370572][T10104] ip6tnl2: entered allmulticast mode [ 202.408307][T10104] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1073'. [ 202.520942][T10108] FAULT_INJECTION: forcing a failure. [ 202.520942][T10108] name failslab, interval 1, probability 0, space 0, times 1 [ 202.534042][T10108] CPU: 1 UID: 0 PID: 10108 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 202.534065][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.534084][T10108] Call Trace: [ 202.534100][T10108] [ 202.534117][T10108] dump_stack_lvl+0xe8/0x150 [ 202.534152][T10108] should_fail_ex+0x414/0x560 [ 202.534185][T10108] should_failslab+0xa8/0x100 [ 202.534212][T10108] __kmalloc_cache_noprof+0x84/0x700 [ 202.534232][T10108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.534260][T10108] ? __xdp_reg_mem_model+0x1d8/0x5a0 [ 202.534292][T10108] __xdp_reg_mem_model+0x1d8/0x5a0 [ 202.534324][T10108] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 202.534350][T10108] ? page_pool_create_percpu+0x7f9/0xb80 [ 202.534382][T10108] xdp_reg_mem_model+0x22/0x40 [ 202.534405][T10108] bpf_test_run_xdp_live+0x21a/0x1b20 [ 202.534430][T10108] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 202.534461][T10108] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 202.534492][T10108] ? __pfx_autoremove_wake_function+0x10/0x10 [ 202.534524][T10108] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 202.534552][T10108] ? 0xffffffffa02052c0 [ 202.534587][T10108] ? 0xffffffffa0201954 [ 202.534629][T10108] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 202.534665][T10108] ? _copy_from_user+0x94/0xb0 [ 202.534689][T10108] ? bpf_test_init+0x113/0x150 [ 202.534711][T10108] ? xdp_convert_md_to_buff+0x5b/0x330 [ 202.534738][T10108] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 202.534778][T10108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 202.534807][T10108] ? __fget_files+0x2a/0x420 [ 202.534837][T10108] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 202.534869][T10108] bpf_prog_test_run+0x2c7/0x340 [ 202.534901][T10108] __sys_bpf+0x562/0x860 [ 202.534929][T10108] ? __pfx___sys_bpf+0x10/0x10 [ 202.534970][T10108] ? ksys_write+0x22a/0x250 [ 202.534991][T10108] ? __pfx_ksys_write+0x10/0x10 [ 202.535017][T10108] __x64_sys_bpf+0x7c/0x90 [ 202.535041][T10108] do_syscall_64+0xec/0xf80 [ 202.535061][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.535077][T10108] ? trace_irq_disable+0x37/0x100 [ 202.535101][T10108] ? clear_bhb_loop+0x60/0xb0 [ 202.535122][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.535147][T10108] RIP: 0033:0x7fa93db8f749 [ 202.535164][T10108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.535181][T10108] RSP: 002b:00007fa93ea6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 202.535211][T10108] RAX: ffffffffffffffda RBX: 00007fa93dde5fa0 RCX: 00007fa93db8f749 [ 202.535223][T10108] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 202.535235][T10108] RBP: 00007fa93ea6f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.535245][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.535254][T10108] R13: 00007fa93dde6038 R14: 00007fa93dde5fa0 R15: 00007ffea9a5a418 [ 202.535281][T10108] [ 202.706241][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 203.199457][T10131] net_ratelimit: 255 callbacks suppressed [ 203.199490][T10131] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 203.950700][T10163] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 204.025338][T10165] SET target dimension over the limit! [ 204.191748][T10169] syzkaller1: entered promiscuous mode [ 204.208272][T10169] syzkaller1: entered allmulticast mode [ 204.305423][T10172] hsr_slave_1 (unregistering): left promiscuous mode [ 208.018984][T10196] tipc: Enabled bearer , priority 0 [ 208.026471][T10187] syzkaller0: entered promiscuous mode [ 208.031974][T10187] syzkaller0: entered allmulticast mode [ 208.048759][T10201] tipc: Resetting bearer [ 208.235401][T10186] tipc: Resetting bearer [ 208.261566][T10186] tipc: Disabling bearer [ 208.505305][T10225] __nla_validate_parse: 7 callbacks suppressed [ 208.505324][T10225] netlink: 416 bytes leftover after parsing attributes in process `syz.4.1105'. [ 208.506344][T10223] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 208.543880][T10223] bond1: (slave lo): Enslaving as a backup interface with an up link [ 208.556665][T10223] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 208.668646][T10231] sctp: [Deprecated]: syz.1.1106 (pid 10231) Use of int in max_burst socket option deprecated. [ 208.668646][T10231] Use struct sctp_assoc_value instead [ 208.910679][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1110'. [ 209.148901][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 209.682734][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 209.682763][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 209.694984][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 209.924465][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 211.246639][T10314] sit0: entered promiscuous mode [ 211.272459][T10314] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 211.291321][T10314] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1129'. [ 211.379378][T10324] netlink: 'syz.4.1133': attribute type 6 has an invalid length. [ 211.606548][T10330] netlink: 'syz.4.1136': attribute type 11 has an invalid length. [ 211.616218][T10330] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1136'. [ 211.672729][T10327] veth1_virt_wifi: entered allmulticast mode [ 211.961402][T10346] bridge3: entered allmulticast mode [ 211.975086][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'. [ 212.349430][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 212.376056][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1144'. [ 212.727354][T10359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1140'. [ 212.983382][T10388] ip6tnl1: entered allmulticast mode [ 212.997092][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.148998][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.168880][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.203399][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.216360][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.234927][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.247169][T10401] siw: device registration error -23 [ 213.259319][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.292364][T10391] netlink: 'syz.2.1148': attribute type 39 has an invalid length. [ 213.987413][T10443] __nla_validate_parse: 1 callbacks suppressed [ 213.987431][T10443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1163'. [ 214.030075][T10440] 8021q: adding VLAN 0 to HW filter on device bond6 [ 214.230607][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1167'. [ 214.271796][T10452] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1167'. [ 214.566857][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'. [ 215.071249][T10454] lec:lec_atm_close: lec0: Shut down! [ 215.209104][T10487] batadv0: entered promiscuous mode [ 215.527441][T10497] bond4: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 215.539401][T10497] bond4: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 215.621541][T10498] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 215.634948][T10498] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 215.787195][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'. [ 216.725448][T10524] validate_nla: 25 callbacks suppressed [ 216.725467][T10524] netlink: 'syz.1.1183': attribute type 33 has an invalid length. [ 216.746132][T10524] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1183'. [ 216.752439][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1184'. [ 217.633774][T10555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 218.024387][T10579] netlink: 'syz.3.1196': attribute type 33 has an invalid length. [ 218.037570][T10579] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1196'. [ 218.187404][T10584] netlink: 'syz.4.1201': attribute type 5 has an invalid length. [ 258.808925][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.956446][ T31] INFO: task udevd:5846 blocked for more than 143 seconds. [ 286.963687][ T31] Not tainted syzkaller #0 [ 286.968950][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.977900][ T31] task:udevd state:D stack:23464 pid:5846 tgid:5846 ppid:1 task_flags:0x400140 flags:0x00080800 [ 286.990120][ T31] Call Trace: [ 286.993411][ T31] [ 286.996426][ T31] __schedule+0x149b/0x4fd0 [ 287.000964][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 287.006779][ T31] ? do_raw_spin_lock+0x121/0x290 [ 287.011842][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.017977][ T31] ? __blk_flush_plug+0x3fc/0x4b0 [ 287.023044][ T31] ? __pfx___schedule+0x10/0x10 [ 287.028545][ T31] ? schedule+0x91/0x360 [ 287.032834][ T31] schedule+0x165/0x360 [ 287.037462][ T31] schedule_timeout+0x12b/0x270 [ 287.042339][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.048255][ T31] ? __pfx_process_timeout+0x10/0x10 [ 287.053582][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 287.126075][ T31] ? prepare_to_wait_event+0x437/0x480 [ 287.131620][ T31] nbd_queue_rq+0x662/0xf10 [ 287.176109][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 287.181203][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 287.216230][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 287.222385][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 287.236085][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 287.241194][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 287.256489][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 287.262389][ T31] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 287.286064][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 287.292899][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 287.317062][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.322415][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 287.336188][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 287.341529][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 287.357718][ T31] blk_mq_dispatch_list+0xd0b/0xe00 [ 287.362975][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 287.386469][ T31] ? blk_mq_dispatch_list+0x1e0/0xe00 [ 287.392660][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 287.416140][ T31] ? lockdep_hardirqs_on+0x7b/0x110 [ 287.421402][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.446147][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 287.451863][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 287.466551][ T31] ? blk_mq_submit_bio+0xd5b/0x26b0 [ 287.471810][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 287.496481][ T31] ? blk_mq_submit_bio+0x46a/0x26b0 [ 287.502000][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 287.507422][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 287.512834][ T31] __submit_bio+0x2d0/0x5a0 [ 287.537060][ T31] ? __pfx___submit_bio+0x10/0x10 [ 287.542150][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 287.556132][ T31] ? bio_associate_blkg+0x6d/0x230 [ 287.561316][ T31] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 287.576547][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 287.582750][ T31] ? bio_alloc_bioset+0xca6/0x14e0 [ 287.604034][ T31] ? submit_bio_noacct+0xdfc/0x1b60 [ 287.609652][ T31] block_read_full_folio+0x599/0x830 [ 287.614997][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 287.620589][ T31] filemap_read_folio+0x117/0x380 [ 287.625637][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.631283][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 287.636959][ T31] ? filemap_add_folio+0x35f/0x540 [ 287.642066][ T31] do_read_cache_folio+0x358/0x590 [ 287.647384][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 287.652868][ T31] read_part_sector+0xb6/0x2b0 [ 287.657799][ T31] adfspart_check_ICS+0xa4/0xa50 [ 287.662775][ T31] ? snprintf+0xda/0x120 [ 287.667194][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.673538][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 287.679399][ T31] bdev_disk_changed+0x75f/0x14b0 [ 287.684432][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 287.690142][ T31] blkdev_get_whole+0x380/0x510 [ 287.695171][ T31] bdev_open+0x31e/0xd30 [ 287.699598][ T31] blkdev_open+0x457/0x600 [ 287.704035][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 287.709117][ T31] do_dentry_open+0x7ce/0x1420 [ 287.713905][ T31] vfs_open+0x3b/0x340 [ 287.718223][ T31] ? path_openat+0x33f3/0x3dd0 [ 287.722976][ T31] path_openat+0x340e/0x3dd0 [ 287.727687][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 287.733086][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 287.738900][ T31] ? getname_flags+0xb8/0x540 [ 287.743594][ T31] ? __pfx_path_openat+0x10/0x10 [ 287.748700][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 287.753668][ T31] do_filp_open+0x1fa/0x410 [ 287.758373][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 287.763505][ T31] ? _raw_spin_unlock+0x28/0x50 [ 287.768480][ T31] ? alloc_fd+0x64c/0x6c0 [ 287.772837][ T31] do_sys_openat2+0x121/0x200 [ 287.777727][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 287.783213][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 287.788578][ T31] ? rcu_is_watching+0x15/0xb0 [ 287.793362][ T31] __x64_sys_openat+0x138/0x170 [ 287.798603][ T31] do_syscall_64+0xec/0xf80 [ 287.803110][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.809351][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.814045][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.820132][ T31] RIP: 0033:0x7fb06e0a7407 [ 287.824557][ T31] RSP: 002b:00007ffdd9ed1c00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 287.833226][ T31] RAX: ffffffffffffffda RBX: 00007fb06e7b0880 RCX: 00007fb06e0a7407 [ 287.841349][ T31] RDX: 00000000000a0800 RSI: 000055927d258f60 RDI: ffffffffffffff9c [ 287.849444][ T31] RBP: 000055927d23f910 R08: 0000000000000000 R09: 0000000000000000 [ 287.857571][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055927d252e20 [ 287.865583][ T31] R13: 000055927d24d190 R14: 0000000000000000 R15: 000055927d252e20 [ 287.873813][ T31] [ 287.877090][ T31] [ 287.877090][ T31] Showing all locks held in the system: [ 287.884849][ T31] 1 lock held by khungtaskd/31: [ 287.916122][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.937497][ T31] 2 locks held by getty/5588: [ 287.942234][ T31] #0: ffff88814db2b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.975994][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 287.996154][ T31] 1 lock held by syz-executor/5824: [ 288.001625][ T31] 3 locks held by syz-executor/5825: [ 288.016076][ T31] #0: ffff88807c318ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 288.036034][ T31] #1: ffff88807c3180c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 288.045761][ T31] #2: ffffffff8f483a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 288.076044][ T31] 5 locks held by syz-executor/5832: [ 288.081372][ T31] #0: ffff888030e78ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 288.117496][ T31] #1: ffff888030e780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 288.138026][ T31] #2: ffffffff8f483a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 288.166030][ T31] #3: ffff888027781338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 288.175437][ T31] #4: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 288.216664][ T31] 3 locks held by syz-executor/5838: [ 288.221988][ T31] #0: ffff888033ec8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 288.235679][ T31] #1: ffff888033ec80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 288.245571][ T31] #2: ffffffff8f483a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 288.255676][ T31] 3 locks held by udevd/5846: [ 288.260470][ T31] #0: ffff8881417b0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 288.269762][ T31] #1: ffff888140b15118 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 288.279340][ T31] #2: ffff888025590180 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 288.288288][ T31] 3 locks held by kworker/0:6/5911: [ 288.293470][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 288.304599][ T31] #1: ffffc9000469fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 288.315161][ T31] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 288.326225][ T31] 5 locks held by kworker/u8:17/10341: [ 288.343097][ T31] [ 288.345591][ T31] ============================================= [ 288.345591][ T31] [ 288.371810][ T31] NMI backtrace for cpu 1 [ 288.371830][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.371850][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.371862][ T31] Call Trace: [ 288.371870][ T31] [ 288.371877][ T31] dump_stack_lvl+0xe8/0x150 [ 288.371909][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 288.371938][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.371972][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 288.372001][ T31] sys_info+0x135/0x170 [ 288.372028][ T31] watchdog+0xf95/0xfe0 [ 288.372060][ T31] ? watchdog+0x20a/0xfe0 [ 288.372093][ T31] kthread+0x711/0x8a0 [ 288.372127][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.372151][ T31] ? __pfx_kthread+0x10/0x10 [ 288.372178][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.372211][ T31] ? __pfx_kthread+0x10/0x10 [ 288.372232][ T31] ret_from_fork+0x510/0xa50 [ 288.372253][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.372269][ T31] ? __switch_to+0xc9e/0x1480 [ 288.372314][ T31] ? __pfx_kthread+0x10/0x10 [ 288.372339][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.372377][ T31] [ 288.372384][ T31] Sending NMI from CPU 1 to CPUs 0: [ 288.492671][ C0] NMI backtrace for cpu 0 [ 288.492687][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 288.492706][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.492716][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 288.492743][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 91 0e 00 f3 0f 1e fa fb f4 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 288.492758][ C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6 [ 288.492774][ C0] RAX: 0000000000110089 RBX: ffffffff819713ee RCX: 0000000080000001 [ 288.492787][ C0] RDX: 0000000000000001 RSI: ffffffff8d792329 RDI: ffffffff8bc08360 [ 288.492798][ C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 288.492811][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822370 [ 288.492824][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 288.492835][ C0] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 288.492848][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.492860][ C0] CR2: 00007fa93e917d60 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 288.492881][ C0] Call Trace: [ 288.492888][ C0] [ 288.492894][ C0] default_idle+0x13/0x20 [ 288.492913][ C0] default_idle_call+0x73/0xb0 [ 288.492933][ C0] do_idle+0x1be/0x4d0 [ 288.492952][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 288.492972][ C0] ? __pfx_do_idle+0x10/0x10 [ 288.492994][ C0] cpu_startup_entry+0x44/0x60 [ 288.493011][ C0] rest_init+0x2de/0x300 [ 288.493032][ C0] start_kernel+0x381/0x3d0 [ 288.493055][ C0] x86_64_start_reservations+0x24/0x30 [ 288.493076][ C0] x86_64_start_kernel+0x143/0x1c0 [ 288.493097][ C0] common_startup_64+0x13e/0x147 [ 288.493125][ C0] [ 288.681915][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 288.688797][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 288.697893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.708011][ T31] Call Trace: [ 288.711289][ T31] [ 288.714219][ T31] vpanic+0x1e0/0x670 [ 288.718201][ T31] panic+0xb9/0xc0 [ 288.721915][ T31] ? __pfx_panic+0x10/0x10 [ 288.726327][ T31] ? __pfx_panic+0x10/0x10 [ 288.730733][ T31] watchdog+0xfdf/0xfe0 [ 288.734888][ T31] ? watchdog+0x20a/0xfe0 [ 288.739251][ T31] kthread+0x711/0x8a0 [ 288.743345][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.748040][ T31] ? __pfx_kthread+0x10/0x10 [ 288.752642][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.757838][ T31] ? __pfx_kthread+0x10/0x10 [ 288.762414][ T31] ret_from_fork+0x510/0xa50 [ 288.766986][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.772075][ T31] ? __switch_to+0xc9e/0x1480 [ 288.776748][ T31] ? __pfx_kthread+0x10/0x10 [ 288.781335][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.786190][ T31] [ 288.789579][ T31] Kernel Offset: disabled [ 288.793889][ T31] Rebooting in 86400 seconds..