last executing test programs: 6.078701802s ago: executing program 1 (id=3212): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x53, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x14) 5.867629961s ago: executing program 1 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a}, 0x20) (async) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xfc, 0x5, 0xffff, 0x6, 0xfffff4f4}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000300)={r3, 0x4}, &(0x7f0000000340)=0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020400000000000000000000000000850000007000000095000020000382da"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCRSGL2CALL(r5, 0x89e5, &(0x7f0000000a00)=@netrom) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r6) sendmsg(r6, &(0x7f00000009c0)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)="2bef21a902906dbd111ebf67bb83553f72a8bf1f14ce79c034c5ca723afaac2a8b", 0x21}, {&(0x7f0000001e00)="119eff7709fa30830960bd489ec14122fc8b12df7887575e22c43c00c1056eb47b8691b0b381966eafd771784fbce3341aaeb3fd1b1bce6f745a1ba128a7fbfd2759cba37d3ac0d62b4bbd0d3371d14968e022aba23249ae4737d0229b50e5b32eb2ff242b80cb4190c36054de8e7177fa894967e96f9bf06a9554db7f6d78892f579c6d5eac35646a81af594d58942eb891495ca58c68ef6b5110fecb03126349a6abbc31592cd61229c4ff3b490ed38b29515154cb861332153df72441e4f8d95d0eef18158eaadd8069c337f3add012c89ee604f1797a3e059bf2181bd7ff0ad53f03f367428ab6a78d48f2a58bd2236ed097819f2c7443b8d1b2e506f268a9597364558b4deeef65d44c7d7f2969ad74cc823a643158d640ff93f35616cd3b51b3fcaacfd177fe89f75d4df6d8f9a1b569383520657731c7301317d1c9aa3d3237b8f6b4cfe31213531312f091f100f9c46223e2515d976ef9f475a6aaf8593f4600a3261879a0c122b0049527fdc6e2bb62ab5a36ff0087d460893ebd0ae35c2d1bbba1537e7f982939152481122b153ed7526e551816c901bc9651da6ee5ab4e3a301c07c5bfb071c68ae1c6c96e508acc26c4d27f8c384ad5e02bf296db6320a2167b6972acbe57c6c74f806bdf3a92534272d55f51d8cb1d927f038183de3d9f1182babd18e1ab164996bf802c1e0f57d594418de86b8efbe1db7c3ea238f6dcb3388eba8d33214948837d639cd0dad7222220469a9e9efa90a69fe1dec4a0b1da054ad1f7ac945eeacc0c4523c4c318465e7016b8f4ab224c6fa0db8a0e727a56f58721fb8707a2bbd7f1de79b7f26b7ec1270adebf3ede6bb1eca38fff71cd5d53665abe54b697b5b7c8a6846c1ebf88fb843b3ddcc2e4b67249a28457926fe442c9e5d77100241c6d73d8b8975a49368a11c8d89a3a51e01122a96cf7b8bb1112458063d4d6342e679b434e0756f16c79ca4ffc90d30d166f95f47c6d74b54cf2056243ec8d296351a3ec1f24ca0912b26cd4070099d73340d8afc37ba7f0ff78d63fe10131197526aebb12cc3be22c7972250e29e0761a5cfa0827d8da40b1026a53b6ac6bca44efaf0868f3894aa73a4cc0d0ca2b458b2d7b56c0abbff3ecb1ccfdc70361d5ee3d76b2aa7caaa4a2537f89d6929fad79c1cb171a62c8b67f89e927bd453c9ec8d841c3495aa6f419826acbdacc3aeca8ae3f9b37ec1b47f7cbaf166fb30cbb5e941b99175c82ac328eac3c9bbde7aaeecc8504f73768c98e5a7282c5353a0fdb8f6bea58ed8fc88f4ab9fbad078418f6e617b10aef5050fd066e24db2cad4c41720222a2305adb9d6270dcef5dc84cdbd860f4829508fa1785f26b101f40d7a23d6d5bd737d0201083f105ea184c1768215b87494d3f86ab6631eb6c303aaffbb55204c40152fa5f5590ec09e2bdc86a5094936761066bff333e32d67fef6a58e0256859b2a501058482f68c01824bf636858a6b88969fc611acf87e2791f2940b995b9153fe0265c2101dd69321f354f1bef990e71cbc275c11986a81a9e8433942f8352aba9e4ac117d1934c411e7a4417e4fb4036592da73df7fffb1683702612dc6b12c43e6a171249b50dad9c62fe75f95db70d5cb17d5fa3e92f1cd276fa11a8c8ba50af28ff702a767158867f7b6af5f9ca67e6be176bb482b4aa40efe8c49168fc5bce1125104ce41a0a19fe2d15922114feb82f04bd2e31a5f47e04a47ee460a15490f59cc02f48d303f649ece0f1b36aa6b562da69c976ea3c6984dbfa141fa3967610bd2e0a86a6821bc01d5ebefc7cbc630ca4d6f4c1e017eb300693e29abe5272e4c9823bc2a98c06daedd5a2d6ce68f2f30ae6c5e31a2ae69d9a23a5af3692a95232e6b4f918fec4336dba5cd63944fe7a3b02f21e07ac971902add1c6cbca48359a821fc14bf7c3443e426ad1106b6ca0b415cd7efe16860d294c7fd8858ade9479680dc22a41a2b0eb7dd3882b05b1ef3615da4d16e39cdad8b01f75085cafb03006353688dd969442122c0b9170cf3911262d70b30f205ec13fb44f9fbe806828e24681bca053ef2f83fc7e84445399c03c80fff0d669ad19c72deea3c03146dc4058ec1950e34a89a8761cc96be2eb681e856582e3de85b5d738df423236001cd517d0fb0333509c8c04046ff3947d7ee10a3634f3c38dc23f01ef57585ac67d81c551892df3c390fa1677a2b86af8d635935b03802f434849acdaa7ef7976e510d0dd30319308f8226cf3efbc3e0f831e53e534c7fa7a85717f5e2833a4540b280cd4dccf17e7ad961432cc36c97c74cc589eb1b650a46aa69b1d761270f022aba1ce014a0cbc93b3b8086e2450ef4172e635531dd5ad4a460f26872e6a73ff54eb6d6e09378d98d2400792c4840cc1c871b7df7120cfd63a4856c62fbb9150e3ba79b1d2896475a53bf486f9ec28a620e241983f117a010bef0e42c2af6aac0af18ead8d3867231324e5fc0071aea6802a8809ebc6de5c3271316c7994e25b9295f6bd08625af0abd1034629f14d6cd157cb7b3cf21b142df501603e04b98ecbc625414df2f1a2556115ed0f885e84acb26b4508319742755bb7cc33ae07b8067d675ff9ca1c243afc16815c5153e0ae87bb1a9ab56e020d410f8965ccfb3e8da4fa674f8817d8446efc1b8c40492affeaedecc7ff1d7a9030d2853f1a93ffb08f012bb7913d790c7d698569057bd7e78fbcf9e7e7a7e03963ee9a187783d6f66bff3317504368a71d496b85a9a676f173f31a05233a3a6a980cd1daf91e8ee089bcaea3b65e12410b59c132d070a61e61b99037dfb2b1f57dc07f648e6590b3e20c823af0fcf7d4931b13f4b1e580865707714967111843892d42abb1a2b4dbb6b3659f7f09f0883d02a13cb3a60988034906dd67239aa5fb71c2c7921a30b253146ccf2c219e11ac7945b3d8c5f60ecbb6fbaafa0cb8cf4304d51e55649fdd98cbbb2952bb40b8922523af1e16263e6bff4a3e7f80f35d193f49b75d6e28f77f83bf4dea52fb0711b1031de34bdd48c3d8ed2adc4b56d933c5547653becaf050731adf8a90189108d38bef38f1c8920b92825bfbd98725e62458fee0ea8ba8c5c0ed8df0e0c94c2c52aad927faa229db9fc72e91d5b5e805457d0fd9b4cf82c64fc232edd1d04f9c65429b566eebe77f3b72ff482005ad5e826b3123f21c48ed62039df473666afdece5d054cfd777e9352958e83b4307fb1b497e68b13a6bf3c611a8d700e3594a1bf1c6b8726a25939624866f564338de04325dce0389c302b51b8f42ddc8d69a816aaef0383a12f3eb547d492d2d8e1fee3bf41e84cfe79c794434121d1fddb5400547ccfbe4c965a1b68207aeedb2eaff9eb7917aa9bb352908ac98702bc46060683a05c94080c3fac0b168fe80f00871ef07d77117a36d0526e01b7ea0b8ef20d4ddd4d76a7c5b967b4c77cd067448d4073af7f0f746fa6b8c4c771f13843b6781aa51c0991263df5aa3fcf3ed0b5cb6b877d46688472343ee4f456a1a23e421d2be5804b3b96fb316c2506861012221a55d2e551e7ae9abf2033dc12d8216e4ec70acfadaab04e74aeb44d4adc95898045c542bc543761d4d7a9c50e2615066a0f225dea3ae5e0ecc35e3126a7c651cf5ebe44753f4e1423adae581974f919f3602cd7522ea7c92edfb41f4d2469619e6f91481ec1c1f7626457a4102c1a933e2edda9e0a27ef0dc3ab452a60a80af7ecb6e981d79b7ccb41368bf8372bb48b3b515d9a03ad053b0770d0331527352328fb55357b939430c9ecd3070f2c6a4e24c7cdcd7fe35a69af20ecd44ee4bdc53f2a4274b5024817bfce07b88699996c8326511d2f634644a90ccd6a7c2cc4851fde187ab81896222c44f5f7fafebd5fd39bc3b2af4c20116ecb9a9c444de93997257c22f4042d8a92a15368f969d5ad11dd4ef7e82a0d6b06eddcc4e614a66fe2cc5b38a29f6cf2743bcb0e21d91b03712c57f654a1e23d4bdf505139e8a6cd767aa7f5606afd2140b906b46107e2a8b74b5acf2ed32f534182fbea2ff6d2fcd15af4e9bd104d7f2fe16fa85ed0327ce93bc8ebf8d55249cf0e81be48fedcf3b24b9e150afeed01b69aac2983abc3fcbda42954a76a31a151b08ccf30152fe6e90a55e65d056221ca494d9909afa8a0d118338f486f7fe9ae131a00962f1aa642434c9cb41c5c9f9dc23e0bb10424c20c0b25273d1ba4ff99c77df56a7098382314a0fad8648d4ef1427cf82fdd8d2dbf24a759fa7b1356d4954375e80270ad67aa0cda561c5146f18a4a3a54336ebd166cfde69f509aa9d60a6e5add423ddde808ce463de29599b87d0df049227c2819348df44a067fc695702eb9197d8fd37a4692df3d78e4d18d90496a741d0a798bce7f5aafd01d14e4902168b583288705e5a1784a177e22577e43286d45dabe6d7e55cf95c2f7986b74b61c71b66936d93e668e2e6ff2a0c36b5f631f98657de5d72942c3680cb9369aac17a6e9c7b8e8a2eb7d4988ac6b7b3632241ec2b566e8b67f78d1da984f1c0c3e20dfa0c98f9ae5991fac67e5a52f29541cc14062fd931de157c4a42a1f4ae3ec9eb4bbfb1079f68dfdc2bae6e53525bfb4211efcd48a81aea4a7dea094bec17591206500b528155922ec8facdd42a89d53a15350957534788cbdb1860166de5e981e11f8ade858e0b2e9e8675a78dec2f5f377aec0033925feaa83263fa585e8891d0da79b0632ae450de029ab0a8b6828b8d6dd636e3df9412c5d8a529d272d8db85e56a19e08f1745fdd5aafb538f91bd18b313a6554dd89a35783851033432a3c14b4bd8bc8b6f86f01b56cd33682d8f58cb9da623134ba2f11ad3d7f14bc984cc666dbf88dcd8aacc18a4d733d4e0e1e88917e044272195079dceeee7721611af0be87c0dd9f3d881f5ac8318bb49cf1111db3ca62d192f5feb0b5b3b0e89c1b9e3314483233eb55b1a5e1baf70c704a77b8b9b4a24b3468f35b3896c2f4efca5005e5dee0680caa0aff6bdd0c5a7f41c806d2cd5ba4a2916b795af05ca83382bcf993d8c1d12da91a5023c3a4e90f9d43d405b90d801ecd8ee70121f5d32c658cafd2d5a434fe6337d21881217e1767aa3a67bfad8ba9c12137fe414d00512b2884440e7b184f5e7da37cdce76181c1261b6d0d9cee91c4f98630ba2492d65d0f681943349b1a6c39f03b031d248c4db83ccef119bd01feeec74add02ef9c5685603420f510713314e33acec97e31b55740f1aa77e87c5ac9d56fdd95a5039147109764a6bbbc31cf9b336c319f8ea7f5af2b0515ac34ff7fb7c53de7a725535a48f6f130f1ff01e79e742013140835801b19ec7274f654626bdb7b670eb25a1130a05ba02094bd155fd76ec9e613b180b7ee9b5d5839e742591c771b2c3a200a58a0b8677b50097710a88345796a73e5ba8cb1ba1895d1d33a9b07b0439dcb98534dfc460b42d8b4741d26e0aaf44b616039538448dbdd03cb91d9f7b39e7d675f627c19d078396dfe79a6dea1a2a47cbef9788608d501e47e0a5a3b7f8093bad303c6ee4fd8792c53ff0e7c19864d0bcf6c536932459e937896c1eba74199f5544200a05ecbe2289ad2d6452ba77333e8ce711a363ccfbd668061fb56368f0cf8dff99beb4759b4798ba7d7b0768ec38175ec41305f14b454ac67b05cdca25cb23bf4bc0d1c36b5ec8bfcbfc09db20d34ab2725eb2111ae251e88ddab61ce9b5c13a6b9fc21b7dfafde18c9752d3bec8f35e3cdba700e99034d4e902b0104700778cc3b9ae059410b8aa82cb81d4c3dbd", 0x1000}, {&(0x7f00000004c0)="f9704fb92cc4586be19408a7f903bfe4a66e4777b5f49313208d15835108f0477a743633ec0bdf1bd0754551463f1abb91f2e6dc6ea99d3477f467833a2dbe21bc62e3b2c8eed54f12235f9d0f96ba4ab4b1ef520841ae444a1cc467c08c11460c1c67612d75f4e2a97f12fddda5108768967c71abfab840030eebd35d14ef8c4a20ec1927db20d797", 0x89}, {&(0x7f0000000580)="78f74a8a6a95ba723a4367c37d185cab79067be82db040e0e533af39ad0d85f7ddc5aa875c9c9805ef57c98b3ca995de2aa454b2bd0c0afd00c98eeb5b1623124155a038971e35f4e9f3e7060f61b80f8d068b8e3657ea8d4e8d73becd07744b83f4db9f8aeb3faacd707fee1ed2f7b49c0d8d78709a60110748724f520b789434ae53f489fb58ee2d4dd76c73171524c0e67534dafad1b253305ca2c67b9f4523ada910dc3789960b5ad5c62e82f5fd40e29d72f578353ff9e6c4ca6f97fec023f2943a72c5daf45a4b344fb98609192ac051d3df858529ed0ff1f2e215b517b5bcd21d88e4d1db7f54569fd7f5e07337312959634599", 0xf7}, {&(0x7f0000000680)="f16bde80764a36da2ec004838dea92cdbac1793cd38ef0f17e52606b7a387c947ee74411d230af40f4cac1a7dc94dff4b0c9c0fb195563302eddccfb2f109bb14370cdd59ee9212b45b37e9f35a4cfd60fba93ce4a0ce1b36fd77566dc9c754bee3e3d9f6db0ee87a277d5900c6418f56424345ccbf6c170360bfe9e9f94563520dccbc1", 0x84}, {&(0x7f0000000740)="91c99b95a6504c9d030832ed0518ad3f5cd43e159aaa7d0cb62b83cd42b3723866a0725592da80916cfad1cf01672e7a077b6381ebd18de45aeb00c733f3fd750c1d38534eba41c9a1137de8bbd5bce2267b8dabc17f07b8b3b715e4c22d031deaa4f74126fd3a1e80231280f7980720a6044d91bf18bde75e6f26141d4727b251ecba4c492208f1a0b969604603b078f4fbea22e73655d9681ccde5d9dae224ab3b320350bd837a2bd9c904087992bcc18600e72809090ad4d75a48d2f9f6fa74b79673496cda0b53f1467fb8a9fbfe11b78fd36ab95c7ff0ada61163c6c2032b3dd96d30d916e0dc0f6c569a4be7", 0xef}, {&(0x7f0000000840)="d0271671f197c82f1231ba54a8bc6bf792a896a38eec20c15d8560a0594e444486a89fa350152bee634810175a02e0956b5d4a8f9371f3bc3ae486524178c4f5d7c93f20280e052ac8d9444cea2356a6064ec1959ffe63480ad3bee78f0a02858ed3b45fc1893cf165896050096b361a", 0x70}, {&(0x7f00000008c0)="b0ad54", 0x3}], 0x8, &(0x7f0000000980)=[{0x28, 0x115, 0x1, "d9506a7a22ea8d1f3dbcb4c9b6e0851b552418"}], 0x28}, 0x10) (async) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="7bad26bd7000808cb6ce140000001c0007860c000300ff030000000000000c000400db000000000000001ab88879ab936b1ebbdfba202e4f8fdf0fe5b804885e6073ae502945302724ce1adc0c926e5ffdbfd0c7f603dfd5"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c000180fe"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) 5.75433874s ago: executing program 1 (id=3217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x1, 0xfffffffe, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x1, 0xfffffffe, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}}}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c0}, 0x20000000) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r9, 0x6, 0x2d, &(0x7f0000000000)=0x92d2, 0x4) (async) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="bf5dba82feb3"}]}, 0x44}}, 0x0) (async) 5.379929609s ago: executing program 1 (id=3221): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c, 0x0}}, {{&(0x7f0000000d00)={0xa, 0x4e20, 0xff, @private0, 0x10001}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2800000000000000290002200de9e25d00000000001b872d3c933b6bed4e2d18455d303676cff158ecffffffffffffff000000003b0222d74e3d6f96c21f42e4ed9666dda52255eb51ca51f9ac6949a0627e4e2ead4626df"], 0x28}}], 0x2, 0x40000) 5.172947948s ago: executing program 1 (id=3223): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) 4.474218273s ago: executing program 1 (id=3230): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e48974aae56e0000000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/149, 0x95}, {&(0x7f00000001c0)="fa317b27f1d3543cd89fca", 0xb}], 0x2, 0x0, 0x0, 0x84}, 0x8084) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) syz_emit_ethernet(0x5e, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRES32=0x41424344, @ANYBLOB="a0000000907800001d0200"/28], 0x0) close(r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x8, 0x20, 0x8, 0xe, {{0x3d, 0x4, 0x0, 0x4, 0xf4, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@ssrr={0x89, 0xb, 0x29, [@dev={0xac, 0x14, 0x14, 0x44}, @multicast1]}, @rr={0x7, 0xb, 0x2c, [@broadcast, @multicast1]}, @end, @rr={0x7, 0x13, 0xf5, [@loopback, @remote, @remote, @dev={0xac, 0x14, 0x14, 0xd}]}, @ssrr={0x89, 0x1f, 0x7a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0x4, 'MK'}, @rr={0x7, 0x1f, 0x16, [@dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty, @rand_addr=0x64010101]}, @cipso={0x86, 0x4b, 0xffffffffffffffff, [{0x1, 0x8, "8b83b4ac9016"}, {0x2, 0xe, "3c5f1688db504fe69e0f478a"}, {0x5, 0x7, "6d5fae08f9"}, {0x2, 0x6, "54cd45bb"}, {0x5, 0xd, "f36116af45b56f65365a7d"}, {0x1, 0xb, "b1e5fb706473e316b3"}, {0x2, 0xa, "505f933d2b1c646e"}]}, @cipso={0x86, 0x28, 0x3, [{0x0, 0xc, "1048358a8d6bcb907955"}, {0x0, 0xf, "9c35a9e919298004513f00deb5"}, {0x0, 0x7, "8112de0015"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x12c, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_MASK={0xd1, 0x5, "8689c51081b0022dac606b71b63c4f397cff55ba2874b9cf8a30f43204f1f4a5f7e5068cc0361e043ccaa9e96dfbd1c641a64b10b649c788b33cf7db2773ec81062cf7921364efd8fa2b6f5da0fd833d6e15e1d662bcfcd52b22e182d2ddfd7f8b641cf844cf446c1de50c8c96b373f9747fdaf562545e91a7707331ad24c15144a4052cd7ab29651d8640a7a7eb9a7d1ad2285bc4f1e1b773e2af1a72f12a1a483e61556fa7a7028259c7ee246f79a118d8848d40d878bf7edb98783f13e08aa343894c6fe620e8248cae0ad4"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x24008001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000006c0)="7d2788cf459f4df995d767e4539b912cf83776de29e9d42fdd06097416f9480c0872107c1981dbb8af4405f1351bcf74440f877cbb7d07be7476ce69b8c76a0c7c9eef38f88903655e8ac850371d4690e9e2edd4ad9534df1cd338ca22d0ff333a8f6fc49008de756d5db6e8df9316ae47d2cd1ffc127eb75336272604e44ed505d7000adfa30bfb6abbad8b95d0bed534681398f7f072d1b099af5505a8ac86473bba7bad8ed195c0e88e8328", 0xad}], 0x1, &(0x7f0000000780)=[{0x10, 0x29, 0x87}, {0x70, 0x103, 0x1, "60e8154203e11bd4a15a92c155df00cf8fa96b81e412966104c974394466efef4ed8189de2fe7cdfd31c89dd375327e5e66ca32503a5030a313674acd763cdeb754373304a132a9bd514ffc9ec80909c68866641abe27f824825f842ba"}], 0x80}, 0x4c035) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = accept$netrom(0xffffffffffffffff, &(0x7f0000000840)={{}, [@bcast, @rose, @remote, @rose, @null, @rose, @rose, @netrom]}, &(0x7f00000008c0)=0x48) getpeername$netrom(r10, &(0x7f0000000980)={{0x3, @bcast}, [@remote, @netrom, @default, @default, @default, @default, @remote, @rose]}, &(0x7f0000000900)=0x48) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) listen(r8, 0x9) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'dummy0\x00'}) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000000c0)=0x4, 0x4) 2.264390142s ago: executing program 3 (id=3257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3]}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r5, r4}, 0xc) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000180)=0x1, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008900000008000300", @ANYRES16=r0, @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40490) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x49, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x1, 0x0, 0x0, 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r11, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @empty, @empty}, 0xc) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001600010000000000000000000a0400000000000014000100ff010000000000000000000000000001150002"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf251d0000000c009900000040020b000200080003008d0ce24823319aca61ba3576a32a45c823aef6e85184a7a20a83348b4d18f55588acdd4889c352038eaae63549107503a6400cdd8e48332b49176e93f4586aeada59fd231695786a04cb93d54d1d72c2b9b474b243354ea01447bea0d77e4c75c2fd123084aeeb6e1160", @ANYRES32=r12, @ANYBLOB="080001004800000008000300", @ANYRES32=r13, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r15}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 2.254965194s ago: executing program 2 (id=3258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003d00070100000000fbffffff037c0000040012800c0001"], 0x24}}, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r3, @ANYBLOB="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"/8378], 0x2040}}, 0x0) 2.095542301s ago: executing program 2 (id=3260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xfce) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040), 0xc) 1.934042607s ago: executing program 0 (id=3262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@delneigh={0xf0, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x96, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @NDA_CACHEINFO={0x14, 0x3, {0x0, 0xfff, 0x1122, 0x9}}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_MASTER={0x8, 0x9, 0x1}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @NDA_NH_ID={0x8, 0xd, 0x30}, @NDA_PROBES={0x8, 0x4, 0x101}, @NDA_VNI={0x8, 0x7, 0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_CACHEINFO={0x14, 0x3, {0x7, 0x6, 0x9, 0x5}}, @NDA_MASTER={0x8, 0x9, 0xfffffff9}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_LINK_NETNSID={0x8, 0xa, 0xf408}, @NDA_DST_IPV4={0x8, 0x1, @private=0xa010102}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xf8}]}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0001000000018007000100637400001c00028008000140000000022bbc02400000000805000300000000400900010073797a30000000000900020053797a3200000000140000001100010000008007000000000000000a"], 0x80}}, 0x24004800) 1.884030344s ago: executing program 3 (id=3263): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, &(0x7f00000003c0)={0x1, 0x1, [0x281, 0xec3, 0x8f6, 0xfd0]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x800454d2, &(0x7f0000000340)={'veth1\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000, {[@ra={0x94, 0x4}, @cipso={0x86, 0x9, 0x0, [{0x0, 0x3, "d2"}]}]}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100163a053c2ad2f6400000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b8000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYRESDEC=r0], 0x6f4}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.709064371s ago: executing program 0 (id=3265): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x44, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xd}]}]}, 0x44}}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) 1.344626637s ago: executing program 4 (id=3268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xfff3, 0xffff}, {0xffe0, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xadd}, @TCA_RATE={0x6, 0x5, {0xa, 0x9}}, @qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x5}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x20}, @TCA_CAKE_RTT={0x8, 0x7, 0x5}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c0001"], 0x24}}, 0x0) 1.259987724s ago: executing program 3 (id=3269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r4], 0x24}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.258858607s ago: executing program 2 (id=3270): bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x6, 0x25, &(0x7f0000000480)=""/37, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x4, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x2, 0x6}, {0x4, 0x2, 0x0, 0xb}, {0xff, 0x5, 0x5, 0x4}, {0x2, 0x3, 0x1, 0x4}], 0x10, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) recvmmsg$unix(r0, &(0x7f0000005980), 0x0, 0x200, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r4, 0x0, 0x0, 0x40000060, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 1.258188921s ago: executing program 0 (id=3271): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000002d000100000000000000000004000080450011802fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650d3e7a1520d6147f9cdbd9d15d2dcd393701e0000009976d3a9dfae9d4f717fb4872fd25a4a2f9edfe33cba1c9aeb01878663dbcdf87b2fe2cc8bc0bbb6e30d6654701414da1c994dd25cd03d7f1812e1a39946801806438574cac91bf3904dff65d23534e235"], 0x5c}], 0x1}, 0x0) 1.146089458s ago: executing program 4 (id=3272): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) (async, rerun: 32) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) (async, rerun: 32) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000180)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.073227315s ago: executing program 4 (id=3273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r1, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r2, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x440a0) syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) 924.054278ms ago: executing program 4 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080c0) (async) 922.509138ms ago: executing program 2 (id=3275): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008001df8697470004c00028008000100", @ANYRESHEX=r0, @ANYBLOB="080003"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005500e5012abd7000ffffffff07000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ff"], 0x38}, 0x1, 0x0, 0x0, 0x60042800}, 0x40084c0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) bind$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000480), 0x0}, 0x20) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 736.738579ms ago: executing program 3 (id=3276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xeabb6d5c3a4a971e}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r3, 0xe31, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000b00)={0xa4, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x1e, 0x80000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 714.060465ms ago: executing program 4 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x90, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 713.404929ms ago: executing program 0 (id=3278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x200000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000340)={0x38, r1, 0x5, 0xffffffff, 0xd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x24, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100000, {0x1, 0x1000, 0xff, 0x8001}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc5}, 0xc2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082bbd7000ffdb6535046af6b4c9df25260000000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x20010000) sendmsg$inet(r3, &(0x7f0000001900)={&(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000240)="ab5bf1a1441a257a29ebe32d70712819487c95c2e8e8aeda1220e12dae658fb9806ea8", 0x23}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000280)="7c607d630a9351e2e330243170f41c44bf8ea66b8c472039052eaf8e6f7c56f1e116", 0x22}, {&(0x7f0000000480)="1aabf5b8d2dbd8a0f7115f696b1f0a3503b5fa48e823318b4bdc3573622e58e8927c3de8c70dbbe025ebb581049c71e6a450aa2da77e5c57ed0547e74e795e1a2ca4bf0bdd4e383134b2b0c0e636693b90f266134dd4da61bf70fa939e49a252f529d9f2f2a8637a04aa9a463aadbc86b006241f2e8ba511d1e3308396117d84844569408d4da3be9722b0750066404ed706511e778aa8592b4e69ce76f096e53a84e0251e474e97e6e26b4ed1602b85c9326999f9dfafee4ab9b593b1c30adb9ad7f2675669bf1a3534c2bbf05f149f499b4fa785410a87a046060fe2c134c871ad11aa63487972eafc7cabde75a69048825928c8342f6c4d", 0xf9}, {&(0x7f0000000580)="a4d0e9872da2c0d22c08f5b6c4413cb304604a17b919cfa014c47d1dbb1d8c88554e4d7aa72bce42c57ee61974fab64894435c074e2236be576f0b45de17d71546b5d7f245d9afc14d9d159222b010011d6ed688b6bfc8df045fcdb63e85fb8f3d3d3bef3a2cf2c903b4449024d72fef86c1d626fda00912e5ae87850d6a2a3c7dcd45bb47c25dc872da69ed1156c6760847eee4a037d9daf2bea2277032e8f2e8ebd6be9328d333773888badfd48417a03beba0e4d6adf2f524b154c89a7134f9ff0d9f5b4a8b98fad4fd82aceb7d43ab3b93d8efe9", 0xd6}, {&(0x7f00000002c0)="759dac3bd2ad5ec05b14bc5060887ab1b7f8c45f820611f2662cd44e95ec5895c4890aa91212062c8ace9ab5a6adb7a1cda7410a73ff59a0c918070369cb23e92afa54574984731f5a6caf2c1837d25df089c59b8bc38e69b3cf77f021b7a5e8f80ecc8f967716c5f84def59300566e288e000", 0x73}, {&(0x7f0000000680)="66bcb1411e137fdfde70dc0c92e91492276fcd68f134ab789abadc00c5c89eef66af48723ea53475dbed3540906d5a4b911edfaa68a23a88d11fa18fad70c3eb2ed8efb4ea0cf1f00546ce3156f2593e14ef67621a886043b7282bf0d6d921f3cf29522767b1fa3b21075199482ad9682260428ee0c9bec8a09a589fb5ff62e1abe1b585bea67f6ab9239fe6cf65dc6e145529bf181d58296daf163435ceec47aec401a9ebc3a17eff055a112313c8507c02894c67582eba0a9fe45c70ec1460e467570f98cd1e40a79751bbf2fac006b11caba5b2dff6", 0xd7}, {&(0x7f0000000780)="a94430891a0575d234fab54a7bc0bd136878290ba29aa54f9d7b412402cc1bee616bf9c90c42558c6b889672b258cd9b11f52e550af97b36a5396fc1d3520ce76592d0d326c79688bae5210b034b8c5e37fabbe3542644b5fdc31a6a74763a59d34eb48a24a2e0d47ae7f88bd8f8df412be76ec548d832e4b0e2f9c3bbb33da25c615407035a5b83c6f018da", 0x8c}, {&(0x7f0000000840)="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", 0x1000}], 0x9}, 0x0) 467.931531ms ago: executing program 2 (id=3279): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x4, 0x7, 0x1, 0x5, 0x81}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x1f, 0x4, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @dev}, @IFA_BROADCAST={0x8, 0xb, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r3, 0xffffffffffffffff, 0x2c}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xb, 0x6, 0xe, 0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)=[{0x5, 0x3, 0xd, 0x6}, {0x4, 0x3, 0x10, 0x6}, {0x4, 0x2, 0xf, 0x8}, {0x5, 0x1, 0x10}, {0x2, 0x3, 0xc, 0x3}, {0x5, 0x3, 0xf, 0x5}], 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='f2fs_gc_begin\x00', r9, 0x0, 0x1972}, 0x18) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 430.827427ms ago: executing program 4 (id=3280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2], 0x340a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x9, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7e4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x309}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000045}, 0x40) 354.98358ms ago: executing program 0 (id=3281): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006114340c000063019800000900009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003740)=@newtfilter={0x3c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x6d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f688444af030006002000000002004e2200000000000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140b00000000000000000100140006000000000000000000"], 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='gretap0\x00'}) 219.985166ms ago: executing program 3 (id=3282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff0000000071104b000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540100001a0001000000001000000000fc010000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x9, 0x2}, 0xfffffd91}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000cc6a0000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 127.941469ms ago: executing program 2 (id=3283): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000bc0)=0x8001, 0x4) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000000)=0x60) recvmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000700)=""/214, 0xd6}, {&(0x7f00000011c0)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/170, 0xaa}], 0x4, &(0x7f0000000600)=""/59, 0x3b}, 0x8}, {{&(0x7f0000000800)=@nfc_llcp={0x27, 0x0}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/23, 0x17}], 0x1, &(0x7f0000000500)=""/134, 0x86}, 0x5}, {{&(0x7f0000000900)=@isdn, 0x80, &(0x7f0000000880)=[{&(0x7f0000000980)=""/238, 0xee}, {&(0x7f0000000a80)=""/173, 0xad}, {&(0x7f0000000b40)=""/114, 0x72}, {&(0x7f0000000680)=""/50, 0x32}, {&(0x7f00000010c0)=""/209, 0xd1}, {&(0x7f0000000d00)=""/13, 0xd}, {&(0x7f0000000d40)=""/1, 0x1}, {&(0x7f0000001300)=""/249, 0xf9}], 0x8, &(0x7f0000000e00)=""/155, 0x9b}, 0xa22b3d1}], 0x3, 0x2040, &(0x7f0000000f80)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xcb5) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) listen(r4, 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000fc0)=ANY=[@ANYRES64=r2], 0x28}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 54.510487ms ago: executing program 0 (id=3284): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) r0 = socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'geneve0\x00', {0x4}, 0x9}) (async, rerun: 32) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0xfff8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xb1bc}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00033a5962263fdb79a6c67bcefa2ad37eb42919052a827e5b44d49511b72a777cf83ffab031d7ffb690d05b0bcd0573634cd3b63a71af921e43cd0140476fe1b76ecd61e6be3a7caedf96e5"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c95}, 0x4008840) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=3285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000000800074000000000240002800c00028005000100000000001400018008000100ac1414bb080002007f000001240001801400018008000100e000000208000200ac1414000c00028005000100000000005c00068008000100ff"], 0xc0}}, 0x20000040) kernel console output (not intermixed with test programs): 31][T10607] netlink: 'syz.4.1216': attribute type 15 has an invalid length. [ 204.778750][T10613] lo speed is unknown, defaulting to 1000 [ 204.904840][T10622] netlink: 'syz.0.1221': attribute type 21 has an invalid length. [ 204.928072][T10622] netlink: 'syz.0.1221': attribute type 5 has an invalid length. [ 205.192584][T10637] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 205.232288][T10637] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.324110][T10637] bond3: (slave gretap1): making interface the new active one [ 205.334290][T10637] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 205.553955][T10662] xt_policy: too many policy elements [ 205.620698][T10672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 205.998335][T10698] netlink: 'syz.0.1244': attribute type 24 has an invalid length. [ 206.286393][T10708] tipc: Enabled bearer , priority 0 [ 206.338272][T10713] syzkaller0: entered promiscuous mode [ 206.364399][T10713] syzkaller0: entered allmulticast mode [ 206.376952][T10714] __nla_validate_parse: 12 callbacks suppressed [ 206.376971][T10714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'. [ 206.429536][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 206.490669][T10719] netlink: 'syz.4.1251': attribute type 1 has an invalid length. [ 206.498971][T10719] netlink: 'syz.4.1251': attribute type 2 has an invalid length. [ 206.502702][T10713] tipc: Resetting bearer [ 206.512550][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1251'. [ 206.667624][T10707] tipc: Resetting bearer [ 206.717854][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 206.718052][T10707] tipc: Disabling bearer [ 206.940924][T10742] tipc: Enabling of bearer rejected, failed to enable media [ 207.156282][T10754] netlink: 'syz.4.1259': attribute type 1 has an invalid length. [ 207.273457][T10754] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.323550][T10759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 207.333045][T10759] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 207.345739][T10759] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 207.411702][T10763] veth7: entered promiscuous mode [ 207.425463][T10763] bond2: (slave veth7): Enslaving as an active interface with a down link [ 207.435649][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 207.455148][T10754] vlan1: entered allmulticast mode [ 207.462232][T10754] bond2: entered allmulticast mode [ 207.532680][T10773] pimreg: entered allmulticast mode [ 207.543778][T10766] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 207.578619][T10779] netlink: 'syz.1.1267': attribute type 21 has an invalid length. [ 207.607605][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1267'. [ 207.700210][T10788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1269'. [ 207.723677][T10788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1269'. [ 207.797527][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 207.875525][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 208.533500][T10845] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 208.576625][T10848] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 209.014917][T10870] tipc: Enabling of bearer rejected, failed to enable media [ 209.172774][T10883] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 209.218086][T10885] tipc: Enabled bearer , priority 0 [ 209.240698][T10884] tipc: Enabling of bearer rejected, already enabled [ 209.280651][T10885] syzkaller0: entered promiscuous mode [ 209.305139][T10885] syzkaller0: entered allmulticast mode [ 209.346303][T10885] tipc: Resetting bearer [ 209.385643][T10882] tipc: Resetting bearer [ 209.448808][T10882] tipc: Disabling bearer [ 209.497597][T10902] tc_dump_action: action bad kind [ 209.687241][T10916] netlink: zone id is out of range [ 209.696374][T10916] netlink: get zone limit has 8 unknown bytes [ 209.920278][T10925] lo speed is unknown, defaulting to 1000 [ 210.309357][T10943] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 210.321678][T10943] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 210.371665][T10942] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 210.408101][T10942] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 210.629711][T10961] validate_nla: 3 callbacks suppressed [ 210.629730][T10961] netlink: 'syz.0.1319': attribute type 32 has an invalid length. [ 210.704071][T10961] (unnamed net_device) (uninitialized): option coupled_control: invalid value (3) [ 210.828381][T10978] sit0: entered promiscuous mode [ 210.839638][T10978] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 211.055118][T10997] netlink: 'syz.2.1330': attribute type 30 has an invalid length. [ 211.083250][T10992] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 211.127850][T10988] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.151921][T10988] batman_adv: batadv0: Interface activated: team0 [ 211.178979][T10988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.244091][T10997] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 211.271301][T10997] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 211.402753][T11019] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 211.433466][T11019] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 211.453962][T11024] __nla_validate_parse: 19 callbacks suppressed [ 211.453979][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1337'. [ 211.482279][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 211.956607][T11053] netlink: 'syz.1.1346': attribute type 1 has an invalid length. [ 212.047808][T11056] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 212.085500][T11058] syzkaller1: entered promiscuous mode [ 212.123664][T11058] syzkaller1: entered allmulticast mode [ 212.574267][T11090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1357'. [ 212.628159][T11093] tipc: Enabling of bearer rejected, already enabled [ 212.838291][T11102] netlink: 4088 bytes leftover after parsing attributes in process `syz.0.1362'. [ 212.915689][T11109] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1366'. [ 212.939225][T11102] netlink: 2212 bytes leftover after parsing attributes in process `syz.0.1362'. [ 212.978033][T11113] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1366'. [ 213.002550][T11116] netlink: 'syz.1.1367': attribute type 11 has an invalid length. [ 213.015755][T11116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1367'. [ 213.037593][T11114] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.187198][T11129] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1371'. [ 213.268055][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1373'. [ 213.634902][T11162] ip6gre3: entered allmulticast mode [ 213.755259][T11167] bridge0: port 3(vlan4) entered blocking state [ 213.762053][T11167] bridge0: port 3(vlan4) entered disabled state [ 213.768532][T11167] vlan4: entered allmulticast mode [ 213.774842][T11167] bridge0: entered allmulticast mode [ 213.809356][T11167] vlan4: left allmulticast mode [ 213.829621][T11167] bridge0: left allmulticast mode [ 214.375150][T11196] tipc: Enabling of bearer rejected, failed to enable media [ 214.705138][T11220] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_macvtap, syncid = 3, id = 0 [ 214.759132][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571bb400: rx timeout, send abort [ 214.774830][T11223] IPVS: set_ctl: invalid protocol: 103 172.20.20.67:20003 [ 214.826498][T11219] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20001 [ 215.067606][T11230] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 215.175352][T11237] netlink: 'syz.2.1404': attribute type 5 has an invalid length. [ 215.259315][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880595f0c00: rx timeout, send abort [ 215.268012][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880571bb400: abort rx timeout. Force session deactivation [ 215.365964][T11243] sctp: [Deprecated]: syz.3.1407 (pid 11243) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.365964][T11243] Use struct sctp_sack_info instead [ 215.767599][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880595f0c00: abort rx timeout. Force session deactivation [ 215.894328][T11262] openvswitch: netlink: Key 19 has unexpected len 12 expected 4 [ 215.923145][T11266] netlink: 'syz.0.1415': attribute type 14 has an invalid length. [ 215.950515][T11266] netlink: 'syz.0.1415': attribute type 14 has an invalid length. [ 216.307496][T11290] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.467757][T11306] netlink: 'syz.0.1427': attribute type 11 has an invalid length. [ 216.487650][T11306] netlink: 'syz.0.1427': attribute type 11 has an invalid length. [ 216.498841][T11309] __nla_validate_parse: 19 callbacks suppressed [ 216.498857][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 216.509143][T11306] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1427'. [ 216.614486][T11313] netlink: 'syz.4.1430': attribute type 83 has an invalid length. [ 217.085905][T11351] netlink: 212120 bytes leftover after parsing attributes in process `syz.2.1440'. [ 217.301922][T11363] tipc: Enabling of bearer rejected, failed to enable media [ 217.316795][T11360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1444'. [ 217.327590][T11360] hsr_slave_0: left promiscuous mode [ 217.335966][T11360] hsr_slave_1: left promiscuous mode [ 217.598210][T11384] batadv_slave_0: entered allmulticast mode [ 217.678877][T11390] batadv_slave_0: left allmulticast mode [ 217.698476][T11395] netlink: 'syz.0.1454': attribute type 1 has an invalid length. [ 217.826995][T11402] syz_tun: entered allmulticast mode [ 217.856236][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 217.920705][T11401] syz_tun: left allmulticast mode [ 218.007790][T11415] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1461'. [ 218.166142][T11415] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1461'. [ 218.192872][T11415] openvswitch: netlink: Flow actions attr not present in new flow. [ 218.234424][T11419] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 218.243115][T11429] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 218.298553][T11431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'. [ 218.320048][T11429] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1462'. [ 218.405585][T11438] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 218.702926][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 218.894239][T11474] IPVS: length: 75 != 8 [ 218.924032][T11474] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 219.024927][T11474] bond7: entered promiscuous mode [ 219.030173][T11474] bond7: entered allmulticast mode [ 219.035895][T11474] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.079734][T11484] nbd: nbd1 already in use [ 219.127352][T11484] nbd: nbd1 already in use [ 219.162399][T11484] lo: MTU too low for tipc bearer [ 219.190907][T11484] tipc: Enabling of bearer rejected, failed to enable media [ 219.470075][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.707236][T11503] veth1_macvtap: left promiscuous mode [ 219.718170][T11503] macsec0: entered promiscuous mode [ 219.726227][T11503] macsec0: entered allmulticast mode [ 219.737784][T11506] veth1_macvtap: entered promiscuous mode [ 219.747042][T11506] veth1_macvtap: entered allmulticast mode [ 219.753811][T11506] macsec0: left promiscuous mode [ 219.759138][T11506] macsec0: left allmulticast mode [ 219.786770][T11506] veth1_macvtap: left allmulticast mode [ 220.120494][T11540] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 220.177630][T11540] bond8: entered promiscuous mode [ 220.212970][T11540] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.476794][T11565] netlink: 'syz.2.1496': attribute type 4 has an invalid length. [ 220.528013][T11569] netlink: 'syz.2.1496': attribute type 4 has an invalid length. [ 220.796944][T11583] veth1_macvtap: left promiscuous mode [ 220.816818][T11583] macsec0: entered promiscuous mode [ 220.835680][T11583] macsec0: entered allmulticast mode [ 220.851952][T11583] veth1_macvtap: entered promiscuous mode [ 220.857869][T11583] veth1_macvtap: entered allmulticast mode [ 220.873736][T11583] macsec0: left promiscuous mode [ 220.878878][T11583] macsec0: left allmulticast mode [ 220.889690][T11583] veth1_macvtap: left allmulticast mode [ 220.948960][ T5873] block nbd2: Receive control failed (result -32) [ 220.996652][T11596] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 221.183652][T11596] bond4: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.217980][T11596] bond4: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 221.242484][T11596] bond4: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 221.624397][T11641] netlink: 'syz.2.1515': attribute type 1 has an invalid length. [ 221.719692][T11652] __nla_validate_parse: 10 callbacks suppressed [ 221.719710][T11652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1516'. [ 221.767022][T11651] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 221.775298][T11651] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 221.783957][T11651] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 221.792930][T11651] netlink: 'syz.4.1519': attribute type 2 has an invalid length. [ 221.882208][T11648] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1518'. [ 221.908656][T11648] openvswitch: netlink: Flow key attr not present in new flow. [ 222.012757][T11663] netlink: 'syz.2.1522': attribute type 1 has an invalid length. [ 222.085823][T11663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 222.088805][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 222.114793][T11661] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1520'. [ 222.216392][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 222.829019][ T13] syzkaller0: tun_net_xmit 76 [ 222.841001][ T13] syzkaller0: tun_net_xmit 48 [ 222.850599][ T5927] syzkaller0: tun_net_xmit 76 [ 222.862360][T11705] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 222.879170][T11705] syzkaller0: Linktype set failed because interface is up [ 222.930588][ T5927] syzkaller0: tun_net_xmit 76 [ 223.426349][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 223.488547][T11732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1542'. [ 224.666290][T11746] openvswitch: netlink: IP tunnel dst address not specified [ 224.693229][T11744] ipvlan3: entered promiscuous mode [ 224.709322][T11749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 224.761147][T11754] delete_channel: no stack [ 224.779671][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1544'. [ 224.804491][T11747] can: request_module (can-proto-0) failed. [ 225.069187][T11765] openvswitch: netlink: Duplicate or invalid key (type 0). [ 225.143018][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.196771][T11771] tipc: Enabling of bearer rejected, already enabled [ 225.459032][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1553'. [ 225.566278][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.574322][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.745375][T11784] tc_dump_action: action bad kind [ 225.930564][T11787] tipc: Enabled bearer , priority 0 [ 225.951024][T11787] syzkaller0: entered promiscuous mode [ 225.956569][T11787] syzkaller0: entered allmulticast mode [ 226.062300][T11787] tipc: Resetting bearer [ 226.075701][T11786] tipc: Resetting bearer [ 226.164181][T11786] tipc: Disabling bearer [ 226.272662][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.314888][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.454468][T11813] netlink: 'syz.3.1568': attribute type 9 has an invalid length. [ 227.130132][T11844] __nla_validate_parse: 8 callbacks suppressed [ 227.130151][T11844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1575'. [ 227.188258][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.249484][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1576'. [ 227.308272][T11849] netlink: 'syz.1.1577': attribute type 1 has an invalid length. [ 227.330311][T11849] netlink: 'syz.1.1577': attribute type 2 has an invalid length. [ 227.417942][T11853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.448845][T11853] sch_tbf: peakrate 3294 is lower than or equals to rate 13382360857999656951 ! [ 227.504382][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1580'. [ 227.982654][T11877] xt_limit: Overflow, try lower: 604147548/4200216962 [ 227.996130][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 227.999240][T11878] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 228.151682][T11882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'. [ 228.159490][T11884] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1588'. [ 228.187499][T11882] netlink: 'syz.1.1589': attribute type 7 has an invalid length. [ 228.200349][T11882] netlink: 'syz.1.1589': attribute type 8 has an invalid length. [ 228.214694][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 228.254742][T11882] ip6gretap0: entered promiscuous mode [ 228.270783][T11882] syz_tun: entered promiscuous mode [ 228.285750][T11882] hsr0: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 228.523047][T11904] netlink: 'syz.4.1594': attribute type 10 has an invalid length. [ 228.532689][T11904] bond0: (slave ÿ): Opening slave failed [ 228.706469][ T30] audit: type=1107 audit(1758610151.219:2): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 228.745958][T11917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1598'. [ 228.762232][T11917] netlink: 'syz.1.1598': attribute type 11 has an invalid length. [ 228.790447][T11923] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 228.862184][T11923] team0: Device hsr_slave_0 failed to register rx_handler [ 228.940470][T11931] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 228.960907][T11929] openvswitch: netlink: Flow key attr not present in new flow. [ 228.963495][T11933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1605'. [ 229.109308][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1606'. [ 229.123153][T11938] tipc: Enabled bearer , priority 0 [ 229.145259][T11943] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 229.175728][T11938] syzkaller0: entered promiscuous mode [ 229.184015][T11938] syzkaller0: entered allmulticast mode [ 229.195506][T11946] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 229.331728][T11947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.459563][T11947] bond0: (slave rose0): Enslaving as an active interface with an up link [ 229.487885][T11948] tipc: Resetting bearer [ 229.516204][T11962] tipc: Enabling of bearer rejected, already enabled [ 229.536691][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.562406][T11954] 8021q: VLANs not supported on sit0 [ 229.594868][T11948] tipc: Resetting bearer [ 229.633682][T11948] tipc: Disabling bearer [ 229.666695][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.687029][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.755180][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.771949][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.783551][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.819004][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.828040][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 229.952085][T11947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 230.294078][T11998] bridge_slave_1: mtu less than device minimum [ 230.333170][T11999] bridge_slave_1: mtu less than device minimum [ 230.531665][T12010] netlink: 'syz.4.1626': attribute type 2 has an invalid length. [ 230.706278][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.724510][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.779419][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.829129][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.458020][T12071] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 231.584121][T12076] validate_nla: 3 callbacks suppressed [ 231.584139][T12076] netlink: 'syz.3.1644': attribute type 11 has an invalid length. [ 231.976252][T12091] tipc: Enabling of bearer rejected, failed to enable media [ 232.005752][T12102] tipc: Enabled bearer , priority 0 [ 232.069722][T12097] tipc: Resetting bearer [ 232.118734][T12096] tipc: Disabling bearer [ 232.220417][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.257949][T12111] __nla_validate_parse: 15 callbacks suppressed [ 232.257968][T12111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1655'. [ 232.305009][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1657'. [ 233.097985][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.116170][T12124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.245423][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.376474][T12124] vlan2: left promiscuous mode [ 233.381560][T12124] batadv0: left promiscuous mode [ 233.429078][T12124] veth5: left promiscuous mode [ 233.456643][T12124] bridge4: left promiscuous mode [ 233.468885][T12124] veth1: left promiscuous mode [ 233.479114][T12124] bond7: left promiscuous mode [ 233.486115][T12124] bond8: left promiscuous mode [ 233.494662][T12128] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 233.524217][T12144] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1660'. [ 233.647487][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.667664][T12171] ipvlan1: entered promiscuous mode [ 233.686860][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.711166][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.744785][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.920701][T12189] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 233.972511][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 234.012551][T12191] bond0: entered promiscuous mode [ 234.025319][T12191] bond_slave_0: entered promiscuous mode [ 234.033569][T12191] bond_slave_1: entered promiscuous mode [ 234.048859][T12191] bond0: left promiscuous mode [ 234.056641][T12191] bond_slave_0: left promiscuous mode [ 234.065516][T12191] bond_slave_1: left promiscuous mode [ 234.293861][T12205] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'. [ 234.625490][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1682'. [ 234.886873][T12239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 235.087940][T12253] netlink: 'syz.3.1690': attribute type 29 has an invalid length. [ 235.096628][T12253] netlink: 'syz.3.1690': attribute type 29 has an invalid length. [ 235.314293][T12267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'. [ 235.364521][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'. [ 235.543639][ T5532] veth0_vlan: left promiscuous mode [ 235.593530][ T5532] veth0_vlan: entered promiscuous mode [ 235.686773][T12281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 235.694476][T12286] netlink: 'syz.1.1699': attribute type 4 has an invalid length. [ 235.856566][T12291] tc_dump_action: action bad kind [ 235.870704][T12295] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 235.885896][T12296] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 235.897767][T12294] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 235.909760][T12296] dummy0: entered promiscuous mode [ 235.933863][T12296] bridge0: port 3(dummy0) entered blocking state [ 235.944901][T12296] bridge0: port 3(dummy0) entered disabled state [ 235.954835][T12296] dummy0: entered allmulticast mode [ 235.966314][T12296] bridge0: port 3(dummy0) entered blocking state [ 235.972868][T12296] bridge0: port 3(dummy0) entered forwarding state [ 236.036126][T12303] openvswitch: netlink: Multiple metadata blocks provided [ 236.306756][T12320] netem: change failed [ 236.508354][T12329] pim6reg: entered allmulticast mode [ 237.533181][T12406] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 237.628545][T12410] __nla_validate_parse: 8 callbacks suppressed [ 237.628564][T12410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1733'. [ 237.645830][T12409] netlink: 'syz.3.1734': attribute type 24 has an invalid length. [ 237.678264][T12417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1733'. [ 237.724091][T12416] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1736'. [ 237.847652][T12426] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 237.997674][T12416] bridge0: port 3(dummy0) entered disabled state [ 238.004337][T12416] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.012890][T12416] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.052898][T12416] batman_adv: batadv0: Interface deactivated: team0 [ 238.085442][T12416] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 238.253678][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 238.272976][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1744'. [ 238.290480][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1744'. [ 238.299742][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1744'. [ 238.313927][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 238.314205][T12444] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1741'. [ 238.326992][T12445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.352161][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1744'. [ 238.366420][T12445] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 238.376290][T12448] 0ªî{X¹¦: renamed from gretap0 [ 238.392738][T12448] 0ªî{X¹¦: entered allmulticast mode [ 238.443339][T12448] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 238.538040][T12444] 0ªî{X¹¦: entered promiscuous mode [ 238.544559][T12444] 0ªî{X¹¦: left allmulticast mode [ 238.619157][T12464] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 238.789187][T12474] raw_sendmsg: syz.1.1753 forgot to set AF_INET. Fix it! [ 238.934468][T12482] siw: device registration error -23 [ 239.010114][T12486] netlink: 'syz.0.1757': attribute type 11 has an invalid length. [ 239.034609][T12486] netlink: 'syz.0.1757': attribute type 11 has an invalid length. [ 239.108102][T12490] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 239.335986][T12502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 239.336391][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.363204][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.403293][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.420603][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.438310][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.465870][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.484873][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.511681][T12504] netlink: 'syz.0.1762': attribute type 2 has an invalid length. [ 239.606453][T12512] lo speed is unknown, defaulting to 1000 [ 240.147642][ T5873] block nbd3: Receive control failed (result -32) [ 240.452938][T12564] lo speed is unknown, defaulting to 1000 [ 240.605180][T12574] tipc: Enabled bearer , priority 0 [ 240.612818][T12574] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 240.633403][T12574] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 241.723102][ T5965] tipc: Node number set to 3453424307 [ 241.882151][T12625] team0 (unregistering): Port device team_slave_0 removed [ 241.895469][T12625] team0 (unregistering): Port device team_slave_1 removed [ 242.291566][T12686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.746088][T12718] __nla_validate_parse: 88 callbacks suppressed [ 242.746108][T12718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1815'. [ 244.034903][T12765] team0 (unregistering): Port device team_slave_0 removed [ 244.059377][T12765] team0 (unregistering): Port device dummy0 removed [ 244.134466][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1830'. [ 244.236676][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 244.255850][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'. [ 244.301605][T12780] validate_nla: 64 callbacks suppressed [ 244.301621][T12780] netlink: 'syz.0.1827': attribute type 7 has an invalid length. [ 244.446529][T12792] lo speed is unknown, defaulting to 1000 [ 244.455947][T12797] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1833'. [ 244.494231][T12796] lo speed is unknown, defaulting to 1000 [ 244.612448][T12807] tipc: Enabling of bearer rejected, already enabled [ 244.647054][T12808] tipc: Enabling of bearer rejected, already enabled [ 244.927556][T12828] netlink: 'syz.4.1842': attribute type 1 has an invalid length. [ 244.961520][T12828] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1842'. [ 245.005291][T12832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1842'. [ 245.047968][T12834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.308356][T12826] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 245.328694][T12826] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1844'. [ 245.363608][T12826] netlink: 'syz.0.1844': attribute type 1 has an invalid length. [ 245.379671][T12836] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1844'. [ 245.475098][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1850'. [ 245.979668][T12891] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 246.055671][T12900] netlink: 'syz.2.1861': attribute type 1 has an invalid length. [ 246.091445][T12900] nbd: couldn't find device at index 1048576 [ 246.277758][T12910] NCSI netlink: No device for ifindex 0 [ 246.496254][T12920] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 246.505879][T12920] netlink: 'syz.2.1868': attribute type 29 has an invalid length. [ 246.835045][T12941] tipc: Enabling of bearer rejected, already enabled [ 246.876840][T12941] tipc: Resetting bearer [ 247.322023][T12987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.669306][T13011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.360167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.460533][T13036] veth1_macvtap: left promiscuous mode [ 248.466078][T13036] macsec0: entered promiscuous mode [ 248.492325][T13036] macsec0: entered allmulticast mode [ 248.545508][T13041] veth1_macvtap: entered promiscuous mode [ 248.583522][T13041] veth1_macvtap: entered allmulticast mode [ 248.598345][T13041] macsec0: left promiscuous mode [ 248.622391][T13041] macsec0: left allmulticast mode [ 248.639354][T13041] veth1_macvtap: left allmulticast mode [ 248.660923][T13039] tipc: Enabling of bearer rejected, already enabled [ 248.934961][T13076] __nla_validate_parse: 11 callbacks suppressed [ 248.934981][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 249.019928][T13080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.292486][T13098] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1915'. [ 249.322509][T13098] gretap0: entered promiscuous mode [ 249.422603][T13099] lo speed is unknown, defaulting to 1000 [ 249.974980][T13139] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 250.128323][T13139] netlink: 'syz.0.1923': attribute type 1 has an invalid length. [ 250.174035][T13139] netlink: 'syz.0.1923': attribute type 4 has an invalid length. [ 250.190156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.247053][T13139] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1923'. [ 250.269673][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 250.301499][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 250.322862][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1925'. [ 250.333847][T13151] netlink: 'syz.4.1925': attribute type 14 has an invalid length. [ 250.342067][T13151] netlink: 'syz.4.1925': attribute type 13 has an invalid length. [ 250.482580][T13163] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1927'. [ 250.691600][T13170] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 250.740837][T13172] netlink: 'syz.4.1930': attribute type 8 has an invalid length. [ 251.095424][T13193] bond9 (unregistering): Released all slaves [ 251.349536][T13206] netlink: 'syz.4.1937': attribute type 4 has an invalid length. [ 251.549065][T13225] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1945'. [ 251.653559][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 251.687529][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1946'. [ 251.699353][T13230] netlink: 'syz.2.1946': attribute type 4 has an invalid length. [ 252.228005][T13270] team0: Mode changed to "loadbalance" [ 252.320247][T13272] sctp: [Deprecated]: syz.3.1961 (pid 13272) Use of int in maxseg socket option. [ 252.320247][T13272] Use struct sctp_assoc_value instead [ 252.476729][T13280] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 252.605785][T13290] team0: Refused to change device type [ 252.838279][T13304] veth0: entered promiscuous mode [ 252.946701][T13304] veth0: left promiscuous mode [ 252.976905][T13315] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 253.013058][T13315] pimreg: entered allmulticast mode [ 253.282119][T13337] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 253.491278][T13352] tipc: Enabling not permitted [ 253.524581][T13352] tipc: Enabling of bearer rejected, failed to enable media [ 253.776289][T13376] netlink: 'syz.2.1991': attribute type 32 has an invalid length. [ 253.785813][T13376] (unnamed net_device) (uninitialized): option coupled_control: invalid value (9) [ 254.124362][T13392] __nla_validate_parse: 13 callbacks suppressed [ 254.124383][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1997'. [ 254.175803][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1997'. [ 254.814216][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2001'. [ 255.796296][ T8244] tipc: Resetting bearer [ 255.830905][T13403] veth11: entered allmulticast mode [ 256.138823][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 256.228398][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 256.871960][T13473] netlink: 'syz.0.2020': attribute type 1 has an invalid length. [ 256.965676][T13473] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 256.978012][T13473] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 257.011553][T13478] gretap1: entered promiscuous mode [ 257.146704][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2024'. [ 257.159525][T13484] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 257.246881][T13487] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2026'. [ 257.256378][T13487] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2026'. [ 257.547400][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2032'. [ 257.696415][T13517] ÿÿÿÿÿÿ: renamed from bond_slave_0 (while UP) [ 257.976735][T13537] netlink: 'syz.1.2042': attribute type 1 has an invalid length. [ 257.978155][T13538] netlink: 'syz.1.2042': attribute type 21 has an invalid length. [ 258.047142][T13538] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2042'. [ 258.332455][T13565] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 258.453321][T13573] netlink: 'syz.3.2048': attribute type 21 has an invalid length. [ 259.157478][T13618] __nla_validate_parse: 10 callbacks suppressed [ 259.157496][T13618] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2061'. [ 259.188561][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 259.200453][T13618] nbd: must specify a size in bytes for the device [ 259.279240][T13627] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 259.359171][T13627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.481717][T13633] veth13: entered promiscuous mode [ 259.505926][T13633] bond3: (slave veth13): Enslaving as an active interface with an up link [ 259.522068][T13643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2068'. [ 259.644853][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 259.979807][T13658] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2072'. [ 260.022635][T13658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'. [ 260.069493][T13668] xt_l2tp: v2 tid > 0xffff: 1114244 [ 260.350590][T13682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.428662][T13689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2082'. [ 260.504052][T13693] nbd: must specify at least one socket [ 260.572810][T13698] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 260.974111][T13725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2090'. [ 261.037917][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 261.080604][T13733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.300525][T13733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.728249][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 261.880387][T13799] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 261.954629][T13798] delete_channel: no stack [ 262.383474][T13827] tipc: Enabled bearer , priority 0 [ 262.408865][T13827] syzkaller0: entered promiscuous mode [ 262.430164][T13827] syzkaller0: entered allmulticast mode [ 262.464747][T13827] tipc: Resetting bearer [ 262.483468][T13826] tipc: Resetting bearer [ 262.525823][T13826] tipc: Disabling bearer [ 262.743478][T13855] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 263.588821][T13896] netlink: 'syz.0.2142': attribute type 4 has an invalid length. [ 263.692141][T13896] `: renamed from bond0 (while UP) [ 263.849491][T13901] syzkaller0: create flow: hash 2910553290 index 2 [ 263.913420][T13906] netlink: 'syz.3.2146': attribute type 6 has an invalid length. [ 264.137222][ T1340] syzkaller0: tun_net_xmit 76 [ 264.143397][ T1340] syzkaller0: tun_net_xmit 48 [ 264.160790][ T5965] syzkaller0: tun_net_xmit 76 [ 264.201034][T13897] syzkaller0: delete flow: hash 2910553290 index 2 [ 264.410453][T12152] syzkaller0: tun_net_xmit 76 [ 264.789221][ T9] syzkaller0: tun_net_xmit 76 [ 265.058222][T13933] __nla_validate_parse: 8 callbacks suppressed [ 265.058245][T13933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2152'. [ 266.801281][T13958] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2157'. [ 266.933045][T13973] netlink: 'syz.3.2162': attribute type 12 has an invalid length. [ 267.000486][T13976] dvmrp0: entered allmulticast mode [ 267.050990][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 267.060140][T13978] erspan1: entered promiscuous mode [ 267.082569][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'. [ 267.229031][T13986] dvmrp0: left allmulticast mode [ 267.495890][T14020] sctp: [Deprecated]: syz.1.2169 (pid 14020) Use of int in max_burst socket option. [ 267.495890][T14020] Use struct sctp_assoc_value instead [ 267.607198][T14031] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2171'. [ 267.639042][T14031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2171'. [ 267.811725][T14040] ip6gre1: entered allmulticast mode [ 268.100724][T14047] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20000 [ 268.177307][T14052] lo speed is unknown, defaulting to 1000 [ 268.291887][T14062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2181'. [ 268.421863][T14074] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 268.434606][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 268.434606][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'. [ 268.434642][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 268.486329][T14077] netlink: 'syz.1.2185': attribute type 1 has an invalid length. [ 268.535293][T14077] nbd: couldn't find device at index 1048576 [ 268.928565][T14052] netlink: 'syz.0.2178': attribute type 13 has an invalid length. [ 268.982433][T14052] netlink: 'syz.0.2178': attribute type 17 has an invalid length. [ 269.043538][T14052] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.283499][T14123] can: request_module (can-proto-0) failed. [ 269.543134][T14135] geneve2: entered promiscuous mode [ 269.562870][T14135] geneve2: entered allmulticast mode [ 269.606072][ T1340] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.615274][ T1340] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.629306][ T1340] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.653294][T14141] openvswitch: netlink: Flow actions attr not present in new flow. [ 269.694649][ T1340] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.759437][T14145] tipc: Enabled bearer , priority 0 [ 269.840576][T14145] tipc: Disabling bearer [ 269.859838][T14153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.996465][T14162] netlink: 'syz.1.2208': attribute type 1 has an invalid length. [ 270.075092][T14168] __nla_validate_parse: 10 callbacks suppressed [ 270.075111][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'. [ 270.122078][T14162] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.133781][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 270.143113][T14171] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 270.151295][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.153034][T14162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 270.259081][T14176] netlink: 'syz.1.2212': attribute type 11 has an invalid length. [ 270.385894][T14182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2215'. [ 270.430902][ T5873] Bluetooth: hci0: command tx timeout [ 270.674421][T14198] netlink: 'syz.0.2220': attribute type 3 has an invalid length. [ 270.924397][T14217] xt_HMARK: spi-set and port-set can't be combined [ 271.006844][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2226'. [ 271.103155][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2226'. [ 271.168154][T14215] netlink: 'syz.4.2226': attribute type 13 has an invalid length. [ 271.186177][T14238] block nbd4: Unsupported socket: shutdown callout must be supported. [ 271.207005][T14215] netlink: 'syz.4.2226': attribute type 58 has an invalid length. [ 271.220446][T14215] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2226'. [ 271.405389][T14250] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2233'. [ 271.453318][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 271.464896][T14254] netlink: 'syz.2.2235': attribute type 2 has an invalid length. [ 271.486499][T14254] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.2235'. [ 271.679187][T14259] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 271.847741][T14262] syzkaller0: entered promiscuous mode [ 271.878579][T14262] syzkaller0: entered allmulticast mode [ 271.911206][T14268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 272.347229][T14292] validate_nla: 1 callbacks suppressed [ 272.347248][T14292] netlink: 'syz.1.2247': attribute type 28 has an invalid length. [ 272.388347][T14292] netlink: 'syz.1.2247': attribute type 3 has an invalid length. [ 272.781953][T14310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.206019][T14371] openvswitch: netlink: EtherType 0 is less than min 600 [ 275.235856][T14372] __nla_validate_parse: 6 callbacks suppressed [ 275.235874][T14372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2270'. [ 275.375882][T14385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2275'. [ 275.429372][T14386] sch_tbf: burst 88 is lower than device veth13 mtu (1514) ! [ 275.863969][T14409] syz_tun: entered allmulticast mode [ 275.918889][T14408] syz_tun: left allmulticast mode [ 276.032662][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 276.076692][T14416] vlan0: entered allmulticast mode [ 276.093043][T14416] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 276.117331][T14418] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.267233][T14430] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 276.303298][T14430] netlink: 'syz.4.2292': attribute type 1 has an invalid length. [ 276.566389][T14451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2297'. [ 276.727126][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'. [ 276.782573][T14468] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 276.795501][T14463] veth3: entered promiscuous mode [ 276.800923][T14463] veth3: entered allmulticast mode [ 276.821558][T14461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'. [ 276.845732][T14468] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.941302][T14468] veth15: entered promiscuous mode [ 276.974623][T14468] bond4: (slave veth15): Enslaving as an active interface with a down link [ 277.012724][T14477] tipc: Enabling of bearer rejected, already enabled [ 277.023565][T14477] sctp: [Deprecated]: syz.1.2306 (pid 14477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.023565][T14477] Use struct sctp_sack_info instead [ 277.032370][T14475] tipc: Enabling of bearer rejected, failed to enable media [ 277.049203][T14468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'. [ 277.075014][T14479] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 277.095317][T14479] bridge0: port 3(team0) entered blocking state [ 277.108712][T14479] bridge0: port 3(team0) entered disabled state [ 277.119792][T14482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 277.124627][T14479] team0: entered allmulticast mode [ 277.148283][T14479] team_slave_0: entered allmulticast mode [ 277.162427][T14479] team_slave_1: entered allmulticast mode [ 277.176216][T14479] dummy0: entered allmulticast mode [ 277.186840][T14479] team0: entered promiscuous mode [ 277.196184][T14479] team_slave_0: entered promiscuous mode [ 277.205440][T14479] team_slave_1: entered promiscuous mode [ 277.213114][T14479] dummy0: entered promiscuous mode [ 277.219390][T14479] bridge0: port 3(team0) entered blocking state [ 277.225853][T14479] bridge0: port 3(team0) entered listening state [ 277.354162][T14496] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 277.386982][T14499] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 277.644623][T14529] netlink: 'syz.3.2315': attribute type 12 has an invalid length. [ 278.048830][T14550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2322'. [ 278.065938][T14550] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2322'. [ 278.119031][T14563] netlink: 'syz.1.2325': attribute type 1 has an invalid length. [ 278.279494][T14565] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.304552][T14565] bond7: (slave bond8): making interface the new active one [ 278.323461][T14565] bond7: (slave bond8): Enslaving as an active interface with an up link [ 278.938902][T14612] netlink: 'syz.2.2336': attribute type 1 has an invalid length. [ 279.053711][T14612] 8021q: adding VLAN 0 to HW filter on device bond11 [ 279.072746][T14612] bond10: (slave bond11): making interface the new active one [ 279.101376][T14612] bond10: (slave bond11): Enslaving as an active interface with an up link [ 279.171474][T14621] bond10: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.209574][T14621] bond10: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 279.627702][T14651] sctp: [Deprecated]: syz.2.2344 (pid 14651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.627702][T14651] Use struct sctp_sack_info instead [ 280.232992][T14688] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 280.256897][T14690] syz.0.2360: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 280.277172][T14690] CPU: 1 UID: 0 PID: 14690 Comm: syz.0.2360 Not tainted syzkaller #0 PREEMPT(full) [ 280.277196][T14690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.277219][T14690] Call Trace: [ 280.277226][T14690] [ 280.277235][T14690] dump_stack_lvl+0x189/0x250 [ 280.277265][T14690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.277286][T14690] ? __pfx__printk+0x10/0x10 [ 280.277309][T14690] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 280.277332][T14690] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 280.277356][T14690] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 280.277380][T14690] warn_alloc+0x214/0x310 [ 280.277406][T14690] ? stack_depot_save_flags+0x40/0x860 [ 280.277433][T14690] ? __pfx_warn_alloc+0x10/0x10 [ 280.277460][T14690] ? kasan_save_track+0x4f/0x80 [ 280.277484][T14690] ? xskq_create+0x56/0x170 [ 280.277501][T14690] ? xsk_init_queue+0xb0/0x110 [ 280.277516][T14690] ? xsk_setsockopt+0x4dc/0x8d0 [ 280.277538][T14690] ? do_sock_setsockopt+0x17c/0x1b0 [ 280.277556][T14690] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 280.277576][T14690] ? do_syscall_64+0xfa/0x3b0 [ 280.277595][T14690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.277622][T14690] __vmalloc_node_range_noprof+0x125/0x12f0 [ 280.277678][T14690] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.277708][T14690] ? __kasan_kmalloc+0x93/0xb0 [ 280.277731][T14690] vmalloc_user_noprof+0xad/0xf0 [ 280.277753][T14690] ? xskq_create+0xbf/0x170 [ 280.277771][T14690] xskq_create+0xbf/0x170 [ 280.277793][T14690] xsk_init_queue+0xb0/0x110 [ 280.277814][T14690] xsk_setsockopt+0x4dc/0x8d0 [ 280.277840][T14690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.277865][T14690] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.277895][T14690] ? aa_sock_opt_perm+0xff/0x1b0 [ 280.277917][T14690] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 280.277936][T14690] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.277971][T14690] do_sock_setsockopt+0x17c/0x1b0 [ 280.277999][T14690] __x64_sys_setsockopt+0x13f/0x1b0 [ 280.278027][T14690] do_syscall_64+0xfa/0x3b0 [ 280.278046][T14690] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.278064][T14690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.278082][T14690] ? clear_bhb_loop+0x60/0xb0 [ 280.278104][T14690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.278122][T14690] RIP: 0033:0x7f32e118eec9 [ 280.278140][T14690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.278156][T14690] RSP: 002b:00007f32e2037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.278175][T14690] RAX: ffffffffffffffda RBX: 00007f32e13e5fa0 RCX: 00007f32e118eec9 [ 280.278189][T14690] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 280.278201][T14690] RBP: 00007f32e1211f91 R08: 0000000000000004 R09: 0000000000000000 [ 280.278213][T14690] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.278226][T14690] R13: 00007f32e13e6038 R14: 00007f32e13e5fa0 R15: 00007ffde11c1b98 [ 280.278257][T14690] [ 280.278574][T14690] Mem-Info: [ 280.316021][T14699] __nla_validate_parse: 7 callbacks suppressed [ 280.316039][T14699] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2360'. [ 280.323964][T14700] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2359'. [ 280.337198][T14690] active_anon:6306 inactive_anon:0 isolated_anon:0 [ 280.337198][T14690] active_file:2629 inactive_file:39945 isolated_file:0 [ 280.337198][T14690] unevictable:768 dirty:93 writeback:0 [ 280.337198][T14690] slab_reclaimable:11587 slab_unreclaimable:128973 [ 280.337198][T14690] mapped:29186 shmem:1370 pagetables:1524 [ 280.337198][T14690] sec_pagetables:0 bounce:0 [ 280.337198][T14690] kernel_misc_reclaimable:0 [ 280.337198][T14690] free:1293630 free_pcp:14449 free_cma:0 [ 280.343870][T14692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2359'. [ 280.347792][T14690] Node 0 active_anon:25224kB inactive_anon:0kB active_file:10516kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116744kB dirty:372kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14356kB pagetables:5956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.701462][T14690] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 280.703062][T14698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2358'. [ 280.733599][T14690] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.790042][T14690] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 280.795966][T14690] Node 0 DMA32 free:1272168kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25276kB inactive_anon:0kB active_file:10516kB inactive_file:158004kB unevictable:1536kB writepending:372kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:39196kB local_pcp:19604kB free_cma:0kB [ 280.840708][T14709] vlan4: entered allmulticast mode [ 280.845943][T14709] hsr0: entered allmulticast mode [ 280.851759][T14709] hsr_slave_0: entered allmulticast mode [ 280.862172][T14690] lowmem_reserve[]: 0 0 1 1 1 [ 280.863387][T14709] hsr_slave_1: entered allmulticast mode [ 280.867176][T14690] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 280.907492][T14690] lowmem_reserve[]: 0 0 0 0 0 [ 280.913120][T14690] Node 1 Normal free:3886340kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18496kB local_pcp:6912kB free_cma:0kB [ 280.946047][T14690] lowmem_reserve[]: 0 0 0 0 0 [ 280.950986][T14690] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.964486][T14690] Node 0 DMA32: 1086*4kB (UM) 1330*8kB (UME) 1368*16kB (UME) 633*32kB (UM) 833*64kB (UME) 568*128kB (UME) 434*256kB (UM) 269*512kB (UM) 118*1024kB (UM) 7*2048kB (UME) 172*4096kB (UM) = 1271656kB [ 280.984918][T14690] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 281.002045][T14690] Node 1 Normal: 203*4kB (UE) 49*8kB (UME) 43*16kB (UME) 65*32kB (UME) 18*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886340kB [ 281.021145][T14690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.035853][T14690] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.045668][T14690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.057357][T14690] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.067473][T14690] 43940 total pagecache pages [ 281.073020][T14690] 0 pages in swap cache [ 281.097095][T14690] Free swap = 124996kB [ 281.104321][T14690] Total swap = 124996kB [ 281.108642][T14690] 2097051 pages RAM [ 281.113742][T14690] 0 pages HighMem/MovableOnly [ 281.118534][T14690] 425672 pages reserved [ 281.135011][T14719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2365'. [ 281.165363][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2365'. [ 281.189780][T14690] 0 pages cma reserved [ 281.298545][T14726] netlink: 'syz.0.2369': attribute type 11 has an invalid length. [ 281.324273][T14726] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2369'. [ 281.435191][T14740] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2372'. [ 281.497901][T14744] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 281.505972][T14744] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 281.516889][T14744] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2374'. [ 281.540619][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2374'. [ 281.544289][T14747] netlink: 'syz.0.2373': attribute type 11 has an invalid length. [ 281.561896][T14744] bridge_slave_1: left allmulticast mode [ 281.567565][T14744] bridge_slave_1: left promiscuous mode [ 281.577765][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.614357][T14744] bridge_slave_0: left allmulticast mode [ 281.633216][T14744] bridge_slave_0: left promiscuous mode [ 281.639207][T14744] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.161969][T14776] IPv6: sit1: Disabled Multicast RS [ 282.408159][T14787] : renamed from veth1 (while UP) [ 282.604904][T14802] netlink: 'syz.2.2390': attribute type 23 has an invalid length. [ 284.136217][T14857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.423761][T14857] veth7: left promiscuous mode [ 284.456106][T14857] veth13: left promiscuous mode [ 284.477155][T14857] veth15: left promiscuous mode [ 284.492379][T14861] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 284.515679][T14515] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.560617][T14861] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 284.571838][T14515] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.600228][T14861] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 284.609133][T14515] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.625123][T14517] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.849719][T14900] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 284.902749][T14905] netlink: zone id is out of range [ 285.046186][T14916] tipc: Enabling of bearer rejected, already enabled [ 285.164284][T14923] netlink: 'syz.2.2419': attribute type 10 has an invalid length. [ 285.806248][T14954] IPVS: length: 162 != 24 [ 285.832352][T14965] __nla_validate_parse: 11 callbacks suppressed [ 285.832372][T14965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 285.896754][T14974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 285.935565][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 286.144912][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 286.351519][T14992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.557704][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 286.586251][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 286.996337][T15035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2444'. [ 287.168200][T15047] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2447'. [ 287.210527][T15050] gre0: entered promiscuous mode [ 287.329364][T15049] syzkaller1: entered promiscuous mode [ 287.340996][T15049] syzkaller1: entered allmulticast mode [ 287.410986][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2451'. [ 287.455326][T15057] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 287.480636][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.550803][T15063] netlink: set zone limit has 8 unknown bytes [ 287.762254][T15077] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2459'. [ 287.786697][T15079] netlink: 'syz.0.2458': attribute type 21 has an invalid length. [ 288.795359][T15158] netlink: 'syz.3.2481': attribute type 7 has an invalid length. [ 288.827382][T15158] netlink: 'syz.3.2481': attribute type 8 has an invalid length. [ 289.015696][T15165] netlink: 'syz.1.2484': attribute type 1 has an invalid length. [ 289.041187][T15165] 8021q: adding VLAN 0 to HW filter on device bond10 [ 289.062798][T15165] veth5: entered promiscuous mode [ 289.073673][T15165] bond10: (slave veth5): Enslaving as an active interface with a down link [ 289.140943][T15178] netlink: 'syz.0.2487': attribute type 7 has an invalid length. [ 289.742165][T15212] netlink: 'syz.3.2493': attribute type 8 has an invalid length. [ 289.995389][T15227] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 290.035640][T15227] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 290.056777][T15232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.367255][T15247] netlink: 'syz.1.2503': attribute type 3 has an invalid length. [ 290.379369][T15249] netlink: 'syz.0.2502': attribute type 7 has an invalid length. [ 290.416291][T15253] unsupported nlmsg_type 40 [ 290.705492][T15272] netlink: 'syz.4.2507': attribute type 3 has an invalid length. [ 290.729820][T15270] netlink: 'syz.0.2508': attribute type 30 has an invalid length. [ 290.748567][T15270] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 290.779227][T15270] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 290.905254][T15274] __nla_validate_parse: 8 callbacks suppressed [ 290.905273][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 291.117906][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2511'. [ 291.258474][T15288] bridge8: port 1(veth5) entered blocking state [ 291.271069][T15288] bridge8: port 1(veth5) entered disabled state [ 291.281739][T15288] veth5: entered allmulticast mode [ 291.293923][T15288] veth5: entered promiscuous mode [ 291.333172][T15285] bridge8: port 2(veth7) entered blocking state [ 291.339693][T15285] bridge8: port 2(veth7) entered disabled state [ 291.347534][T15285] veth7: entered allmulticast mode [ 291.364938][T15285] veth7: entered promiscuous mode [ 291.407467][T15299] netlink: 'syz.1.2515': attribute type 1 has an invalid length. [ 291.615761][T15296] lo speed is unknown, defaulting to 1000 [ 291.782296][T15291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2514'. [ 291.834393][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 291.850244][T15291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2514'. [ 291.887992][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 291.903313][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 291.977053][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 291.987176][T15319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'. [ 292.201555][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 292.290997][T15332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 292.430918][ C0] bridge0: port 3(team0) entered learning state [ 292.702466][T15361] netlink: 'syz.1.2531': attribute type 2 has an invalid length. [ 294.030718][T15436] pim6reg: entered allmulticast mode [ 294.056113][T15436] pim6reg: left allmulticast mode [ 294.237758][T15446] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 294.253638][T15446] openvswitch: netlink: Duplicate key (type 0). [ 294.285643][T15447] vlan3: entered promiscuous mode [ 294.292844][T15447] vlan3: entered allmulticast mode [ 294.298087][T15447] hsr_slave_1: entered allmulticast mode [ 294.317669][T15450] syz.0.2557: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.337405][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.0.2557 Not tainted syzkaller #0 PREEMPT(full) [ 294.337428][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.337439][T15450] Call Trace: [ 294.337446][T15450] [ 294.337455][T15450] dump_stack_lvl+0x189/0x250 [ 294.337482][T15450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.337503][T15450] ? __pfx__printk+0x10/0x10 [ 294.337525][T15450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.337545][T15450] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.337567][T15450] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 294.337590][T15450] warn_alloc+0x214/0x310 [ 294.337614][T15450] ? stack_depot_save_flags+0x40/0x860 [ 294.337638][T15450] ? __pfx_warn_alloc+0x10/0x10 [ 294.337662][T15450] ? kasan_save_track+0x4f/0x80 [ 294.337680][T15450] ? xskq_create+0x56/0x170 [ 294.337695][T15450] ? xsk_init_queue+0xb0/0x110 [ 294.337707][T15450] ? xsk_setsockopt+0x4dc/0x8d0 [ 294.337726][T15450] ? do_sock_setsockopt+0x17c/0x1b0 [ 294.337742][T15450] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 294.337757][T15450] ? do_syscall_64+0xfa/0x3b0 [ 294.337771][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.337793][T15450] __vmalloc_node_range_noprof+0x125/0x12f0 [ 294.337843][T15450] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.337871][T15450] ? __kasan_kmalloc+0x93/0xb0 [ 294.337893][T15450] vmalloc_user_noprof+0xad/0xf0 [ 294.337914][T15450] ? xskq_create+0xbf/0x170 [ 294.337931][T15450] xskq_create+0xbf/0x170 [ 294.337948][T15450] xsk_init_queue+0xb0/0x110 [ 294.337967][T15450] xsk_setsockopt+0x4dc/0x8d0 [ 294.337993][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.338016][T15450] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.338041][T15450] ? aa_sock_opt_perm+0xff/0x1b0 [ 294.338060][T15450] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 294.338078][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.338109][T15450] do_sock_setsockopt+0x17c/0x1b0 [ 294.338134][T15450] __x64_sys_setsockopt+0x13f/0x1b0 [ 294.338161][T15450] do_syscall_64+0xfa/0x3b0 [ 294.338178][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.338195][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.338212][T15450] ? clear_bhb_loop+0x60/0xb0 [ 294.338234][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.338250][T15450] RIP: 0033:0x7f32e118eec9 [ 294.338266][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.338280][T15450] RSP: 002b:00007f32e2037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.338299][T15450] RAX: ffffffffffffffda RBX: 00007f32e13e5fa0 RCX: 00007f32e118eec9 [ 294.338312][T15450] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 294.338323][T15450] RBP: 00007f32e1211f91 R08: 0000000000000004 R09: 0000000000000000 [ 294.338334][T15450] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.338345][T15450] R13: 00007f32e13e6038 R14: 00007f32e13e5fa0 R15: 00007ffde11c1b98 [ 294.338375][T15450] [ 294.635572][T15450] Mem-Info: [ 294.638711][T15450] active_anon:6365 inactive_anon:0 isolated_anon:0 [ 294.638711][T15450] active_file:2629 inactive_file:39951 isolated_file:0 [ 294.638711][T15450] unevictable:768 dirty:46 writeback:0 [ 294.638711][T15450] slab_reclaimable:11837 slab_unreclaimable:128303 [ 294.638711][T15450] mapped:29233 shmem:1372 pagetables:1507 [ 294.638711][T15450] sec_pagetables:0 bounce:0 [ 294.638711][T15450] kernel_misc_reclaimable:0 [ 294.638711][T15450] free:1290445 free_pcp:15553 free_cma:0 [ 294.685512][T15450] Node 0 active_anon:25460kB inactive_anon:0kB active_file:10516kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116932kB dirty:184kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14452kB pagetables:5988kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.717899][T15450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.749575][T15450] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.779673][T15450] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 294.785990][T15450] Node 0 DMA32 free:1273364kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25312kB inactive_anon:0kB active_file:10516kB inactive_file:158028kB unevictable:1536kB writepending:184kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:38408kB local_pcp:21368kB free_cma:0kB [ 294.818944][T15450] lowmem_reserve[]: 0 0 1 1 1 [ 294.823764][T15450] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 294.853858][T15450] lowmem_reserve[]: 0 0 0 0 0 [ 294.858983][T15450] Node 1 Normal free:3886340kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18560kB local_pcp:6912kB free_cma:0kB [ 294.890742][T15450] lowmem_reserve[]: 0 0 0 0 0 [ 294.895479][T15450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 294.908349][T15450] Node 0 DMA32: 923*4kB (UM) 1287*8kB (UM) 1535*16kB (UME) 814*32kB (UM) 845*64kB (UM) 551*128kB (UM) 427*256kB (UME) 264*512kB (UE) 116*1024kB (UE) 6*2048kB (UM) 173*4096kB (UM) = 1273364kB [ 294.928362][T15450] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 294.940794][T15450] Node 1 Normal: 203*4kB (UE) 49*8kB (UME) 43*16kB (UME) 65*32kB (UME) 18*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886340kB [ 294.961035][T15450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.970777][T15450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.033087][T15450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.084273][T15450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.108355][T15450] 43973 total pagecache pages [ 295.159219][T15450] 0 pages in swap cache [ 295.170067][T15450] Free swap = 124996kB [ 295.174257][T15450] Total swap = 124996kB [ 295.178417][T15450] 2097051 pages RAM [ 295.213449][T15450] 0 pages HighMem/MovableOnly [ 295.218698][T15450] 425672 pages reserved [ 295.227498][T15450] 0 pages cma reserved [ 295.367724][T15476] bond9: entered allmulticast mode [ 295.376313][T15476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.403180][T15476] bridge0: port 3(bond9) entered blocking state [ 295.434568][T15476] bridge0: port 3(bond9) entered disabled state [ 295.475800][T15476] bond9: entered promiscuous mode [ 295.725029][T15522] netlink: zone id is out of range [ 295.734934][T15522] netlink: zone id is out of range [ 295.776395][T15522] netlink: zone id is out of range [ 295.799983][T15522] netlink: zone id is out of range [ 295.809596][T15522] netlink: zone id is out of range [ 295.849076][T15522] netlink: get zone limit has 8 unknown bytes [ 296.046750][T15542] sctp: [Deprecated]: syz.1.2579 (pid 15542) Use of int in max_burst socket option deprecated. [ 296.046750][T15542] Use struct sctp_assoc_value instead [ 296.081818][T15546] __nla_validate_parse: 9 callbacks suppressed [ 296.081837][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 296.605558][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 296.616098][T15583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2588'. [ 296.817063][T15603] netlink: 212316 bytes leftover after parsing attributes in process `syz.4.2593'. [ 296.821339][T15594] syzkaller1: entered promiscuous mode [ 296.834740][T15594] syzkaller1: entered allmulticast mode [ 296.848366][T15595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 296.856674][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 297.058361][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 297.136770][T15606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 297.424504][T15639] netlink: 'syz.4.2601': attribute type 11 has an invalid length. [ 297.471953][T15643] netlink: 'syz.1.2602': attribute type 12 has an invalid length. [ 297.480304][T15643] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 297.504299][T15646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.577552][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2604'. [ 297.614398][T15646] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 297.718820][T15656] netlink: 'syz.0.2608': attribute type 12 has an invalid length. [ 297.748312][T15656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2608'. [ 299.232941][T15729] netlink: 'syz.1.2625': attribute type 4 has an invalid length. [ 299.455273][T15741] tipc: Enabled bearer , priority 0 [ 299.463893][T15741] syzkaller0: entered promiscuous mode [ 299.476801][T15741] syzkaller0: entered allmulticast mode [ 299.548490][T15741] tipc: Resetting bearer [ 299.578018][T15740] tipc: Resetting bearer [ 299.609105][T15740] tipc: Disabling bearer [ 299.852155][T12153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.953990][T15764] netlink: 'syz.2.2635': attribute type 9 has an invalid length. [ 299.973300][T15764] netlink: 'syz.2.2635': attribute type 9 has an invalid length. [ 300.041419][T15764] tipc: Enabled bearer , priority 0 [ 300.049025][T15764] syzkaller0: entered promiscuous mode [ 300.058356][T15764] syzkaller0: entered allmulticast mode [ 300.067796][T15764] netlink: 'syz.2.2635': attribute type 1 has an invalid length. [ 300.223032][T15767] tipc: Resetting bearer [ 300.261498][T15763] tipc: Resetting bearer [ 300.334329][T15763] tipc: Disabling bearer [ 300.513060][T12154] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.568006][T15802] netlink: 'syz.0.2642': attribute type 7 has an invalid length. [ 300.607207][T15802] netlink: 'syz.0.2642': attribute type 8 has an invalid length. [ 301.248662][T15840] __nla_validate_parse: 12 callbacks suppressed [ 301.248682][T15840] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2656'. [ 301.676336][T15863] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 301.695489][T15863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2662'. [ 301.754056][T15865] netlink: 'syz.0.2663': attribute type 10 has an invalid length. [ 301.904901][T15880] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2667'. [ 301.945376][T15880] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2667'. [ 302.255874][T15904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2673'. [ 302.313108][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2675'. [ 302.348596][T15906] macvtap1: entered promiscuous mode [ 302.367485][T15906] vlan0: entered promiscuous mode [ 302.375709][T15906] macvtap1: entered allmulticast mode [ 302.382023][T15906] vlan0: entered allmulticast mode [ 302.394194][T15906] veth0_vlan: entered allmulticast mode [ 302.444771][T15911] macvtap2: entered promiscuous mode [ 302.457799][T15911] macvtap2: entered allmulticast mode [ 302.686408][T15926] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 302.736450][T15926] netlink: 'syz.3.2681': attribute type 4 has an invalid length. [ 302.863238][T15942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2685'. [ 302.874404][T15926] tipc: Enabled bearer , priority 0 [ 302.884375][T15926] syzkaller0: entered promiscuous mode [ 302.890672][T15926] syzkaller0: entered allmulticast mode [ 302.936292][T15926] tipc: Resetting bearer [ 302.972615][T15925] tipc: Resetting bearer [ 303.090541][T15925] tipc: Disabling bearer [ 303.120129][T15959] tipc: Enabling of bearer rejected, failed to enable media [ 303.472318][T15980] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 303.501604][T15978] lo speed is unknown, defaulting to 1000 [ 303.504406][T15988] : renamed from hsr0 [ 303.531303][T15988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2698'. [ 303.745742][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 303.761150][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2702'. [ 303.819537][T16003] netlink: 'syz.0.2702': attribute type 5 has an invalid length. [ 303.863643][T16009] Unsupported ieee802154 address type: 0 [ 304.500325][T16050] tipc: Enabling not permitted [ 304.505939][T16050] tipc: Enabling of bearer rejected, failed to enable media [ 304.581515][T12153] lo speed is unknown, defaulting to 1000 [ 304.607367][T12153] syz2: Port: 1 Link DOWN [ 304.953402][T16073] tipc: Enabled bearer , priority 0 [ 304.980742][T16073] syzkaller0: entered promiscuous mode [ 304.999036][T16073] syzkaller0: entered allmulticast mode [ 305.032290][T16073] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 305.115161][T16073] tipc: Resetting bearer [ 305.131761][T16072] tipc: Resetting bearer [ 305.243056][T16072] tipc: Disabling bearer [ 305.797162][T16141] tipc: Enabled bearer , priority 0 [ 305.808910][T16141] syzkaller0: entered promiscuous mode [ 305.837521][T16141] syzkaller0: entered allmulticast mode [ 305.862338][T16141] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 305.962015][T16132] tipc: Resetting bearer [ 305.993383][T16131] tipc: Resetting bearer [ 306.030604][T16131] tipc: Disabling bearer [ 306.045142][T16148] netlink: 'syz.1.2745': attribute type 1 has an invalid length. [ 306.181273][T16160] syzkaller1: entered promiscuous mode [ 306.187117][T16160] syzkaller1: entered allmulticast mode [ 306.478516][T16162] bond0 (unregistering): Released all slaves [ 306.637304][T16181] __nla_validate_parse: 12 callbacks suppressed [ 306.637324][T16181] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2755'. [ 306.755640][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 306.772658][T16189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2758'. [ 306.806830][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 306.815845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805761a400: rx timeout, send abort [ 306.825117][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805761a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 307.063039][T16210] netlink: 'syz.2.2764': attribute type 11 has an invalid length. [ 307.092697][T16210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2764'. [ 307.184353][T16217] netlink: 'syz.0.2767': attribute type 1 has an invalid length. [ 307.257199][T16217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.318016][T16224] bond0: (slave gretap1): making interface the new active one [ 307.327728][T16227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2768'. [ 307.328044][T16224] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 307.351716][T16222] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2768'. [ 307.402831][T16236] IPVS: set_ctl: invalid protocol: 41 10.1.1.1:20001 [ 307.790086][ C0] bridge0: port 3(team0) entered forwarding state [ 307.796555][ C0] bridge0: topology change detected, propagating [ 307.832162][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2776'. [ 308.207801][T16287] veth0: entered promiscuous mode [ 308.226957][T16286] veth0: left promiscuous mode [ 308.435216][T16301] syzkaller1: left promiscuous mode [ 308.447955][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2786'. [ 308.458241][T16301] syzkaller1: left allmulticast mode [ 308.611137][T16316] netlink: 'syz.3.2787': attribute type 11 has an invalid length. [ 308.981717][T16335] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2791'. [ 309.418618][T16352] sctp: [Deprecated]: syz.1.2795 (pid 16352) Use of int in max_burst socket option. [ 309.418618][T16352] Use struct sctp_assoc_value instead [ 309.555770][T16357] bridge0: port 3(team0) entered disabled state [ 309.577941][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.623349][T16357] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.668233][T16357] tipc: Resetting bearer [ 309.675206][T16357] tipc: Resetting bearer [ 309.999533][T16379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.145141][T16387] veth18: entered allmulticast mode [ 310.163813][T16393] netlink: 'syz.3.2808': attribute type 10 has an invalid length. [ 310.166619][T16387] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 310.194385][T16393] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 310.875961][T16446] : entered promiscuous mode [ 311.093668][T16465] veth0_to_team: entered promiscuous mode [ 311.120364][T16465] veth0_to_team: entered allmulticast mode [ 311.126780][T16466] 8021q: VLANs not supported on wg0 [ 311.135068][T16465] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 311.266137][T16470] netlink: 'syz.4.2826': attribute type 29 has an invalid length. [ 311.284164][T16470] netlink: 'syz.4.2826': attribute type 29 has an invalid length. [ 311.456905][T16483] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 311.554512][T16491] netlink: 'syz.1.2832': attribute type 1 has an invalid length. [ 312.263742][T16540] __nla_validate_parse: 9 callbacks suppressed [ 312.263770][T16540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2847'. [ 312.793441][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2855'. [ 313.025325][T16588] netlink: 'syz.3.2858': attribute type 7 has an invalid length. [ 313.059712][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2858'. [ 313.182043][T16600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2859'. [ 313.690938][T16595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.718559][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 313.811345][T16582] lec:lec_atm_close: lec0: Shut down! [ 314.566569][T16670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 314.913118][T16691] netlink: 'syz.1.2881': attribute type 11 has an invalid length. [ 314.940734][T16692] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2880'. [ 315.324871][T16712] syzkaller1: entered promiscuous mode [ 315.360923][T16712] syzkaller1: entered allmulticast mode [ 315.387892][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2887'. [ 315.526285][T16729] netlink: 'syz.1.2890': attribute type 1 has an invalid length. [ 315.537559][T16729] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2890'. [ 315.548317][T16731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2889'. [ 316.036046][T16759] netlink: 'syz.2.2899': attribute type 15 has an invalid length. [ 316.469519][T16778] netlink: 'syz.2.2904': attribute type 1 has an invalid length. [ 316.696539][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.706233][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.715451][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.727268][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.739316][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.767796][ T5873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.783367][ T5873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.792089][ T5873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.809237][ T5873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.825374][ T5873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.927265][T16786] lo speed is unknown, defaulting to 1000 [ 317.018906][T16798] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 317.054492][T12151] lec:lec_start_xmit: lec0:No lecd attached [ 317.094578][T16798] gretap0: entered promiscuous mode [ 317.129368][T16798] 0ªî{X¹¦: renamed from gretap0 [ 317.178148][T16798] 0ªî{X¹¦: left promiscuous mode [ 317.202474][T16798] 0ªî{X¹¦: entered allmulticast mode [ 317.225413][T16798] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 317.390118][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.423578][ T1303] clip:clip_start_xmit: skb_dst(skb) == NULL [ 317.755818][T16786] chnl_net:caif_netlink_parms(): no params data found [ 317.906914][T16840] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 317.967912][T16840] __nla_validate_parse: 8 callbacks suppressed [ 317.967929][T16840] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2920'. [ 318.118009][T16786] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.125563][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.134229][T16786] bridge_slave_0: entered allmulticast mode [ 318.151838][T16786] bridge_slave_0: entered promiscuous mode [ 318.218466][T16786] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.228476][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.246599][T16786] bridge_slave_1: entered allmulticast mode [ 318.262545][T16786] bridge_slave_1: entered promiscuous mode [ 318.391510][T16786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.444454][T16786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.617535][T16786] team0: Port device team_slave_0 added [ 318.636872][T16786] team0: Port device team_slave_1 added [ 318.768324][T16885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2930'. [ 318.769400][T16786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.801749][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.854546][T16786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.900807][T16899] tipc: Enabling of bearer rejected, failed to enable media [ 318.914625][ T5873] Bluetooth: hci4: command tx timeout [ 318.942921][T16786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.967438][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.995305][T16786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.092981][T16910] netlink: 'syz.4.2934': attribute type 11 has an invalid length. [ 319.174499][T16786] hsr_slave_0: entered promiscuous mode [ 319.195731][T16786] hsr_slave_1: entered promiscuous mode [ 319.212223][T16786] debugfs: 'hsr0' already exists in 'hsr' [ 319.222451][T16786] Cannot create hsr debugfs directory [ 319.337205][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.362461][T16919] netlink: 'syz.0.2940': attribute type 1 has an invalid length. [ 319.411174][T16921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 319.604217][T16786] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.738741][T16786] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.803652][T16943] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2948'. [ 319.820956][T16943] tipc: Enabling of bearer rejected, already enabled [ 319.878045][T16786] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.063344][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 320.128053][T16786] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.296760][T16964] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 320.622100][T16978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 320.633307][T16786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 320.711826][T16786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.756539][T16786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.778186][T16786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.990980][ T5873] Bluetooth: hci4: command tx timeout [ 321.146204][T17008] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20004 [ 321.252993][T16786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.324001][T16786] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.346075][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 321.364300][T14515] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.371514][T14515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.485934][T17026] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2967'. [ 321.548906][T14515] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.556231][T14515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.609642][T17018] netem: change failed [ 321.705980][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'. [ 321.748113][T17035] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 321.783534][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2973'. [ 321.807436][T17038] netlink: 'syz.2.2973': attribute type 12 has an invalid length. [ 321.807679][T17042] tipc: Enabling of bearer rejected, already enabled [ 321.828744][T17038] netlink: 'syz.2.2973': attribute type 11 has an invalid length. [ 321.996704][T17059] syzkaller1: entered promiscuous mode [ 322.016357][T17059] syzkaller1: entered allmulticast mode [ 322.300935][T17079] tipc: Enabled bearer , priority 0 [ 322.324847][T17079] syzkaller0: entered promiscuous mode [ 322.345884][T17079] syzkaller0: entered allmulticast mode [ 322.510654][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 322.519104][ C1] lec:lec_tx_timeout: lec0 [ 322.523937][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.525857][T17089] tipc: Resetting bearer [ 322.612181][T17077] tipc: Resetting bearer [ 322.707797][T17077] tipc: Disabling bearer [ 322.784931][T16786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.914645][T17111] team1: entered promiscuous mode [ 322.921339][T17111] team1: entered allmulticast mode [ 323.055258][T17122] openvswitch: netlink: Key type 16144 is out of range max 32 [ 323.070649][ T5873] Bluetooth: hci4: command tx timeout [ 323.154640][T17116] tipc: Enabling of bearer rejected, failed to enable media [ 323.217744][T16786] veth0_vlan: entered promiscuous mode [ 323.295298][T16786] veth1_vlan: entered promiscuous mode [ 323.417497][T17135] __nla_validate_parse: 3 callbacks suppressed [ 323.417518][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 323.429199][T16786] veth0_macvtap: entered promiscuous mode [ 323.543092][T16786] veth1_macvtap: entered promiscuous mode [ 323.629579][T16786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.667847][T16786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.717660][T17151] netlink: 'syz.0.3001': attribute type 11 has an invalid length. [ 323.743785][T17151] netlink: 'syz.0.3001': attribute type 11 has an invalid length. [ 323.747211][T14513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.759486][T17151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3001'. [ 323.833559][T14513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.855560][T17151] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3001'. [ 323.872940][T14513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.883418][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 323.894795][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 323.904707][T14513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.166887][T14513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.195815][T14513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.253912][T17170] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3004'. [ 324.277145][T17170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'. [ 324.302486][T14515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.331395][T17170] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3004'. [ 324.332313][T14515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.363490][T17170] netlink: 'syz.0.3004': attribute type 2 has an invalid length. [ 324.414096][T17170] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3004'. [ 324.544298][T17183] netlink: 'syz.1.3007': attribute type 3 has an invalid length. [ 325.150694][ T5873] Bluetooth: hci4: command tx timeout [ 325.723780][T17230] vlan2: entered promiscuous mode [ 325.758213][T17230] hsr_slave_1: entered promiscuous mode [ 325.770328][T17230] vlan2: entered allmulticast mode [ 325.775481][T17230] hsr_slave_1: entered allmulticast mode [ 325.783902][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.802140][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.815204][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.840542][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.851066][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.959267][T17233] lo speed is unknown, defaulting to 1000 [ 326.121348][T17245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3023'. [ 326.691792][T17233] chnl_net:caif_netlink_parms(): no params data found [ 327.192135][T17233] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.217721][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.250621][T17233] bridge_slave_0: entered allmulticast mode [ 327.281775][T17233] bridge_slave_0: entered promiscuous mode [ 327.298771][T17233] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.309190][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.350361][T17233] bridge_slave_1: entered allmulticast mode [ 327.362710][T17233] bridge_slave_1: entered promiscuous mode [ 327.413949][T17315] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 327.507224][T17233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.538143][T17233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.628807][T17327] tls_set_device_offload_rx: netdev not found [ 327.663963][T17233] team0: Port device team_slave_0 added [ 327.693579][T17233] team0: Port device team_slave_1 added [ 327.822349][T17233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.829343][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.869150][T17233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.943755][T17351] bond0: entered allmulticast mode [ 327.948927][T17351] bond_slave_0: entered allmulticast mode [ 327.955754][ T5873] Bluetooth: hci3: command tx timeout [ 327.963480][T17351] bond_slave_1: entered allmulticast mode [ 327.989135][T17233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.007416][T17233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.045641][T17233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.161473][T17356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.268628][T17233] hsr_slave_0: entered promiscuous mode [ 328.274331][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 328.274416][ C1] lec:lec_tx_timeout: lec0 [ 328.285651][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.308447][T17233] hsr_slave_1: entered promiscuous mode [ 328.316332][T17233] debugfs: 'hsr0' already exists in 'hsr' [ 328.327445][T17233] Cannot create hsr debugfs directory [ 328.445369][T17379] __nla_validate_parse: 4 callbacks suppressed [ 328.445387][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'. [ 329.183399][T17233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.199224][T17233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.292346][T17233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.364179][T17233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.444703][T17412] netlink: 'syz.3.3070': attribute type 1 has an invalid length. [ 329.481192][T17416] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 329.773519][T17233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.833158][T17441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3077'. [ 329.846926][T17233] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.904611][T14511] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.911845][T14511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.959218][T14511] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.966550][T14511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.030187][ T5873] Bluetooth: hci3: command tx timeout [ 330.103334][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3082'. [ 330.177971][T17233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.358481][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3086'. [ 330.371655][T17473] netlink: 'syz.3.3085': attribute type 21 has an invalid length. [ 330.398092][T17473] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.429556][T17473] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.436891][T17473] IPv6: NLM_F_CREATE should be set when creating new route [ 330.444219][T17473] IPv6: NLM_F_CREATE should be set when creating new route [ 330.451509][T17473] IPv6: NLM_F_CREATE should be set when creating new route [ 330.515887][T17478] bridge4: port 1(veth7) entered blocking state [ 330.533118][T17478] bridge4: port 1(veth7) entered disabled state [ 330.539681][T17478] veth7: entered allmulticast mode [ 330.571543][T17478] veth7: entered promiscuous mode [ 330.624176][T17487] netlink: 'syz.3.3088': attribute type 12 has an invalid length. [ 330.645578][T17487] netlink: 'syz.3.3088': attribute type 12 has an invalid length. [ 330.953776][T17233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.243876][T17524] ipvlan2: entered promiscuous mode [ 331.760643][T17552] team0: Device gtp0 is of different type [ 332.055105][T17233] veth0_vlan: entered promiscuous mode [ 332.095611][T17233] veth1_vlan: entered promiscuous mode [ 332.110756][ T5873] Bluetooth: hci3: command tx timeout [ 332.176195][T17567] tipc: Enabling of bearer rejected, already enabled [ 332.205294][T17569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.219784][T17233] veth0_macvtap: entered promiscuous mode [ 332.251419][T17233] veth1_macvtap: entered promiscuous mode [ 332.347665][T17233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.404069][T17233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.453425][T14514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.469688][T14514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.499001][T14514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.545622][T14514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.581316][T17587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'. [ 332.633132][T17590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3107'. [ 332.843027][T17594] siw: device registration error -23 [ 332.901586][T17594] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3111'. [ 332.963370][T14517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.979519][T14517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.035455][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 333.053919][T17600] netlink: 'syz.3.3114': attribute type 22 has an invalid length. [ 333.062380][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 333.077552][T17603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3114'. [ 333.098069][T17603] netlink: 'syz.3.3114': attribute type 22 has an invalid length. [ 333.145632][T14510] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.155518][T14510] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.167237][T14510] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.239064][T17599] netlink: 'syz.2.3113': attribute type 11 has an invalid length. [ 333.252685][T14517] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.289949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.297982][ C1] lec:lec_tx_timeout: lec0 [ 333.302834][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.331249][T14517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.339249][T14517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.409341][T17614] tipc: Enabling of bearer rejected, already enabled [ 334.046644][T17643] sctp: [Deprecated]: syz.0.3124 (pid 17643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.046644][T17643] Use struct sctp_sack_info instead [ 334.136154][T17650] __nla_validate_parse: 1 callbacks suppressed [ 334.136172][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3125'. [ 334.215179][ T5873] Bluetooth: hci3: command tx timeout [ 334.697331][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 334.826067][T17236] udevd[17236]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 334.902779][T16967] udevd[16967]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 334.930875][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.948396][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.957353][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.967113][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.976763][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 335.155805][T17673] lo speed is unknown, defaulting to 1000 [ 335.167148][T17678] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3131'. [ 335.229706][T17676] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3131'. [ 335.278255][T17693] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 335.304214][T17693] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3137'. [ 335.347813][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 335.388358][T17689] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 335.400280][T17689] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 335.421208][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3135'. [ 335.596901][T17700] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.634861][T17702] openvswitch: netlink: Actions may not be safe on all matching packets [ 336.053677][T17727] vlan1: entered promiscuous mode [ 336.059008][T17736] netlink: 'syz.3.3148': attribute type 1 has an invalid length. [ 336.078218][T17727] bridge0: entered promiscuous mode [ 336.231528][T17741] netlink: 'syz.1.3149': attribute type 21 has an invalid length. [ 336.240646][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3150'. [ 336.305449][T17741] netlink: 'syz.1.3149': attribute type 6 has an invalid length. [ 336.317438][T17754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 336.333674][T17741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3149'. [ 336.400934][T17673] chnl_net:caif_netlink_parms(): no params data found [ 336.966976][T17673] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.977242][T17780] netlink: 'syz.1.3156': attribute type 7 has an invalid length. [ 336.986033][T17780] netlink: 'syz.1.3156': attribute type 8 has an invalid length. [ 337.010616][T17673] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.021541][T17673] bridge_slave_0: entered allmulticast mode [ 337.039027][T17673] bridge_slave_0: entered promiscuous mode [ 337.070885][ T5873] Bluetooth: hci2: command tx timeout [ 337.079191][T17673] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.100225][T17673] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.131001][T17673] bridge_slave_1: entered allmulticast mode [ 337.139283][T17673] bridge_slave_1: entered promiscuous mode [ 337.216022][T17792] openvswitch: netlink: Flow key attr not present in new flow. [ 337.312427][T17673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.377928][T17673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.567304][T17673] team0: Port device team_slave_0 added [ 337.698657][T17673] team0: Port device team_slave_1 added [ 337.869192][T17817] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 337.895948][T17673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.913973][T17673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.949436][T17673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.976229][T17821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.016821][T17822] pimreg: entered allmulticast mode [ 338.031534][T17673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.038663][T17673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.073547][T17673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.247631][T17673] hsr_slave_0: entered promiscuous mode [ 338.256930][T17673] hsr_slave_1: entered promiscuous mode [ 338.271251][T17673] debugfs: 'hsr0' already exists in 'hsr' [ 338.277019][T17673] Cannot create hsr debugfs directory [ 338.286056][T17828] syz_tun: entered allmulticast mode [ 338.485958][T17829] syz_tun: left allmulticast mode [ 338.767269][T17673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.793384][T17673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.976805][T17673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.005798][T17673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.149957][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 339.157130][ T5873] Bluetooth: hci2: command tx timeout [ 339.158042][ C1] lec:lec_tx_timeout: lec0 [ 339.169339][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.223595][T17860] __nla_validate_parse: 6 callbacks suppressed [ 339.223612][T17860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3179'. [ 339.262137][T17865] netlink: 'syz.3.3180': attribute type 8 has an invalid length. [ 339.263083][T17673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.285337][T17673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.453859][T17673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.478837][T17673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.814470][T17877] netlink: 'syz.4.3185': attribute type 7 has an invalid length. [ 339.825303][T17878] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3185'. [ 339.837799][T17878] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3185'. [ 339.851700][T17878] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3185'. [ 339.869256][T17673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.914135][T17673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.946209][T17673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.974473][T17673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.474640][T17910] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3193'. [ 340.527405][T17673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.553877][T17916] tipc: Enabling of bearer rejected, failed to enable media [ 340.579028][T17915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.602660][T17918] IPv6: sit1: Disabled Multicast RS [ 340.702609][T17673] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.767645][T14516] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.774882][T14516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.818094][T17932] block nbd0: NBD_DISCONNECT [ 340.829601][T17932] block nbd0: Send disconnect failed -32 [ 340.841959][T17932] block nbd0: shutting down sockets [ 340.869505][T14516] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.876927][T14516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.952404][T17936] openvswitch: netlink: Duplicate or invalid key (type 0). [ 340.966428][T17936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.206935][T17944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3200'. [ 341.230926][ T5873] Bluetooth: hci2: command tx timeout [ 341.242948][T17944] openvswitch: netlink: Flow key attr not present in new flow. [ 341.357081][T17960] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 341.401022][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3203'. [ 341.428240][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'. [ 341.445623][T17962] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 341.762945][T17971] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 343.310745][ T5873] Bluetooth: hci2: command tx timeout [ 344.180213][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.188266][ C1] lec:lec_tx_timeout: lec0 [ 344.193456][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.391002][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3209'. [ 344.546131][T17673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.683482][T18013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3214'. [ 344.720294][T17673] veth0_vlan: entered promiscuous mode [ 344.767993][T17673] veth1_vlan: entered promiscuous mode [ 344.889599][T17673] veth0_macvtap: entered promiscuous mode [ 344.938561][T17673] veth1_macvtap: entered promiscuous mode [ 344.975019][T18024] tipc: Enabling of bearer rejected, already enabled [ 345.078676][T17673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.127531][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3220'. [ 345.145782][T17673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.199344][T14516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.224761][T14516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.225652][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 345.241871][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.293526][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3221'. [ 345.464652][T18033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.528786][T14516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.548458][T18053] IPv6: Can't replace route, no match found [ 345.582505][T14516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.716042][T18057] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3223'. [ 345.946524][T18069] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3227'. [ 345.999609][T18071] team0: Port device bridge2 added [ 346.053949][T14517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.084106][T14517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.158861][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.201509][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.234350][T18080] netem: change failed [ 346.424269][T18092] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3121'. [ 346.657559][T18099] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3237'. [ 346.667764][T18099] xt_policy: neither incoming nor outgoing policy selected [ 346.964609][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 347.011250][T18112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.150890][T18112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.290862][T18116] tipc: Enabling of bearer rejected, failed to enable media [ 347.429038][ T5863] syz_tun (unregistering): left promiscuous mode [ 347.447921][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.464785][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.476272][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.485802][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.495214][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.631742][T18126] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 347.739206][T18126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.767646][T18147] nbd: must specify a size in bytes for the device [ 347.781533][T18126] bond1: (slave gretap1): making interface the new active one [ 347.790896][T18126] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 347.866700][T18146] bond1: entered allmulticast mode [ 347.872755][T18146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.882001][T18146] bridge0: port 3(bond1) entered blocking state [ 347.900712][T18146] bridge0: port 3(bond1) entered disabled state [ 347.912353][T18146] bond1: entered promiscuous mode [ 347.932367][T18146] bridge0: port 3(bond1) entered blocking state [ 347.938792][T18146] bridge0: port 3(bond1) entered forwarding state [ 347.984036][T14513] bridge0: port 3(bond1) entered disabled state [ 348.097168][T18131] lo speed is unknown, defaulting to 1000 [ 348.374162][T18174] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 348.441893][T18176] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 349.152567][T18131] chnl_net:caif_netlink_parms(): no params data found [ 349.200064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.208109][ C1] lec:lec_tx_timeout: lec0 [ 349.213351][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.437181][T18221] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 349.437265][T18131] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.477297][T18131] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.501007][T18131] bridge_slave_0: entered allmulticast mode [ 349.527799][T18131] bridge_slave_0: entered promiscuous mode [ 349.561572][ T5873] Bluetooth: hci0: command tx timeout [ 349.608963][T18131] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.630849][T18131] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.653953][T18131] bridge_slave_1: entered allmulticast mode [ 349.666663][T18131] bridge_slave_1: entered promiscuous mode [ 349.963353][T18250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.981562][T18259] netlink: 'syz.3.3276': attribute type 83 has an invalid length. [ 350.035869][T18258] vlan2: entered promiscuous mode [ 350.041642][T18258] bridge0: entered promiscuous mode [ 350.057911][T18263] __nla_validate_parse: 8 callbacks suppressed [ 350.057929][T18263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3278'. [ 350.084966][T18131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.114333][T18131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.238833][T18268] netlink: 'syz.2.3279': attribute type 11 has an invalid length. [ 350.253925][T18273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 350.404766][T18281] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3282'. [ 350.429762][T18131] team0: Port device team_slave_0 added [ 350.482832][T18131] team0: Port device team_slave_1 added [ 350.621164][T18289] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3285'. [ 350.631457][T18287] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI [ 350.643460][T18287] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 350.652741][T18287] CPU: 1 UID: 0 PID: 18287 Comm: syz.0.3284 Not tainted syzkaller #0 PREEMPT(full) [ 350.662110][T18287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.672153][T18287] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 350.678132][T18287] Code: 80 3c 2f 00 74 08 48 89 df e8 a4 fa f9 f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 79 fa f9 f6 4d 8b 2c 24 49 83 c5 [ 350.697733][T18287] RSP: 0018:ffffc9000bb3ef40 EFLAGS: 00010a06 [ 350.703788][T18287] RAX: 1bd5a9d5a0000003 RBX: ffff88802ecd9340 RCX: ffff888026e75a00 [ 350.711779][T18287] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 350.719752][T18287] RBP: ffffc9000bb3f2b0 R08: ffff88802ecd8d5f R09: 1ffff11005d9b1ab [ 350.727721][T18287] R10: dffffc0000000000 R11: ffffed1005d9b1ac R12: dead4ead00000018 [ 350.736084][T18287] R13: dffffc0000000000 R14: ffff88802ecd8d00 R15: 1ffff11005d9b268 [ 350.744080][T18287] FS: 00007f32e20376c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 350.752995][T18287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.759563][T18287] CR2: 000020000000e000 CR3: 000000002c822000 CR4: 00000000003526f0 [ 350.767527][T18287] Call Trace: [ 350.770793][T18287] [ 350.773808][T18287] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 350.779432][T18287] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 350.784963][T18287] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 350.790496][T18287] ? __phys_addr+0xd3/0x180 [ 350.794984][T18287] ? __kasan_kmalloc_large+0x85/0xa0 [ 350.800255][T18287] ? rcu_is_watching+0x15/0xb0 [ 350.805002][T18287] ? rcu_is_watching+0x15/0xb0 [ 350.809747][T18287] ? trace_kmalloc+0x1f/0xd0 [ 350.814321][T18287] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 350.820906][T18287] ? __build_skb_around+0x257/0x3e0 [ 350.826090][T18287] smc_diag_dump+0x59/0xa0 [ 350.830496][T18287] netlink_dump+0x6e4/0xe90 [ 350.834984][T18287] ? __pfx_netlink_dump+0x10/0x10 [ 350.839984][T18287] ? __netlink_lookup+0x752/0x810 [ 350.844991][T18287] ? netlink_lookup+0x30/0x200 [ 350.849738][T18287] ? netlink_lookup+0x30/0x200 [ 350.854485][T18287] ? netlink_lookup+0x30/0x200 [ 350.859229][T18287] __netlink_dump_start+0x5cb/0x7e0 [ 350.864434][T18287] smc_diag_handler_dump+0x178/0x210 [ 350.869710][T18287] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 350.875508][T18287] ? __pfx_smc_diag_dump+0x10/0x10 [ 350.880608][T18287] ? sock_diag_lock_handler+0x19/0x290 [ 350.886047][T18287] ? sock_diag_lock_handler+0x19/0x290 [ 350.891497][T18287] sock_diag_rcv_msg+0x4c9/0x600 [ 350.896417][T18287] netlink_rcv_skb+0x205/0x470 [ 350.901160][T18287] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 350.907033][T18287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.912301][T18287] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.917491][T18287] netlink_unicast+0x82f/0x9e0 [ 350.922244][T18287] ? __pfx_netlink_unicast+0x10/0x10 [ 350.927518][T18287] ? netlink_sendmsg+0x642/0xb30 [ 350.932435][T18287] ? skb_put+0x11b/0x210 [ 350.936663][T18287] netlink_sendmsg+0x805/0xb30 [ 350.941411][T18287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.946681][T18287] ? aa_sock_msg_perm+0xf1/0x1d0 [ 350.951612][T18287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.956881][T18287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.962149][T18287] __sock_sendmsg+0x219/0x270 [ 350.966820][T18287] ____sys_sendmsg+0x505/0x830 [ 350.971568][T18287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.976839][T18287] ? import_iovec+0x74/0xa0 [ 350.981333][T18287] ___sys_sendmsg+0x21f/0x2a0 [ 350.986004][T18287] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.991197][T18287] ? __fget_files+0x2a/0x420 [ 350.995767][T18287] ? __fget_files+0x3a0/0x420 [ 351.000425][T18287] __x64_sys_sendmsg+0x19b/0x260 [ 351.005347][T18287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.010794][T18287] ? rcu_is_watching+0x15/0xb0 [ 351.015543][T18287] ? do_syscall_64+0xbe/0x3b0 [ 351.020638][T18287] do_syscall_64+0xfa/0x3b0 [ 351.025121][T18287] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.030300][T18287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.036350][T18287] ? clear_bhb_loop+0x60/0xb0 [ 351.041014][T18287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.046894][T18287] RIP: 0033:0x7f32e118eec9 [ 351.051291][T18287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.070878][T18287] RSP: 002b:00007f32e2037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.079273][T18287] RAX: ffffffffffffffda RBX: 00007f32e13e5fa0 RCX: 00007f32e118eec9 [ 351.087235][T18287] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000003 [ 351.095188][T18287] RBP: 00007f32e1211f91 R08: 0000000000000000 R09: 0000000000000000 [ 351.103145][T18287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.111190][T18287] R13: 00007f32e13e6038 R14: 00007f32e13e5fa0 R15: 00007ffde11c1b98 [ 351.119149][T18287] [ 351.122233][T18287] Modules linked in: [ 351.127882][T18287] ---[ end trace 0000000000000000 ]--- [ 351.134233][T18287] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0 [ 351.140266][T18287] Code: 80 3c 2f 00 74 08 48 89 df e8 a4 fa f9 f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 79 fa f9 f6 4d 8b 2c 24 49 83 c5 [ 351.160476][T18287] RSP: 0018:ffffc9000bb3ef40 EFLAGS: 00010a06 [ 351.166537][T18287] RAX: 1bd5a9d5a0000003 RBX: ffff88802ecd9340 RCX: ffff888026e75a00 [ 351.174795][T18287] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 351.182799][T18287] RBP: ffffc9000bb3f2b0 R08: ffff88802ecd8d5f R09: 1ffff11005d9b1ab [ 351.190970][T18287] R10: dffffc0000000000 R11: ffffed1005d9b1ac R12: dead4ead00000018 [ 351.198923][T18287] R13: dffffc0000000000 R14: ffff88802ecd8d00 R15: 1ffff11005d9b268 [ 351.206913][T18287] FS: 00007f32e20376c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000 [ 351.215875][T18287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 351.222679][T18287] CR2: 000020000000e000 CR3: 000000002c822000 CR4: 00000000003526f0 [ 351.230674][T18287] Kernel panic - not syncing: Fatal exception [ 351.237015][T18287] Kernel Offset: disabled [ 351.241329][T18287] Rebooting in 86400 seconds..