last executing test programs: 3.145433959s ago: executing program 1 (id=20990): socket$kcm(0x21, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xec, 0x6, 0x4d, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, 0x7, 0x8, 0x7, 0x6}}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)='%-010d \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x7, 0x6a, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r10, 0x0, &(0x7f0000000400)=""/55}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pI4 \x00'}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x11, 0x5, 0x5, 0x8, 0x1000, 0xffffffffffffffff, 0x7, '\x00', r0, r4, 0x0, 0x1, 0x1}, 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', r0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r14}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xbbe5}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0xb, 0x0, 0x9, 0x1, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x400002, 0x58, &(0x7f0000000140)=""/88, 0x40f00, 0x4, '\x00', r5, @flow_dissector, r6, 0x8, &(0x7f00000001c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x3, 0x38a4cd10}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000600)=[r7, r8, r9, r10, 0x1, r11, r12, r13, r14], &(0x7f0000000640)=[{0x4, 0x2, 0x1, 0x1}, {0x5, 0x2, 0xd, 0xb}], 0x10, 0x8}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x10}, {}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x50}, 0x20) 2.837917805s ago: executing program 1 (id=20996): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x3) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) 2.775835633s ago: executing program 4 (id=20997): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x2, @local, 'vlan1\x00'}}, 0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f0000000440), &(0x7f0000000040)=@udp=r3}, 0x20) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'ipvlan0\x00'}}, 0x1e) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005f00000000f80000000000000001", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f00000002c0)="390000624a22144700bb65e1c3e4ffff01000000160000005600000025000000190004004800000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f00000003c0)="69621c9eb1f0eb9f2d1cb2cdb32ef558b76d3b6063b22c5e655ccb2bdf7391d0c7af30d2248a7917173a88d2b4e8a33426ee9cfb76eb15ae2b0f643fcfa58eaabca3f291ae404d7f51f2274d5dad94376daa14b2c68ab4ccec76a516fa257769", 0x60}], 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_vlan\x00'}}, 0x1e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c84, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x401c5820, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r7) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x10, 0x7, 0xb793, 0x9, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x67, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, {[@lsrr={0x83, 0x1b, 0x71, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast, @multicast2]}, @ra={0x94, 0x4, 0x2000}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) 2.694436459s ago: executing program 2 (id=20999): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180000002e000100000000000000000004001980040010"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x422080, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r4) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r6, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x10}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c4}, 0x40008c5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7101}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) close(0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {}, {0xd, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_EMATCHES={0x8, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080005"], 0x8c}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) close(0x4) 2.372832026s ago: executing program 3 (id=21000): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) close(r1) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) close(r1) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) (async) write$nci(r2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) (async) 2.094418799s ago: executing program 4 (id=21001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='.-\xd1^!)\\)\\A*^$\x00', 0x40000, &(0x7f00000000c0)={@_ha_fsid={[0x6b35, 0x8]}, {0x0, 0x2, 0xffffffff, 0x2}}, 0xbc, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.98723643s ago: executing program 3 (id=21003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000180)) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040804) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) setsockopt$inet6_int(r4, 0x29, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r8 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r8, 0x3a, 0x0, 0x0, 0x2000005d) sendmsg$rds(r2, &(0x7f0000003380)={&(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002a40)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/244, 0xf4}, {&(0x7f0000002740)=""/206, 0xce}, {&(0x7f0000002840)=""/193, 0xc1}, {&(0x7f0000002940)=""/222, 0xde}], 0x7, &(0x7f00000030c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x400}, &(0x7f0000002ac0)=0x9, &(0x7f0000002b00), 0x1ff, 0x1e1, 0x9, 0x6, 0x4, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x9}, &(0x7f0000002b40)=0x6, &(0x7f0000002b80)=0x5, 0x85, 0x6, 0x1, 0x3, 0x4, 0xffffffffffff6482}}, @fadd={0x58, 0x114, 0x6, {{0x6, 0x7}, &(0x7f0000002bc0)=0x9, &(0x7f0000002c00), 0xffffffffffffde8a, 0xefcc, 0x2b, 0x6, 0x11, 0x8}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x43}, @rdma_args={0x48, 0x114, 0x1, {{0xbc57, 0xff}, {&(0x7f0000002c40)=""/95, 0x5f}, &(0x7f0000002f00)=[{&(0x7f0000002cc0)=""/116, 0x74}, {&(0x7f0000002d40)=""/42, 0x2a}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000002e00)=""/255, 0xff}], 0x4, 0x20, 0xfffffffffffff470}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x1000}, &(0x7f0000002f40)=0x7fffffffffffffff, &(0x7f0000002f80)=0x2183, 0xe, 0x8, 0x8, 0xc15, 0x10, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x4}, &(0x7f0000002fc0)=0x7, &(0x7f0000003000)=0x6, 0xffffffffffffffff, 0x5, 0x2d00, 0x180000, 0x4a, 0x8000000000000000}}, @zcopy_cookie={0x18}, @fadd={0x58, 0x114, 0x6, {{0x95, 0x9}, &(0x7f0000003040), &(0x7f0000003080)=0xb, 0x3, 0x8, 0x0, 0x7, 0x32, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x2a0, 0xff848b297c37b196}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 1.986794884s ago: executing program 4 (id=21004): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3c364ca41d6357e544508474004000b42a201ecffffffffffffff8a0e2f964e0000c534a632ab6193fcf19b2df3ee0500faa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r1, 0x8) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) (async) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40082}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) 1.890158223s ago: executing program 0 (id=21005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x48005) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0x8}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 1.752836697s ago: executing program 1 (id=21006): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x5, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b6c70000", @ANYRES16=r2, @ANYBLOB="010029bd7000ffdbdf25010000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004c084}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x20, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x70, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x240080c1}, 0x20000844) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x894a, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000440)={0x20, r11, 0xe29, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x24040044) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r14, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000600000000000500030005000000110004"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.752366286s ago: executing program 2 (id=21007): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$xdp(0x2c, 0x3, 0x0) accept$ax25(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x200100, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f00000005c0)="24c953b63aa7367371e40e2f77289af6f77255af4579998d8084439a4f01d08744af804f5c577341527f9016351ca51aca6dc3ee89d01acb5ec2d9aebccf1c787c182c518cf2660d8734193dfadd1bad2f206a9faf061c1bd30e8d728f53bd6c7e2887271ba52e2882753ab7b87d5b45bd5cc93b7cb3b84ad1c5730cfdfbddd4865ec1ef316d70a383eb6da0a7144e94cd", 0x91) r4 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f00000035c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, 0x0, 0x0, 0x20044890, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r7 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x86, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r8, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2, 0xfffff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000624ba1e4b70b040000003a0000000000000018000000001a00"/44], 0x30}}], 0x1, 0x4044800) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010106, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x11c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x9, 0x5, 0x4, 0xc, 0xc, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xca2, 0x113, 0x3, 0x1, 0x4, 0x16c, 0x13e, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6c, 0x12, 0x0, 0x48, 0x60, 0x2, 0x60, 0x4, 0x6, 0x3, 0x1, 0x60, 0x2, 0x12, 0x9, 0x4, 0x7, 0xc, 0x5, 0x5, 0x1b, 0x4, 0x6, 0x24, 0x58, 0x0, 0x1b, 0x1, 0x30, 0x6f]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x1}, {0x5, 0x9}, {0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x5, 0x3}, {0x0, 0x1b}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0x1}, {0x4, 0x3}, {0x2, 0x6}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x2, 0xa}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x5}, {0x4, 0x9}, {0x3, 0x9}, {0x3}, {0x4, 0x1}, {0x2, 0x5}, {0x3, 0x6}, {0x7}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x1}, {0x1}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x7}, {0x4}, {0x4, 0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x9}, {0x1, 0x8}, {}, {0x6, 0x4}, {0x6}, {0x3, 0x3}, {0x1}, {0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x1}, {0x1, 0x4}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x36, 0x12, 0x24, 0xb, 0x1e, 0x60, 0x36, 0x6, 0x9, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x11, 0x4b, 0x9, 0xcb, 0xeb, 0x8000, 0x2c48, 0x2]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0x6, 0x6, 0x3, 0x48, 0x65, 0x16, 0xb, 0xc, 0x0, 0x1b, 0xc, 0x36, 0x18, 0x1b, 0x4, 0x5, 0x30, 0x12, 0x1b, 0x4, 0xc, 0x1, 0xc, 0x2, 0x12, 0x1b, 0x16, 0x4]}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004080}, 0x24028081) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x40) 1.623305258s ago: executing program 2 (id=21008): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a801400018005000a"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r8, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x77}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r6) sendmsg$NFC_CMD_SE_IO(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRESDEC=r9, @ANYBLOB="010028bd7000fcdbe60600000200080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="0004000100626f6e64040000000c00"/26], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r11, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8840) 1.597041711s ago: executing program 3 (id=21009): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$caif_stream(0x25, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="eaff3104cc2847fe66b28fa9ac82f257", 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x112, 0xe, 0x0, &(0x7f0000000080)) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x7, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r2, &(0x7f0000000100)='\x00', 0x12880, &(0x7f0000000240)={@align=0x8000000000000000, {0x36, 0x6, 0x9, 0x7}}, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x5}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c2000001000040ca37d41541b26bd7000002666", @ANYRESOCT=r1, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) 1.485990428s ago: executing program 0 (id=21010): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x42042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0x0, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x88, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x58, 0x70, [@NL80211_MESH_SETUP_IE={0x52, 0x3, "59dba17b3b0f1fdc95ee7411ced5841c3e105284fe13485f843fadebced31517e7d71c09c8a43622148627f0d61835dc5185047f70835859f3be8f06aebde835d316d267ba0b60ab1a145d2420d6"}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.385194643s ago: executing program 1 (id=21011): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) r1 = socket(0x1e, 0x6, 0x10001) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5ec600001000030500000000000000000000434e", @ANYRES16=r0, @ANYBLOB="e3ff0000000099caa75fc475fa29011d626f6e64000000001400028005001b00000000000500010006"], 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x4000) 1.314999076s ago: executing program 0 (id=21012): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20b94c7c1ccee603000000", @ANYRES8=r1, @ANYBLOB="01800001000053fc00000000006e0000000000"], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20000880}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x1404, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004}, 0x81) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x4) (async, rerun: 32) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (async, rerun: 64) listen(r6, 0x7) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000540)={r7, @empty, @rand_addr=0x64010101}, 0xc) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x40) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000200)=""/205, &(0x7f0000000300)=0xcd) 1.31455132s ago: executing program 2 (id=21013): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.245406529s ago: executing program 1 (id=21014): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000c00)={{r0, &(0x7f0000000080)='ecb-camellia-asm\x00', 0x20202, &(0x7f00000000c0)={@align=0x5, {0x6742, 0xa8d, 0x34b5, 0x7}}, 0x2ae, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000d80)=0xb1db}, 0x8, &(0x7f0000000b00)=[{0x2, 0x3, &(0x7f0000000200)='ecb-camellia-asm\x00', &(0x7f0000000240)="ad4bf6abfcdf13986230ffde90d5fbb237aab7e997db3ea9a9da77fa8a2101636d3f8f68584e1664168783967e25e9599eec5676b58f9bdda3135a124b6232dde4b2175fae24052915afa2a4608a378dac6cdb41cf12a99f161fc9c0216d1e297cdcf220ec5cfa00b6", 0x69, 0x12}, {0x2, 0x4, &(0x7f00000002c0)='ecb-camellia-asm\x00', &(0x7f0000000300)="be975640cd637903dd74ccf506f56c3e86b9dd805d515c604172d851d0923ec520797a344009fd509b9a713a601845de4191911a4ad27404e06e73f2ae8bebc871fa4d8e1a8f24294b1b5c977cdd384f096390bf4c3cbfa1b0b9aed403ac886047a425cb96d3ebffca5efb73869f808eb97afb90bdb0215c155802eb8ec3e26b44c6234515245de1f131d32cbd73ff31b06bb3aaf0beb11e1344d264afc4247958180f16ffe5d592b13f67ed6d170aaa5d74fa609f656a74c88783b8af44913d2dc391a2ba0c7da5526c0cd2e1fc8af940b4678d6e4d5584d798b98244631745c80ab6a2", 0xe4, 0x12}, {0x1, 0x4, &(0x7f00000005c0)='ecb-camellia-asm\x00', &(0x7f0000000600)="66d119546e", 0x5}, {0x0, 0xb, &(0x7f0000000640)='skcipher\x00', &(0x7f0000000680)="3c4934e6c03d814aba7d5cce62484cfe37e834c0fe85bf028be327e4c01af05b06f3aaa5afd7e4bf152a9f786637c1b074b5221b6903e9c3faeb8ad5bba86c8d13f1d07f668beb6ae1ced4e48740ae386bf8dc6eeb38668df860dd3804139390243e1bd324cdf1a82d9b277678d1971003ee6613642db6db7fc53ca75e8daaee0263730ad23cbcc5ac8da602be28d2edf7ad35d01e9b47868bd82a96edd2baeaa6e1c29f0bad2b155717105b31f7b63b5471bb036083b1de81c23f437b42c8bdd8583e8cc5d349e363663745375f636c82e5b7b4d6774a57", 0xd8, 0x32}, {0x3, 0x262, &(0x7f0000000780)='team\x00', &(0x7f00000007c0)="a2a352278f09fde5037c9bd4eb87551f181caad8be3de5de655fe489659e0b814729c8a9a4185fa8d6fe538abfa62d20b55f03d7e0074c5507a984b8770ce4b7fb6cf9cab0a554eda965664a6447f818deaa222cfb76cf0617cf454c5b91e1d620548ec1089e0095cc394f473d08f8cbbe8057b339539c8d74dab6445e2e09ee0cdcb907931c698407", 0x89, 0x2a}, {0x1, 0x0, &(0x7f0000000880)='/:\xec', &(0x7f00000008c0)="bcb8688dd6a6ab209b7e33cb96e6d18a56c1b5665cb18714064b1275c0ed060666c158ec1bba4a6f5ff291bde29416a2f8e150211da1f9fc863a270e7bb96f67ff97f43352361c771a679671b2103b91f6748e5cc66190b3d40f5ba709c7d067e3ca49167b8a56e8a8a7cc84e01859d011662d8a3a623cf89d0ba90122c610347f4b0ad8ee80d82d23102420dbdd38e6a1e6b76a621fdabf690b1755e91dcd854d38facc2d75243ea13d50835510a009b1edd4b2193afd9083cea64b5e33eeb7d70e06d6e8c98c38d4073f93dbf2", 0xce, 0x32}, {0x2, 0x0, &(0x7f00000009c0)='team\x00', &(0x7f0000000a00)="38d7701ad52d521df2df6179bc2be3ac151a52d49a68d2e01f4b41b6e0088a084926e5", 0x23, 0x10}, {0x2, 0x5, &(0x7f0000000a40)='\x00', &(0x7f0000000a80)="9410b05b4f8fc41cac1cb73e4a8897d4cbcbcf48cf52711797cdc1b3e7a6505c3ab9829b1415d62725457dee89c26b6c88acafe2ce8265f03786eddd69480a4caaab88226e75d2b070f216126fe863e91871b79128ccc9ae43", 0x59, 0x30}]}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="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", 0x179) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) recvmmsg(r4, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x582d}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4008000) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) 1.244858019s ago: executing program 3 (id=21015): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x8c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00'], 0x4c}}, 0x0) 1.0825903s ago: executing program 2 (id=21016): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket(0x10, 0x803, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000340)={'nat\x00', 0x0, 0x3, 0x6e, [0xfa, 0xf, 0x5, 0x9, 0x3, 0x7f], 0x0, &(0x7f0000000240), &(0x7f00000002c0)=""/110}, &(0x7f0000000100)=0x78) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010103, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.047964147s ago: executing program 3 (id=21017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) 898.814133ms ago: executing program 0 (id=21018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9321}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9321}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c080) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) 748.53878ms ago: executing program 0 (id=21019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x40, 0xc, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_INFO(r1, 0x80106f05, &(0x7f0000003900)={&(0x7f0000003740)=[&(0x7f0000000380)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x2, 0xffffffffffffff7f}, {0x3ff, 0x4}, {0x4, 0x4}, {0xffffffffffff3441, 0xffffffffffff36a6}, {0xfff8000000000000}, {0xfffffffffffffffa, 0x6}, {0x6, 0x2}, {0x8, 0x7}, {0x81, 0x2}, {0xff, 0x1}, {0x3, 0x40a5}, {0x2, 0x4fe5}, {0x2, 0x4}, {0xfffffffffffffc4b, 0xf1}, {0x7fffffffffffffff, 0x6}, {0x2, 0x80}, {0x14ac000000, 0x2}, {0x7ff, 0x4}, {0x4, 0x10}, {0x0, 0x10001}, {0xf, 0x8}, {0x2, 0x6}, {0x7, 0x7}, {0x3, 0x10}, {0x7, 0x8000000000000000}, {0x101, 0x1}, {0x3, 0x14e}, {0x80000001, 0x9}, {0x0, 0x80000001}, {0x3, 0x3}, {0x200, 0x2}, {0x3, 0x9}, {0x400, 0x9}, {0x100, 0x80000001}, {0x7, 0x4}, {0x3, 0x9}, {0x10, 0x4}, {0x80000000, 0x4}, {0x1, 0x7}, {0x10, 0x5}, {0xfff, 0x9}, {0x5, 0x2a}, {0x10000, 0x2}, {0xc4, 0xff}, {0x1f, 0x6}, {0x2, 0x4c3}, {0x8e84, 0x100000000}, {0x10, 0xfffffffffffffff7}, {0xd, 0x8001}, {0x0, 0x3bf}, {0x7, 0x6d7}, {0x8, 0xcac}, {0x4, 0xe03}, {0x6, 0x2}, {0xfff, 0x8}, {0x0, 0x400}, {0xc0, 0x7}, {0x2, 0xffffffffffffed49}, {0xffffffffffffffff, 0x3}, {0x6, 0x1a}, {0x1ff, 0x2}, {0x4, 0x3}, {0x26, 0x6}, {0x6, 0x7}, {0x5, 0x4}, {0x80000001, 0x2}, {0x1, 0x2}, {0x9, 0x8}, {0xbd0, 0x9}, {0x2, 0xff}, {0x100, 0x80}, {0x9, 0xf}, {0x7, 0x9}, {0x2b9c, 0xc47c}, {0x7fff, 0x1}, {0xfffffffffffffff8, 0xc}, {0x1, 0x400}, {0x80000000, 0x5}, {0x2, 0x88b8}, {0x0, 0x56}, {0x7fff, 0x2}, {0x9, 0x9868}, {0xfc39, 0x6}, {0x4, 0xff}, {0x10001, 0x4}, {0x1, 0x7}, {0x40000000000000, 0xffffffff}, {0xffffffffffffff06, 0x8000}, {0x101, 0x8}, {0x8c, 0xff}, {0x10001, 0x1b92}, {0x8, 0x1}, {0x2, 0x8147}, {0x6, 0x3ff}, {0x7, 0x180000000000000}, {0x0, 0x6}, {0x9, 0xfff}, {0x1, 0xfffffffffffffff9}, {0x3ff, 0x9}, {0x0, 0x3ff}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x9}, {0x7f, 0xfffffffffffffff4}, {0x200, 0x9e}, {0x32c}, {0x2, 0x286c}, {0x5, 0x8}, {0x0, 0xb48d}, {0x4, 0x58}, {0x101, 0x4}, {0x3, 0x2}, {0xfffffffffffffff7, 0x4}, {0x7, 0x1}, {0x9, 0x7}, {0x9, 0x8}, {0x7, 0x4}, {0x5, 0xffff}, {0x10000, 0x8000000000000001}, {0x7, 0x3}, {0xfff, 0x7}, {0xa, 0x596}, {0x5}, {0x10001}, {0x10, 0x5}, {0x7, 0x35}, {0x5, 0x3}, {0x1, 0x3ff}, {0xd4, 0x401}, {0x1, 0x5}, {0x3, 0x61c}, {0x4a1, 0x1ff}, {0xbbc, 0x2}, {0x71db, 0x2}, {0xfffffffffffffff7, 0x4}, {0x8000000000000001, 0x5}, {0x3, 0x1f7c}, {0x1, 0x4}, {0xbcf5, 0x3}, {0x6, 0x2}, {0x400, 0x1}, {0x1ff, 0x2}, {0x7f}, {0x1, 0x8}, {0x400, 0x10001}, {0x1, 0xfffffffffffffffe}, {0x7, 0x7f}, {0x1, 0x1}, {0x4, 0x7fff}, {0x8e, 0xb}, {0xe20, 0x6}, {0x9, 0x4}, {0x5, 0x6}, {0x8a, 0x10}, {0x9, 0x628000000000}, {0x80, 0x5}, {0x7, 0x8}, {0x1, 0x3}, {0x9, 0x8}, {0x0, 0xffffffffffffff9b}, {0x8, 0xc}, {0x2, 0x3e16}, {0x1}, {0x1, 0x3}, {0x7fffffff, 0x7fe000000}, {0x9, 0x4}, {0x1, 0x63a8b00d}, {0x4, 0x2cdd563}, {0x5, 0x136ae4db}, {0x6, 0x7}, {0xfffffffffffffffb, 0x6}, {0x3}, {0x2, 0x400}, {0x81, 0x7}, {0x1, 0x80000001}, {0x10, 0x6}, {0x23d6aaa0, 0x5}, {0x6}, {0xc, 0x4}, {0x100000001, 0x2}, {0x7ff, 0x5}, {0x3, 0x6}, {0xa51e, 0x6}, {0x9, 0xfffffffffffffff8}, {0x9, 0x80000000}, {0x10000, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x6}, {0x2c44, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x200000000000000, 0x8000000000000001}, {0x6, 0x5}, {0x36f7, 0xe4}, {0x7, 0xff}, {0x0, 0x7fff}, {0x5, 0x800}, {0x9, 0x6}, {0xfff, 0xffffffffffffffff}, {0x7a, 0x100}, {0x5, 0xfffffffffffffff8}, {0x10001, 0x1}, {0x8, 0x5e63}, {0x6}, {0x100000000, 0x4}, {0x7}, {0x408d, 0xf7}, {0x5}, {0x4, 0x8}, {0x1a, 0x6}, {0x3, 0x9}, {0x4, 0x5}, {0x9, 0x7}, {0x1, 0xe6}, {0x0, 0x3}, {0x101, 0x8}, {0x8, 0x2}, {0xfffffffffffffffd, 0x4}, {0x3, 0x5}, {0x6, 0x4645}, {0x8, 0x4}, {0x40, 0x80000000}, {0x8, 0x7fffffffffffffff}, {0x80, 0x10000}, {0x4, 0xfdf}, {0x6, 0x64}, {0x7, 0x4}, {0x1, 0x80}, {0xffffffffffffffff, 0x3750cb19}, {0x8234, 0x6}, {0x1, 0x7}, {0xc6d, 0x9}, {0x2, 0x6}, {0x80000000, 0xfffffffffffffffb}, {0xff, 0x3}, {0x0, 0xfffffffffffffff7}, {0x6000000, 0xf}, {0x1, 0x7b85}, {0x6}, {0xffffffff, 0xf1d7}, {0xfcd3, 0x1}, {0x1, 0x200}, {0x53, 0x6}, {0x8, 0x4000000000000000}, {0x1891, 0x8}, {0xfff, 0x5}, {0x8, 0x3}, {0x8, 0x5}, {0x2, 0x1}, {0x401, 0xf69}, {0x8000000000000000, 0x40}, {0x7, 0x6}, {0x883, 0x8}, {0x43, 0x3}]}, &(0x7f00000013c0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001440)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000001480)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f00000014c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000001500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x8}, &(0x7f0000001640)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000001680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000016c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000001700)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x8, 0xffffffff}, {0x1108779a, 0x8}, {0x4, 0x9}, {0xf7, 0xd56}, {0x5, 0x2}, {0x4, 0x80}, {0xaa8, 0x4}, {0x9, 0x800}, {0x5, 0x73}, {0x8, 0x9}, {0x40, 0x2}, {0x7, 0x9}, {0x6, 0xffffffffffffffff}, {0x6801, 0x4}, {0x2, 0xcc3a}, {0xb, 0x100000000}, {0xa30, 0x80000001}, {0x81e9, 0x4}, {0x2b, 0x6}, {0x0, 0x6}, {0x5, 0xb}, {0x2, 0x7}, {0x4, 0xffffffffffffffff}, {0x0, 0x5}, {0xfe1c}, {0x3, 0x2}, {0x1, 0x2}, {0x8, 0xcb02}, {0x6, 0x9}, {0x291, 0xff}, {0x0, 0x7}, {0x0, 0xbb}, {0x6}, {0x1, 0x80000001}, {0x2, 0x2}, {0x80, 0x7fff}, {0x2, 0x5}, {0x3, 0x80000000}, {0x7, 0x3ff}, {0x9, 0x8000000}, {0x9, 0x8}, {0xf441, 0x3}, {0xfff, 0x1b79}, {0x3, 0x2}, {0x101, 0x8}, {0x6, 0x100}, {0x3, 0x80}, {0x6, 0xfffffffffffffffa}, {0x3, 0xffffffffffffff43}, {0x8, 0x5}, {0x8001, 0xa6}, {0x9, 0x80000001}, {0x3, 0x91}, {0x1, 0x1000}, {0x80000001, 0x800}, {0x22, 0x9}, {0x3, 0x1ff}, {0xb1, 0x4}, {0x3, 0xe}, {0x101, 0x8}, {0x8, 0x6}, {0x2, 0xc3e2}, {0x7fffffff, 0x7}, {0x4d}, {0x5, 0x9c3}, {0x4442, 0x4}, {0x4, 0x6}, {0x1, 0x6}, {0x8}, {0x0, 0x7f}, {0x7f, 0x8}, {0x4940, 0x4}, {0x6e6, 0x9}, {0x6, 0x2}, {0x9, 0x7}, {0x8, 0x100000000}, {0x31, 0x5d926a01}, {0x9}, {0x28, 0x5}, {0x3, 0x7fffffff}, {0xe, 0x7}, {0x8001, 0x6}, {0x8, 0x3}, {0xc000000000000000, 0xc329}, {}, {0x6, 0xfffffffffffffbff}, {0x7, 0x3}, {0x0, 0x3ff}, {0xffffffffffffff01, 0x4}, {0x8, 0xb}, {0x3, 0x7fffffff}, {0x3ff, 0x3}, {0x5, 0x4}, {0x6800000000000000, 0x8}, {0x391}, {0x80, 0x7}, {0x9}, {0x3, 0x7}, {0x1000}, {0x7, 0x10}, {0x2}, {0x1, 0x100000001}, {0x10001, 0x6}, {0x5, 0x6}, {0x9, 0xe7a}, {0x3, 0x6}, {0x8a3, 0x4}, {0x1, 0x800}, {0xa, 0x9}, {0x2, 0xfffffffffffffffa}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x7}, {0xb, 0x9}, {0xffffffffffffe296, 0x8}, {0x200, 0x2}, {0xf, 0xe}, {0x2, 0x8}, {0x4}, {0x8000000000000000, 0xfffffffffffffffd}, {0x7ff, 0xfffffffffffffff8}, {0x7, 0xffffffffffffffff}, {0x3, 0x9}, {0x7fffffff, 0x3}, {0x100, 0x1}, {0x4, 0x100000001}, {0xffff, 0x9}, {0xe11a, 0x81}, {0x1, 0x1}, {0x3, 0x401}, {0x1, 0x9}, {0x8000000000000001, 0xe}, {0x2e, 0x400}, {0x10001, 0xf}, {0x6, 0xc000000000000000}, {0x8, 0x1}, {0x4, 0x6}, {0x8, 0xb}, {0x7, 0x100}, {0xbff, 0x401}, {0x166c, 0x9}, {0x3, 0x8000000000000001}, {0x7, 0x1}, {0x8, 0x1}, {0x2, 0xff}, {0x7, 0x1}, {0x80000001, 0x7fffffffffffffff}, {0xc8cd, 0xffffffffffffffff}, {0x1, 0x4}, {0x1000, 0xfffffffffffffffa}, {0xffffffff00000001, 0x1}, {0x1, 0x81}, {0x525e, 0x239}, {0x401}, {0x9, 0x9}, {0x0, 0xfffffffffffffff7}, {0x4, 0x1}, {0x3ff, 0x63b28987}, {0x3, 0x3}, {0x3ff, 0x3}, {0x8, 0x4}, {0x0, 0x3}, {0x2, 0x7ff00}, {0x4, 0x14e}, {0x6, 0x2}, {0x7fffffff, 0x9}, {0x7, 0x7ff}, {0xe7, 0xf96}, {0xa, 0x9}, {0x5, 0x81}, {0x3, 0x3}, {0x6, 0x6}, {0x3, 0x1}, {0x7ff, 0x3}, {0x9, 0xb5e}, {0x6, 0x22d}, {0x10, 0x8}, {0x1, 0x3}, {0x18, 0x80000001}, {0x8, 0xff82}, {0x8, 0x7}, {0x10000, 0x6}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x10}, {0x8000000000000001, 0x4}, {0xea3, 0x8000000000000001}, {0x4759, 0xa}, {0x101, 0x9}, {0x4, 0x6}, {0x2, 0x1}, {0x8000, 0x2}, {0x1, 0x7}, {0x5, 0xff}, {0x2, 0x2}, {0x80000001, 0x4}, {0x7ff, 0x8001}, {0xe2, 0x3}, {0x80000000, 0x5}, {0x2, 0xef7}, {0xf, 0x6}, {0x8, 0x6}, {0x8000000000000001, 0x5}, {0x7}, {0x7, 0x7}, {0xb1, 0x4}, {0x80000001, 0x80}, {0x4, 0x44e}, {0x7, 0x3287}, {0x4, 0x1ff}, {0x6, 0x7}, {0xa2fc, 0x6}, {0xfffffffffffffff0, 0xf}, {0x8, 0xd9}, {0x3ff, 0x5}, {0x163d, 0x4}, {0x1000, 0x80000001}, {0x7, 0x2}, {0x1b, 0x68e}, {0x8, 0x6da}, {0x1, 0x3d1f}, {0x3, 0x9}, {0xfffffffffffffff9, 0x2}, {0x3}, {0x0, 0x3ff}, {0xfffffffffffffe01, 0x9}, {0x6, 0x152}, {0x80, 0xf2d9}, {0x0, 0xf}, {0x2, 0x8}, {0x5, 0x4}, {0x4dd999cc, 0xbd}, {0x5}, {0xfff, 0x1}, {0x5, 0x1ff}, {0xb, 0x75}, {0x0, 0x3ea5b403}, {0xffffffff, 0x7}, {0xffffffff, 0x1ff}, {0x5, 0xffffffff}, {0x3, 0x7}, {0x1ff, 0x1}, {0x96e, 0x5}, {0x10, 0x9}, {0x0, 0xfffffffffffffbff}, {0x6c, 0x80}, {0x7, 0x1ff}, {0x7, 0xd92}, {0x401, 0x7f}, {0x2, 0x90}, {0x7, 0x7}, {0x2}, {0x5, 0x52}, {0x80000001}, {0x80, 0x9}]}, &(0x7f0000002740)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000002780)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f00000027c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002800)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002840)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000002880)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002900)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000002940)=@features={{0x4f32494e, 0x6, 0x10, 0x2}}, &(0x7f0000002980)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f00000029c0)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002a00)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000002a40)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000002ac0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002b00)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000002b40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000001}}, &(0x7f0000002b80)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0xba}, &(0x7f0000002cc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x60000000}}, &(0x7f0000002d00)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000002d40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000002d80)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000002dc0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000002e00)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000002e40)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000002e80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}}, &(0x7f0000003000)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f0000003040)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000003080)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f00000030c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x3}, &(0x7f0000003200)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xffffffe2}, &(0x7f0000003340)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f00000033c0)=@freefrag={{0x4f32494e, 0x9, 0x10}}, &(0x7f0000003500)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f0000003540)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003580)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f00000035c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xc0000000}}, &(0x7f0000003600)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000003640)=@label={{0x4f32494e, 0x4, 0x10, 0x80000001}}, &(0x7f00000036c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000003700)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}], 0x32}) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x6) close(r4) getsockopt(r1, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000080), 0x4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3, 0x6, 0x4920e7af812c3f03}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003940), &(0x7f0000003980)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x20002, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x4}]}, 0x2c}}, 0x0) 522.099825ms ago: executing program 4 (id=21020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x44, r1, 0x131, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_IE={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x98, [{0x4, 0x3}]}]}, {0x0, [0x30, 0x30, 0x61, 0x30, 0x2e, 0x0, 0x5f]}}, 0x0, 0x39, 0x0, 0x4000008, 0xbf81}, 0x28) 435.800476ms ago: executing program 0 (id=21021): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x6, 0x0, 0x0) r2 = socket(0xf, 0x803, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800f000057051d0028"], 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x8810) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) 353.38159ms ago: executing program 4 (id=21022): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="f240ac9e36d5106b4557885187a2ab1e94", 0x11, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @local, 0x3}, 0x1c) r1 = socket(0x27, 0x2, 0x3) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) 228.943861ms ago: executing program 4 (id=21023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x3, {{@in6=@loopback, @in=@broadcast, 0x0, 0xd, 0x400, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x3}, {0x0, 0x1765}, 0xfffffffe, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 165.252395ms ago: executing program 1 (id=21024): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz0\x00', @default, 0xfffffdba, 0x80002, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) syz_emit_ethernet(0x2056, &(0x7f0000001040)=ANY=[@ANYBLOB="000000000000aaaaaaaaaabb0011f800fc6e7b99f548798dce6d8e9e2827993a68054940a018b3faae05"], 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @bcast, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xb547, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 647.151µs ago: executing program 3 (id=21025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000040000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000008095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000000000001400000018000180140002006e657464657673696d3000000000040008000d000800000005000b000900000008000a"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x2, 0x2, {{0x38, 0x4, 0x3, 0xa, 0xe0, 0x67, 0x0, 0xc, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x8a, 0x3, [{0x2, 0xc, "d8587a5b6fa3719a72c0"}, {0x5, 0xc, "eb5221249db72759e3eb"}, {0x7, 0x7, "33a0a41925"}, {0xb, 0xf, "3326a0f4fca271afeb00c4a63c"}, {0x6, 0xf, "bc898d4276e15ef840fddeca94"}, {0x5, 0x8, "fafa3207cda7"}, {0x0, 0xd, "069d0d5b5afafaabb12270"}, {0x5, 0x10, "b20530c57c53b587e43b44860834"}, {0x2, 0x10, "c2bbe7290229ae6776ca72ab841d"}, {0x7, 0x12, "a5d7fbe53adfbb2cb0373ddee60379e9"}]}, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x0, [{@remote, 0x5}]}, @timestamp={0x44, 0x14, 0x42, 0x0, 0x7, [0xfffff000, 0x8, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x14, 0x88, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x8001}]}, @generic={0x86, 0xd, "71b4a6f54c17d373d72117"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x800) 0s ago: executing program 2 (id=21026): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x7, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): mp_action: action bad kind [ 1713.538147][T11302] lowmem_reserve[]: 0 0 0 0 0 [ 1713.543000][T11302] Node 1 Normal free:3663236kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58852kB local_pcp:28140kB free_cma:0kB [ 1713.578795][T11302] lowmem_reserve[]: 0 0 0 0 0 [ 1713.583620][T11302] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11096kB [ 1713.633569][T11327] netlink: 71 bytes leftover after parsing attributes in process `syz.4.18788'. [ 1713.668188][T11302] Node 0 DMA32: 12715*4kB (UM) 12675*8kB (UME) 8412*16kB (UM) 194*32kB (UME) 50*64kB (UME) 14*128kB (UM) 501*256kB (UM) 500*512kB (UM) 361*1024kB (UME) 112*2048kB (UM) 0*4096kB = 1281348kB [ 1713.698480][T11328] lo speed is unknown, defaulting to 1000 [ 1713.753053][T11302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1713.780183][T11302] Node 1 Normal: 9*4kB (U) 12*8kB (UM) 18*16kB (UM) 13*32kB (UM) 15*64kB (UM) 17*128kB (UM) 14*256kB (UM) 14*512kB (UM) 11*1024kB (UM) 12*2048kB (U) 882*4096kB (UM) = 3663236kB [ 1713.798628][T11302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.809027][T11302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1713.818510][T11302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.829670][T11302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1713.839873][T11302] 45227 total pagecache pages [ 1713.844566][T11302] 0 pages in swap cache [ 1713.848839][T11302] Free swap = 124996kB [ 1713.853094][T11302] Total swap = 124996kB [ 1713.857460][T11302] 2097051 pages RAM [ 1713.861290][T11302] 0 pages HighMem/MovableOnly [ 1713.866069][T11302] 427062 pages reserved [ 1713.870995][T11302] 0 pages cma reserved [ 1713.979386][T14748] lec:lec_start_xmit: lec0:No lecd attached [ 1714.079468][T11341] syzkaller0: entered promiscuous mode [ 1714.095294][T11341] syzkaller0: entered allmulticast mode [ 1714.170276][T11345] syzkaller0: entered promiscuous mode [ 1714.175947][T11345] syzkaller0: entered allmulticast mode [ 1714.286185][T11352] netlink: 'syz.4.18795': attribute type 9 has an invalid length. [ 1714.309947][T11349] netlink: 284 bytes leftover after parsing attributes in process `syz.1.18794'. [ 1714.322167][T11352] netlink: 'syz.4.18795': attribute type 11 has an invalid length. [ 1714.335771][T11352] netlink: 'syz.4.18795': attribute type 12 has an invalid length. [ 1714.528932][T11366] nbd: must specify an index to disconnect [ 1714.660117][T11374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.719663][T11374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1714.879284][T11386] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1715.183927][T11405] netlink: 'syz.0.18812': attribute type 1 has an invalid length. [ 1715.417366][T11412] bond4: (slave geneve2): making interface the new active one [ 1715.427864][T11426] IPVS: length: 17 != 8 [ 1715.433568][T11426] x_tables: duplicate underflow at hook 1 [ 1715.449352][T11412] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1715.477827][T11684] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1715.494979][T11684] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1715.604752][T11435] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 1715.622458][T11684] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1715.675126][T11684] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1715.732315][T11440] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1715.981387][T11466] bond4: option mode: invalid value (133) [ 1716.008428][T11466] bond4 (unregistering): Released all slaves [ 1716.052806][T11475] netlink: 'syz.0.18831': attribute type 8 has an invalid length. [ 1716.069091][T11469] pim6reg: entered allmulticast mode [ 1716.075096][T11472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1716.095407][T11475] bond0: entered promiscuous mode [ 1716.112189][T11475] bond_slave_0: entered promiscuous mode [ 1716.119293][T11475] bond_slave_1: entered promiscuous mode [ 1716.132865][T11475] gretap0: entered promiscuous mode [ 1716.160316][T11475] ip6gretap0: entered promiscuous mode [ 1716.200011][T11475] ip6gretap0: left promiscuous mode [ 1716.219399][T11475] bond0: left promiscuous mode [ 1716.224206][T11475] bond_slave_0: left promiscuous mode [ 1716.275231][T11475] bond_slave_1: left promiscuous mode [ 1716.295863][T11475] gretap0: left promiscuous mode [ 1716.359397][T11490] veth0_to_team: entered allmulticast mode [ 1716.711557][T11509] openvswitch: netlink: Key 18 has unexpected len 85 expected 2 [ 1716.912465][T11523] netlink: 'syz.3.18846': attribute type 1 has an invalid length. [ 1716.964698][T11523] bond2: (slave geneve2): making interface the new active one [ 1716.976502][T11523] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1716.991484][T11523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1717.010890][T11537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10 [ 1717.121892][T11684] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1717.218223][T11684] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1717.229581][T11537] __nla_validate_parse: 52 callbacks suppressed [ 1717.229615][T11537] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18850'. [ 1717.258471][T11684] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1717.268028][T11684] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1717.292217][T11548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1717.372553][T11555] netlink: 'syz.4.18855': attribute type 1 has an invalid length. [ 1717.398551][T11556] netlink: 'syz.4.18855': attribute type 1 has an invalid length. [ 1717.439525][T11559] netlink: 184 bytes leftover after parsing attributes in process `syz.2.18856'. [ 1717.660216][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18856'. [ 1717.952761][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18862'. [ 1718.046380][T11595] can: request_module (can-proto-0) failed. [ 1718.378017][T11628] veth0: entered promiscuous mode [ 1718.776809][T11657] netlink: 'syz.0.18881': attribute type 21 has an invalid length. [ 1718.784961][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18881'. [ 1719.046638][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 1719.054714][ C0] lec:lec_tx_timeout: lec0 [ 1719.148830][T11621] veth0: left promiscuous mode [ 1719.284983][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18891'. [ 1719.315313][T11699] netlink: 'syz.1.18890': attribute type 1 has an invalid length. [ 1719.337701][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18892'. [ 1719.350664][T11708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18893'. [ 1719.405897][T11699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1719.578664][T11699] bond2: (slave geneve2): making interface the new active one [ 1719.592956][T11699] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1719.820515][T11734] ipvlan3: entered allmulticast mode [ 1719.826077][T11734] batadv_slave_1: entered allmulticast mode [ 1719.839124][T11734] batman_adv: batadv0: Adding interface: ipvlan3 [ 1719.845500][T11734] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.877497][T11734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.888374][T11734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.899608][T11734] batman_adv: batadv0: Interface activated: ipvlan3 [ 1719.934967][T11735] netlink: 'syz.0.18898': attribute type 16 has an invalid length. [ 1719.962371][T11735] netlink: 'syz.0.18898': attribute type 17 has an invalid length. [ 1719.999817][T11752] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1720.232266][T11735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1720.657682][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18914'. [ 1720.673187][T11783] netlink: 'syz.3.18913': attribute type 4 has an invalid length. [ 1720.685468][T11781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18914'. [ 1720.695502][T11783] netlink: 'syz.3.18913': attribute type 11 has an invalid length. [ 1720.723177][T11785] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003 [ 1720.932365][T11805] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1720.935387][T11804] netlink: 'syz.4.18918': attribute type 10 has an invalid length. [ 1720.955174][T11804] bond0: (slave wlan1): Opening slave failed [ 1720.981384][T11792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1721.133079][T11822] netlink: 'syz.1.18926': attribute type 13 has an invalid length. [ 1721.475924][T11845] dvmrp0: entered allmulticast mode [ 1721.564354][T11849] openvswitch: netlink: Flow actions attr not present in new flow. [ 1722.348095][T11882] bond4: Unable to set up delay as MII monitoring is disabled [ 1722.362048][T11882] bond4 (unregistering): Released all slaves [ 1722.435537][T11887] __nla_validate_parse: 9 callbacks suppressed [ 1722.435551][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18945'. [ 1723.055310][T11936] xt_ipcomp: unknown flags 1D [ 1723.285966][T11947] syzkaller1: entered promiscuous mode [ 1723.303531][T11947] syzkaller1: entered allmulticast mode [ 1723.394221][T11956] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1723.405872][T11956] bond3 (unregistering): Released all slaves [ 1723.685423][T11972] syzkaller0: entered promiscuous mode [ 1723.694562][T11972] syzkaller0: entered allmulticast mode [ 1723.858780][T11983] netlink: 100 bytes leftover after parsing attributes in process `syz.0.18972'. [ 1723.955745][T11991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18974'. [ 1723.971316][T11991] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18974'. [ 1723.984910][T11990] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18974'. [ 1723.999032][T11990] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18974'. [ 1724.251049][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18980'. [ 1724.275202][T12015] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18981'. [ 1724.293015][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18981'. [ 1724.372030][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18983'. [ 1724.425266][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.708217][T12047] netlink: 'syz.1.18991': attribute type 4 has an invalid length. [ 1724.730505][T12047] .`: renamed from bond0 (while UP) [ 1725.155955][T12076] bond5: (slave gretap0): Device is not bonding slave [ 1725.163685][T12076] bond5: option active_slave: invalid value (gretap0) [ 1725.173091][T12076] bond5 (unregistering): Released all slaves [ 1725.669453][T12101] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 1725.678177][T12101] bond5: option packets_per_slave: allowed values 0 - 65535 [ 1725.688676][T12101] bond5 (unregistering): Released all slaves [ 1725.739572][T12058] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1725.803806][T12107] syzkaller0: entered promiscuous mode [ 1725.811777][T12107] syzkaller0: entered allmulticast mode [ 1725.995328][T12114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1726.081000][T12116] "syz.2.19013" (12116) uses obsolete ecb(arc4) skcipher [ 1726.287767][T12122] bond3: Removing last arp target with arp_interval on [ 1726.402229][T12126] bond4: entered promiscuous mode [ 1726.408290][T12126] bond4: entered allmulticast mode [ 1726.413841][T12126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1726.921161][T12130] vlan2: entered promiscuous mode [ 1726.926378][T12130] vlan2: entered allmulticast mode [ 1726.932286][T12130] hsr_slave_1: entered allmulticast mode [ 1726.966735][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 1727.182976][T12144] netlink: 'syz.2.19021': attribute type 12 has an invalid length. [ 1727.917532][T12060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1728.140218][T12161] __nla_validate_parse: 10 callbacks suppressed [ 1728.140238][T12161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19029'. [ 1728.175951][T12166] netlink: 'syz.1.19026': attribute type 10 has an invalid length. [ 1728.243286][T12166] team0 (unregistering): Port device team_slave_0 removed [ 1728.275535][T12166] team0 (unregistering): Port device team_slave_1 removed [ 1728.300805][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19030'. [ 1728.310428][T12169] netlink: 'syz.3.19030': attribute type 5 has an invalid length. [ 1728.318392][T12169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19030'. [ 1728.361739][T12169] geneve3: entered promiscuous mode [ 1728.368283][T12169] geneve3: entered allmulticast mode [ 1728.401516][T27487] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 1728.444886][T27487] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1728.486131][T27487] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1728.539062][T27487] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1728.561732][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19033'. [ 1728.575734][T12161] lo speed is unknown, defaulting to 1000 [ 1728.608060][T12186] netlink: 'syz.2.19033': attribute type 7 has an invalid length. [ 1728.636765][T12186] netlink: 'syz.2.19033': attribute type 8 has an invalid length. [ 1728.659632][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19033'. [ 1729.785420][T12220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19044'. [ 1729.800198][T12220] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.19044'. [ 1730.410804][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1730.419414][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.429755][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1730.435994][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1731.687850][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1731.791771][T12196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1732.176188][T12246] netlink: 'syz.0.19052': attribute type 4 has an invalid length. [ 1732.245859][T12250] sctp: [Deprecated]: syz.1.19053 (pid 12250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1732.245859][T12250] Use struct sctp_sack_info instead [ 1732.587623][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19059'. [ 1732.728672][T12287] netlink: 'syz.4.19061': attribute type 29 has an invalid length. [ 1732.737479][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19061'. [ 1732.786851][T12292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19062'. [ 1733.140534][T12311] netlink: 'syz.3.19067': attribute type 1 has an invalid length. [ 1735.451803][T12280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1735.464513][T12289] netlink: 'syz.1.19057': attribute type 1 has an invalid length. [ 1735.482797][T12289] __nla_validate_parse: 5 callbacks suppressed [ 1735.483987][T12289] netlink: 184 bytes leftover after parsing attributes in process `syz.1.19057'. [ 1735.502053][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19057'. [ 1735.715358][T12327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19071'. [ 1735.850287][T12335] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1735.868456][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19072'. [ 1735.890868][T12345] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19076'. [ 1735.903754][T12345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19076'. [ 1735.913123][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19072'. [ 1736.000476][T12335] geneve2: entered promiscuous mode [ 1736.006573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1736.014620][ C0] lec:lec_tx_timeout: lec0 [ 1736.024270][T12335] geneve2: entered allmulticast mode [ 1736.059954][T12350] netlink: 'syz.2.19078': attribute type 10 has an invalid length. [ 1736.066651][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19077'. [ 1736.232717][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19082'. [ 1736.291232][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19083'. [ 1736.331147][T12370] netlink: 'syz.0.19084': attribute type 1 has an invalid length. [ 1736.533396][T12370] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1736.545269][T12370] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1736.643060][T12396] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1736.781136][T12396] lo speed is unknown, defaulting to 1000 [ 1736.831433][T12404] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1736.841064][T32543] IPVS: starting estimator thread 0... [ 1736.884829][T12411] pim6reg1: entered promiscuous mode [ 1736.920895][T12411] pim6reg1: entered allmulticast mode [ 1736.939249][T12410] IPVS: using max 32 ests per chain, 76800 per kthread [ 1737.581572][T12441] syzkaller0: entered promiscuous mode [ 1737.588420][T12441] syzkaller0: entered allmulticast mode [ 1737.923239][T12461] netlink: 'syz.4.19106': attribute type 10 has an invalid length. [ 1738.080335][T12461] batman_adv: batadv0: Adding interface: netdevsim0 [ 1738.095861][T12461] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.136185][T12461] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1738.239282][T12464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.252125][T12464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.281312][T12468] veth0: entered promiscuous mode [ 1738.302628][T12466] veth0: left promiscuous mode [ 1738.383966][T12464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.401175][T12464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.414374][T12484] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1738.551134][T12464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.574136][T12464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.733014][T12502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1738.795535][T12464] batman_adv: batadv0: Removing interface: netdevsim0 [ 1738.955540][T12464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.968448][T12464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.004929][T12519] tipc: Started in network mode [ 1739.038160][T12519] tipc: Node identity 06c373d8e7d6, cluster identity 4711 [ 1739.045461][T12519] tipc: Enabled bearer , priority 0 [ 1739.067468][T12512] syzkaller0: entered promiscuous mode [ 1739.074167][T12512] syzkaller0: entered allmulticast mode [ 1739.191145][T12519] tipc: Resetting bearer [ 1739.222241][T12519] tipc: Disabling bearer [ 1739.232929][T21900] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.241906][T21900] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.255115][T12528] IPVS: Unknown mcast interface: vcan0 [ 1739.283707][T21900] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.298623][T21900] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.332762][T21900] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.342110][T21900] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.385248][T27521] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1739.403887][T27521] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1739.784883][T12564] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1739.951733][T12570] wireguard0: entered promiscuous mode [ 1739.967241][T12570] wireguard0: entered allmulticast mode [ 1740.025214][T12574] can: request_module (can-proto-0) failed. [ 1740.048367][T12556] netlink: 'syz.3.19132': attribute type 5 has an invalid length. [ 1740.422445][T12605] lo: entered allmulticast mode [ 1740.443722][T12605] lo: left allmulticast mode [ 1740.561563][T12613] __nla_validate_parse: 12 callbacks suppressed [ 1740.561581][T12613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19136'. [ 1740.619157][T12613] bond1: entered promiscuous mode [ 1740.624560][T12613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1740.661327][T12620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1740.679086][T12620] bond1: (slave sit4): The slave device specified does not support setting the MAC address [ 1740.720185][T12620] bond1: (slave sit4): Error -95 calling set_mac_address [ 1740.821375][T12583] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1740.842992][T12627] netlink: 64 bytes leftover after parsing attributes in process `syz.4.19147'. [ 1741.236278][T12651] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1741.253391][T12651] bond6 (unregistering): Released all slaves [ 1741.471519][T12683] tls_set_device_offload_rx: netdev not found [ 1741.551915][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19159'. [ 1741.563313][T12681] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19159'. [ 1742.087154][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 1744.110647][T12649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1744.322740][T12693] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19163'. [ 1744.384705][T12699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19164'. [ 1744.402762][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19165'. [ 1744.566161][T12703] lo speed is unknown, defaulting to 1000 [ 1744.620549][T12714] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19168'. [ 1744.632966][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19168'. [ 1744.643423][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19168'. [ 1744.647204][T12712] netlink: 'syz.2.19169': attribute type 1 has an invalid length. [ 1745.345694][T12745] tipc: Enabling of bearer rejected, failed to enable media [ 1745.482442][T12749] dvmrp0: entered allmulticast mode [ 1745.910025][T11690] smc: removing ib device syz1 [ 1745.980136][T12781] syzkaller0: entered promiscuous mode [ 1745.996053][T12781] syzkaller0: entered allmulticast mode [ 1746.021337][T12781] TC_ACT_REPEAT abuse ? [ 1746.314660][T12789] __nla_validate_parse: 2 callbacks suppressed [ 1746.314678][T12789] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19194'. [ 1746.526447][T12795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19195'. [ 1746.668318][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19198'. [ 1747.090644][T12827] netlink: 204 bytes leftover after parsing attributes in process `syz.4.19206'. [ 1747.285646][T12835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19208'. [ 1747.414746][T12839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19211'. [ 1747.622572][T12848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19213'. [ 1747.847427][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 1747.922021][T12858] bond0: entered promiscuous mode [ 1747.932980][T12858] bond_slave_0: entered promiscuous mode [ 1747.950859][T12858] bond_slave_1: entered promiscuous mode [ 1747.975642][T12858] batadv0: entered promiscuous mode [ 1747.985406][T12858] debugfs: 'hsr1' already exists in 'hsr' [ 1747.991376][T12858] Cannot create hsr debugfs directory [ 1747.997383][T12858] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1748.010518][T12858] hsr1: entered promiscuous mode [ 1748.027026][T12858] hsr1: entered allmulticast mode [ 1748.052027][T12858] bond0: entered allmulticast mode [ 1748.108896][T12858] bond_slave_0: entered allmulticast mode [ 1748.123409][T12858] bond_slave_1: entered allmulticast mode [ 1748.135147][T12858] batadv0: entered allmulticast mode [ 1748.207000][T12858] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1748.222099][T12858] bond0: left promiscuous mode [ 1748.228667][T12858] bond_slave_0: left promiscuous mode [ 1748.234344][T12858] bond_slave_1: left promiscuous mode [ 1748.269328][T12858] batadv0: left promiscuous mode [ 1748.445143][T12893] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1748.484065][T12894] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1748.635996][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19224'. [ 1748.648664][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19224'. [ 1748.658162][T12900] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19224'. [ 1749.391169][T12933] Cannot find add_set index 46338 as target [ 1749.731147][T12956] netlink: 'syz.0.19243': attribute type 1 has an invalid length. [ 1749.756258][T12954] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1749.773379][T12950] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1749.777254][T12956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1749.799926][T12956] IPv6: NLM_F_CREATE should be set when creating new route [ 1750.109565][T12977] openvswitch: netlink: IP tunnel dst address not specified [ 1750.284433][T12982] netlink: 'syz.4.19251': attribute type 1 has an invalid length. [ 1750.296708][T12982] netlink: 'syz.4.19251': attribute type 11 has an invalid length. [ 1750.967724][ T4884] Bluetooth: hci0: command 0x0405 tx timeout [ 1751.115491][T13035] bond2: entered promiscuous mode [ 1751.169489][T13035] bond2: entered allmulticast mode [ 1751.312019][T13045] syzkaller0: entered promiscuous mode [ 1751.317847][T13045] syzkaller0: entered allmulticast mode [ 1751.532890][T13062] __nla_validate_parse: 13 callbacks suppressed [ 1751.532909][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19275'. [ 1751.864916][T13088] syzkaller0: create flow: hash 2013835042 index 1 [ 1751.921743][T13091] netlink: 'syz.1.19283': attribute type 3 has an invalid length. [ 1751.952966][T13091] netlink: 'syz.1.19283': attribute type 3 has an invalid length. [ 1751.976251][T13079] netlink: 'syz.2.19279': attribute type 1 has an invalid length. [ 1752.037174][T27516] syzkaller0: tun_net_xmit 76 [ 1752.043820][T13103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19284'. [ 1752.047725][T27516] syzkaller0: tun_net_xmit 48 [ 1752.059793][T24381] syzkaller0: tun_net_xmit 76 [ 1752.125227][T13079] bond3: entered promiscuous mode [ 1752.138523][T13079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1752.193619][T13107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1752.217797][T13107] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 1752.230782][T13107] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1752.250720][T13107] bond3: (slave vti0): making interface the new active one [ 1752.258308][T13107] vti0: entered promiscuous mode [ 1752.264932][T13107] bond3: (slave vti0): Enslaving as an active interface with an up link [ 1752.274220][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19285'. [ 1752.390778][T13078] syzkaller0: delete flow: hash 2013835042 index 1 [ 1754.073737][T13118] netlink: 'syz.4.19289': attribute type 2 has an invalid length. [ 1754.200378][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19294'. [ 1754.215795][T13143] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20002 [ 1754.261422][T13147] netlink: 'syz.0.19297': attribute type 1 has an invalid length. [ 1754.310999][T13154] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19295'. [ 1754.343213][T13156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19299'. [ 1754.360478][T13154] ip6gretap0: entered promiscuous mode [ 1754.374616][T13154] ip6gretap0: entered allmulticast mode [ 1754.783855][T13182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1754.934432][T13190] netlink: 144 bytes leftover after parsing attributes in process `syz.3.19307'. [ 1755.159675][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19312'. [ 1756.098139][T13223] netlink: 'syz.4.19315': attribute type 1 has an invalid length. [ 1756.156291][T13223] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1756.171210][T13223] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1756.184066][T13223] bond4: (slave ip6gre2): making interface the new active one [ 1756.196220][T13223] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 1756.206234][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19316'. [ 1756.227952][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19316'. [ 1756.237178][T13226] netlink: 'syz.1.19316': attribute type 12 has an invalid length. [ 1756.245162][T13226] netlink: 'syz.1.19316': attribute type 11 has an invalid length. [ 1756.264364][T13226] macsec1: entered promiscuous mode [ 1757.408190][T13161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1757.584057][T13239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1757.611795][T13237] syzkaller1: entered promiscuous mode [ 1757.621708][T13237] syzkaller1: entered allmulticast mode [ 1757.924906][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19326'. [ 1757.950548][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19326'. [ 1757.970500][T13259] netlink: 220 bytes leftover after parsing attributes in process `syz.4.19326'. [ 1758.096468][T13263] netlink: 'syz.3.19328': attribute type 1 has an invalid length. [ 1758.113014][T13263] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19328'. [ 1758.123331][T13263] netlink: 'syz.3.19328': attribute type 1 has an invalid length. [ 1758.131623][T13263] netlink: 'syz.3.19328': attribute type 8 has an invalid length. [ 1758.141193][T13263] netlink: 606 bytes leftover after parsing attributes in process `syz.3.19328'. [ 1758.151754][T13263] netlink: 1 bytes leftover after parsing attributes in process `syz.3.19328'. [ 1758.476019][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19332'. [ 1758.619026][T13277] lo speed is unknown, defaulting to 1000 [ 1758.812823][T13281] syzkaller0: entered promiscuous mode [ 1758.819042][T13281] syzkaller0: entered allmulticast mode [ 1758.837543][T13286] x_tables: unsorted underflow at hook 3 [ 1759.133110][T13299] lo speed is unknown, defaulting to 1000 [ 1759.625786][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19343'. [ 1759.734463][T13322] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1760.003352][T13336] netlink: 284 bytes leftover after parsing attributes in process `syz.1.19348'. [ 1760.188726][T13354] nbd: couldn't find a device at index 0 [ 1760.261865][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19353'. [ 1760.332956][T13350] lo speed is unknown, defaulting to 1000 [ 1760.395577][T13369] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1760.595592][T13377] lo speed is unknown, defaulting to 1000 [ 1761.394196][T13409] syzkaller1: entered promiscuous mode [ 1761.400588][T13409] syzkaller1: entered allmulticast mode [ 1761.522599][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.696373][T13402] delete_channel: no stack [ 1761.888063][T13427] 8021q: VLANs not supported on caif0 [ 1761.911634][T13427] 8021q: VLANs not supported on caif0 [ 1762.110812][T13439] xt_socket: unknown flags 0x50 [ 1762.227168][T13447] tunl0: entered promiscuous mode [ 1762.236176][T13447] netlink: 'syz.3.19375': attribute type 3 has an invalid length. [ 1762.340461][T13454] lo speed is unknown, defaulting to 1000 [ 1762.638268][T13465] bond5: option lp_interval: invalid value (0) [ 1762.645270][T13465] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1762.658282][T13465] bond5 (unregistering): Released all slaves [ 1762.828998][T13477] SET target dimension over the limit! [ 1762.849040][T13477] SET target dimension over the limit! [ 1762.938245][T13486] __nla_validate_parse: 5 callbacks suppressed [ 1762.938262][T13486] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.19389'. [ 1763.359932][T13509] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19397'. [ 1763.453221][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19399'. [ 1763.476014][T13517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19399'. [ 1763.505739][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19399'. [ 1763.778705][T13536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19404'. [ 1763.806072][T13540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19405'. [ 1763.924259][T13548] netlink: 276 bytes leftover after parsing attributes in process `syz.3.19409'. [ 1763.987518][T13550] Bluetooth: MGMT ver 1.23 [ 1763.994466][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19412'. [ 1764.118748][T13555] netlink: 'syz.3.19413': attribute type 1 has an invalid length. [ 1764.129453][T13562] x_tables: duplicate entry at hook 1 [ 1764.144140][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19415'. [ 1764.188730][T13565] netlink: 'syz.1.19416': attribute type 4 has an invalid length. [ 1764.497440][T13581] syzkaller1: entered promiscuous mode [ 1764.502973][T13581] syzkaller1: entered allmulticast mode [ 1764.723364][T13598] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1764.817486][T13606] netlink: 'syz.0.19429': attribute type 10 has an invalid length. [ 1764.853915][T13609] IPv6: addrconf: prefix option has invalid lifetime [ 1764.939494][T13618] netlink: 'syz.4.19433': attribute type 1 has an invalid length. [ 1765.016733][T13618] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1765.085243][T13627] vlan2: entered promiscuous mode [ 1765.090780][T13627] bond5: entered promiscuous mode [ 1765.095893][T13627] vlan2: entered allmulticast mode [ 1765.101297][T13627] bond5: entered allmulticast mode [ 1765.830844][T13682] netlink: 'syz.4.19450': attribute type 1 has an invalid length. [ 1765.839040][T13682] NCSI netlink: No device for ifindex 0 [ 1765.908750][T13694] syzkaller0: entered promiscuous mode [ 1765.914266][T13694] syzkaller0: entered allmulticast mode [ 1765.963165][T13694] bond0: (slave bridge0): Device is not bonding slave [ 1766.038407][T13694] bond0: option active_slave: invalid value (bridge0) [ 1766.072477][T13694] bond0 (unregistering): Released all slaves [ 1766.425788][T13730] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:20000 [ 1766.471119][T13732] netlink: 'syz.4.19466': attribute type 4 has an invalid length. [ 1766.639560][T13748] netlink: 'syz.1.19470': attribute type 29 has an invalid length. [ 1766.668759][T13748] netlink: 'syz.1.19470': attribute type 29 has an invalid length. [ 1766.682591][T13748] netlink: 'syz.1.19470': attribute type 32 has an invalid length. [ 1767.095140][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.102525][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.176410][T13782] wg1: left promiscuous mode [ 1767.182438][T13782] wg1: left allmulticast mode [ 1767.245286][T13782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1767.490834][T13782] vlan2: left promiscuous mode [ 1767.495735][T13782] vlan2: left allmulticast mode [ 1767.504402][T13782] hsr_slave_1: left allmulticast mode [ 1767.514990][T13782] bond2: left promiscuous mode [ 1767.520435][T13782] bond2: left allmulticast mode [ 1767.525782][T13782] bond3: left promiscuous mode [ 1767.531291][T13782] vti0: left promiscuous mode [ 1767.619928][T13791] team0: Port device team_slave_0 removed [ 1767.632902][T13794] netlink: 'syz.0.19485': attribute type 2 has an invalid length. [ 1767.657622][T27516] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.669398][T27516] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.739269][T27516] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.751442][T27516] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.823152][T13818] openvswitch: netlink: Flow key attr not present in new flow. [ 1767.953243][T13824] __nla_validate_parse: 27 callbacks suppressed [ 1767.953260][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19496'. [ 1768.057869][T13829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.256646][T13839] tipc: Cannot configure node identity twice [ 1768.338784][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1768.502881][T13865] netlink: 1 bytes leftover after parsing attributes in process `syz.1.19508'. [ 1768.551309][T13865] netlink: 'syz.1.19508': attribute type 7 has an invalid length. [ 1768.559930][T13865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1768.643125][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1768.708948][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19511'. [ 1769.120811][T13913] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1769.194039][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19515'. [ 1769.303028][T13931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19525'. [ 1769.336360][T13931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19525'. [ 1769.352235][T13931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19525'. [ 1769.581337][T13949] syzkaller0: entered promiscuous mode [ 1769.598907][T13949] syzkaller0: entered allmulticast mode [ 1769.792287][T13962] lo speed is unknown, defaulting to 1000 [ 1769.825320][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19533'. [ 1770.223265][T13984] sctp: [Deprecated]: syz.1.19541 (pid 13984) Use of int in max_burst socket option. [ 1770.223265][T13984] Use struct sctp_assoc_value instead [ 1770.311371][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19542'. [ 1770.355020][T13996] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:6 [ 1770.403871][T13986] lo speed is unknown, defaulting to 1000 [ 1770.679570][T14018] netlink: 'syz.1.19550': attribute type 9 has an invalid length. [ 1770.687808][T14018] netlink: 'syz.1.19550': attribute type 11 has an invalid length. [ 1770.696190][T14018] netlink: 'syz.1.19550': attribute type 12 has an invalid length. [ 1771.167280][T14051] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1771.705342][T14090] netlink: 'syz.2.19575': attribute type 12 has an invalid length. [ 1771.995183][T14114] netlink: 'syz.2.19580': attribute type 24 has an invalid length. [ 1772.132908][T14122] openvswitch: netlink: Flow actions attr not present in new flow. [ 1772.407468][T14147] netlink: 'syz.0.19586': attribute type 16 has an invalid length. [ 1772.417937][T14147] netlink: 'syz.0.19586': attribute type 17 has an invalid length. [ 1772.481827][T14147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.489025][T14147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.506187][T14147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.513367][T14147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.552416][T14147] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1772.746308][T14167] netlink: 'syz.3.19597': attribute type 12 has an invalid length. [ 1772.979699][T14175] __nla_validate_parse: 12 callbacks suppressed [ 1772.979719][T14175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19599'. [ 1773.006737][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19601'. [ 1773.029333][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19601'. [ 1773.220815][T14197] xt_cgroup: invalid path, errno=-2 [ 1773.285429][T14201] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19608'. [ 1773.303203][T27532] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1773.316108][T27532] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1773.325527][T14201] nbd: illegal input index -8454144 [ 1773.331406][T32546] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1773.358232][T14201] netlink: 'syz.4.19608': attribute type 1 has an invalid length. [ 1773.366159][T14201] netlink: 'syz.4.19608': attribute type 1 has an invalid length. [ 1773.386869][T14201] netlink: 9172 bytes leftover after parsing attributes in process `syz.4.19608'. [ 1773.448499][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 1773.506732][T32546] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1773.520058][T14216] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19611'. [ 1773.648356][T32543] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1773.694761][T14227] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19614'. [ 1773.905703][T14246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1774.025773][T14253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1774.768774][T14266] x9ן: renamed from lo [ 1775.084550][T14280] sctp: [Deprecated]: syz.2.19629 (pid 14280) Use of int in max_burst socket option deprecated. [ 1775.084550][T14280] Use struct sctp_assoc_value instead [ 1775.833341][T14344] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19648'. [ 1775.844259][T14344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19648'. [ 1775.964324][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19649'. [ 1776.035750][T14348] openvswitch: netlink: Flow actions attr not present in new flow. [ 1776.213324][T14354] netlink: 'syz.2.19651': attribute type 21 has an invalid length. [ 1776.453176][T14379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1776.501953][T14381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1776.548186][T14387] netlink: 'syz.0.19661': attribute type 16 has an invalid length. [ 1776.569885][T14387] netlink: 'syz.0.19661': attribute type 17 has an invalid length. [ 1776.592182][T14392] netlink: 'syz.0.19661': attribute type 16 has an invalid length. [ 1776.609133][T14392] netlink: 'syz.0.19661': attribute type 17 has an invalid length. [ 1776.724191][T14396] netlink: 'syz.4.19664': attribute type 21 has an invalid length. [ 1776.732721][T14396] IPv6: NLM_F_CREATE should be specified when creating new route [ 1776.741430][T14396] netlink: 'syz.4.19664': attribute type 1 has an invalid length. [ 1777.050319][ T5826] Bluetooth: hci0: command 0x0405 tx timeout [ 1777.056438][ T4884] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1777.136286][T14430] NCSI netlink: No device for ifindex 65584 [ 1777.592464][T14461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1777.633544][T14456] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1777.850986][T14479] bridge_slave_1: entered allmulticast mode [ 1778.067646][T14502] team0: No ports can be present during mode change [ 1778.253999][T14511] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1778.360694][T14522] __nla_validate_parse: 12 callbacks suppressed [ 1778.360714][T14522] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.19699'. [ 1778.427154][T14522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19699'. [ 1778.467702][T14522] hsr0: entered promiscuous mode [ 1778.472800][T14522] macvlan2: entered allmulticast mode [ 1778.504361][T14522] hsr0: entered allmulticast mode [ 1778.510077][T14522] hsr_slave_0: entered allmulticast mode [ 1778.515832][T14522] hsr_slave_1: entered allmulticast mode [ 1778.536018][T14534] xt_hashlimit: size too large, truncated to 1048576 [ 1778.736862][T14540] validate_nla: 5 callbacks suppressed [ 1778.736880][T14540] netlink: 'syz.0.19701': attribute type 10 has an invalid length. [ 1778.756707][T14748] lec:lec_start_xmit: lec0:No lecd attached [ 1778.884245][T14542] syzkaller0: entered promiscuous mode [ 1778.896734][T14542] syzkaller0: entered allmulticast mode [ 1778.913009][T14554] IPv6: sit3: Disabled Multicast RS [ 1779.075825][T14572] sctp: [Deprecated]: syz.0.19711 (pid 14572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1779.075825][T14572] Use struct sctp_sack_info instead [ 1779.098522][T14572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19711'. [ 1779.125016][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19711'. [ 1779.139742][T14572] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19711'. [ 1781.814774][T14550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1782.187494][T14608] tipc: Enabling of bearer rejected, failed to enable media [ 1782.282499][T14613] .`: entered promiscuous mode [ 1782.292217][T14613] bond_slave_0: entered promiscuous mode [ 1782.299170][T14613] bond_slave_1: entered promiscuous mode [ 1782.380815][T14619] netlink: 'syz.2.19726': attribute type 24 has an invalid length. [ 1782.468914][T14629] netlink: 'syz.2.19730': attribute type 11 has an invalid length. [ 1782.509036][T14629] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.19730'. [ 1782.621211][T14641] IPv6: NLM_F_CREATE should be specified when creating new route [ 1782.630747][T14640] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 1782.639766][T14641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.647086][T14641] IPv6: NLM_F_CREATE should be set when creating new route [ 1782.660575][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19731'. [ 1782.755800][T14646] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 1782.964312][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19739'. [ 1782.975108][T14665] netlink: 'syz.1.19739': attribute type 1 has an invalid length. [ 1782.989500][T14665] netlink: 'syz.1.19739': attribute type 2 has an invalid length. [ 1782.997984][T14665] netlink: 'syz.1.19739': attribute type 1 has an invalid length. [ 1783.009496][T14656] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 1783.020864][T14656] bond0 (unregistering): Released all slaves [ 1783.052064][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19742'. [ 1783.064482][T14664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19742'. [ 1783.579381][T14702] veth0_to_bridge: entered promiscuous mode [ 1783.625980][T14701] veth0_to_bridge: left promiscuous mode [ 1783.773116][T14712] netlink: 'syz.2.19754': attribute type 6 has an invalid length. [ 1783.797213][T14712] __nla_validate_parse: 2 callbacks suppressed [ 1783.797233][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19754'. [ 1783.867720][T14720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.19757'. [ 1783.899205][T14720] netlink: 72 bytes leftover after parsing attributes in process `syz.1.19757'. [ 1783.923508][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19758'. [ 1784.006763][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1784.014874][ C0] lec:lec_tx_timeout: lec0 [ 1784.395395][T14759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19768'. [ 1784.421707][T14759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19768'. [ 1784.484895][T14769] netlink: 'syz.4.19767': attribute type 1 has an invalid length. [ 1784.531115][T14769] netlink: 'syz.4.19767': attribute type 1 has an invalid length. [ 1784.533583][T14770] netlink: 'syz.1.19770': attribute type 1 has an invalid length. [ 1784.869309][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19777'. [ 1784.901873][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19777'. [ 1784.916323][T14793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19778'. [ 1785.021680][ T4884] Bluetooth: hci1: link tx timeout [ 1785.029420][ T4884] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1785.043161][ T5826] Bluetooth: hci1: link tx timeout [ 1785.050431][T14807] netlink: 'syz.3.19777': attribute type 5 has an invalid length. [ 1785.055830][ T5826] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1785.066318][ T5826] Bluetooth: hci1: link tx timeout [ 1785.073906][ T5826] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1785.317043][T14793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.637552][T14793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1785.982628][T14822] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1785.991129][T14822] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1786.008820][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19785'. [ 1786.123784][T27487] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1786.169603][T27487] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.190034][T27487] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1786.210445][T27487] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.231083][T27487] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1786.256591][T27487] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.275722][T27487] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1786.293286][T27487] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.460240][T14841] IPv6: NLM_F_CREATE should be specified when creating new route [ 1787.057526][T22930] Bluetooth: hci1: command 0x0406 tx timeout [ 1787.157835][T14855] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1788.189599][T14810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1788.511467][T14865] lec:lec_start_xmit: lec0:No lecd attached [ 1788.625675][T14888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1788.809934][ T4884] Bluetooth: hci3: command 0x0406 tx timeout [ 1788.976007][T14911] ip6t_srh: unknown srh match flags 4000 [ 1789.259634][T14929] __nla_validate_parse: 6 callbacks suppressed [ 1789.259652][T14929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19816'. [ 1789.270876][T14924] lo speed is unknown, defaulting to 1000 [ 1789.285820][T14927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19817'. [ 1789.480453][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19819'. [ 1789.572899][T14952] netlink: 54 bytes leftover after parsing attributes in process `syz.3.19822'. [ 1789.602732][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19822'. [ 1789.664080][T14962] netlink: 'syz.4.19826': attribute type 1 has an invalid length. [ 1789.703801][T14962] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1789.879427][T14969] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1789.898923][T27614] syzkaller1: tun_net_xmit 90 [ 1789.905614][T14969] syzkaller1: Linktype set failed because interface is up [ 1790.029540][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19830'. [ 1790.273559][T14992] lo speed is unknown, defaulting to 1000 [ 1790.429660][T14998] lo speed is unknown, defaulting to 1000 [ 1790.452884][T15001] FAULT_INJECTION: forcing a failure. [ 1790.452884][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.596917][T15001] CPU: 1 UID: 0 PID: 15001 Comm: syz.0.19836 Not tainted syzkaller #0 PREEMPT(full) [ 1790.596943][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1790.596986][T15001] Call Trace: [ 1790.596995][T15001] [ 1790.597006][T15001] dump_stack_lvl+0xe8/0x150 [ 1790.597042][T15001] should_fail_ex+0x412/0x560 [ 1790.597081][T15001] _copy_from_user+0x2d/0xb0 [ 1790.597108][T15001] ___sys_recvmsg+0x175/0x590 [ 1790.597143][T15001] ? __pfx____sys_recvmsg+0x10/0x10 [ 1790.597198][T15001] ? __fget_files+0x3a0/0x420 [ 1790.597229][T15001] do_recvmmsg+0x334/0x800 [ 1790.597267][T15001] ? __pfx_do_recvmmsg+0x10/0x10 [ 1790.597308][T15001] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1790.597356][T15001] __x64_sys_recvmmsg+0x198/0x250 [ 1790.597389][T15001] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1790.597431][T15001] do_syscall_64+0x14d/0xf80 [ 1790.597459][T15001] ? trace_irq_disable+0x3b/0x150 [ 1790.597477][T15001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.597508][T15001] ? clear_bhb_loop+0x40/0x90 [ 1790.597534][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.597556][T15001] RIP: 0033:0x7f9d8379c819 [ 1790.597576][T15001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.597596][T15001] RSP: 002b:00007f9d846a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1790.597619][T15001] RAX: ffffffffffffffda RBX: 00007f9d83a16180 RCX: 00007f9d8379c819 [ 1790.597636][T15001] RDX: 0000000000000001 RSI: 0000200000001e80 RDI: 0000000000000004 [ 1790.597650][T15001] RBP: 00007f9d846a4090 R08: 0000000000000000 R09: 0000000000000000 [ 1790.597664][T15001] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1790.597677][T15001] R13: 00007f9d83a16218 R14: 00007f9d83a16180 R15: 00007ffe9929eae8 [ 1790.597711][T15001] [ 1790.960607][T15007] bridge1: entered promiscuous mode [ 1790.965873][T15007] bridge1: entered allmulticast mode [ 1791.175872][T15014] netlink: 'syz.4.19841': attribute type 1 has an invalid length. [ 1791.242421][T15014] netlink: 'syz.4.19841': attribute type 4 has an invalid length. [ 1791.257491][T15014] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.19841'. [ 1791.267147][T15021] netlink: 'syz.3.19839': attribute type 21 has an invalid length. [ 1791.275071][T15021] IPv6: NLM_F_CREATE should be specified when creating new route [ 1791.300767][T15014] netlink: 'syz.4.19841': attribute type 3 has an invalid length. [ 1791.348626][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19843'. [ 1791.360008][T15027] veth0_virt_wifi: entered promiscuous mode [ 1791.564925][T15045] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.19847'. [ 1791.636621][T15046] netlink: 84 bytes leftover after parsing attributes in process `syz.3.19848'. [ 1791.667086][T15043] netlink: 'syz.3.19848': attribute type 6 has an invalid length. [ 1791.674953][T15043] netlink: 'syz.3.19848': attribute type 5 has an invalid length. [ 1791.852856][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.867735][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.877608][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1792.459026][T15085] netlink: 'syz.0.19861': attribute type 1 has an invalid length. [ 1793.086278][T15114] syzkaller0: entered promiscuous mode [ 1793.094850][T15114] syzkaller0: entered allmulticast mode [ 1793.265007][T15125] netlink: 'syz.0.19872': attribute type 4 has an invalid length. [ 1793.283554][T15125] netlink: 'syz.0.19872': attribute type 3 has an invalid length. [ 1793.360661][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.006942][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 1794.015009][ C0] lec:lec_tx_timeout: lec0 [ 1794.020475][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1794.921168][T15193] __nla_validate_parse: 4 callbacks suppressed [ 1794.921186][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19890'. [ 1794.993019][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19892'. [ 1795.023349][T15199] validate_nla: 1 callbacks suppressed [ 1795.023361][T15199] netlink: 'syz.4.19892': attribute type 3 has an invalid length. [ 1795.108670][T15204] veth1_vlan: mtu less than device minimum [ 1795.320658][T15211] netlink: 'syz.1.19895': attribute type 24 has an invalid length. [ 1795.800128][T15246] netlink: 108 bytes leftover after parsing attributes in process `syz.4.19902'. [ 1795.840856][T15246] netlink: 108 bytes leftover after parsing attributes in process `syz.4.19902'. [ 1795.882206][T15246] netlink: 84 bytes leftover after parsing attributes in process `syz.4.19902'. [ 1796.643768][T15300] Cannot find add_set index 2 as target [ 1796.727126][T15304] netlink: 'syz.2.19914': attribute type 1 has an invalid length. [ 1796.777652][T15289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19914'. [ 1796.849891][T15304] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1796.978342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1797.137631][T15313] Cannot find set identified by id 3 to match [ 1797.209749][T15316] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.19920'. [ 1797.275370][T15323] netlink: 'syz.2.19923': attribute type 10 has an invalid length. [ 1797.287651][T15323] veth0_vlan: left promiscuous mode [ 1797.315702][T15323] veth0_vlan: entered promiscuous mode [ 1797.324497][T15323] team0: Device veth0_vlan failed to register rx_handler [ 1797.523934][T15337] x9ן: entered promiscuous mode [ 1797.551019][T15337] A link change request failed with some changes committed already. Interface 0x9ן may have been left with an inconsistent configuration, please check. [ 1797.594891][T15343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1797.630324][T15344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1797.638239][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19930'. [ 1797.864640][T15370] syzkaller0: entered promiscuous mode [ 1797.870725][T15370] syzkaller0: entered allmulticast mode [ 1797.886423][T15370] macsec0: entered promiscuous mode [ 1797.892928][T15370] macsec0: entered allmulticast mode [ 1797.942165][T15375] veth1_macvtap: entered allmulticast mode [ 1797.949635][T15375] macsec0: left promiscuous mode [ 1797.954821][T15375] macsec0: left allmulticast mode [ 1797.991136][T15375] veth1_macvtap: left allmulticast mode [ 1798.331972][T15409] syzkaller0: entered promiscuous mode [ 1798.356683][T15409] syzkaller0: entered allmulticast mode [ 1798.457892][T15409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19948'. [ 1798.603996][T15360] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1798.663736][T11690] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef [ 1798.809355][T15440] syzkaller0: entered promiscuous mode [ 1798.814969][T15440] syzkaller0: entered allmulticast mode [ 1798.835639][T15444] syzkaller1: entered promiscuous mode [ 1798.841316][T15444] syzkaller1: entered allmulticast mode [ 1798.953968][T15450] lo speed is unknown, defaulting to 1000 [ 1799.046718][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1799.054894][ C0] lec:lec_tx_timeout: lec0 [ 1799.060153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1799.248086][T15415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1799.359134][T15456] netlink: 'syz.4.19957': attribute type 1 has an invalid length. [ 1799.413095][T15462] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19957'. [ 1800.917736][T15456] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1800.951091][T15458] lo speed is unknown, defaulting to 1000 [ 1801.134743][T15479] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.19963'. [ 1801.137993][T15474] bond8 (unregistering): Released all slaves [ 1801.154925][T15479] openvswitch: netlink: Key type 134 is out of range max 32 [ 1801.475743][T15503] netlink: 'syz.0.19971': attribute type 61 has an invalid length. [ 1801.483911][T15503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19971'. [ 1801.634251][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19975'. [ 1801.666252][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19975'. [ 1801.817786][T15530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19977'. [ 1802.030029][T15537] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1802.118442][T15559] netlink: 'syz.1.19982': attribute type 1 has an invalid length. [ 1802.152636][T15559] netlink: 216 bytes leftover after parsing attributes in process `syz.1.19982'. [ 1802.309534][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19986'. [ 1802.510716][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19992'. [ 1802.705768][T15600] netlink: 'syz.1.19999': attribute type 25 has an invalid length. [ 1802.751616][T15600] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19999'. [ 1802.877002][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20004'. [ 1803.241562][T15645] netlink: 'syz.2.20014': attribute type 1 has an invalid length. [ 1803.288288][T15650] netlink: 'syz.2.20015': attribute type 21 has an invalid length. [ 1803.808952][T15687] netlink: 'syz.2.20025': attribute type 1 has an invalid length. [ 1803.899015][T15687] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1803.911709][T15692] tipc: Enabling of bearer rejected, failed to enable media [ 1803.943290][T15698] tipc: Enabling of bearer rejected, failed to enable media [ 1804.011531][T15694] vlan3: entered promiscuous mode [ 1804.021238][T15694] bond5: entered promiscuous mode [ 1804.026590][T15694] vlan3: entered allmulticast mode [ 1804.037153][T15694] bond5: entered allmulticast mode [ 1804.066977][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1804.075023][ C0] lec:lec_tx_timeout: lec0 [ 1804.080043][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1804.287013][T15724] netlink: 'syz.4.20035': attribute type 64 has an invalid length. [ 1804.305629][T15727] netlink: 'syz.1.20037': attribute type 1 has an invalid length. [ 1804.335275][T15727] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1804.511219][T15743] syzkaller0: entered promiscuous mode [ 1804.530812][T15743] syzkaller0: entered allmulticast mode [ 1804.599418][T15746] bond6: option all_slaves_active: invalid value (222) [ 1804.608823][T15746] bond6 (unregistering): Released all slaves [ 1804.741046][T15756] netlink: 'syz.2.20044': attribute type 4 has an invalid length. [ 1806.512183][T15756] __nla_validate_parse: 10 callbacks suppressed [ 1806.512200][T15756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20044'. [ 1806.588523][T15761] lo speed is unknown, defaulting to 1000 [ 1806.630563][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20051'. [ 1806.838311][T15806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1806.962413][T15816] netlink: 168 bytes leftover after parsing attributes in process `syz.0.20059'. [ 1806.998071][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20059'. [ 1807.040277][T15816] vlan2: entered promiscuous mode [ 1807.045352][T15816] gretap0: entered promiscuous mode [ 1807.076394][T15823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20061'. [ 1807.090296][T15820] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20062'. [ 1807.138796][T15828] netlink: 'syz.3.20061': attribute type 4 has an invalid length. [ 1807.157298][T15828] netlink: 25 bytes leftover after parsing attributes in process `syz.3.20061'. [ 1807.194796][T15823] pim6reg1: entered promiscuous mode [ 1807.200715][T15823] pim6reg1: entered allmulticast mode [ 1807.487776][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20068'. [ 1807.544484][T15846] bridge7: entered promiscuous mode [ 1807.550575][T15846] bridge7: entered allmulticast mode [ 1807.564819][T15846] team0: Port device bridge7 added [ 1807.598104][T15846] bridge0: port 3(team0) entered blocking state [ 1807.619967][T15846] bridge0: port 3(team0) entered disabled state [ 1807.645557][T15846] team0: entered allmulticast mode [ 1807.660135][T15846] team_slave_1: entered allmulticast mode [ 1807.692059][T15846] team0: entered promiscuous mode [ 1807.705080][T15855] netlink: 408 bytes leftover after parsing attributes in process `syz.1.20073'. [ 1807.712263][T15846] team_slave_1: entered promiscuous mode [ 1807.744217][T15846] bridge0: port 3(team0) entered blocking state [ 1807.750589][T15846] bridge0: port 3(team0) entered forwarding state [ 1807.960854][T15860] syzkaller0: entered promiscuous mode [ 1807.966398][T15860] syzkaller0: entered allmulticast mode [ 1808.084858][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20079'. [ 1808.256861][T15894] tipc: Enabling of bearer rejected, failed to enable media [ 1808.258083][T15892] netlink: 'syz.4.20082': attribute type 2 has an invalid length. [ 1808.272486][T15893] tipc: Enabling of bearer rejected, failed to enable media [ 1808.455508][T15909] xt_hashlimit: size too large, truncated to 1048576 [ 1808.870469][T15937] netlink: 'syz.1.20098': attribute type 10 has an invalid length. [ 1808.884404][T15937] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1808.923756][T15937] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 1809.086630][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1809.094673][ C0] lec:lec_tx_timeout: lec0 [ 1809.099783][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1809.187297][T15958] syzkaller0: entered promiscuous mode [ 1809.192816][T15958] syzkaller0: entered allmulticast mode [ 1809.532788][T15990] netlink: 'syz.0.20118': attribute type 12 has an invalid length. [ 1809.546469][T15995] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1809.590356][T15990] bridge0: port 3(team0) entered disabled state [ 1809.617481][T15998] netlink: 'syz.0.20118': attribute type 16 has an invalid length. [ 1809.629601][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.639430][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.208586][T16033] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1810.665677][T16062] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1811.373370][ T7216] Bluetooth: hci1: command 0x0406 tx timeout [ 1812.019706][T16153] __nla_validate_parse: 24 callbacks suppressed [ 1812.019724][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20165'. [ 1812.042593][T16154] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20165'. [ 1812.070157][T16153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20165'. [ 1812.162061][T16158] nbd: must specify a size in bytes for the device [ 1812.357701][T16162] lo speed is unknown, defaulting to 1000 [ 1812.580578][T16184] netlink: 'syz.2.20174': attribute type 24 has an invalid length. [ 1812.610941][T16187] netlink: 'syz.4.20176': attribute type 10 has an invalid length. [ 1812.619715][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20177'. [ 1812.628888][T16187] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.20176'. [ 1812.663334][T16185] netlink: 'syz.0.20175': attribute type 8 has an invalid length. [ 1812.863494][T16207] can: request_module (can-proto-5) failed. [ 1813.065222][T16223] tipc: Enabling of bearer rejected, media not registered [ 1813.196175][T16236] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1813.275640][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20191'. [ 1813.285681][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20191'. [ 1813.301447][T16243] veth0_macvtap: left promiscuous mode [ 1813.388578][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20194'. [ 1813.412445][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20194'. [ 1813.468250][T16254] hsr_slave_0 (unregistering): left promiscuous mode [ 1813.735008][T16279] x_tables: unsorted entry at hook 3 [ 1813.742234][T16279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20201'. [ 1814.106537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1814.114626][ C0] lec:lec_tx_timeout: lec0 [ 1814.119853][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1814.647730][T16282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1814.833947][T16323] pimreg3: entered allmulticast mode [ 1815.144359][T16358] netlink: 'syz.1.20225': attribute type 1 has an invalid length. [ 1815.405292][T16379] x_tables: unsorted underflow at hook 2 [ 1815.465548][T16390] netlink: 'syz.3.20232': attribute type 11 has an invalid length. [ 1815.698581][T16403] A link change request failed with some changes committed already. Interface 0x9ן may have been left with an inconsistent configuration, please check. [ 1816.282954][T16434] netlink: 'syz.3.20243': attribute type 64 has an invalid length. [ 1816.450740][T16435] x9ן: renamed from lo (while UP) [ 1816.615986][T16451] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1816.961347][T16490] nbd: couldn't find a device at index 0 [ 1817.281666][T16512] __nla_validate_parse: 11 callbacks suppressed [ 1817.281685][T16512] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.20266'. [ 1817.285094][T16514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20265'. [ 1817.351661][T16508] lo speed is unknown, defaulting to 1000 [ 1817.470827][T16523] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20270'. [ 1817.480243][T16521] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.20269'. [ 1817.554717][T16521] netlink: 92 bytes leftover after parsing attributes in process `syz.4.20269'. [ 1817.579239][T16521] openvswitch: netlink: Flow key attr not present in new flow. [ 1817.587298][T16529] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20271'. [ 1817.605769][T16524] netlink: 81 bytes leftover after parsing attributes in process `syz.4.20269'. [ 1817.671291][T16532] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1817.752766][T16542] A link change request failed with some changes committed already. Interface 0x9ן may have been left with an inconsistent configuration, please check. [ 1817.805012][T16547] netlink: 'syz.4.20277': attribute type 1 has an invalid length. [ 1818.051766][T16560] netlink: 'syz.1.20281': attribute type 2 has an invalid length. [ 1818.213470][T16567] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20283'. [ 1818.228357][T16560] 9: entered promiscuous mode [ 1818.282648][T16570] xt_socket: unknown flags 0x50 [ 1818.344543][T16573] netlink: 'syz.2.20285': attribute type 1 has an invalid length. [ 1818.475972][T16579] netlink: 'syz.3.20287': attribute type 1 has an invalid length. [ 1818.488283][T16579] netlink: 'syz.3.20287': attribute type 1 has an invalid length. [ 1818.515830][T16579] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.20287'. [ 1818.563210][T16583] netlink: 52 bytes leftover after parsing attributes in process `syz.2.20290'. [ 1818.758467][T16601] mac80211_hwsim hwsim212 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1818.959616][T16612] netlink: 'syz.4.20299': attribute type 2 has an invalid length. [ 1818.966176][T16614] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1819.040116][T16618] netlink: 'syz.2.20302': attribute type 11 has an invalid length. [ 1819.126614][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1819.134777][ C0] lec:lec_tx_timeout: lec0 [ 1819.141338][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1819.282037][T16625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1819.297664][T16626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1819.682153][T16665] netlink: 'syz.2.20315': attribute type 1 has an invalid length. [ 1819.716853][T16667] netlink: 'syz.4.20314': attribute type 1 has an invalid length. [ 1819.761526][T16676] bond6: (slave geneve2): making interface the new active one [ 1819.774056][T16676] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1819.817790][T16667] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1819.825253][T20578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1819.847833][T16680] bond8: (slave geneve4): making interface the new active one [ 1819.861531][T16680] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 1819.872760][T16665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1819.897637][T20578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1819.925175][T20578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1820.000139][T20578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1820.302450][T16706] netlink: 'syz.2.20327': attribute type 2 has an invalid length. [ 1820.682875][T16742] IPVS: ip_vs_add_dest(): server weight less than zero [ 1820.689888][T27614] IPVS: starting estimator thread 0... [ 1820.778124][T16743] IPVS: using max 30 ests per chain, 72000 per kthread [ 1820.970923][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1821.855314][T16811] netlink: 'syz.4.20360': attribute type 1 has an invalid length. [ 1821.931139][T16809] bond0: (slave ip6tnl4): The slave device specified does not support setting the MAC address [ 1821.959079][T16809] bond0: (slave ip6tnl4): Error -95 calling set_mac_address [ 1822.307142][T16842] __nla_validate_parse: 10 callbacks suppressed [ 1822.307236][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20371'. [ 1822.427083][T16853] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 1822.535813][T16860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20377'. [ 1822.963522][T16891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20387'. [ 1823.278505][T16902] validate_nla: 1 callbacks suppressed [ 1823.278524][T16902] netlink: 'syz.0.20390': attribute type 16 has an invalid length. [ 1823.310172][T16902] netlink: 'syz.0.20390': attribute type 17 has an invalid length. [ 1823.348837][T16902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.356030][T16902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.380323][T16902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.387539][T16902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.429896][T16907] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1823.514109][T16902] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 1823.535799][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20393'. [ 1823.541304][T20578] bridge0: port 3(team0) entered blocking state [ 1823.551309][T20578] bridge0: port 3(team0) entered forwarding state [ 1823.584579][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20393'. [ 1824.039867][T16936] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1824.048137][T32543] IPVS: starting estimator thread 0... [ 1824.070800][T16944] netlink: 'syz.0.20404': attribute type 1 has an invalid length. [ 1824.124032][T16953] netlink: 5484 bytes leftover after parsing attributes in process `syz.0.20404'. [ 1824.136590][T16948] IPVS: using max 30 ests per chain, 72000 per kthread [ 1824.147698][T16954] openvswitch: netlink: Key 6 has unexpected len 109 expected 2 [ 1824.156562][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1824.164604][ C0] lec:lec_tx_timeout: lec0 [ 1824.170426][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1824.194896][T16944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1824.246719][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1824.553021][T16967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20414'. [ 1824.610344][T16967] netlink: 64 bytes leftover after parsing attributes in process `syz.3.20414'. [ 1824.634319][T16973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20412'. [ 1824.669647][T16973] openvswitch: netlink: Key type 132 is out of range max 32 [ 1824.701446][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20412'. [ 1824.720037][T16968] team0: left allmulticast mode [ 1824.746189][T16968] team_slave_1: left allmulticast mode [ 1824.756332][T16968] team0: left promiscuous mode [ 1824.763877][T16968] team_slave_1: left promiscuous mode [ 1824.804715][T16968] bridge0: port 3(team0) entered disabled state [ 1824.839269][T16968] bridge_slave_1: left allmulticast mode [ 1824.848293][T16968] bridge_slave_1: left promiscuous mode [ 1824.870389][T16979] netlink: 'syz.2.20417': attribute type 1 has an invalid length. [ 1824.880488][T16968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.909235][T16968] bridge_slave_0: left allmulticast mode [ 1824.918657][T16968] bridge_slave_0: left promiscuous mode [ 1824.935578][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.182210][T16979] bond7: entered promiscuous mode [ 1825.230448][T16979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1825.286625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1825.334142][T16984] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1825.378627][T16984] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1825.390273][T16984] bond7: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1825.405643][T16984] bond7: (slave ip6gre3): making interface the new active one [ 1825.414179][T16984] ip6gre3: entered promiscuous mode [ 1825.421998][T16984] bond7: (slave ip6gre3): Enslaving as an active interface with an up link [ 1825.792482][T17036] netlink: 'syz.1.20429': attribute type 5 has an invalid length. [ 1825.937241][T17040] syzkaller0: entered promiscuous mode [ 1825.942953][T17040] syzkaller0: entered allmulticast mode [ 1826.064121][T17001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1826.326625][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1826.433215][T17076] netlink: 'syz.0.20442': attribute type 1 has an invalid length. [ 1826.475544][T17076] batadv3: entered allmulticast mode [ 1826.947353][T17114] lo speed is unknown, defaulting to 1000 [ 1827.303801][T17131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1827.366530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1827.964135][T17163] netlink: 'syz.1.20463': attribute type 10 has an invalid length. [ 1828.104648][T17180] xt_socket: unknown flags 0x50 [ 1828.128263][T17180] __nla_validate_parse: 44 callbacks suppressed [ 1828.128281][T17180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20467'. [ 1828.166413][T17180] bond0: entered promiscuous mode [ 1828.177765][T17180] gretap0: entered promiscuous mode [ 1828.183895][T17180] debugfs: 'hsr1' already exists in 'hsr' [ 1828.189961][T17180] Cannot create hsr debugfs directory [ 1828.195554][T17180] hsr1: entered promiscuous mode [ 1828.398215][T17192] lo speed is unknown, defaulting to 1000 [ 1828.406566][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1828.520945][T17200] netlink: 'syz.0.20474': attribute type 1 has an invalid length. [ 1828.540900][T17204] netlink: 'syz.1.20475': attribute type 21 has an invalid length. [ 1828.548909][T17200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20474'. [ 1828.575565][T17204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.20475'. [ 1828.735057][T17221] openvswitch: netlink: Message has -2 unknown bytes. [ 1828.872172][T17225] netlink: 'syz.0.20479': attribute type 1 has an invalid length. [ 1828.911038][T17229] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1828.922943][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20479'. [ 1828.933734][T17229] bond3 (unregistering): Released all slaves [ 1828.972875][T17227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20479'. [ 1829.008666][T17225] bond7: entered promiscuous mode [ 1829.014140][T17225] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1829.043644][T17238] bond7: (slave bridge0): making interface the new active one [ 1829.059043][T17238] bridge0: entered promiscuous mode [ 1829.065344][T17238] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 1829.187105][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1829.195186][ C0] lec:lec_tx_timeout: lec0 [ 1829.199811][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1829.212880][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20487'. [ 1829.245606][T17253] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1829.293121][T17253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20487'. [ 1829.446556][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1829.479491][T17264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20493'. [ 1829.499999][T17264] netlink: 64 bytes leftover after parsing attributes in process `syz.2.20493'. [ 1829.575845][T17266] x_tables: duplicate entry at hook 1 [ 1829.893220][T17293] IPv6: NLM_F_CREATE should be specified when creating new route [ 1829.901994][T17293] syzkaller0: entered promiscuous mode [ 1829.902004][T17294] netlink: 'syz.3.20502': attribute type 10 has an invalid length. [ 1829.916454][T17293] syzkaller0: entered allmulticast mode [ 1829.957096][T17294] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 1829.985687][T17301] netlink: 'syz.4.20504': attribute type 1 has an invalid length. [ 1830.013181][T17301] netlink: 'syz.4.20504': attribute type 7 has an invalid length. [ 1830.023871][T17301] netlink: 'syz.4.20504': attribute type 8 has an invalid length. [ 1830.052342][T17301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20504'. [ 1830.486849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1830.516415][T17341] sctp: [Deprecated]: syz.0.20515 (pid 17341) Use of int in max_burst socket option. [ 1830.516415][T17341] Use struct sctp_assoc_value instead [ 1830.869358][T17371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1831.048883][T17389] netlink: 'syz.4.20527': attribute type 1 has an invalid length. [ 1831.172044][T17389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1831.216575][ T4884] Bluetooth: hci1: command 0x0406 tx timeout [ 1831.224498][T17395] bond9: entered allmulticast mode [ 1831.311927][T17413] Cannot find set identified by id 65535 to match [ 1831.343985][T17416] netlink: 'syz.0.20532': attribute type 12 has an invalid length. [ 1831.507832][T17422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1831.526629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1831.600373][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1831.620009][T17422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1831.716097][T17422] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1831.772463][T17422] hsr0: left allmulticast mode [ 1831.777619][T17422] hsr_slave_0: left allmulticast mode [ 1831.783173][T17422] hsr_slave_1: left allmulticast mode [ 1831.943991][T27532] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.958819][T27532] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.975364][T27532] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1831.984345][T27532] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.999653][T27532] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.012638][T27532] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.049032][T27532] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1832.061844][T27532] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.169525][T17450] syzkaller0: entered promiscuous mode [ 1832.175323][T17450] syzkaller0: entered allmulticast mode [ 1832.566664][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1833.606579][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1833.952168][T17472] sit0: entered promiscuous mode [ 1833.958007][T17472] netlink: 'syz.2.20550': attribute type 1 has an invalid length. [ 1833.965947][T17472] __nla_validate_parse: 7 callbacks suppressed [ 1833.965962][T17472] netlink: 1 bytes leftover after parsing attributes in process `syz.2.20550'. [ 1834.062272][T17492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1834.099344][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20556'. [ 1834.140662][T17496] netlink: 'syz.2.20556': attribute type 64 has an invalid length. [ 1834.206592][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1834.214656][ C0] lec:lec_tx_timeout: lec0 [ 1834.219229][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1834.537214][T17524] bond9: entered promiscuous mode [ 1834.547570][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20565'. [ 1834.673054][T17533] bond0: (slave gre0): refused to change device type [ 1834.744702][T17535] macvtap1: entered allmulticast mode [ 1834.751124][T17535] veth0_macvtap: entered allmulticast mode [ 1834.861039][T17543] veth0: entered promiscuous mode [ 1834.885343][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20571'. [ 1835.026956][T17542] veth0: left promiscuous mode [ 1835.075972][T17556] netlink: 'syz.0.20574': attribute type 12 has an invalid length. [ 1835.110871][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20575'. [ 1835.122019][T17559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20575'. [ 1835.251339][T17565] netlink: 'syz.1.20577': attribute type 1 has an invalid length. [ 1835.294031][T17565] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1835.323724][T17565] bond3: (slave gretap1): making interface the new active one [ 1835.333663][T17565] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1835.361890][T17565] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1835.379100][T17565] macvlan0: entered promiscuous mode [ 1835.384529][T17565] macvlan0: entered allmulticast mode [ 1835.391387][T17565] bond3: entered promiscuous mode [ 1835.397295][T17565] gretap1: entered promiscuous mode [ 1835.403140][T17565] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1835.411691][T17565] bond3: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1835.429314][T17565] bond3: left promiscuous mode [ 1835.434162][T17565] gretap1: left promiscuous mode [ 1835.548977][T17578] syzkaller0: entered promiscuous mode [ 1835.554510][T17578] syzkaller0: entered allmulticast mode [ 1835.560697][T17581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20583'. [ 1835.583322][T17583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20584'. [ 1837.203681][T17589] vlan3: entered allmulticast mode [ 1837.209001][T17589] bridge3: entered allmulticast mode [ 1837.214981][T17583] bridge3: port 1(erspan0) entered blocking state [ 1837.223628][T17583] bridge3: port 1(erspan0) entered disabled state [ 1837.232467][T17583] erspan0: entered allmulticast mode [ 1837.257467][T17583] erspan0: left allmulticast mode [ 1837.573412][T17621] A link change request failed with some changes committed already. Interface 0x9ן may have been left with an inconsistent configuration, please check. [ 1837.617333][T17631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20597'. [ 1837.647333][T17631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.20597'. [ 1837.785876][T17643] vlan0: entered allmulticast mode [ 1837.795041][T17641] xt_hashlimit: size too large, truncated to 1048576 [ 1837.820079][T17643] gretap0: entered allmulticast mode [ 1838.171675][T17662] syzkaller0: entered promiscuous mode [ 1838.178249][T17662] syzkaller0: entered allmulticast mode [ 1838.258793][T17668] netlink: 'syz.1.20610': attribute type 1 has an invalid length. [ 1838.294967][T17668] bond4: entered promiscuous mode [ 1838.301956][T17668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1838.392904][T17676] bond4: (slave bridge4): making interface the new active one [ 1838.419443][T17676] bridge4: entered promiscuous mode [ 1838.425861][T17676] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1838.534031][T17683] IPVS: set_ctl: invalid protocol: 33 10.1.1.0:20001 [ 1838.550029][T17680] bond6: Invalid ad_actor_system MAC address. [ 1838.556259][T17680] bond6: option ad_actor_system: invalid value (1) [ 1838.578736][T17680] bond6 (unregistering): Released all slaves [ 1838.586170][T17685] netlink: 'syz.0.20615': attribute type 1 has an invalid length. [ 1838.808898][T17687] netlink: 'syz.2.20618': attribute type 1 has an invalid length. [ 1838.879017][T17687] bond8 (unregistering): Released all slaves [ 1839.052051][T17705] syzkaller0: entered promiscuous mode [ 1839.058252][T17705] syzkaller0: entered allmulticast mode [ 1840.006511][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1840.014642][ C0] lec:lec_tx_timeout: lec0 [ 1840.020083][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1840.990182][T17749] syzkaller0: entered promiscuous mode [ 1841.139356][T17763] xt_cluster: node mask cannot exceed total number of nodes [ 1841.187429][T17763] xt_cluster: node mask cannot exceed total number of nodes [ 1841.244576][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.412100][T17785] syzkaller0: entered promiscuous mode [ 1841.427157][T17785] syzkaller0: entered allmulticast mode [ 1841.450255][T17787] smc: net device team0 applied user defined pnetid SYZ2 [ 1841.525284][T17785] bond5 (unregistering): Released all slaves [ 1841.833428][T17813] netlink: 'syz.3.20645': attribute type 1 has an invalid length. [ 1841.881813][T17815] netlink: 'syz.3.20645': attribute type 1 has an invalid length. [ 1841.903003][T17809] can: request_module (can-proto-5) failed. [ 1841.950319][T17813] bond6: entered promiscuous mode [ 1841.955929][T17813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1841.993993][T17813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1842.014863][T17813] bond6: (slave vti1): The slave device specified does not support setting the MAC address [ 1842.025735][T17813] bond6: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1842.034485][T17822] sctp: [Deprecated]: syz.3.20645 (pid 17822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1842.034485][T17822] Use struct sctp_sack_info instead [ 1842.055641][T17813] bond6: (slave vti1): making interface the new active one [ 1842.063696][T17813] vti1: entered promiscuous mode [ 1842.070893][T17813] bond6: (slave vti1): Enslaving as an active interface with an up link [ 1842.079749][T17820] syzkaller0: entered promiscuous mode [ 1842.094663][T17828] x_tables: duplicate underflow at hook 3 [ 1842.096357][T17820] syzkaller0: entered allmulticast mode [ 1842.515886][T27487] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1842.529087][T27487] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1842.539552][T17852] netlink: 'syz.2.20654': attribute type 4 has an invalid length. [ 1842.550625][T27487] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1842.561293][T27487] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1842.832048][T17868] netlink: 'syz.1.20660': attribute type 11 has an invalid length. [ 1842.858659][T17868] __nla_validate_parse: 7 callbacks suppressed [ 1842.858676][T17868] netlink: 224 bytes leftover after parsing attributes in process `syz.1.20660'. [ 1843.220357][T17889] netlink: 177296 bytes leftover after parsing attributes in process `syz.1.20669'. [ 1843.234846][T17893] netlink: 'syz.0.20668': attribute type 1 has an invalid length. [ 1843.261723][T17899] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1843.283565][T17893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20668'. [ 1843.354105][T17903] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.20672'. [ 1843.436397][T11690] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1843.445992][T11690] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1843.461722][T11690] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1843.493688][T17911] netlink: 'syz.3.20676': attribute type 61 has an invalid length. [ 1843.502642][T11690] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1843.526286][T17911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20676'. [ 1843.734505][T17919] lo speed is unknown, defaulting to 1000 [ 1844.010013][T17944] netlink: 144 bytes leftover after parsing attributes in process `syz.3.20687'. [ 1844.112930][T17951] lo speed is unknown, defaulting to 1000 [ 1844.270719][T17963] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20691'. [ 1844.289544][T17963] netlink: 35 bytes leftover after parsing attributes in process `syz.4.20691'. [ 1844.300117][T17963] netlink: 'syz.4.20691': attribute type 5 has an invalid length. [ 1844.308820][T17963] netlink: 'syz.4.20691': attribute type 6 has an invalid length. [ 1844.317185][T17963] netlink: 35 bytes leftover after parsing attributes in process `syz.4.20691'. [ 1844.342347][T17966] SET target dimension over the limit! [ 1844.423813][T17969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20693'. [ 1844.673884][T17983] netlink: 'syz.4.20699': attribute type 8 has an invalid length. [ 1844.949892][T17996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1844.988002][T17996] netlink: 'syz.2.20704': attribute type 83 has an invalid length. [ 1845.043219][ T4884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1845.048790][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 1845.058397][ C0] lec:lec_tx_timeout: lec0 [ 1845.063408][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1845.089751][ T4884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1845.103103][ T4884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1845.113048][ T4884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1845.121180][ T4884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1845.156055][T18001] tipc: Resetting bearer [ 1845.182757][T18001] lo speed is unknown, defaulting to 1000 [ 1845.547003][T18001] chnl_net:caif_netlink_parms(): no params data found [ 1845.704309][T18038] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1845.720358][T18038] bond7 (unregistering): Released all slaves [ 1845.915421][T18001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.922811][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.949368][T18001] bridge_slave_0: entered allmulticast mode [ 1845.959135][T18001] bridge_slave_0: entered promiscuous mode [ 1845.975477][T18047] netlink: 'syz.1.20714': attribute type 4 has an invalid length. [ 1845.984618][T18001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.984757][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.984916][T18001] bridge_slave_1: entered allmulticast mode [ 1846.010307][T18001] bridge_slave_1: entered promiscuous mode [ 1846.113123][T18001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1846.148079][T18001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1846.223177][T18001] team0: Port device team_slave_0 added [ 1846.235033][T18001] team0: Port device team_slave_1 added [ 1846.307697][T18001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.314741][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.377885][T18001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.396185][T18001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.405324][T18001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.438700][T18001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.507964][T18074] bond8: Unable to set down delay as MII monitoring is disabled [ 1846.517644][T18074] bond8 (unregistering): Released all slaves [ 1846.592926][T18001] hsr_slave_0: entered promiscuous mode [ 1846.602143][T18001] hsr_slave_1: entered promiscuous mode [ 1846.610577][T18001] debugfs: 'hsr0' already exists in 'hsr' [ 1846.617086][T18001] Cannot create hsr debugfs directory [ 1846.917399][T18001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1846.930174][T18001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1846.944253][T18001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1847.030672][T18001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.041620][T18001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.053011][T18001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1847.134731][T18001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.147773][T18001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.158648][T18001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1847.200719][T18103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1847.214344][T18103] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 1847.222752][ T4884] Bluetooth: hci5: command tx timeout [ 1847.228994][T18069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1847.408483][T18001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1847.420744][T18001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.432831][T18001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1847.468601][T18112] validate_nla: 1 callbacks suppressed [ 1847.468615][T18112] netlink: 'syz.4.20733': attribute type 6 has an invalid length. [ 1847.482621][T18112] netlink: 'syz.4.20733': attribute type 5 has an invalid length. [ 1847.758737][T18001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1847.775807][T18001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1847.808769][T18001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1847.959089][T18001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1848.018814][T18153] syzkaller1: entered promiscuous mode [ 1848.028743][T18129] __nla_validate_parse: 17 callbacks suppressed [ 1848.028761][T18129] netlink: 104 bytes leftover after parsing attributes in process `syz.4.20736'. [ 1848.055535][T18153] syzkaller1: entered allmulticast mode [ 1848.090889][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20736'. [ 1848.250394][T18001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1848.279840][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20741'. [ 1848.290543][T18001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1848.304560][T18173] bond0: left promiscuous mode [ 1848.309731][T18173] bond_slave_0: left promiscuous mode [ 1848.315317][T18173] bond_slave_1: left promiscuous mode [ 1848.322279][T18173] bridge_slave_1: left promiscuous mode [ 1848.330724][T18173] bridge_slave_1: left allmulticast mode [ 1848.339671][T18173] veth0_to_team: left allmulticast mode [ 1848.352475][T18173] ipvlan3: left allmulticast mode [ 1848.360232][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20742'. [ 1848.369733][T18173] batadv_slave_1: left allmulticast mode [ 1848.375771][T18173] geneve2: left promiscuous mode [ 1848.381922][T18174] netlink: 'syz.4.20742': attribute type 26 has an invalid length. [ 1848.390824][T18173] geneve2: left allmulticast mode [ 1848.396073][T18174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20742'. [ 1848.406042][T18173] wireguard0: left promiscuous mode [ 1848.412891][T18173] wireguard0: left allmulticast mode [ 1848.420006][T18173] vlan2: left promiscuous mode [ 1848.425002][T18173] bond5: left promiscuous mode [ 1848.431421][T18173] vlan2: left allmulticast mode [ 1848.436361][T18173] bond5: left allmulticast mode [ 1848.445360][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20742'. [ 1848.458565][T18173] macvlan2: left allmulticast mode [ 1848.466266][T18173] bond9: left allmulticast mode [ 1848.475624][T18173] vlan3: left allmulticast mode [ 1848.481452][T18173] bridge3: left allmulticast mode [ 1848.525350][T18175] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1848.550886][T27532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1848.558118][T27532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1848.608602][T20580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1848.615795][T20580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1848.655185][T18183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20744'. [ 1848.693728][T18183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.784830][T18193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1848.931563][T18183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.100158][T18207] netlink: 'syz.3.20750': attribute type 1 has an invalid length. [ 1849.111582][T18207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1849.162324][T18208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1849.202960][T18207] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.20750'. [ 1849.226139][T18207] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1849.238198][T18215] netlink: 'syz.1.20752': attribute type 1 has an invalid length. [ 1849.282548][T18215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1849.287408][ T4884] Bluetooth: hci5: command tx timeout [ 1849.316327][T18207] netlink: 'syz.3.20750': attribute type 12 has an invalid length. [ 1849.342386][T18001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1849.358993][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20753'. [ 1849.371470][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20753'. [ 1849.389316][T18222] vlan0: entered allmulticast mode [ 1849.394525][T18222] bond5: entered allmulticast mode [ 1849.408028][T18207] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1849.445288][T18215] bond5: (slave geneve3): making interface the new active one [ 1849.464454][T18215] geneve3: entered allmulticast mode [ 1849.471683][T18215] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1849.532811][T27532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.544087][T27532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.584867][T27532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.626035][T18235] netlink: 'syz.1.20757': attribute type 2 has an invalid length. [ 1849.637405][T18235] netlink: 'syz.1.20757': attribute type 1 has an invalid length. [ 1849.657552][T27532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.733742][T18001] veth0_vlan: entered promiscuous mode [ 1849.754355][T18001] veth1_vlan: entered promiscuous mode [ 1849.803175][T18001] veth0_macvtap: entered promiscuous mode [ 1849.814839][T18001] veth1_macvtap: entered promiscuous mode [ 1849.845983][T18001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.864517][T18001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.934409][T20580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.964694][T20580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.999066][T20580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.025001][T20580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1850.039648][T18255] netlink: 'syz.1.20765': attribute type 1 has an invalid length. [ 1850.076558][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1850.084579][ C0] lec:lec_tx_timeout: lec0 [ 1850.090102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1850.249972][T18268] syzkaller0: entered promiscuous mode [ 1850.255778][T18268] syzkaller0: entered allmulticast mode [ 1850.261817][T18272] SET target dimension over the limit! [ 1850.350068][T18272] syzkaller0: entered promiscuous mode [ 1850.355596][T18272] syzkaller0: entered allmulticast mode [ 1850.376618][T27532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.384971][T27532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.544328][T11690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.565453][T11690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.799751][T18300] netlink: 'syz.4.20776': attribute type 9 has an invalid length. [ 1850.994046][T18312] openvswitch: netlink: Flow actions attr not present in new flow. [ 1851.069695][T18314] IPVS: set_ctl: invalid protocol: 135 172.20.20.61:20002 [ 1851.173801][T18321] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1851.187608][T18321] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1851.195417][T18321] gretap2: entered promiscuous mode [ 1851.202756][T18321] gretap2: entered allmulticast mode [ 1851.379283][ T7216] Bluetooth: hci5: command tx timeout [ 1851.648648][T18324] xt_CONNSECMARK: invalid mode: 0 [ 1851.776910][T18343] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1851.865910][T18346] bond11: (slave veth9): Enslaving as an active interface with a down link [ 1851.883460][T18343] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1851.987597][T18346] bond11: (slave veth11): Enslaving as an active interface with a down link [ 1852.482546][T18387] tipc: Enabled bearer , priority 0 [ 1852.626090][T18374] syzkaller0: entered promiscuous mode [ 1852.632717][T18374] syzkaller0: entered allmulticast mode [ 1852.654577][T18374] tipc: Resetting bearer [ 1852.733612][T18371] tipc: Resetting bearer [ 1852.903436][T18413] No such timeout policy "syz0" [ 1853.300436][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.308973][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.324229][ T1296] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1853.457728][ T7216] Bluetooth: hci5: command tx timeout [ 1854.661836][T18371] tipc: Disabling bearer [ 1854.921120][T18440] __nla_validate_parse: 20 callbacks suppressed [ 1854.921139][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20820'. [ 1855.081292][T18443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20819'. [ 1855.097083][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1855.105162][ C0] lec:lec_tx_timeout: lec0 [ 1855.110435][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1855.188282][T18456] ip6t_srh: unknown srh invflags 4000 [ 1855.212658][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20824'. [ 1855.744579][T18500] validate_nla: 10 callbacks suppressed [ 1855.744592][T18500] netlink: 'syz.1.20841': attribute type 1 has an invalid length. [ 1856.123601][T18535] tap0: tun_chr_ioctl cmd 1074025678 [ 1856.130189][T18535] tap0: group set to 0 [ 1856.280990][T18544] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.20852'. [ 1856.353352][T18546] ip6gre0: Master is either lo or non-ether device [ 1856.462983][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20856'. [ 1856.473504][T18555] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1856.481928][T18555] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20856'. [ 1856.495348][T18555] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.528921][T18555] bond_slave_0: left promiscuous mode [ 1856.547947][T18555] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.561327][T18555] bond_slave_1: left promiscuous mode [ 1856.573620][T18555] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 1856.591775][T18555] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1856.624565][T18555] .` (unregistering): Released all slaves [ 1856.640443][T18560] xt_hashlimit: size too large, truncated to 1048576 [ 1856.655257][T18568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20860'. [ 1856.765389][T18557] syzkaller0: entered promiscuous mode [ 1857.070160][T18587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20865'. [ 1857.154582][T18592] netlink: 27 bytes leftover after parsing attributes in process `syz.4.20867'. [ 1859.064548][T18581] sit0: entered promiscuous mode [ 1859.074067][T18581] netlink: 'syz.0.20861': attribute type 1 has an invalid length. [ 1859.082558][T18581] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20861'. [ 1859.145793][T18612] pim6reg: entered allmulticast mode [ 1859.221256][T18621] x_tables: duplicate underflow at hook 2 [ 1859.701529][T18641] syzkaller0: entered promiscuous mode [ 1859.708406][T18652] xt_cgroup: invalid path, errno=-2 [ 1859.734052][T18641] syzkaller0: entered allmulticast mode [ 1859.804338][ T4884] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1859.814768][ T4884] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1859.825370][ T4884] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1859.835442][ T4884] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1859.845379][ T4884] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1859.912554][T18657] lo speed is unknown, defaulting to 1000 [ 1860.122820][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1860.131095][ C0] lec:lec_tx_timeout: lec0 [ 1860.136042][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1861.926865][ T7216] Bluetooth: hci0: command tx timeout [ 1862.172604][T18692] netlink: 'syz.1.20889': attribute type 4 has an invalid length. [ 1862.207904][T18692] netlink: 'syz.1.20889': attribute type 4 has an invalid length. [ 1862.289594][T18657] chnl_net:caif_netlink_parms(): no params data found [ 1862.456602][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20891'. [ 1862.553788][T18657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.561214][T18657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.569605][T18657] bridge_slave_0: entered allmulticast mode [ 1862.578244][T18657] bridge_slave_0: entered promiscuous mode [ 1862.588545][T18657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.595766][T18657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.604641][T18657] bridge_slave_1: entered allmulticast mode [ 1862.612230][T18657] bridge_slave_1: entered promiscuous mode [ 1862.660351][T18657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.673161][T18657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1862.717889][T18657] team0: Port device team_slave_0 added [ 1862.726074][T18657] team0: Port device team_slave_1 added [ 1862.756266][T18657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.763619][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.791265][T18657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.804936][T18657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.812339][T18657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.839131][T18657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.892789][T18657] hsr_slave_0: entered promiscuous mode [ 1862.901297][T18657] hsr_slave_1: entered promiscuous mode [ 1862.907903][T18657] debugfs: 'hsr0' already exists in 'hsr' [ 1862.913677][T18657] Cannot create hsr debugfs directory [ 1863.526932][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1864.416249][T18740] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1865.147112][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1865.155215][ C0] lec:lec_tx_timeout: lec0 [ 1865.159876][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1865.196899][T18698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1865.228784][T18657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1865.278545][T18657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1865.322475][T18657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1865.370343][T18657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1865.613899][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20908'. [ 1865.635049][T18657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1865.643586][T18772] netlink: 'syz.0.20907': attribute type 1 has an invalid length. [ 1865.677409][T18772] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20907'. [ 1865.696425][T18657] 8021q: adding VLAN 0 to HW filter on device team0 [ 1865.718540][T18772] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20907'. [ 1865.733024][T27532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.740235][T27532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1865.749930][T18772] netlink: 658 bytes leftover after parsing attributes in process `syz.0.20907'. [ 1865.771314][T27532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.778519][T27532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1866.062520][T18787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20913'. [ 1866.153422][T20580] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.178163][T24381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.186062][T20580] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.271116][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20916'. [ 1866.337950][T18798] netlink: 'syz.1.20915': attribute type 1 has an invalid length. [ 1866.349640][T24381] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.409823][T18798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1866.421234][T18803] netlink: 'syz.2.20918': attribute type 1 has an invalid length. [ 1866.449160][T18798] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1866.458811][T18803] netlink: 'syz.2.20918': attribute type 4 has an invalid length. [ 1866.458833][T18803] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.20918'. [ 1866.531395][T18798] bond6: entered promiscuous mode [ 1866.539157][T18798] bond6: entered allmulticast mode [ 1866.565892][T18809] tipc: Started in network mode [ 1866.573023][T18809] tipc: Node identity 82214d98183c, cluster identity 4711 [ 1866.582337][T18809] tipc: Enabled bearer , priority 0 [ 1866.742116][T18819] block nbd0: NBD_DISCONNECT [ 1866.749103][T18809] syzkaller0: entered promiscuous mode [ 1866.764716][T18809] syzkaller0: entered allmulticast mode [ 1866.781864][T18809] tipc: Resetting bearer [ 1866.858441][T20580] tipc: Resetting bearer [ 1866.911993][T18808] tipc: Resetting bearer [ 1867.127625][T32543] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1868.787591][T18808] tipc: Disabling bearer [ 1868.817421][T32543] tipc: Node number set to 2585611672 [ 1868.880622][T18657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1869.394158][T18863] bond7: Unable to set up delay as MII monitoring is disabled [ 1869.406031][T18863] bond7 (unregistering): Released all slaves [ 1869.420168][T18860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1869.635034][T18875] netlink: 'syz.0.20938': attribute type 1 has an invalid length. [ 1869.646173][T18875] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20938'. [ 1869.661145][T18657] veth0_vlan: entered promiscuous mode [ 1869.673361][T18876] netlink: 'syz.0.20938': attribute type 1 has an invalid length. [ 1869.683282][T18876] netlink: 1 bytes leftover after parsing attributes in process `syz.0.20938'. [ 1869.705930][T18657] veth1_vlan: entered promiscuous mode [ 1869.712696][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20938'. [ 1869.731011][T18881] netlink: 'syz.3.20937': attribute type 1 has an invalid length. [ 1869.750637][T18881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20937'. [ 1869.833518][T18657] veth0_macvtap: entered promiscuous mode [ 1869.866196][T18657] veth1_macvtap: entered promiscuous mode [ 1869.936275][T18657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1869.976401][T18657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.018561][T20581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.037351][T20581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.056402][T20581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.075202][T18890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20940'. [ 1870.085990][T20581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.166879][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1870.174977][ C0] lec:lec_tx_timeout: lec0 [ 1870.179779][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1870.229927][T18901] xt_hashlimit: size too large, truncated to 1048576 [ 1870.246693][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1870.370887][T20580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.404325][T20580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.471384][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20945'. [ 1870.583571][T20581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1870.620813][T20581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1870.657963][T18911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1871.084643][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20949'. [ 1871.104667][T18940] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1871.149348][T18940] team0: Port device batadv1 added [ 1871.232642][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20953'. [ 1871.251112][T20578] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1871.251414][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20953'. [ 1871.261206][T20578] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1871.303418][T18946] delete_channel: no stack [ 1871.339009][T20578] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1871.388805][T20578] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1871.549474][T18958] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20957'. [ 1871.561052][T18958] netlink: 'syz.1.20957': attribute type 6 has an invalid length. [ 1871.570398][T18958] netlink: 'syz.1.20957': attribute type 5 has an invalid length. [ 1871.633784][T18962] syzkaller0: entered promiscuous mode [ 1871.640066][T18962] syzkaller0: entered allmulticast mode [ 1871.854544][T18979] netlink: 'syz.1.20964': attribute type 1 has an invalid length. [ 1872.365782][T19023] netlink: 'syz.4.20977': attribute type 3 has an invalid length. [ 1872.384936][T19023] netlink: 'syz.4.20977': attribute type 3 has an invalid length. [ 1872.768050][T19044] lo speed is unknown, defaulting to 1000 [ 1873.154186][T19060] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1873.195586][T19060] gretap2: entered promiscuous mode [ 1873.212475][T19060] gretap2: entered allmulticast mode [ 1873.335023][T19069] netlink: 'syz.1.20990': attribute type 10 has an invalid length. [ 1873.830933][T19094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1873.838682][T19094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1874.020418][T19094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.035738][T19094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.191301][T27532] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.201483][T27532] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.212358][T27532] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.258243][T20580] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1874.513324][T19130] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1874.520048][T19130] syzkaller1: Refused to change device type [ 1874.605976][T19133] netlink: 'syz.0.21005': attribute type 30 has an invalid length. [ 1874.844512][T19152] __nla_validate_parse: 17 callbacks suppressed [ 1874.844531][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21008'. [ 1875.150515][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21015'. [ 1875.186587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1875.194740][ C0] lec:lec_tx_timeout: lec0 [ 1875.199751][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1875.246607][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21012'. [ 1875.377884][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21017'. [ 1875.412577][T19184] tc_dump_action: action bad kind [ 1876.108014][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21021'. [ 1876.184919][T19183] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 1876.231788][T19215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21023'. [ 1876.369465][T19219] [ 1876.371846][T19219] ====================================================== [ 1876.378878][T19219] WARNING: possible circular locking dependency detected [ 1876.386004][T19219] syzkaller #0 Not tainted [ 1876.390429][T19219] ------------------------------------------------------ [ 1876.397454][T19219] syz.1.21024/19219 is trying to acquire lock: [ 1876.403619][T19219] ffffffff8fd4d0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1876.412948][T19219] [ 1876.412948][T19219] but task is already holding lock: [ 1876.420328][T19219] ffff88802838d970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1876.429779][T19219] [ 1876.429779][T19219] which lock already depends on the new lock. [ 1876.429779][T19219] [ 1876.440202][T19219] [ 1876.440202][T19219] the existing dependency chain (in reverse order) is: [ 1876.449217][T19219] [ 1876.449217][T19219] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1876.457256][T19219] _raw_spin_lock_bh+0x36/0x50 [ 1876.462563][T19219] nr_rt_ioctl+0x215/0xf90 [ 1876.467515][T19219] sock_do_ioctl+0x101/0x320 [ 1876.472648][T19219] sock_ioctl+0x5c6/0x7f0 [ 1876.477516][T19219] __se_sys_ioctl+0xfc/0x170 [ 1876.482669][T19219] do_syscall_64+0x14d/0xf80 [ 1876.487800][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.494230][T19219] [ 1876.494230][T19219] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1876.502068][T19219] _raw_spin_lock_bh+0x36/0x50 [ 1876.507381][T19219] nr_rt_device_down+0xbe/0x860 [ 1876.512769][T19219] nr_device_event+0x137/0x150 [ 1876.518077][T19219] notifier_call_chain+0x1be/0x400 [ 1876.523745][T19219] __dev_notify_flags+0x16d/0x310 [ 1876.529297][T19219] netif_change_flags+0xe8/0x1a0 [ 1876.534780][T19219] dev_change_flags+0x130/0x260 [ 1876.540164][T19219] dev_ioctl+0x7b4/0x1150 [ 1876.545037][T19219] sock_do_ioctl+0x23e/0x320 [ 1876.550163][T19219] sock_ioctl+0x5c6/0x7f0 [ 1876.555030][T19219] __se_sys_ioctl+0xfc/0x170 [ 1876.560155][T19219] do_syscall_64+0x14d/0xf80 [ 1876.565277][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.571701][T19219] [ 1876.571701][T19219] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1876.580147][T19219] __lock_acquire+0x15a5/0x2cf0 [ 1876.585544][T19219] lock_acquire+0xf0/0x2e0 [ 1876.590490][T19219] _raw_spin_lock_bh+0x36/0x50 [ 1876.595780][T19219] nr_remove_neigh+0x25/0xe0 [ 1876.600898][T19219] nr_add_node+0x1e41/0x2630 [ 1876.606054][T19219] nr_rt_ioctl+0xe59/0xf90 [ 1876.611043][T19219] sock_do_ioctl+0x101/0x320 [ 1876.616195][T19219] sock_ioctl+0x5c6/0x7f0 [ 1876.621057][T19219] __se_sys_ioctl+0xfc/0x170 [ 1876.626187][T19219] do_syscall_64+0x14d/0xf80 [ 1876.631305][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.637758][T19219] [ 1876.637758][T19219] other info that might help us debug this: [ 1876.637758][T19219] [ 1876.647996][T19219] Chain exists of: [ 1876.647996][T19219] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1876.647996][T19219] [ 1876.661834][T19219] Possible unsafe locking scenario: [ 1876.661834][T19219] [ 1876.669296][T19219] CPU0 CPU1 [ 1876.674664][T19219] ---- ---- [ 1876.680037][T19219] lock(&nr_node->node_lock); [ 1876.684828][T19219] lock(nr_node_list_lock); [ 1876.691950][T19219] lock(&nr_node->node_lock); [ 1876.699248][T19219] lock(nr_neigh_list_lock); [ 1876.703929][T19219] [ 1876.703929][T19219] *** DEADLOCK *** [ 1876.703929][T19219] [ 1876.712078][T19219] 1 lock held by syz.1.21024/19219: [ 1876.717284][T19219] #0: ffff88802838d970 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1876.727150][T19219] [ 1876.727150][T19219] stack backtrace: [ 1876.733059][T19219] CPU: 0 UID: 0 PID: 19219 Comm: syz.1.21024 Not tainted syzkaller #0 PREEMPT(full) [ 1876.733080][T19219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1876.733091][T19219] Call Trace: [ 1876.733097][T19219] [ 1876.733104][T19219] dump_stack_lvl+0xe8/0x150 [ 1876.733130][T19219] print_circular_bug+0x2e1/0x300 [ 1876.733157][T19219] check_noncircular+0x12e/0x150 [ 1876.733184][T19219] __lock_acquire+0x15a5/0x2cf0 [ 1876.733212][T19219] ? __lock_acquire+0x6b5/0x2cf0 [ 1876.733233][T19219] lock_acquire+0xf0/0x2e0 [ 1876.733252][T19219] ? nr_remove_neigh+0x25/0xe0 [ 1876.733274][T19219] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1876.733290][T19219] ? nr_remove_neigh+0x25/0xe0 [ 1876.733311][T19219] _raw_spin_lock_bh+0x36/0x50 [ 1876.733328][T19219] ? nr_remove_neigh+0x25/0xe0 [ 1876.733348][T19219] nr_remove_neigh+0x25/0xe0 [ 1876.733369][T19219] nr_add_node+0x1e41/0x2630 [ 1876.733392][T19219] ? nr_call_to_digi+0x126/0x1b0 [ 1876.733413][T19219] nr_rt_ioctl+0xe59/0xf90 [ 1876.733437][T19219] ? kasan_quarantine_put+0xbb/0x1f0 [ 1876.733454][T19219] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1876.733477][T19219] ? apparmor_capable+0x126/0x170 [ 1876.733499][T19219] ? capable+0x88/0xe0 [ 1876.733519][T19219] ? nr_ioctl+0x1b1/0x3b0 [ 1876.733536][T19219] sock_do_ioctl+0x101/0x320 [ 1876.733560][T19219] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1876.733581][T19219] ? do_futex+0x333/0x420 [ 1876.733606][T19219] sock_ioctl+0x5c6/0x7f0 [ 1876.733630][T19219] ? __pfx_sock_ioctl+0x10/0x10 [ 1876.733651][T19219] ? __fget_files+0x2a/0x420 [ 1876.733664][T19219] ? __fget_files+0x3a0/0x420 [ 1876.733677][T19219] ? __fget_files+0x2a/0x420 [ 1876.733691][T19219] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1876.733711][T19219] ? __pfx_sock_ioctl+0x10/0x10 [ 1876.733731][T19219] __se_sys_ioctl+0xfc/0x170 [ 1876.733750][T19219] do_syscall_64+0x14d/0xf80 [ 1876.733769][T19219] ? trace_irq_disable+0x3b/0x150 [ 1876.733782][T19219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.733798][T19219] ? clear_bhb_loop+0x40/0x90 [ 1876.733815][T19219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1876.733830][T19219] RIP: 0033:0x7f769419c819 [ 1876.733845][T19219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1876.733858][T19219] RSP: 002b:00007f76950e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1876.733875][T19219] RAX: ffffffffffffffda RBX: 00007f7694415fa0 RCX: 00007f769419c819 [ 1876.733887][T19219] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000004 [ 1876.733897][T19219] RBP: 00007f7694232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1876.733907][T19219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1876.733917][T19219] R13: 00007f7694416038 R14: 00007f7694415fa0 R15: 00007fff24856738 [ 1876.733955][T19219] [ 1878.246678][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1880.206538][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1880.214630][ C0] lec:lec_tx_timeout: lec0 [ 1880.219650][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1886.006479][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1886.014552][ C0] lec:lec_tx_timeout: lec0 [ 1886.019880][ C0] lec:lec_start_xmit: lec0:No lecd attached