last executing test programs: 1.648156419s ago: executing program 3 (id=6043): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000006c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000004a476fdfa000000095000000000000002f35a29226830e11836239befc2b895cafc5bf4bc4fcdeea9e62c87d51e44e78fd140e8bf61a7a679b8ae9dae11facd6f3074568c8a905000000607829692060ee5e368a5d6601e17eef02acf916529912213dcd09c2775fc1e9c56e9caa4fd96711eabf15d18f45ab64537db9f0007484be039e3cdf36d48db695c97383be728908c022da0b2e1b5ca405c04a075235b1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000020000850000008c000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000006d80)=ANY=[@ANYBLOB="020500020e00000000000000000000000500060000000004cca0c7167841ca357ea6000000000000000000000000000000000000000000000000000000000000000000020001eaffffffffffffff000000000005000500000000000a00000000000000ff0100000020000000000000055a9db9fb165fd66dd0796f8c0000000000000000007ca883358da014ab52339100e32564f976de70b88ec4372baefa8f505376"], 0x70}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f00000002c0), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000072c0)={r7, 0xe0, &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000007000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000007040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000007080)=[0x0, 0x0], 0x0, 0x31, &(0x7f00000070c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000007100), &(0x7f0000007140), 0x8, 0x52, 0x8, 0x8, &(0x7f0000007180)}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000073c0)={r7, 0xb, 0x5c, 0x44}) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r15, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000074c0)={{r0, 0xffffffffffffffff}, &(0x7f0000007440), &(0x7f0000007480)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000007580)={0x7, 0x9, &(0x7f0000006e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x7b2c}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8b}, @map_fd={0x18, 0x9, 0x1, 0x0, r10}, @generic={0x6, 0x1, 0x6, 0x9, 0x11a}]}, &(0x7f0000006ec0)='syzkaller\x00', 0xffff8001, 0xfd, &(0x7f0000006f00)=""/253, 0x41100, 0x4a, '\x00', r11, @fallback=0x14, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000007300)={0x5, 0xb, 0x8, 0x1}, 0x10, r6, r4, 0x1, &(0x7f0000007500)=[r12, r13, r14, r15, r16, r17], &(0x7f0000007540)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2f, 0x0, @val=@target_btf_id=r6}, 0x14) 1.526260789s ago: executing program 2 (id=6046): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003b0007010000000000000000017c0000040000000c00f77f06000600800a0000090002808d437a5771000000"], 0x30}}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) (async) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000100001042dbd8a842684382b78350000", @ANYRES32=0x0, @ANYBLOB="00000000020000002000128009000100626f6e640000000010000280080007000900000004000880"], 0x40}}, 0x8004) 1.479708503s ago: executing program 3 (id=6048): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x2, 0xff, 0x4}, {0x0, 0xff, 0x1}, 0xfe, 0x1}], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @val=@tracing={0x0, 0x4}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec204cd32308cdd8dde0400", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.freeze\x00', 0x0, 0x0) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x2, 0xff, 0x4}, {0x0, 0xff, 0x1}, 0xfe, 0x1}], 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) (async) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @val=@tracing={0x0, 0x4}}, 0x20) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec204cd32308cdd8dde0400", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{}, {0x0, 0x5}]}]}]}]}, 0x30}}, 0x0) (async) 1.260466387s ago: executing program 2 (id=6051): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000447a4269a00", @ANYRES32=r3, @ANYBLOB="1400350064756d6d793000"/20], 0x3c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.257521205s ago: executing program 3 (id=6053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095000000000000000401a1aa2be96bb7a940267fb0e31a4fed479be0fd210d7c71e6c736494cd84d69020c373cd41a5d74601b62fc0c54b654dc32376badea6bf174"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.215163068s ago: executing program 3 (id=6055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071121f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="eb7a29bd7000fedbdf250d0068f3c7cb6d00000500200004000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) recvfrom$inet(r2, 0x0, 0x0, 0x10021, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000480)) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a010400000000000000000a0000040900010073797a310000000034000480300001800d00010073796e70726f7879000000001c0002800800034000000005060001400004000005000200010000000900020073797a32"], 0x230}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.156047415s ago: executing program 2 (id=6057): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ppoll(&(0x7f0000000cc0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 768.35648ms ago: executing program 4 (id=6068): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001900010000000000000000001d"], 0x34}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800eaff", @ANYRES16=r8, @ANYBLOB="000228bd7000fbdbdf250900000014000380060007004e240000060007004e230000"], 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x40) (async) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18}}}}}}, 0x0) 766.224216ms ago: executing program 1 (id=6069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f00000001c0), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000a08000140000000170900010073797a30000000000900020073797a3200"], 0x78}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x94) 727.449506ms ago: executing program 4 (id=6070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="02180000000e00080000000000dbdf25"], 0x10}}, 0x4040000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff1, 0xfff2}, {0xffe0}}}, 0x24}}, 0x40000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r7, 0x1, 0x26, &(0x7f00000004c0), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xca, '\x00', r8, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket(0x2a, 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000580)={r12, 0x7ff, 0x5, 0xfffffffd, 0x2, 0x5}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x1, 0x40, 0x1, r12}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x31, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r13], 0x7c}, 0x1, 0x0, 0x0, 0x8006}, 0x4048810) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800030800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a9bd94b88e509426f0b366301742ca0435a2cbd5dab00"/213], 0xc0}}, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000000225bd7000fbdbdf251d0100001500020001000060060000005e64347f8ae1e85102000000080005000702050305000d000900000015000400040000a0000200005a4ab1289ee789dd01000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x400c0) setsockopt$MRT_FLUSH(r14, 0x0, 0xd4, &(0x7f0000000180)=0x2, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) 620.458244ms ago: executing program 1 (id=6072): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x5c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2f73f}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}]}, 0x5c}, 0x1, 0xba01, 0x0, 0x408d0}, 0x4000040) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x5c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2f73f}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}]}}}]}, 0x5c}, 0x1, 0xba01, 0x0, 0x408d0}, 0x4000040) 235.008773ms ago: executing program 0 (id=6073): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xffffffff}, @TCA_CT_MARK={0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x28}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc031}, 0x0) 227.6536ms ago: executing program 1 (id=6074): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xd4, 0x19, 0x100, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3}}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e23, 0x4e20, @in=@empty}}]}, 0xd4}}, 0x0) 227.399919ms ago: executing program 0 (id=6075): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a0400eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="020000000000800080001200080001007674693674000200600004"], 0xa0}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07000000000000000000002d56"}}}}}}}, 0x0) 226.526159ms ago: executing program 1 (id=6076): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmmsg$inet(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001d00010000000000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="80299743f50a2e24af93a2280007000a"], 0x28}}, 0x48080) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004a00), r2) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004a80)={&(0x7f0000004c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="10042bbd7000fddbdf34cc607ccaf3d915a7735ecfc48daa8d10001400020077673278f616d27828f42d50434442fe7814d92fd4e7dce29d99ff865a893093730a6cdd007ad9813f114323b8f991ee41550a5e7e44d217f4a867c1c0d7e85adca4ee858acc0e86afdbae45c8f825a832cffa14d9f3f438889d18ea76d4a823581429bcfbbde9c954fc6a31d6a5a0f29ea141a5f24406d294906c1d0920091a2d97ebca0c5640506d369523f2b0a1b2f199c991cd1403e6b7f7ab48fc6a719ec26e62878bb68544fa8484e386b6e2744aa0e1502469a159b3f5e07259c2ee199b9ec98e79c35db1b2f4735c470785ef9b56"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000c000000080026000816"], 0x40}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000004980)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004940)={&(0x7f0000001500)={0x70, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe3e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x12}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8154}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000) recvmmsg$unix(r1, &(0x7f0000004740)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000004b00)=""/201, 0xc9}, {&(0x7f0000000200)=""/169, 0xa9}], 0x2, &(0x7f0000000300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x30}}, {{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/122, 0x7a}, {&(0x7f0000001440)}, {&(0x7f0000004800)=""/260, 0x104}, {&(0x7f0000001580)=""/83, 0x53}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/108, 0x6c}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x9}}], 0x2, 0x40002100, &(0x7f00000047c0)={0x0, 0x989680}) setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, &(0x7f0000001440)=0x8, 0x4) 226.15773ms ago: executing program 1 (id=6077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f00000000c0)="bd", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x32) socket$nl_crypto(0x10, 0x3, 0x15) 225.489997ms ago: executing program 0 (id=6078): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'erspan0\x00', r7, 0x1, 0x700, 0x10000, 0x2, {{0x13, 0x4, 0x2, 0x3, 0x4c, 0x65, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, {[@ssrr={0x89, 0x3, 0x59}, @rr={0x7, 0x27, 0x58, [@rand_addr=0x64010100, @private=0xa010102, @rand_addr=0x64010100, @private=0xa010100, @local, @private=0xa010100, @rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x21, [@loopback]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$inet_msfilter(r8, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) 222.835657ms ago: executing program 4 (id=6079): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESDEC=r1, @ANYRESOCT=r0], 0x30}}, 0x40cc000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000001440)) r6 = socket(0x0, 0x2, 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = socket(0x8, 0x3, 0x80000000) sendmsg$nl_generic(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r8], 0x60}}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x59, @remote, 0x1}], 0x1c) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000040000000007f21b656ecc0", @ANYRES32=r8, @ANYRES64=r1, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 222.103007ms ago: executing program 1 (id=6080): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x2, @local, 0x4}, 0x1c) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @null}, [@rose, @remote, @rose, @bcast, @bcast, @rose, @default]}, &(0x7f0000000180)=0x48, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)=':', 0x1, 0x20000041, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="f1", 0x1}], 0x1) connect$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x82fedd9b6044ed48}}, 0x10) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x5) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000140)={&(0x7f0000000080)=""/97, 0x61, 0x7, 0xb5}) 220.655053ms ago: executing program 4 (id=6081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="060000000400000003006f9bdb71b3db4ab30000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0xb, 0xb, 0x8, 0x18, 0x8}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xb1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x40, 0x2c, &(0x7f0000000180)=""/44, 0x40f00, 0x1c, '\x00', 0x0, 0x19, r3, 0x8, &(0x7f00000003c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1f164, r4, 0x3, &(0x7f00000005c0)=[r5], &(0x7f0000000600)=[{0x1, 0x2, 0x4, 0x9}, {0x4, 0x4, 0x3, 0xc}, {0x3, 0x4, 0xd, 0x6}], 0x10, 0x5}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x81, 0xa0a, 0x2, 0x9, 0x2, 0x100000000, 0xb99, 0x1}, &(0x7f0000000140)={0x5, 0x3, 0x5, 0x2, 0x6, 0x8, 0xdc0, 0x6}, &(0x7f00000001c0)={0x1516, 0x80000000, 0x7, 0x81, 0x0, 0x7, 0x4, 0x2}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x7]}, 0x8}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000040)=0x8, 0x4) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r6, &(0x7f0000000200)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e90009118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000100)="09c69e16e1606f", 0x7}], 0x2) 220.111196ms ago: executing program 0 (id=6082): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000140)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{r1, 0x9, 0x7, 0x6, 0x0, 0x2, 0xffffffffffffffe3, 0x0, 0x4, 0x9, 0x4, 0x7fffffffffffffff, 0x0, 0x1, 0x1}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000140)) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000180)) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000380)={{r1, 0x9, 0x7, 0x6, 0x0, 0x2, 0xffffffffffffffe3, 0x0, 0x4, 0x9, 0x4, 0x7fffffffffffffff, 0x0, 0x1, 0x1}}) (async) 219.492517ms ago: executing program 2 (id=6083): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000900)={r3}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000001080)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3fa, 0x2, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xa9d0e5b85cf01087}, 0x40010) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x7f, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x10, 0x3, 0x1000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x20, 0x7, 0x1, 0x5, {{0x1b, 0x4, 0x3, 0x2d, 0x6c, 0x66, 0x0, 0xfe, 0x4, 0x0, @loopback, @empty, {[@noop, @timestamp_addr={0x44, 0x54, 0xde, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@empty, 0x8}, {@private=0xa010101, 0x400}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x10}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010102, 0x7}, {@remote, 0x3}, {@private=0xa010101, 0x3}]}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@dev, @empty, 0x0}, &(0x7f00000005c0)=0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000008c0)={0x9}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'ip6_vti0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @dev, @multicast2}, &(0x7f0000000680)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r11 = socket(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000a40)={0x724a, 0xa, 0x9, 0x924, 0x5}, 0x14) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b80)=@newqdisc={0x46c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x440, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6d, 0x2, 0xb069, 0x7, 0x4d, 0x3}, {0x8, 0x2, 0x7ff, 0x7f, 0xc5, 0x904f}, 0x6, 0x0, 0xda2}}, @TCA_TBF_PBURST={0x8, 0x7, 0x1ca0}, @TCA_TBF_PTAB={0x404, 0x3, [0xae6b, 0x400, 0x2, 0x3, 0x5, 0x9, 0x1, 0x8, 0x10000, 0x7ff, 0x8, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0xca37, 0x0, 0x1, 0xd, 0xfffffff7, 0x800, 0x6, 0x8605, 0x0, 0x2, 0x5, 0x2, 0x1, 0xbba, 0x5, 0x5, 0x1, 0x7f, 0x9b6, 0x4, 0x1, 0x6, 0x0, 0x7, 0x35c0, 0x9, 0xc29, 0x88000000, 0x6, 0x0, 0x8, 0x8, 0x1, 0x100, 0x1, 0x4, 0x9, 0xffffffff, 0x7, 0x2a260000, 0x0, 0x100, 0x1, 0x3, 0x6, 0x9, 0x1, 0x5, 0x455, 0xfffffff3, 0xc, 0xffffffff, 0x7, 0x87e, 0x7, 0x8, 0xdbcf, 0xfffffff2, 0x1000, 0xffffffff, 0x5, 0x8001, 0x80000001, 0xd, 0x2, 0xb, 0x6, 0x5, 0x9ee, 0x5, 0x3b, 0xfffff9f7, 0x40, 0x6, 0xffff, 0x2, 0x1, 0x80, 0x2, 0x605b, 0x200, 0x32, 0xfff, 0xffc, 0x5, 0x6, 0x2, 0x2, 0xe8, 0x8, 0x5, 0x200, 0x8b1c, 0x0, 0x6, 0x80000000, 0x101, 0x101, 0x7, 0x9, 0xf5d, 0x10000, 0x3, 0x3, 0x6, 0x2, 0x7fffffff, 0x8, 0x5, 0x4, 0x8000, 0x50c8405d, 0xa5, 0x200, 0x0, 0x7, 0xfffff3a5, 0x200, 0x1000, 0x6, 0x7, 0x2, 0x2, 0x2, 0x5, 0x5, 0x0, 0x7, 0x4, 0x1, 0x73440151, 0xa698, 0x4, 0x4, 0x6, 0x4, 0x3, 0x5, 0x9a8f, 0x5, 0xfffffffe, 0x0, 0x1000, 0x32, 0x2, 0x3, 0x8, 0x5, 0x81, 0x6, 0x9, 0x3, 0x9, 0x200, 0x7, 0x4, 0x8, 0x36197b7, 0x8001, 0x6, 0x1, 0x2, 0x3, 0x1, 0x7, 0x4, 0x101, 0x9, 0x3, 0x7, 0x4, 0x3, 0x4, 0x3b4d, 0xed1, 0x200, 0x0, 0x1000, 0x100, 0x55, 0x81, 0x80000000, 0x7, 0x44, 0x9, 0x1, 0x1d, 0xf, 0x9, 0x7, 0x3, 0x5d, 0x2, 0x7fff, 0x8, 0x9, 0x8, 0x62664108, 0x1ff, 0x800, 0x7ff, 0x2d71, 0x4, 0xf, 0x5, 0xcf8, 0x8, 0x7, 0xfffffffe, 0x6b, 0xcc87, 0x7, 0x0, 0xffff, 0xffffffb5, 0x7, 0x0, 0x2, 0x9, 0x5, 0x2, 0x4, 0x1, 0xb, 0xaf55, 0x0, 0x0, 0x800, 0x5a, 0x6, 0x1, 0x3, 0x0, 0xe15e, 0x4, 0x8, 0x5, 0xd, 0xd, 0x2]}, @TCA_TBF_BURST={0x8, 0x6, 0x4}]}}]}, 0x46c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000010c0)={0xf8, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3ff}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffff0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x10, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="20000000021401002cbd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="d929b4652de54c35f4e5bf960e9958bf6d5dcb03ae954c87e3f529ceb6dcd0674acf8d1a5828522be2d530104443a917e8135f3b09b425ca573aaeae9fb9ab3b8b1440f962c1bd43bb2b3faa7f59bb7157cf26842dc6051af42d727aa66b9bdfafdffbd0ea0972d9f11650ede16f3cc6c18f2be30faa311395143dbfdddeb126f7ce8cd6d91f2382cff712bfac6b99318d04dba0c0bb3f813b473c5c530e956e241471170e2107d961edcb28b2fcecb6277a6c924e9309327b0bab06348b530082ef25621aabd68a4fa80864bcda036b0a06427f6c"], 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fddbdf25010000000e009b466e657464657673696d0000000f0002006e6574646d7673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000005fff6b0f0002006e657464657673696d300000"], 0x94}, 0x1, 0x0, 0x0, 0x48010}, 0x4830) 218.767853ms ago: executing program 3 (id=6084): syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800490000240000000000009078ac1414bbac1414358907efffffffff018000000000000000"], 0x0) 217.183617ms ago: executing program 4 (id=6085): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x230, 0x4) socket$inet6(0xa, 0x3, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x1000000, 0x482, 0x0, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r7}) r8 = socket(0xa, 0x1, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$alg(r9, &(0x7f0000002c40)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)='[', 0x1}], 0x1, &(0x7f0000000680)=[@assoc={0x18}, @assoc={0x18}], 0x30}], 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f00000001c0)="7a8931e7c73c058c3be18d69ece5c8acb0e20f667caa70a1af262f6be9d9057899c9e2d6ea090d0d4c65cfef7858778c5ced1dd71538604c6232551c6583d5") bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r4, 0x2f, 0x0, 0x0, @void, @value=r5}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0xb2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f0000001400000004"], 0x20) 171.898459ms ago: executing program 3 (id=6086): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xb}, {}, {0xfff2}}, [{0x8, 0xb, 0xd6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40904}, 0x800) 158.852637ms ago: executing program 0 (id=6087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1406, 0xc00, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1406, 0xc00, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x14}, 0x1) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) (async) 92.292206ms ago: executing program 2 (id=6088): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'vcan0\x00', 0x1}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x4, 0x0, &(0x7f0000000040)) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) listen(r4, 0x9) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r8, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) ioctl(0xffffffffffffffff, 0x8, &(0x7f00000002c0)="e98233c1ea9e597b9733bb4502833a2028c65cf72729d3924af45ab9adf8afc40cbb3609adff25c4588617029eb46b4cd077a7078b8a86e6824171624cf2f3166cc8cc102b517e6f2b01aafb93dac06db566d593ba1b3a827fd60940d9b7ec88364b993296fce0e3ef7d3deea04ea12452a539ce5e1219dd90d5db9ea8bb43dc4660dc9f244a5daf2fb2c2c6481969a3ff38e3029ed62efcb1e8016b261215f041546ebdadabb20a2da84dbdc94fa8390bef9a7056637d689bba657a98d1f3b639d8c74d0f7942926bc94d96e6") recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}, 0x7}], 0x1, 0x0, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r9 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000600)=ANY=[@ANYBLOB="70020095", @ANYRES16=0x0, @ANYBLOB="10042cbd7000fcdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="4c0102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400dd7a000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000101000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004006d00000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004007700000008000600", @ANYRES32=0x0, @ANYBLOB="aaab066b5c6a3273ca72d2fa37c45f9b7eb592b0bc320218e0e21a310dfae31308f6d190c2008d2fe6e228ddfcb53d983704c3ff0c0587f01ab25225f41ed2137c37618896afa5af82b0dff3c7a1ed22dc39d64fd10871090fdf5c73ba52bae0dc648a9a891637863cc788b5b19e2d9a66823ea556eb6d8ba48c3432568bce8e9e3cc22eaeef38d261f5568d529100da6994a940526c55e0d55e60926f172f959d9de1"], 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x4004) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 90.396676ms ago: executing program 4 (id=6089): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x3, {0xa, 0x0, 0x0, @loopback}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) close(0x4) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x3, {0xa, 0x0, 0x0, @loopback}}}, 0x32) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) (async) close(0x4) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 87.338301ms ago: executing program 0 (id=6090): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xc, 0x6}, {0xfffa, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 0s ago: executing program 2 (id=6091): r0 = socket(0x1e, 0x4, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) kernel console output (not intermixed with test programs): . [ 210.254745][T18728] geneve2: entered allmulticast mode [ 210.265122][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.281739][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.297685][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.322676][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 210.809159][T18771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.828568][T18778] syzkaller0: entered promiscuous mode [ 210.835844][T18778] syzkaller0: entered allmulticast mode [ 211.187070][T18806] netlink: 'syz.2.3729': attribute type 1 has an invalid length. [ 211.223963][T18806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 211.566810][T18852] veth1_macvtap: left promiscuous mode [ 211.669497][T18863] openvswitch: netlink: Duplicate or invalid key (type 0). [ 211.681479][T18863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.760397][ T5182] Bluetooth: hci2: command tx timeout [ 213.032302][T18983] delete_channel: no stack [ 213.457004][T19004] validate_nla: 2 callbacks suppressed [ 213.457022][T19004] netlink: 'syz.1.3791': attribute type 9 has an invalid length. [ 213.495484][T19002] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.592978][T19016] netlink: 'syz.1.3794': attribute type 1 has an invalid length. [ 213.633144][T19020] __nla_validate_parse: 30 callbacks suppressed [ 213.633163][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3795'. [ 213.746601][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'. [ 213.762357][T19037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3801'. [ 213.776197][T19038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3799'. [ 213.836263][T19041] netlink: 'syz.4.3803': attribute type 10 has an invalid length. [ 213.844798][ T5182] Bluetooth: hci2: command tx timeout [ 213.864193][T19041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'. [ 213.902148][T19049] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 214.016862][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3808'. [ 214.123291][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 214.140418][T19075] netlink: 'syz.1.3813': attribute type 4 has an invalid length. [ 214.172431][T19077] tipc: Enabling not permitted [ 214.183730][T19077] tipc: Enabling of bearer rejected, failed to enable media [ 214.200409][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3815'. [ 214.257217][T19085] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3819'. [ 214.268316][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 214.317846][T19085] netlink: 'syz.1.3819': attribute type 9 has an invalid length. [ 214.326031][T19093] netlink: 'syz.3.3822': attribute type 21 has an invalid length. [ 214.326235][T19093] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 214.372935][T19096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.529901][T19113] netlink: 'syz.1.3827': attribute type 7 has an invalid length. [ 214.544928][T19122] delete_channel: no stack [ 214.665453][T19129] netlink: 'syz.1.3833': attribute type 4 has an invalid length. [ 214.684258][T19131] openvswitch: netlink: Message has 5 unknown bytes. [ 214.812478][T19147] netlink: 'syz.4.3840': attribute type 5 has an invalid length. [ 214.851744][T19147] geneve2: entered promiscuous mode [ 214.856987][T19147] geneve2: entered allmulticast mode [ 214.874815][T17387] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 214.888770][T17387] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 214.904083][T17387] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 214.923195][T17387] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 214.971233][T19160] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 215.156330][T19181] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 215.400283][T19201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 215.408087][T19201] team0: Port device batadv1 added [ 215.466940][T19204] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.528660][T19204] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.639055][T19204] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.728786][T19204] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.828500][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.833504][T19222] netlink: 'syz.3.3867': attribute type 13 has an invalid length. [ 215.849873][T19232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.905360][T19222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.928801][T17383] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.946960][T17383] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.963560][T17383] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.006478][T19237] tipc: Enabled bearer , priority 0 [ 216.013776][T19239] lo: entered promiscuous mode [ 216.021411][T19239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.040887][T19237] syzkaller0: entered promiscuous mode [ 216.046384][T19237] syzkaller0: entered allmulticast mode [ 216.055325][T19242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.076699][T19237] tipc: Resetting bearer [ 216.096056][T19236] tipc: Resetting bearer [ 216.112975][T19236] tipc: Disabling bearer [ 216.129393][T19244] lo: left promiscuous mode [ 216.146418][T19244] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.826924][T19316] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 216.929342][T19336] lo: entered promiscuous mode [ 216.948277][T19336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.123106][T19353] gretap0: entered promiscuous mode [ 217.251686][T19360] geneve2: entered promiscuous mode [ 217.516554][T19387] syzkaller1: entered promiscuous mode [ 217.536209][T19387] syzkaller1: entered allmulticast mode [ 217.685159][T19406] tipc: Started in network mode [ 217.692369][T19406] tipc: Node identity ac14140f, cluster identity 4711 [ 217.712382][T19406] tipc: New replicast peer: 255.255.255.255 [ 217.719182][T19406] tipc: Enabled bearer , priority 10 [ 217.733657][T19412] geneve3: entered promiscuous mode [ 217.738955][T19412] geneve3: entered allmulticast mode [ 217.747640][T17392] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.770735][T17392] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.787268][T17392] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 217.808327][T17392] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 218.400553][ T51] Bluetooth: hci4: command tx timeout [ 218.677865][T19459] __nla_validate_parse: 37 callbacks suppressed [ 218.677882][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'. [ 218.806414][T19467] hsr0 speed is unknown, defaulting to 1000 [ 218.812949][T19467] hsr0 speed is unknown, defaulting to 1000 [ 218.819324][T19467] hsr0 speed is unknown, defaulting to 1000 [ 218.829770][ T10] tipc: Node number set to 2886997007 [ 218.914111][T19467] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 218.967538][T19467] hsr0 speed is unknown, defaulting to 1000 [ 218.983844][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.011762][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.019329][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.028731][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.036675][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.048089][T19473] validate_nla: 8 callbacks suppressed [ 219.048107][T19473] netlink: 'syz.4.3940': attribute type 2 has an invalid length. [ 219.082931][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.097916][T19467] hsr0 speed is unknown, defaulting to 1000 [ 219.158334][T19477] netlink: 'syz.1.3942': attribute type 1 has an invalid length. [ 219.285011][T19489] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3946'. [ 219.297500][T19489] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3946'. [ 219.306964][T19490] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3946'. [ 219.317311][T19489] 0ªî{X¹¦: renamed from gretap0 [ 219.324288][T19489] 0ªî{X¹¦: left promiscuous mode [ 219.329333][T19489] 0ªî{X¹¦: entered allmulticast mode [ 219.340177][T19489] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 219.358877][T19490] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 219.367129][T19490] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 219.810716][T19497] netlink: zone id is out of range [ 219.817736][T19497] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 219.829087][T19497] batman_adv: batadv0: Adding interface: team0 [ 219.835336][T19497] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.865463][T19497] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.887077][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3949'. [ 219.936752][T19500] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 219.949043][T19500] netlink: 'syz.4.3949': attribute type 29 has an invalid length. [ 219.957647][T19500] netlink: 'syz.4.3949': attribute type 29 has an invalid length. [ 220.312657][T19514] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3954'. [ 220.476161][T19522] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3959'. [ 220.483778][T19531] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3960'. [ 220.518137][T19523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3959'. [ 220.702574][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3963'. [ 221.021541][T19564] netlink: 'syz.2.3968': attribute type 1 has an invalid length. [ 221.238230][T19573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 221.277529][T19573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 221.394276][T19585] syzkaller1: entered promiscuous mode [ 221.410483][T19585] syzkaller1: entered allmulticast mode [ 221.644301][T19608] netlink: 'syz.2.3981': attribute type 10 has an invalid length. [ 221.702136][T19613] netlink: 'syz.1.3983': attribute type 10 has an invalid length. [ 221.758895][T19613] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.769139][T19622] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 221.775286][T19613] bond0: (slave team0): Enslaving as an active interface with an up link [ 221.807789][T19621] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 221.808180][T19618] syzkaller1: entered promiscuous mode [ 221.838710][T19627] netlink: 'syz.2.3987': attribute type 10 has an invalid length. [ 221.861362][T19618] syzkaller1: entered allmulticast mode [ 221.870942][T19632] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 221.880489][T19627] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 221.923947][T19618] syzkaller1: left promiscuous mode [ 221.933725][T19618] syzkaller1: left allmulticast mode [ 222.434345][T19679] netlink: 'syz.2.4003': attribute type 1 has an invalid length. [ 222.908423][T19718] tipc: New replicast peer: 224.0.0.2 [ 222.982561][T19722] 8021q: VLANs not supported on lo [ 223.117797][T19729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.135311][T19729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.261298][T19729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.310230][T19729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.316853][T19745] sctp: [Deprecated]: syz.2.4025 (pid 19745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.316853][T19745] Use struct sctp_sack_info instead [ 223.342416][T19744] nbd: couldn't find device at index 1048576 [ 223.398682][T19729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.417276][T19752] sctp: [Deprecated]: syz.2.4028 (pid 19752) Use of int in maxseg socket option. [ 223.417276][T19752] Use struct sctp_assoc_value instead [ 223.446943][T19729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.593517][T19729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.627906][T19729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 223.775783][T17392] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.810799][T17392] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.833210][T19793] __nla_validate_parse: 16 callbacks suppressed [ 223.833226][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4039'. [ 223.845776][ T65] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.857300][ T65] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.895840][T19791] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.4041'. [ 223.910239][T19791] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 223.917500][T19795] 8021q: VLANs not supported on ip6gre0 [ 223.936993][ T65] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.948313][ T65] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.956917][ T65] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 223.969290][ T65] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 223.998826][T19797] IPv6: sit2: Disabled Multicast RS [ 224.006070][T19797] sit2: entered allmulticast mode [ 224.188551][T19811] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 224.193588][T19813] validate_nla: 4 callbacks suppressed [ 224.193605][T19813] netlink: 'syz.2.4046': attribute type 10 has an invalid length. [ 224.212841][T19815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4048'. [ 224.214344][T19813] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4046'. [ 224.231169][T19811] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 224.241645][T19811] gretap1: entered promiscuous mode [ 224.246902][T19811] gretap1: entered allmulticast mode [ 224.258125][T19813] team0: Port device geneve0 added [ 224.271345][T19818] pim6reg: entered allmulticast mode [ 224.277005][T17383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.296254][T19811] pim6reg: left allmulticast mode [ 224.312204][T17383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.321418][T17383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.330392][T17383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.558559][T19846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4057'. [ 224.595912][T19846] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4057'. [ 224.687231][T19861] netlink: 'syz.0.4062': attribute type 33 has an invalid length. [ 224.702540][T19862] netlink: 'syz.2.4063': attribute type 7 has an invalid length. [ 224.713314][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4063'. [ 224.827204][T19874] net_ratelimit: 4 callbacks suppressed [ 224.827232][T19874] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 224.999236][T19888] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.024438][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4074'. [ 225.064558][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 225.073721][T19894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4075'. [ 225.235455][T19909] sctp: [Deprecated]: syz.0.4080 (pid 19909) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.235455][T19909] Use struct sctp_sack_info instead [ 225.437602][T19940] tipc: Enabled bearer , priority 10 [ 225.508548][T19941] team1: entered promiscuous mode [ 225.531978][T19941] team1: entered allmulticast mode [ 225.553949][T19941] team2: entered promiscuous mode [ 225.559051][T19941] team2: entered allmulticast mode [ 225.586004][T19941] team3: entered promiscuous mode [ 225.591322][T19941] team3: entered allmulticast mode [ 225.620795][T19941] team4: entered promiscuous mode [ 225.625893][T19941] team4: entered allmulticast mode [ 225.643753][T19941] team5: entered promiscuous mode [ 225.648801][T19941] team5: entered allmulticast mode [ 225.670200][T19941] team6: entered promiscuous mode [ 225.677168][T19941] team6: entered allmulticast mode [ 225.709430][T19941] team7: entered promiscuous mode [ 225.714936][T19941] team7: entered allmulticast mode [ 225.720372][T19951] tipc: Enabled bearer , priority 0 [ 225.755562][T19961] syzkaller0: entered promiscuous mode [ 225.761194][T19961] syzkaller0: entered allmulticast mode [ 225.767564][T19960] tipc: Enabled bearer , priority 0 [ 225.775922][T19951] syzkaller0: entered promiscuous mode [ 225.782087][T19951] syzkaller0: entered allmulticast mode [ 225.794548][T19954] tipc: Resetting bearer [ 225.844283][T19975] netlink: 'syz.0.4100': attribute type 1 has an invalid length. [ 225.877257][T19954] tipc: Disabling bearer [ 225.924866][T19941] team8: entered promiscuous mode [ 225.939227][T19941] team8: entered allmulticast mode [ 225.959894][T19986] netlink: 'syz.2.4099': attribute type 10 has an invalid length. [ 225.972176][T19941] team9: entered promiscuous mode [ 225.986348][T19941] team9: entered allmulticast mode [ 225.994461][T19973] macsec0: entered promiscuous mode [ 226.003216][T19973] macsec0: entered allmulticast mode [ 226.011694][T19978] tipc: Resetting bearer [ 226.017694][T19979] veth1_macvtap: entered allmulticast mode [ 226.028747][T19979] macsec0: left promiscuous mode [ 226.035656][T19979] macsec0: left allmulticast mode [ 226.044684][T19979] veth1_macvtap: left allmulticast mode [ 226.052043][T19986] team0: Device hsr_slave_0 failed to register rx_handler [ 226.089288][T19941] team10: entered promiscuous mode [ 226.097474][T19941] team10: entered allmulticast mode [ 226.104875][T19949] tipc: Resetting bearer [ 226.113219][T19949] tipc: Disabling bearer [ 226.147059][T19941] team11: entered promiscuous mode [ 226.154974][T19941] team11: entered allmulticast mode [ 226.177286][T19941] team12: entered promiscuous mode [ 226.182935][T19941] team12: entered allmulticast mode [ 226.200677][T19941] team13: entered promiscuous mode [ 226.205974][T19941] team13: entered allmulticast mode [ 226.252208][T19941] team14: entered promiscuous mode [ 226.259736][T19941] team14: entered allmulticast mode [ 226.280649][T20005] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 226.303959][T19941] team15: entered promiscuous mode [ 226.309703][T19941] team15: entered allmulticast mode [ 226.607631][T20046] netlink: 'syz.0.4115': attribute type 39 has an invalid length. [ 226.829842][ T10] tipc: Node number set to 3093929756 [ 229.075446][T20152] __nla_validate_parse: 26 callbacks suppressed [ 229.075465][T20152] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4149'. [ 229.150273][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4149'. [ 229.481873][T20169] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4152'. [ 229.539554][T20176] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 229.710286][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 229.719517][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 229.730987][T20193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.742836][T20194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.752453][T20191] netlink: 'syz.3.4160': attribute type 3 has an invalid length. [ 229.882871][T20201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.892173][T20207] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.988729][T20222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4169'. [ 230.020547][T20225] netlink: 'syz.2.4170': attribute type 10 has an invalid length. [ 230.028679][T20225] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 230.086408][T20231] erspan0: entered allmulticast mode [ 230.135598][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4173'. [ 230.149550][T20237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4173'. [ 230.162370][T20243] netlink: 'syz.3.4175': attribute type 11 has an invalid length. [ 230.170311][T20243] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4175'. [ 230.171246][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051499400: rx timeout, send abort [ 230.183393][T20245] netlink: 'syz.3.4175': attribute type 11 has an invalid length. [ 230.187670][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051499c00: rx timeout, send abort [ 230.195875][T20245] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4175'. [ 230.204449][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051499400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.227127][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051499c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 230.348576][T20254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.531269][T17383] nci: nci_ntf_packet: unknown ntf opcode 0x110 [ 230.706055][T20298] can: request_module (can-proto-0) failed. [ 230.797015][T20309] sctp: [Deprecated]: syz.2.4193 (pid 20309) Use of int in max_burst socket option. [ 230.797015][T20309] Use struct sctp_assoc_value instead [ 231.462052][T20343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.541353][T20358] netlink: 'syz.4.4208': attribute type 1 has an invalid length. [ 231.575187][T20363] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 231.638506][T20365] veth0_virt_wifi: renamed from veth0_vlan [ 231.782294][T20376] hsr0 speed is unknown, defaulting to 1000 [ 231.827521][T20384] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.834749][T20384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.944583][T20390] tipc: Enabling of bearer rejected, failed to enable media [ 232.086936][T20402] netlink: 'syz.2.4226': attribute type 29 has an invalid length. [ 232.124004][T20402] netlink: 'syz.2.4226': attribute type 29 has an invalid length. [ 232.134497][T20402] netlink: 'syz.2.4226': attribute type 29 has an invalid length. [ 232.144852][T20410] siw: device registration error -23 [ 232.151932][T20402] netlink: 'syz.2.4226': attribute type 29 has an invalid length. [ 232.165015][T20410] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 232.453099][T20434] netlink: 'syz.4.4235': attribute type 1 has an invalid length. [ 232.545061][T20434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.784466][T20463] syzkaller1: entered promiscuous mode [ 232.784722][T20470] netlink: 'syz.4.4248': attribute type 2 has an invalid length. [ 232.804118][T20463] syzkaller1: entered allmulticast mode [ 232.813958][T20470] syzkaller0: entered promiscuous mode [ 232.819773][T20470] syzkaller0: entered allmulticast mode [ 232.963013][T20482] netlink: 'syz.3.4252': attribute type 11 has an invalid length. [ 233.370915][T20514] nbd2: detected capacity change from 0 to 127 [ 233.585606][ T51] block nbd2: Receive control failed (result -32) [ 233.725089][T20556] netlink: 'syz.1.4274': attribute type 33 has an invalid length. [ 233.739362][T20556] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 234.083458][T20589] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 234.094300][T20587] __nla_validate_parse: 26 callbacks suppressed [ 234.094327][T20587] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4283'. [ 234.146361][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 234.162551][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 234.266164][T20610] tipc: Enabling of bearer rejected, failed to enable media [ 234.414967][T20627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4296'. [ 234.450007][T20627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4296'. [ 234.470697][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4294'. [ 234.514025][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4300'. [ 234.630735][T20646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4302'. [ 234.701660][T20653] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4301'. [ 234.755964][T20660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4307'. [ 234.782711][T20660] validate_nla: 7 callbacks suppressed [ 234.782727][T20660] netlink: 'syz.2.4307': attribute type 1 has an invalid length. [ 234.800381][T20660] netlink: 'syz.2.4307': attribute type 1 has an invalid length. [ 234.816181][T20660] netlink: 'syz.2.4307': attribute type 2 has an invalid length. [ 234.874677][T20660] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 235.037787][T20678] tipc: Enabling of bearer rejected, failed to enable media [ 235.084232][T20683] netlink: 'syz.2.4312': attribute type 6 has an invalid length. [ 235.185678][T20698] netlink: 'syz.0.4316': attribute type 1 has an invalid length. [ 235.266994][T20705] warn_alloc: 1 callbacks suppressed [ 235.267011][T20705] syz.2.4318: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 235.325592][T20705] CPU: 0 UID: 0 PID: 20705 Comm: syz.2.4318 Not tainted syzkaller #0 PREEMPT(full) [ 235.325617][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.325628][T20705] Call Trace: [ 235.325635][T20705] [ 235.325642][T20705] dump_stack_lvl+0x189/0x250 [ 235.325668][T20705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.325688][T20705] ? __pfx__printk+0x10/0x10 [ 235.325708][T20705] ? lock_release+0x4b/0x3e0 [ 235.325731][T20705] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 235.325752][T20705] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 235.325773][T20705] warn_alloc+0x214/0x310 [ 235.325796][T20705] ? stack_depot_save_flags+0x40/0x860 [ 235.325819][T20705] ? __pfx_warn_alloc+0x10/0x10 [ 235.325842][T20705] ? kasan_save_track+0x4f/0x80 [ 235.325862][T20705] ? xskq_create+0x56/0x170 [ 235.325882][T20705] ? xsk_init_queue+0xb0/0x110 [ 235.325901][T20705] ? xsk_setsockopt+0x4dc/0x8d0 [ 235.325919][T20705] ? do_sock_setsockopt+0x17c/0x1b0 [ 235.325935][T20705] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 235.325950][T20705] ? do_syscall_64+0xfa/0x3b0 [ 235.325972][T20705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.325992][T20705] __vmalloc_node_range_noprof+0x125/0x12f0 [ 235.326029][T20705] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.326051][T20705] ? xskq_create+0x56/0x170 [ 235.326072][T20705] ? __kasan_kmalloc+0x93/0xb0 [ 235.326094][T20705] vmalloc_user_noprof+0xad/0xf0 [ 235.326116][T20705] ? xskq_create+0xbf/0x170 [ 235.326138][T20705] xskq_create+0xbf/0x170 [ 235.326169][T20705] xsk_init_queue+0xb0/0x110 [ 235.326190][T20705] xsk_setsockopt+0x4dc/0x8d0 [ 235.326209][T20705] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.326228][T20705] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.326249][T20705] ? lock_release+0x4b/0x3e0 [ 235.326270][T20705] ? aa_sock_opt_perm+0xff/0x1b0 [ 235.326288][T20705] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 235.326306][T20705] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.326326][T20705] do_sock_setsockopt+0x17c/0x1b0 [ 235.326345][T20705] __x64_sys_setsockopt+0x13f/0x1b0 [ 235.326363][T20705] do_syscall_64+0xfa/0x3b0 [ 235.326386][T20705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.326401][T20705] ? clear_bhb_loop+0x60/0xb0 [ 235.326418][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.326434][T20705] RIP: 0033:0x7fee5218ebe9 [ 235.326449][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.326462][T20705] RSP: 002b:00007fee52f63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.326481][T20705] RAX: ffffffffffffffda RBX: 00007fee523b5fa0 RCX: 00007fee5218ebe9 [ 235.326493][T20705] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 235.326503][T20705] RBP: 00007fee52211e19 R08: 0000000000000004 R09: 0000000000000000 [ 235.326514][T20705] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.326526][T20705] R13: 00007fee523b6038 R14: 00007fee523b5fa0 R15: 00007ffc944da528 [ 235.326545][T20705] [ 235.326552][T20705] Mem-Info: [ 235.632849][T20705] active_anon:4654 inactive_anon:0 isolated_anon:0 [ 235.632849][T20705] active_file:2513 inactive_file:39905 isolated_file:0 [ 235.632849][T20705] unevictable:768 dirty:109 writeback:4 [ 235.632849][T20705] slab_reclaimable:12952 slab_unreclaimable:154155 [ 235.632849][T20705] mapped:28996 shmem:1360 pagetables:1611 [ 235.632849][T20705] sec_pagetables:0 bounce:0 [ 235.632849][T20705] kernel_misc_reclaimable:0 [ 235.632849][T20705] free:1258712 free_pcp:17432 free_cma:0 [ 235.682515][T20705] Node 0 active_anon:18516kB inactive_anon:0kB active_file:10052kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115984kB dirty:436kB writeback:16kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15132kB pagetables:6308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.721219][T20705] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.777719][T20705] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.810575][T20705] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 235.817293][T20705] Node 0 DMA32 free:1126056kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18368kB inactive_anon:0kB active_file:10052kB inactive_file:157864kB unevictable:1536kB writepending:452kB present:3129332kB managed:2557460kB mlocked:0kB bounce:0kB free_pcp:53248kB local_pcp:23100kB free_cma:0kB [ 235.857491][T20705] lowmem_reserve[]: 0 0 1 1 1 [ 235.868460][T20705] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 235.899915][T20705] lowmem_reserve[]: 0 0 0 0 0 [ 235.912187][T20705] Node 1 Normal free:3893408kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17728kB local_pcp:11648kB free_cma:0kB [ 235.953916][T20705] lowmem_reserve[]: 0 0 0 0 0 [ 235.958850][T20705] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.974392][T20705] Node 0 DMA32: 2721*4kB (UME) 796*8kB (UME) 366*16kB (UME) 1162*32kB (UM) 587*64kB (UME) 450*128kB (UME) 383*256kB (UME) 282*512kB (UME) 211*1024kB (UM) 12*2048kB (UME) 120*4096kB (UM) = 1130052kB [ 236.003746][T20705] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 236.019413][T20705] Node 1 Normal: 144*4kB (UME) 54*8kB (UME) 37*16kB (UME) 101*32kB (UME) 23*64kB (UME) 10*128kB (UME) 5*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893408kB [ 236.040017][T20705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.051438][T20705] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.061533][T20705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 236.071421][T20705] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 236.082105][T20705] 43774 total pagecache pages [ 236.086890][T20705] 0 pages in swap cache [ 236.091713][T20705] Free swap = 124996kB [ 236.096363][T20705] Total swap = 124996kB [ 236.103487][T20705] 2097051 pages RAM [ 236.107407][T20705] 0 pages HighMem/MovableOnly [ 236.113955][T20705] 425660 pages reserved [ 236.118208][T20705] 0 pages cma reserved [ 236.437818][T20792] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 236.446675][T20792] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 237.408486][T20815] nbd: illegal input index -8454144 [ 237.418125][T20814] nbd: illegal input index -8454144 [ 237.452958][T20817] netlink: 'syz.2.4353': attribute type 4 has an invalid length. [ 237.475493][T20818] netlink: 'syz.2.4353': attribute type 4 has an invalid length. [ 237.484776][T20824] tipc: Enabling of bearer rejected, failed to enable media [ 237.494824][T20822] netlink: 'syz.1.4354': attribute type 62 has an invalid length. [ 237.965986][T20857] netlink: 'syz.1.4362': attribute type 11 has an invalid length. [ 239.118009][T20924] __nla_validate_parse: 18 callbacks suppressed [ 239.118027][T20924] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4383'. [ 239.159697][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 239.249376][T20939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 239.273536][T20939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4390'. [ 239.283304][T20943] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4391'. [ 239.296812][T20943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4391'. [ 239.317623][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 239.335808][T20953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4390'. [ 239.412355][T20963] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4397'. [ 239.443939][T20960] sctp: [Deprecated]: syz.3.4396 (pid 20960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.443939][T20960] Use struct sctp_sack_info instead [ 239.460512][T20963] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 239.488205][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 239.804601][T21007] validate_nla: 4 callbacks suppressed [ 239.804637][T21007] netlink: 'syz.2.4414': attribute type 5 has an invalid length. [ 239.819896][T21009] netlink: 'syz.4.4409': attribute type 7 has an invalid length. [ 239.988853][T21027] Bluetooth: MGMT ver 1.23 [ 240.130308][T21043] netlink: 'syz.2.4422': attribute type 4 has an invalid length. [ 240.149399][T21044] netlink: 'syz.1.4424': attribute type 1 has an invalid length. [ 240.157546][T21043] netlink: 'syz.2.4422': attribute type 4 has an invalid length. [ 240.213090][T21048] geneve2: entered promiscuous mode [ 240.245440][T21050] dvmrp0: entered allmulticast mode [ 240.405872][T21060] batadv1: entered allmulticast mode [ 240.415991][T21062] batadv1: entered allmulticast mode [ 240.537803][T21067] dummy0: entered promiscuous mode [ 240.555405][T21067] batman_adv: batadv0: Adding interface: dummy0 [ 240.570930][T21067] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.603533][T21067] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 240.781338][T21089] openvswitch: netlink: Multiple metadata blocks provided [ 240.793461][T21089] openvswitch: netlink: Multiple metadata blocks provided [ 240.793820][T21091] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 240.802856][T21089] openvswitch: netlink: Multiple metadata blocks provided [ 240.814588][T21091] netlink: 'syz.3.4441': attribute type 10 has an invalid length. [ 240.820557][T21089] openvswitch: netlink: Multiple metadata blocks provided [ 240.823517][T21091] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 240.830902][T21089] openvswitch: netlink: Multiple metadata blocks provided [ 240.847019][T21091] batman_adv: batadv0: Removing interface: team0 [ 240.858527][T21091] bridge_slave_0: left allmulticast mode [ 240.865794][T21091] bridge_slave_0: left promiscuous mode [ 240.872671][T21091] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.886613][T21091] bridge_slave_1: left allmulticast mode [ 240.892804][T21091] bridge_slave_1: left promiscuous mode [ 240.898589][T21091] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.908535][T21093] netlink: 'syz.4.4442': attribute type 11 has an invalid length. [ 240.934354][T21091] bond0: (slave bond_slave_0): Releasing backup interface [ 240.945562][T21091] bond0: (slave bond_slave_1): Releasing backup interface [ 240.958645][T21091] team0: Port device team_slave_0 removed [ 240.960759][ T5182] Bluetooth: hci2: command 0x0405 tx timeout [ 240.973664][T21091] team0: Port device team_slave_1 removed [ 240.981631][T21091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.989022][T21091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.997791][T21091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.005504][T21091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.061696][T21098] tunl0: entered promiscuous mode [ 241.068797][T21098] netlink: 'syz.3.4444': attribute type 3 has an invalid length. [ 241.154832][T21104] netem: incorrect gi model size [ 241.162849][T21104] netem: change failed [ 241.360157][T21129] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 241.410612][T21129] bond8: entered promiscuous mode [ 241.415892][T21129] bond8: entered allmulticast mode [ 241.425486][T21129] 8021q: adding VLAN 0 to HW filter on device bond8 [ 241.460768][T21146] netlink: 'syz.4.4457': attribute type 7 has an invalid length. [ 241.750786][T21176] bridge_slave_0: left allmulticast mode [ 241.756616][T21176] bridge_slave_0: left promiscuous mode [ 241.764848][T21176] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.778413][T21176] bridge_slave_1: left allmulticast mode [ 241.784787][T21176] bridge_slave_1: left promiscuous mode [ 241.793919][T21176] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.806617][T21176] bond0: (slave bond_slave_0): Releasing backup interface [ 241.821657][T21176] bond0: (slave bond_slave_1): Releasing backup interface [ 241.835376][T21176] team0: Port device team_slave_0 removed [ 241.844186][T21176] team0: Port device team_slave_1 removed [ 241.851034][T21176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.858624][T21176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.868095][T21176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.875948][T21176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.891046][T21176] team0: Port device batadv1 removed [ 242.067789][T21196] batadv_slave_1: Device is already in use. [ 242.381129][T21216] netlink: 'syz.1.4480': attribute type 2 has an invalid length. [ 242.406666][T21216] netlink: 'syz.1.4480': attribute type 1 has an invalid length. [ 242.666845][T21246] 1ªî{X¹¦: entered promiscuous mode [ 242.682009][T21246] 1ªî{X¹¦: left allmulticast mode [ 242.697927][T21246] 0ªî{X¹¦: renamed from 31ªî{X¹¦ [ 242.709492][T21246] 0ªî{X¹¦: left promiscuous mode [ 242.716018][T21246] 0ªî{X¹¦: entered allmulticast mode [ 242.726878][T21246] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 242.852823][T21262] sock: sock_timestamping_bind_phc: sock not bind to device [ 243.000875][T21281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 243.014407][T21281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.074689][T21281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 243.089001][T21281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.178802][T21281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 243.191843][T21281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.264941][T21281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 243.275812][T21281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 243.336037][T17392] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.345154][T17392] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.368801][T17392] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.378752][T17392] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.403948][T17392] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.419310][T17392] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.427873][T17392] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 243.437046][T17392] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.515292][T21320] sch_fq: defrate 0 ignored. [ 243.647130][T21330] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 243.934921][T21370] IPVS: length: 24 != 18874392 [ 244.184589][T21385] __nla_validate_parse: 39 callbacks suppressed [ 244.184610][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4532'. [ 244.197833][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4534'. [ 244.305821][T21399] veth0: entered promiscuous mode [ 244.328067][T21401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4537'. [ 244.344927][T21404] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4538'. [ 244.405491][T21404] openvswitch: netlink: Missing key (keys=40, expected=80) [ 244.551917][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'. [ 244.577805][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'. [ 244.591228][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4546'. [ 244.606511][T21426] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4546'. [ 244.639554][T21429] dvmrp0: entered allmulticast mode [ 244.651904][T21429] dvmrp0: left allmulticast mode [ 244.675603][T21432] tipc: Enabled bearer , priority 0 [ 244.687152][T21432] syzkaller0: entered promiscuous mode [ 244.693950][T21432] syzkaller0: entered allmulticast mode [ 244.709439][T21432] tipc: Resetting bearer [ 244.719435][T21429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4547'. [ 244.767912][T21431] tipc: Resetting bearer [ 244.780633][T21431] tipc: Disabling bearer [ 244.804915][T21429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4547'. [ 245.015840][T21460] : entered promiscuous mode [ 245.195812][T21475] syzkaller0: entered promiscuous mode [ 245.202761][T21475] syzkaller0: entered allmulticast mode [ 246.096482][T21529] validate_nla: 1 callbacks suppressed [ 246.096500][T21529] netlink: 'syz.2.4577': attribute type 21 has an invalid length. [ 246.478993][T21572] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.496112][T21572] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.524327][T21575] nft_compat: unsupported protocol 1 [ 246.543121][T21572] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.556885][T21572] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.603670][T21572] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.618239][T21572] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.676502][T21572] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.686784][T21572] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.734333][T21585] netlink: 'syz.0.4595': attribute type 11 has an invalid length. [ 246.777929][T17383] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.791132][T17383] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.825003][T17383] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.834266][T17383] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.856872][T17383] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.867183][T17383] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.877704][T17383] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.878898][T21602] netlink: 'syz.4.4600': attribute type 12 has an invalid length. [ 246.913805][T21602] netlink: 'syz.4.4600': attribute type 11 has an invalid length. [ 246.917582][T17383] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.995333][T21616] netlink: 'syz.0.4605': attribute type 1 has an invalid length. [ 246.995371][T21613] bridge_slave_1: default FDB implementation only supports local addresses [ 247.900368][T21650] netlink: 'syz.0.4614': attribute type 3 has an invalid length. [ 248.042676][T21654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.183989][T21669] netlink: 'syz.4.4620': attribute type 5 has an invalid length. [ 248.210073][T21669] netlink: 'syz.4.4620': attribute type 5 has an invalid length. [ 248.318976][T21682] netlink: 'syz.1.4634': attribute type 5 has an invalid length. [ 248.572871][T21706] netlink: 'syz.1.4632': attribute type 3 has an invalid length. [ 249.088179][ T30] audit: type=1800 audit(1756008018.796:5): pid=21754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4647" name="memory.events" dev="tmpfs" ino=2043 res=0 errno=0 [ 249.320957][T21775] __nla_validate_parse: 23 callbacks suppressed [ 249.320976][T21775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4655'. [ 249.345869][T21765] netlink: 'syz.1.4648': attribute type 7 has an invalid length. [ 249.368500][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 249.378759][T21780] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4655'. [ 249.389202][T21775] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 249.408817][T21780] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 249.441138][T21787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4657'. [ 249.597151][T21808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4662'. [ 249.613783][T21808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.664035][T21815] openvswitch: netlink: Key type 14352 is out of range max 32 [ 249.701341][T21815] openvswitch: netlink: Key type 14352 is out of range max 32 [ 249.761007][T21833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4670'. [ 249.786674][T21836] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4668'. [ 249.798409][T21838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4669'. [ 249.869327][T21834] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4670'. [ 249.884947][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4670'. [ 249.898595][T21833] batman_adv: batadv0: Removing interface: dummy0 [ 250.184520][T21883] sctp: [Deprecated]: syz.4.4686 (pid 21883) Use of int in maxseg socket option. [ 250.184520][T21883] Use struct sctp_assoc_value instead [ 250.412451][T21906] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.440127][T21906] bond2: (slave veth1): Enslaving as an active interface with a down link [ 250.549208][T21922] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 250.766112][T21941] pimreg: left allmulticast mode [ 251.334517][T21989] openvswitch: netlink: Message has -1 unknown bytes. [ 251.456469][T22004] validate_nla: 9 callbacks suppressed [ 251.456485][T22004] netlink: 'syz.3.4717': attribute type 9 has an invalid length. [ 251.585271][T22019] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 251.591726][T22019] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.814777][T22035] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.924401][T22046] netlink: 'syz.3.4732': attribute type 1 has an invalid length. [ 251.936934][T22046] netlink: 'syz.3.4732': attribute type 4 has an invalid length. [ 251.999475][T22056] netlink: 'syz.4.4734': attribute type 24 has an invalid length. [ 252.218061][T22076] netlink: 'syz.3.4743': attribute type 17 has an invalid length. [ 252.240741][T22076] erspan0: entered promiscuous mode [ 252.256096][T22076] erspan0: left promiscuous mode [ 252.375820][T22092] netlink: 'syz.1.4750': attribute type 13 has an invalid length. [ 252.396953][T22092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.506448][T22107] netlink: 'syz.2.4754': attribute type 1 has an invalid length. [ 252.532542][T22107] tipc: Enabled bearer , priority 0 [ 252.543744][T22107] syzkaller0: entered promiscuous mode [ 252.549270][T22107] syzkaller0: entered allmulticast mode [ 252.557957][T22106] tipc: Resetting bearer [ 252.588411][T22106] tipc: Disabling bearer [ 252.634975][T22114] bridge_slave_0: left allmulticast mode [ 252.641163][T22114] bridge_slave_0: left promiscuous mode [ 252.646929][T22114] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.136150][T22164] : renamed from bridge_slave_0 [ 253.265765][T22177] hsr0 speed is unknown, defaulting to 1000 [ 253.348406][T22188] netlink: 'syz.1.4781': attribute type 5 has an invalid length. [ 253.429880][T22191] tipc: Enabled bearer , priority 0 [ 253.486489][T22191] syzkaller0: entered promiscuous mode [ 253.496627][T22191] syzkaller0: entered allmulticast mode [ 253.504613][T22191] tipc: Resetting bearer [ 253.531841][ T65] tipc: Resetting bearer [ 253.543572][T22190] tipc: Resetting bearer [ 253.584614][T22208] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 253.638706][T22190] tipc: Disabling bearer [ 253.802908][T22228] netlink: 'syz.3.4794': attribute type 18 has an invalid length. [ 254.099264][T22250] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.175749][T22250] bond2 (unregistering): Released all slaves [ 254.229269][T22256] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 254.473167][T22305] __nla_validate_parse: 38 callbacks suppressed [ 254.473185][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4819'. [ 254.579462][T22313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4822'. [ 254.595751][T22313] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4822'. [ 254.622367][T22317] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 254.696493][T22325] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 254.854786][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'. [ 254.959521][T22345] block nbd3: Unsupported socket: shutdown callout must be supported. [ 255.117797][T22359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4836'. [ 255.134643][T22362] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4837'. [ 255.134708][T22361] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4837'. [ 255.145777][T22362] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.156992][T22361] openvswitch: netlink: Actions may not be safe on all matching packets [ 255.268826][T22375] syzkaller1: entered promiscuous mode [ 255.275768][T22375] syzkaller1: entered allmulticast mode [ 255.376590][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'. [ 255.386872][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4844'. [ 255.711938][T22421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4857'. [ 255.761275][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.837570][T22438] 8021q: VLANs not supported on ip6gre0 [ 255.910636][T22440] hsr0 speed is unknown, defaulting to 1000 [ 255.991723][T22450] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 256.198573][T22460] tc_dump_action: action bad kind [ 256.344066][T17390] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.360892][T17390] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.370253][T11049] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.475294][T22494] sctp: [Deprecated]: syz.1.4875 (pid 22494) Use of int in maxseg socket option. [ 256.475294][T22494] Use struct sctp_assoc_value instead [ 256.533358][T22499] IPv6: Can't replace route, no match found [ 257.040755][T11049] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 257.116248][T22552] validate_nla: 6 callbacks suppressed [ 257.116267][T22552] netlink: 'syz.2.4895': attribute type 8 has an invalid length. [ 257.133337][T11039] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 257.142379][T22552] netlink: 'syz.2.4895': attribute type 12 has an invalid length. [ 257.312960][T22571] netlink: 'syz.0.4902': attribute type 1 has an invalid length. [ 257.663995][T22597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.376852][T22672] netlink: 'syz.1.4933': attribute type 83 has an invalid length. [ 258.613632][T22692] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 259.337054][T22775] netlink: 'syz.1.4964': attribute type 10 has an invalid length. [ 259.350928][T22775] team0: Device veth1_macvtap failed to register rx_handler [ 259.485040][T22789] __nla_validate_parse: 25 callbacks suppressed [ 259.485057][T22789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 259.502340][T22789] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 259.511109][T22789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.717642][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4978'. [ 259.746648][T22818] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4980'. [ 259.926542][T22748] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 260.034640][T22843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4987'. [ 260.333606][T22878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5000'. [ 260.343557][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5000'. [ 260.392266][T22886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.415682][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5000'. [ 260.502298][T22880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.574557][T22899] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 260.639139][T22906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5008'. [ 260.650253][T22904] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.677019][T22907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5010'. [ 260.703997][T22912] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5012'. [ 260.799782][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.824038][T22922] bridge2: entered promiscuous mode [ 260.829367][T22922] bridge2: entered allmulticast mode [ 260.877125][T22930] tipc: Enabled bearer , priority 0 [ 260.908774][T22935] tipc: Enabled bearer , priority 0 [ 260.969229][T22935] syzkaller0: entered promiscuous mode [ 260.978451][T22935] syzkaller0: entered allmulticast mode [ 260.987767][T22935] tipc: Resetting bearer [ 260.995856][T22930] syzkaller0: entered promiscuous mode [ 261.008594][T22930] syzkaller0: entered allmulticast mode [ 261.023775][T22937] tipc: Enabled bearer , priority 0 [ 261.052263][T22935] tipc: Resetting bearer [ 261.094712][T22939] netlink: 'syz.2.5018': attribute type 10 has an invalid length. [ 261.120699][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 261.127816][T22935] tipc: Disabling bearer [ 261.142223][T22930] tipc: Resetting bearer [ 261.179333][T22939] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.189515][T22939] bond0: (slave team0): Enslaving as an active interface with an up link [ 261.211909][T22949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.253565][T22929] tipc: Resetting bearer [ 261.284870][T22929] tipc: Disabling bearer [ 261.306418][ T30] audit: type=1800 audit(1756008031.016:6): pid=22950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5022" name="memory.events" dev="tmpfs" ino=1788 res=0 errno=0 [ 261.723194][T22983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.778507][T22999] netlink: 'syz.3.5037': attribute type 28 has an invalid length. [ 261.789345][T22999] netlink: 'syz.3.5037': attribute type 3 has an invalid length. [ 261.848198][T23003] netlink: 'syz.3.5039': attribute type 4 has an invalid length. [ 261.862161][T23003] `: renamed from bond0 (while UP) [ 261.921096][T23011] ip6gre2: entered allmulticast mode [ 261.942599][T23013] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 262.140688][ T979] tipc: Node number set to 932996584 [ 262.249242][T23032] tipc: Enabling of bearer rejected, already enabled [ 262.294357][T23035] tipc: Enabled bearer , priority 0 [ 262.304819][T23035] syzkaller0: entered promiscuous mode [ 262.312116][T23035] syzkaller0: entered allmulticast mode [ 262.337853][T23035] tipc: Resetting bearer [ 263.105920][T23034] tipc: Resetting bearer [ 263.116670][T23034] tipc: Disabling bearer [ 263.412881][T23087] netlink: 'syz.2.5067': attribute type 11 has an invalid length. [ 263.445166][T23087] netlink: 'syz.2.5067': attribute type 11 has an invalid length. [ 264.675949][T23161] __nla_validate_parse: 86 callbacks suppressed [ 264.675966][T23161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5085'. [ 264.732514][T23161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5085'. [ 264.748007][T23169] : entered promiscuous mode [ 264.756179][T23169] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5090'. [ 264.827583][T23184] netlink: 'syz.3.5093': attribute type 1 has an invalid length. [ 264.832916][T23188] netlink: 'syz.1.5092': attribute type 1 has an invalid length. [ 264.844238][T23188] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5092'. [ 264.973443][T23200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5097'. [ 265.125779][T23221] netlink: 'syz.1.5102': attribute type 3 has an invalid length. [ 265.155304][T23221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5102'. [ 265.223610][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5101'. [ 265.274406][T23234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5101'. [ 265.357716][T23239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5107'. [ 265.385144][T23241] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5108'. [ 265.485938][T23252] tipc: Enabled bearer , priority 10 [ 265.624959][T23263] netlink: 'syz.2.5115': attribute type 5 has an invalid length. [ 265.654738][T23253] delete_channel: no stack [ 265.727594][T23270] netlink: 'syz.0.5117': attribute type 1 has an invalid length. [ 267.037931][T23382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.084209][T23386] netlink: 'syz.3.5150': attribute type 21 has an invalid length. [ 267.098519][T23390] netlink: 'syz.0.5151': attribute type 1 has an invalid length. [ 267.106413][T23386] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.315751][T23416] xt_policy: too many policy elements [ 267.327079][T23411] syzkaller1: entered promiscuous mode [ 267.334103][T23416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 267.334732][T23411] syzkaller1: entered allmulticast mode [ 267.394827][T23422] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 267.445485][T23425] hsr0 speed is unknown, defaulting to 1000 [ 267.477432][T23430] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 267.528321][T23430] bond3: entered promiscuous mode [ 267.537820][T23430] bond3: entered allmulticast mode [ 267.545885][T23430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.562142][T23438] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 267.600315][T23438] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 267.878832][T23459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.053485][T23481] syzkaller1: entered promiscuous mode [ 268.065715][T23481] syzkaller1: entered allmulticast mode [ 268.476232][T23520] netlink: 'syz.0.5187': attribute type 1 has an invalid length. [ 268.833749][T23558] netlink: 'syz.4.5198': attribute type 24 has an invalid length. [ 268.977495][ T65] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 269.018479][T23595] netlink: 'syz.4.5208': attribute type 1 has an invalid length. [ 269.041855][T23595] bond4: (slave gretap1): making interface the new active one [ 269.050901][T23595] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 269.786335][T23611] __nla_validate_parse: 24 callbacks suppressed [ 269.786352][T23611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5211'. [ 269.823838][T23611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 269.839714][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.856323][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5211'. [ 269.934792][T23627] netlink: 4396 bytes leftover after parsing attributes in process `syz.3.5218'. [ 269.958245][T23627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5218'. [ 270.081693][T23646] netlink: 'syz.2.5223': attribute type 1 has an invalid length. [ 270.235520][T23657] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 270.256483][T23665] netlink: 'syz.2.5226': attribute type 10 has an invalid length. [ 270.303588][T23665] bond0: (slave wlan1): Opening slave failed [ 270.344772][T23669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5231'. [ 270.429488][T23675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5234'. [ 270.444345][T23677] netlink: 'syz.0.5238': attribute type 10 has an invalid length. [ 270.467528][T23682] tipc: Bearer : already 2 bearers with priority 10 [ 270.477078][T23682] tipc: Bearer : trying with adjusted priority [ 270.477983][T23677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 270.489010][T23682] tipc: Enabled bearer , priority 9 [ 270.504592][T23684] pimreg3: entered allmulticast mode [ 270.519096][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5238'. [ 270.530886][T23689] netlink: 'syz.0.5238': attribute type 10 has an invalid length. [ 270.534779][T23682] tipc: Enabling of bearer rejected, already enabled [ 270.546594][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 270.702895][T23705] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 270.784997][T23714] tipc: Enabled bearer , priority 0 [ 270.818569][T23714] syzkaller0: entered promiscuous mode [ 270.831359][T23714] syzkaller0: entered allmulticast mode [ 270.868046][T23714] tipc: Resetting bearer [ 270.904791][T23713] tipc: Resetting bearer [ 270.964028][T23713] tipc: Disabling bearer [ 270.980585][T23733] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.981862][T23742] nbd: illegal input index -8454144 [ 271.011364][T23741] netlink: 'syz.0.5253': attribute type 39 has an invalid length. [ 271.307003][T23768] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 271.367094][T23774] netlink: 'syz.3.5266': attribute type 1 has an invalid length. [ 271.393580][T23774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.425608][T23774] bond0: (slave gretap1): making interface the new active one [ 271.471102][T23774] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 271.568276][T23791] wg2: entered promiscuous mode [ 271.575055][T23791] wg2: entered allmulticast mode [ 271.886927][T23840] netlink: 'syz.4.5287': attribute type 5 has an invalid length. [ 271.895605][T23842] netlink: 'syz.4.5287': attribute type 5 has an invalid length. [ 272.018576][T23854] netlink: 'syz.4.5292': attribute type 1 has an invalid length. [ 272.074911][T23859] netlink: 'syz.2.5293': attribute type 9 has an invalid length. [ 272.084464][T23860] bond3: entered promiscuous mode [ 272.089525][T23860] bond3: entered allmulticast mode [ 272.096664][T23860] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.220729][T23871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 272.254976][T23877] sctp: [Deprecated]: syz.3.5301 (pid 23877) Use of int in maxseg socket option. [ 272.254976][T23877] Use struct sctp_assoc_value instead [ 272.279230][T23876] bond5: (slave gretap2): making interface the new active one [ 272.290478][T23876] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 272.546703][T23890] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 272.558181][T23890] 0ªî{X¹¦: entered allmulticast mode [ 272.571430][T23890] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 272.601734][T23893] hsr0 speed is unknown, defaulting to 1000 [ 272.626724][T23900] bridge8: entered promiscuous mode [ 272.659232][T23900] bridge8: entered allmulticast mode [ 272.735104][T23904] lo speed is unknown, defaulting to 1000 [ 272.756110][T23904] lo speed is unknown, defaulting to 1000 [ 272.764037][T23904] lo speed is unknown, defaulting to 1000 [ 272.798471][T23919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.902124][T23904] infiniband syz0: set active [ 272.906910][T11039] lo speed is unknown, defaulting to 1000 [ 272.915848][T11039] syz0: Port: 1 Link ACTIVE [ 272.920800][T23904] infiniband syz0: added lo [ 272.975586][T23904] RDS/IB: syz0: added [ 272.983920][T23904] smc: adding ib device syz0 with port count 1 [ 272.991438][T23904] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 272.999192][T17311] lo speed is unknown, defaulting to 1000 [ 273.008629][T23904] lo speed is unknown, defaulting to 1000 [ 273.342842][T23904] lo speed is unknown, defaulting to 1000 [ 273.422636][T23984] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 273.434201][T23984] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 273.689668][T23904] lo speed is unknown, defaulting to 1000 [ 273.769086][T24015] openvswitch: netlink: Missing key (keys=40, expected=100) [ 273.872017][T24018] tc_dump_action: action bad kind [ 273.931334][T23904] lo speed is unknown, defaulting to 1000 [ 273.958652][T24029] netlink: zone id is out of range [ 273.974294][T24029] netlink: zone id is out of range [ 273.983979][T24029] netlink: zone id is out of range [ 273.994505][T24029] netlink: zone id is out of range [ 274.005533][T24029] netlink: zone id is out of range [ 274.026190][T24029] netlink: zone id is out of range [ 274.042892][T24029] netlink: zone id is out of range [ 274.093747][T23904] lo speed is unknown, defaulting to 1000 [ 274.264424][T23904] lo speed is unknown, defaulting to 1000 [ 274.331347][T24059] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 274.340151][T24059] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 274.420390][T23904] lo speed is unknown, defaulting to 1000 [ 274.531035][T23904] lo speed is unknown, defaulting to 1000 [ 274.643158][T23904] lo speed is unknown, defaulting to 1000 [ 275.168872][T24119] validate_nla: 6 callbacks suppressed [ 275.168891][T24119] netlink: 'syz.4.5373': attribute type 1 has an invalid length. [ 275.208059][T24085] __nla_validate_parse: 34 callbacks suppressed [ 275.208077][T24085] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5365'. [ 275.225604][T17383] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.237161][T17383] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.247961][T17383] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.256596][T17383] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.265415][T24103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5370'. [ 275.292876][T24123] netlink: 'syz.2.5374': attribute type 10 has an invalid length. [ 275.303685][T24123] bond0: (slave wlan1): Opening slave failed [ 275.320248][T17383] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.328601][T17383] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.347239][T17383] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.349325][T24119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5373'. [ 275.359361][T17383] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.377478][T24123] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5374'. [ 275.533888][T24144] sctp: [Deprecated]: syz.1.5379 (pid 24144) Use of int in maxseg socket option. [ 275.533888][T24144] Use struct sctp_assoc_value instead [ 275.565507][T24137] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5378'. [ 275.683143][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5383'. [ 275.716563][T24156] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 275.742916][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5387'. [ 275.770551][T24165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5387'. [ 276.008830][T24198] netlink: 'syz.4.5396': attribute type 11 has an invalid length. [ 276.054000][T24201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5393'. [ 276.066095][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5397'. [ 276.114142][T24202] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 276.123115][ T3525] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20000 - 0 [ 276.136862][ T3525] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20000 - 0 [ 276.146582][ T3525] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20000 - 0 [ 276.155735][ T3525] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20000 - 0 [ 276.512126][T24218] netlink: 'syz.3.5399': attribute type 1 has an invalid length. [ 276.520274][T24218] netlink: 'syz.3.5399': attribute type 11 has an invalid length. [ 276.601840][T24222] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 277.780924][T24313] netlink: 'syz.0.5428': attribute type 4 has an invalid length. [ 277.843940][T24318] netlink: 'syz.2.5431': attribute type 1 has an invalid length. [ 277.864376][T24322] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 277.904530][T24318] bond9: entered promiscuous mode [ 277.912972][T24318] 8021q: adding VLAN 0 to HW filter on device bond9 [ 277.962535][T24318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 277.971218][T24318] bond9: (slave bond10): making interface the new active one [ 277.978604][T24318] bond10: entered promiscuous mode [ 277.985889][T24318] bond9: (slave bond10): Enslaving as an active interface with an up link [ 278.278157][T24377] netlink: 'syz.0.5439': attribute type 11 has an invalid length. [ 278.390552][T24387] dvmrp0: left allmulticast mode [ 278.395682][T24387] dvmrp1: left allmulticast mode [ 278.563424][T24402] netlink: 'syz.0.5452': attribute type 1 has an invalid length. [ 278.589095][T24402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.607277][T24402] vlan0: entered promiscuous mode [ 278.613534][T24402] bond3: entered promiscuous mode [ 278.618834][T24402] vlan0: entered allmulticast mode [ 278.624250][T24402] bond3: entered allmulticast mode [ 278.746513][T24416] netlink: 'syz.1.5456': attribute type 1 has an invalid length. [ 278.880849][T24432] net_ratelimit: 16 callbacks suppressed [ 278.880874][T24432] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 279.469019][T24472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.483538][T24472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.535934][T24472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.548539][T24472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.596365][T24472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.613189][T24472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.694673][T24472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 279.706620][T24472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 279.777029][ T3525] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 279.785790][ T3525] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.806599][ T3525] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 279.819138][ T3525] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.838121][ T3525] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 279.852671][ T3525] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.863905][ T3525] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 279.884984][ T3525] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 280.049354][T24527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.056645][T24527] IPv6: NLM_F_CREATE should be set when creating new route [ 280.063889][T24527] IPv6: NLM_F_CREATE should be set when creating new route [ 280.073137][T24527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 280.073424][T24532] bond0: option ad_select: unable to set because the bond device is up [ 280.260546][T24548] __nla_validate_parse: 22 callbacks suppressed [ 280.260564][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5497'. [ 280.405186][T24565] gtp0: entered promiscuous mode [ 280.410299][T24565] gtp0: entered allmulticast mode [ 280.496311][T24579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.531724][T24576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.555106][T24582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5507'. [ 280.568023][T17311] lo speed is unknown, defaulting to 1000 [ 280.586457][T24576] team0: Device vti0 is of different type [ 280.674809][T24594] netlink: 1604 bytes leftover after parsing attributes in process `syz.3.5512'. [ 280.781971][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5515'. [ 280.796717][T24609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5515'. [ 280.811769][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5515'. [ 280.820362][T24608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5515'. [ 280.823124][T24609] validate_nla: 4 callbacks suppressed [ 280.823137][T24609] netlink: 'syz.3.5515': attribute type 14 has an invalid length. [ 280.861927][T24608] netlink: 'syz.3.5515': attribute type 14 has an invalid length. [ 280.869667][T24609] netlink: 'syz.3.5515': attribute type 13 has an invalid length. [ 280.870676][T24608] netlink: 'syz.3.5515': attribute type 13 has an invalid length. [ 280.899159][T24618] vlan5: entered promiscuous mode [ 280.904326][T24618] bridge0: entered promiscuous mode [ 281.153483][T24647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5528'. [ 281.275660][T24656] tipc: Enabled bearer , priority 0 [ 281.302167][T24663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5533'. [ 281.302770][T24656] syzkaller0: entered promiscuous mode [ 281.325707][T24656] syzkaller0: entered allmulticast mode [ 281.360472][T24656] tipc: Resetting bearer [ 281.372754][T24654] tipc: Resetting bearer [ 281.392865][T24654] tipc: Disabling bearer [ 281.603066][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5540'. [ 281.718375][ T979] hid (null): unknown global tag 0xe [ 281.725546][ T979] hid (null): nested delimiters [ 281.742467][ T979] hid (null): report_id 0 is invalid [ 281.753324][ T979] hid (null): bogus close delimiter [ 281.775354][ T979] hid (null): report_id 49367 is invalid [ 281.781178][ T979] hid (null): unknown global tag 0xd [ 281.899500][T24726] tipc: Enabling of bearer rejected, failed to enable media [ 281.926762][T24726] netlink: 'syz.2.5549': attribute type 10 has an invalid length. [ 281.952375][T24726] bond0: (slave team0): Releasing backup interface [ 281.969183][T24726] batman_adv: batadv0: Adding interface: team0 [ 281.989114][T24726] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.025023][T24726] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 282.365534][T24767] dvmrp0: entered allmulticast mode [ 282.803874][T24807] netlink: 'syz.2.5571': attribute type 1 has an invalid length. [ 282.872554][T24807] bond11: (slave bridge9): making interface the new active one [ 282.923467][T24807] bond11: (slave bridge9): Enslaving as an active interface with an up link [ 283.368341][ T979] hid-generic 0005:0D45:1012.0002: unknown global tag 0xe [ 283.399462][ T979] hid-generic 0005:0D45:1012.0002: item 0 2 1 14 parsing failed [ 283.426134][ T979] hid-generic 0005:0D45:1012.0002: probe with driver hid-generic failed with error -22 [ 283.499459][T24842] netlink: 'syz.0.5586': attribute type 4 has an invalid length. [ 283.514606][T24847] netlink: 'syz.0.5586': attribute type 4 has an invalid length. [ 283.714976][T24858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.969380][T24876] netlink: 'syz.4.5597': attribute type 2 has an invalid length. [ 284.009715][T24876] nbd: must specify a device to reconfigure [ 284.205447][T24896] netlink: 'syz.3.5604': attribute type 12 has an invalid length. [ 284.242855][T24902] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 284.265956][T24904] delete_channel: no stack [ 284.490201][T24920] syzkaller0: entered promiscuous mode [ 284.504148][T24920] syzkaller0: entered allmulticast mode [ 284.725393][T24940] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 284.736133][T24951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.748123][T24951] IPv6: NLM_F_CREATE should be set when creating new route [ 284.755367][T24951] IPv6: NLM_F_CREATE should be set when creating new route [ 284.762615][T24951] IPv6: NLM_F_CREATE should be set when creating new route [ 284.784233][T24951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.089370][ T65] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.147801][ T65] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.175958][ T65] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.204741][T24990] geneve2: entered promiscuous mode [ 285.224348][T24990] geneve2: entered allmulticast mode [ 285.235461][ T65] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.255428][ T65] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 285.299726][ T65] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 285.312671][ T65] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 285.335517][T24994] veth0_vlan: entered allmulticast mode [ 285.365875][T25011] __nla_validate_parse: 23 callbacks suppressed [ 285.365896][T25011] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5636'. [ 285.400914][T24994] veth0_vlan: left promiscuous mode [ 285.423112][T24994] veth0_vlan: entered promiscuous mode [ 285.430190][T24994] team0: Device veth0_vlan failed to register rx_handler [ 285.473510][ T65] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 285.574521][T25020] tipc: Enabled bearer , priority 0 [ 285.583813][T25020] syzkaller0: entered promiscuous mode [ 285.589469][T25020] syzkaller0: entered allmulticast mode [ 285.603909][T25020] tipc: Resetting bearer [ 285.615500][T25019] tipc: Resetting bearer [ 285.629385][T25019] tipc: Disabling bearer [ 285.781091][T25040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5649'. [ 285.808809][T25043] unknown channel width for channel at 909000KHz? [ 285.925860][T25056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5655'. [ 286.017006][T25067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.020966][T25068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'. [ 286.107647][T25075] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5661'. [ 286.123477][T25072] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5661'. [ 286.176360][T25079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5664'. [ 286.265557][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5669'. [ 286.292781][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5671'. [ 286.335676][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5668'. [ 286.433018][T25121] validate_nla: 5 callbacks suppressed [ 286.433037][T25121] netlink: 'syz.3.5678': attribute type 24 has an invalid length. [ 286.509542][T25131] netlink: 'syz.4.5679': attribute type 4 has an invalid length. [ 286.530003][T25132] bond4: entered promiscuous mode [ 286.535346][T25132] bond4: entered allmulticast mode [ 286.542725][T25132] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.559468][T25134] netlink: 'syz.0.5681': attribute type 24 has an invalid length. [ 286.738027][T25154] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 286.827891][T25162] netlink: 'syz.0.5691': attribute type 1 has an invalid length. [ 286.835789][T25162] netlink: 'syz.0.5691': attribute type 3 has an invalid length. [ 286.845691][T25162] NCSI netlink: No device for ifindex 131080 [ 287.119778][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.285118][T25211] tc_dump_action: action bad kind [ 287.686773][T25261] netlink: zone id is out of range [ 287.704670][T25261] netlink: get zone limit has 8 unknown bytes [ 287.870175][T25271] lo: entered promiscuous mode [ 287.886935][T25271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.937771][T17308] lo speed is unknown, defaulting to 1000 [ 287.948428][T17308] syz0: Port: 1 Link DOWN [ 287.959470][T25275] tipc: Started in network mode [ 287.981915][T25275] tipc: Node identity 368d7609d539, cluster identity 4711 [ 287.989858][T25275] tipc: Enabled bearer , priority 0 [ 287.996704][T17308] lo speed is unknown, defaulting to 1000 [ 287.997481][T25275] syzkaller0: entered promiscuous mode [ 288.008031][T25275] syzkaller0: entered allmulticast mode [ 288.072265][T25275] tipc: Resetting bearer [ 288.086570][T25274] tipc: Resetting bearer [ 288.106669][T25274] tipc: Disabling bearer [ 288.146014][T25287] netlink: 'syz.3.5728': attribute type 1 has an invalid length. [ 288.155317][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.155993][T25287] netlink: 'syz.3.5728': attribute type 1 has an invalid length. [ 288.174523][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.185003][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.194128][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.204104][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.224513][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.242282][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.264557][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 288.308858][T25286] hsr0 speed is unknown, defaulting to 1000 [ 288.335022][T25301] netlink: 'syz.2.5731': attribute type 21 has an invalid length. [ 288.366619][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.383898][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.405374][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 288.431994][T25286] lo speed is unknown, defaulting to 1000 [ 288.496221][T25316] netlink: zone id is out of range [ 288.521307][T25316] netlink: zone id is out of range [ 288.526450][T25316] netlink: zone id is out of range [ 288.546339][T25316] netlink: zone id is out of range [ 288.557948][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.570035][T25316] netlink: zone id is out of range [ 288.599904][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.629746][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 288.708161][T25316] hsr0 speed is unknown, defaulting to 1000 [ 288.718456][T25316] lo speed is unknown, defaulting to 1000 [ 288.871919][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.916406][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.946384][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 289.088887][T25350] sctp: [Deprecated]: syz.3.5744 (pid 25350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.088887][T25350] Use struct sctp_sack_info instead [ 289.140934][T25350] sctp: [Deprecated]: syz.3.5744 (pid 25350) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.140934][T25350] Use struct sctp_sack_info instead [ 289.556364][ T3525] bond0 (unregistering): (slave team0): Releasing backup interface [ 289.565694][ T3525] bond0 (unregistering): Released all slaves [ 289.576735][ T3525] bond1 (unregistering): Released all slaves [ 289.585784][ T3525] bond2 (unregistering): Released all slaves [ 289.598201][T25286] chnl_net:caif_netlink_parms(): no params data found [ 289.622990][T25366] batadv_slave_0: entered allmulticast mode [ 289.657050][T25368] dvmrp1: entered allmulticast mode [ 289.686296][ T3525] : left promiscuous mode [ 289.712678][T25353] batadv_slave_0: left allmulticast mode [ 289.777188][ T3525] tipc: Disabling bearer [ 289.787808][ T3525] tipc: Left network mode [ 289.870801][T25286] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.878087][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.886121][T25286] bridge_slave_0: entered allmulticast mode [ 289.893818][T25286] bridge_slave_0: entered promiscuous mode [ 289.930566][T25286] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.938054][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.948718][T25286] bridge_slave_1: entered allmulticast mode [ 289.960387][T25286] bridge_slave_1: entered promiscuous mode [ 290.003268][T25286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.018730][T25286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.080720][T25286] team0: Port device team_slave_0 added [ 290.109210][T25286] team0: Port device team_slave_1 added [ 290.193527][ T3525] hsr_slave_0: left promiscuous mode [ 290.209754][ T3525] vlan0: left allmulticast mode [ 290.214992][ T3525] veth0_vlan: left allmulticast mode [ 290.228806][ T3525] vlan0: left promiscuous mode [ 290.233966][ T3525] veth0_macvtap: left promiscuous mode [ 290.239475][ T3525] veth1_vlan: left promiscuous mode [ 290.244923][ T51] Bluetooth: hci1: command tx timeout [ 290.249175][ T3525] veth0_vlan: left promiscuous mode [ 290.382160][T25427] nbd3: detected capacity change from 0 to 127 [ 290.424969][T25286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.432155][T25286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.458746][T25286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.474565][T25286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.485173][T25286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.512545][T25286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.523830][T17313] hsr0 speed is unknown, defaulting to 1000 [ 290.532256][ T51] block nbd3: Receive control failed (result -32) [ 290.532372][T17313] infiniband syz1: ib_query_port failed (-19) [ 290.602120][T25286] hsr_slave_0: entered promiscuous mode [ 290.612793][T25286] hsr_slave_1: entered promiscuous mode [ 290.624979][T25286] debugfs: 'hsr0' already exists in 'hsr' [ 290.631897][T25286] Cannot create hsr debugfs directory [ 290.713452][T25438] __nla_validate_parse: 22 callbacks suppressed [ 290.713472][T25438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5768'. [ 290.856303][ T3525] IPVS: stop unused estimator thread 0... [ 291.177577][T25471] netlink: 'syz.2.5778': attribute type 13 has an invalid length. [ 291.202111][T25474] netlink: 'syz.3.5780': attribute type 39 has an invalid length. [ 291.255998][T25471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.267914][T25471] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.275827][T25471] batman_adv: batadv0: Interface activated: team0 [ 291.285590][T25471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.308578][T25471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.317172][T25471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.328539][T25471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.339482][T25471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.352253][T25471] net_ratelimit: 4 callbacks suppressed [ 291.352265][T25471] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 291.375070][T25286] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.417036][ T12] bridge0: port 1() entered blocking state [ 291.423039][ T12] bridge0: port 1() entered forwarding state [ 291.438940][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.446067][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.473389][T25286] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.489409][T25286] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.507102][T25286] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.528914][T25490] netlink: 'syz.2.5783': attribute type 1 has an invalid length. [ 291.552899][T25490] netlink: 'syz.2.5783': attribute type 1 has an invalid length. [ 291.567733][T25490] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5783'. [ 291.673939][T25286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.714903][T25286] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.731808][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.738914][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.757163][T17387] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.764319][T17387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.958973][T25528] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.5792'. [ 291.984683][T25530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.992398][T25530] IPv6: NLM_F_CREATE should be set when creating new route [ 292.158598][T25286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.247644][T25286] veth0_vlan: entered promiscuous mode [ 292.278009][T25286] veth1_vlan: entered promiscuous mode [ 292.311045][T25557] nbd: socks must be embedded in a SOCK_ITEM attr [ 292.320566][ T5182] Bluetooth: hci1: command tx timeout [ 292.376521][T25286] veth0_macvtap: entered promiscuous mode [ 292.428357][T25286] veth1_macvtap: entered promiscuous mode [ 292.434102][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5802'. [ 292.457220][T25572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5802'. [ 292.477823][T25572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5802'. [ 292.484044][T25575] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5803'. [ 292.526557][T25286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.536821][T25578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.563109][T25286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.602388][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.622283][ T6100] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.671315][ T6100] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.693151][ T6100] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.845529][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.875652][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.945998][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.975440][T25613] syzkaller1: entered promiscuous mode [ 292.983501][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.008058][T25613] syzkaller1: entered allmulticast mode [ 293.174639][T25625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.529477][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5822'. [ 293.549881][T25649] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 293.558471][T25649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.583118][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5824'. [ 293.594736][T25654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5824'. [ 293.654816][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.667960][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.676454][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.685429][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 293.692112][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 293.705461][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.722854][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.800696][T25655] lo speed is unknown, defaulting to 1000 [ 294.008495][T25682] vlan1: entered promiscuous mode [ 294.014606][T25682] bridge0: entered promiscuous mode [ 294.338089][T25655] chnl_net:caif_netlink_parms(): no params data found [ 294.401005][ T51] Bluetooth: hci1: command tx timeout [ 294.442854][T25655] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.451795][T25655] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.459057][T25655] bridge_slave_0: entered allmulticast mode [ 294.467564][T25655] bridge_slave_0: entered promiscuous mode [ 294.476193][T25731] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 294.486487][T25655] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.494564][T25731] netlink: 'syz.2.5843': attribute type 10 has an invalid length. [ 294.503192][T25655] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.511064][T25655] bridge_slave_1: entered allmulticast mode [ 294.518153][T25655] bridge_slave_1: entered promiscuous mode [ 294.527644][T25731] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.577375][T25740] : renamed from bridge_slave_0 (while UP) [ 294.646737][T25655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.674408][T25655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.704995][T25750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.775552][T25655] team0: Port device team_slave_0 added [ 294.783722][T25655] team0: Port device team_slave_1 added [ 294.814645][T25655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.830219][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.856421][T25655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.876512][T25655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.883994][T25655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.911466][T25655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.923386][T25758] lo speed is unknown, defaulting to 1000 [ 294.986234][T25655] hsr_slave_0: entered promiscuous mode [ 295.005139][T25655] hsr_slave_1: entered promiscuous mode [ 295.024824][T25655] debugfs: 'hsr0' already exists in 'hsr' [ 295.037051][T25655] Cannot create hsr debugfs directory [ 295.158704][T25655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.173413][T25655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.185116][T25655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.196213][T25655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 295.207070][T25655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 295.276680][T25655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.306870][T25655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.320114][T25655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.330820][T25655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 295.343131][T25655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 295.438156][T25655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.448706][T25655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.461947][T25655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.473065][T25655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 295.483926][T25655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 295.536414][T25655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.547173][T25655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.558554][T25655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 295.571222][T25655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 295.578481][T25787] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 295.584472][T25655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 3] type 2 family 0 port 20000 - 0 [ 295.679075][T25794] ip6gre1: entered allmulticast mode [ 295.762047][ T51] Bluetooth: hci5: command tx timeout [ 295.777725][T25655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 295.798603][T25655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 295.835455][T25655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 295.857434][T25655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 295.934105][T25823] netlink: 'syz.0.5868': attribute type 3 has an invalid length. [ 295.946820][T25823] __nla_validate_parse: 15 callbacks suppressed [ 295.946836][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5868'. [ 295.974306][T25823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5868'. [ 296.045169][T25835] netlink: 'syz.2.5872': attribute type 1 has an invalid length. [ 296.060057][ T30] audit: type=1800 audit(1756008065.766:7): pid=25823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5868" name="memory.events" dev="tmpfs" ino=2664 res=0 errno=0 [ 296.092063][T25655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.134812][T25655] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.178698][T25841] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.199371][T25846] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5875'. [ 296.208703][T25846] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.214230][T25841] bond12: (slave bond13): making interface the new active one [ 296.224086][T25841] bond12: (slave bond13): Enslaving as an active interface with an up link [ 296.248907][T25841] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5872'. [ 296.262235][T25835] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 296.283673][T25841] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.321958][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.329071][T17394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.355753][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5877'. [ 296.365604][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.372751][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.433432][T25865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5881'. [ 296.443579][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'. [ 296.458591][T25865] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 296.484829][ T51] Bluetooth: hci1: command tx timeout [ 296.515854][T25655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.526575][T25655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.799056][T25889] netlink: 360 bytes leftover after parsing attributes in process `syz.3.5888'. [ 296.898839][T25655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.914441][T25898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5890'. [ 296.945396][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 297.252140][T25655] veth0_vlan: entered promiscuous mode [ 297.266343][T25655] veth1_vlan: entered promiscuous mode [ 297.293347][T25655] veth0_macvtap: entered promiscuous mode [ 297.302373][T25655] veth1_macvtap: entered promiscuous mode [ 297.329521][T25655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.344607][T25655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.357260][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.369900][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.379119][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.392682][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.442860][T17383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.451858][T17383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.468253][T17398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.477061][T17398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.840748][ T51] Bluetooth: hci5: command tx timeout [ 297.888678][T25954] syzkaller1: entered promiscuous mode [ 297.895089][T25954] syzkaller1: entered allmulticast mode [ 297.945390][T25954] syzkaller0: entered promiscuous mode [ 297.951232][T25954] syzkaller0: entered allmulticast mode [ 298.043092][T25960] block nbd4: Unsupported socket: shutdown callout must be supported. [ 298.238039][T25964] lo: left promiscuous mode [ 298.258306][T25964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.298362][ T5182] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.306914][ T5182] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.314696][ T5182] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.331215][ T5182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.338609][ T5182] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.370298][T25969] lo speed is unknown, defaulting to 1000 [ 298.494323][T25979] sctp: [Deprecated]: syz.3.5910 (pid 25979) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.494323][T25979] Use struct sctp_sack_info instead [ 298.743223][T25969] chnl_net:caif_netlink_parms(): no params data found [ 298.749413][T26009] netlink: 'syz.1.5918': attribute type 1 has an invalid length. [ 298.780738][T26014] netlink: 'syz.1.5918': attribute type 1 has an invalid length. [ 298.921308][T25969] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.928773][T25969] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.940603][T25969] bridge_slave_0: entered allmulticast mode [ 298.947781][T25969] bridge_slave_0: entered promiscuous mode [ 298.962445][T25969] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.972888][T25969] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.981232][T25969] bridge_slave_1: entered allmulticast mode [ 298.988383][T25969] bridge_slave_1: entered promiscuous mode [ 299.049299][T25969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.081490][T25969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.124890][T17397] bridge_slave_1: left allmulticast mode [ 299.142428][T17397] bridge_slave_1: left promiscuous mode [ 299.161662][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.186184][T17397] : left allmulticast mode [ 299.191665][T17397] : left promiscuous mode [ 299.201540][T17397] bridge0: port 1() entered disabled state [ 299.430400][T17397] bond2 (unregistering): (slave gretap1): Releasing active interface [ 299.469953][T17397] bond12 (unregistering): (slave gretap2): Releasing backup interface [ 299.550670][T17397] dvmrp0 (unregistering): left allmulticast mode [ 299.602248][T17397] team0: Port device geneve0 removed [ 299.930099][ T51] Bluetooth: hci5: command tx timeout [ 300.052402][T17397] bond11 (unregistering): (slave bridge9): Releasing active interface [ 300.197310][T17397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.210731][T17397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.224512][T17397] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 300.234959][T17397] bond0 (unregistering): Released all slaves [ 300.246907][T17397] bond1 (unregistering): Released all slaves [ 300.255838][T17397] bond2 (unregistering): Released all slaves [ 300.268230][T17397] bond3 (unregistering): (slave veth3): Releasing active interface [ 300.277097][T17397] bond3 (unregistering): Released all slaves [ 300.289715][T17397] bond4 (unregistering): (slave veth5): Releasing active interface [ 300.298512][T17397] bond4 (unregistering): Released all slaves [ 300.311401][T17397] bond5 (unregistering): Released all slaves [ 300.321361][T17397] bond6 (unregistering): Released all slaves [ 300.330261][T17397] bond7 (unregistering): Released all slaves [ 300.342956][T17397] bond8 (unregistering): Released all slaves [ 300.356038][T17397] bond9 (unregistering): (slave bond10): Releasing backup interface [ 300.364674][T17397] bond10 (unregistering): left promiscuous mode [ 300.372692][T17397] bond9 (unregistering): Released all slaves [ 300.384757][T17397] bond10 (unregistering): Released all slaves [ 300.396081][T17397] bond11 (unregistering): Released all slaves [ 300.400320][ T51] Bluetooth: hci3: command tx timeout [ 300.410838][T17397] bond12 (unregistering): (slave bond13): Releasing backup interface [ 300.419504][T17397] bond12 (unregistering): Released all slaves [ 300.434755][T17397] bond13 (unregistering): Released all slaves [ 300.450131][T25969] team0: Port device team_slave_0 added [ 300.464242][T26051] vlan0: left promiscuous mode [ 300.474037][T26051] bond3: left promiscuous mode [ 300.488287][T25969] team0: Port device team_slave_1 added [ 300.585340][T25969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.606746][T25969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.633704][T25969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.656830][T25969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.664598][T25969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.691604][T25969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.746505][T25969] hsr_slave_0: entered promiscuous mode [ 300.755213][T25969] hsr_slave_1: entered promiscuous mode [ 300.762884][T25969] debugfs: 'hsr0' already exists in 'hsr' [ 300.768703][T25969] Cannot create hsr debugfs directory [ 300.796468][T26072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.018287][T26089] tun0: tun_chr_ioctl cmd 1074025675 [ 301.047743][T26089] tun0: persist disabled [ 301.149458][T26116] __nla_validate_parse: 11 callbacks suppressed [ 301.149477][T26116] netlink: 146840 bytes leftover after parsing attributes in process `syz.0.5947'. [ 301.304567][T26130] netlink: 'syz.1.5951': attribute type 1 has an invalid length. [ 301.332341][T25969] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.346135][T25969] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.363238][T26133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.396789][T26130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.406904][T26133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5952'. [ 301.418463][T25969] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.497490][T25969] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.533682][T26141] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 301.574302][T26156] netlink: 'syz.0.5954': attribute type 4 has an invalid length. [ 301.623918][T25969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.632982][T26156] netlink: 'syz.0.5954': attribute type 4 has an invalid length. [ 301.675143][T25969] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.697006][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.704136][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.739473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.746603][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.771912][T26169] mac80211_hwsim hwsim46 ÿ: renamed from wlan1 [ 302.000648][ T51] Bluetooth: hci5: command tx timeout [ 302.076063][T26199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5967'. [ 302.092041][T25969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.154541][T17397] tipc: Left network mode [ 302.165810][T25969] veth0_vlan: entered promiscuous mode [ 302.192106][T26194] lo speed is unknown, defaulting to 1000 [ 302.195661][T25969] veth1_vlan: entered promiscuous mode [ 302.234843][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5968'. [ 302.275430][T26204] bridge_slave_1: left promiscuous mode [ 302.283723][T26204] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.303455][T26204] bridge_slave_0: left allmulticast mode [ 302.309196][T26204] bridge_slave_0: left promiscuous mode [ 302.315847][T26204] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.479428][T25969] veth0_macvtap: entered promiscuous mode [ 302.487296][ T51] Bluetooth: hci3: command tx timeout [ 302.545607][T25969] veth1_macvtap: entered promiscuous mode [ 302.597107][T25969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.621333][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5974'. [ 302.698341][T26229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5976'. [ 302.717973][T17397] hsr_slave_0: left promiscuous mode [ 302.752905][T17397] hsr_slave_1: left promiscuous mode [ 302.764599][T17397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.773975][T17397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.783776][T17397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.792006][T17397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.800859][T17397] batman_adv: batadv0: Interface deactivated: team0 [ 302.807478][T17397] batman_adv: batadv0: Removing interface: team0 [ 302.823331][T26239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5978'. [ 302.907132][T17397] team0 (unregistering): Port device team_slave_1 removed [ 302.927801][T17397] team0 (unregistering): Port device team_slave_0 removed [ 302.999217][T25969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.025577][T26239] bond0: entered promiscuous mode [ 303.045066][T26239] bond_slave_0: entered promiscuous mode [ 303.060427][T26239] bond_slave_1: entered promiscuous mode [ 303.066379][T26239] bond0: entered allmulticast mode [ 303.075388][T26239] bond_slave_0: entered allmulticast mode [ 303.081929][T26239] bond_slave_1: entered allmulticast mode [ 303.116876][T17394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.141091][T17394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.154085][T26248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.155691][T26255] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5982'. [ 303.177980][T17394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.200679][T17394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.241226][T26258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5983'. [ 303.263691][T26260] netlink: 'syz.1.5984': attribute type 1 has an invalid length. [ 303.272824][T26260] netlink: 14550 bytes leftover after parsing attributes in process `syz.1.5984'. [ 303.322643][T17394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.330512][T17394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.382944][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.398728][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.427747][T17397] IPVS: stop unused estimator thread 0... [ 303.455405][T26267] macvlan0: entered promiscuous mode [ 303.470818][T26267] macvlan0: entered allmulticast mode [ 303.544472][T26276] netlink: 'syz.3.5990': attribute type 1 has an invalid length. [ 303.597253][T26280] netlink: 'syz.1.5992': attribute type 1 has an invalid length. [ 303.626622][T26278] netlink: 'syz.2.5991': attribute type 10 has an invalid length. [ 303.661287][T26278] team0: Device hsr_slave_0 failed to register rx_handler [ 303.816221][T26289] pim6reg1: entered promiscuous mode [ 303.862960][T26289] pim6reg1: entered allmulticast mode [ 303.872550][T26295] ªªªªªª: renamed from vlan0 (while UP) [ 303.969223][T26293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.376864][T26351] bond0: option ad_select: unable to set because the bond device is up [ 304.545056][T26369] wireguard0: entered allmulticast mode [ 304.561338][ T5182] Bluetooth: hci3: command tx timeout [ 304.638382][T26385] tipc: Enabling of bearer rejected, failed to enable media [ 304.874531][ T30] audit: type=1800 audit(1756008074.586:8): pid=26409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6028" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=64 res=0 errno=0 [ 305.096095][T26434] rdma_rxe: rxe_newlink: failed to add lo [ 305.417632][T26439] sctp: [Deprecated]: syz.4.6037 (pid 26439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.417632][T26439] Use struct sctp_sack_info instead [ 305.926568][T26467] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 306.023560][T26473] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 306.051987][T26474] vxlan0: entered promiscuous mode [ 306.057938][T26474] vxlan0: entered allmulticast mode [ 306.077901][T26463] bond1: (slave gretap1): making interface the new active one [ 306.094967][T26463] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 306.111725][T26463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.120115][T25821] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.136966][T25821] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.147323][T25821] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.179941][T25821] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.240683][T26499] __nla_validate_parse: 19 callbacks suppressed [ 306.240701][T26499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6051'. [ 306.285644][T26501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6055'. [ 306.313063][T26501] tc_dump_action: action bad kind [ 306.445580][T26526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6055'. [ 306.506504][T26531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6062'. [ 306.533323][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6063'. [ 306.584277][T26539] sit0: entered promiscuous mode [ 306.593818][T26539] netlink: 'syz.4.6065': attribute type 1 has an invalid length. [ 306.601805][T26539] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6065'. [ 306.612161][T26539] veth0: entered promiscuous mode [ 306.627871][T26538] veth0: left promiscuous mode [ 306.639770][ T5182] Bluetooth: hci3: command tx timeout [ 306.689013][T26550] netlink: 'syz.4.6068': attribute type 1 has an invalid length. [ 306.703825][T26551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6068'. [ 306.731799][T26550] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.793365][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 306.861513][T26568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6070'. [ 306.914677][T26575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6075'. [ 307.298273][T26597] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 307.458096][T26612] netlink: 'syz.0.6090': attribute type 6 has an invalid length. [ 307.471139][T17308] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 307.483050][T17308] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 307.492593][T17308] CPU: 0 UID: 0 PID: 17308 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 307.502136][T17308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.512186][T17308] Workqueue: mld mld_ifc_work [ 307.516860][T17308] RIP: 0010:add_grec+0x79f/0x1740 [ 307.521871][T17308] Code: c6 e8 d5 15 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 87 11 87 f7 eb 05 e8 80 11 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 b2 7a ea f7 4d 8b 3c 24 48 8b 7c [ 307.541460][T17308] RSP: 0018:ffffc9000af1f8f8 EFLAGS: 00010206 [ 307.547537][T17308] RAX: 000000001fffe000 RBX: 0000000000000000 RCX: ffff88807a9a9e00 [ 307.555487][T17308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.563436][T17308] RBP: 0000000000000000 R08: ffff88807a9a9e00 R09: 0000000000000002 [ 307.571386][T17308] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 307.579333][T17308] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000000 [ 307.587284][T17308] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 307.596198][T17308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.602765][T17308] CR2: 0000200000001a80 CR3: 000000007e826000 CR4: 00000000003526f0 [ 307.610728][T17308] Call Trace: [ 307.614001][T17308] [ 307.616932][T17308] mld_ifc_work+0x676/0xd60 [ 307.621423][T17308] ? rcu_is_watching+0x15/0xb0 [ 307.626170][T17308] ? process_scheduled_works+0x9ef/0x17b0 [ 307.631872][T17308] process_scheduled_works+0xae1/0x17b0 [ 307.637444][T17308] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.643414][T17308] worker_thread+0x8a0/0xda0 [ 307.647993][T17308] kthread+0x70e/0x8a0 [ 307.652051][T17308] ? __pfx_worker_thread+0x10/0x10 [ 307.657140][T17308] ? __pfx_kthread+0x10/0x10 [ 307.661711][T17308] ? rcu_is_watching+0x15/0xb0 [ 307.666455][T17308] ? __pfx_kthread+0x10/0x10 [ 307.671026][T17308] ret_from_fork+0x3f9/0x770 [ 307.675598][T17308] ? __pfx_ret_from_fork+0x10/0x10 [ 307.680697][T17308] ? __switch_to_asm+0x39/0x70 [ 307.685455][T17308] ? __switch_to_asm+0x33/0x70 [ 307.690204][T17308] ? __pfx_kthread+0x10/0x10 [ 307.694783][T17308] ret_from_fork_asm+0x1a/0x30 [ 307.699536][T17308] [ 307.702534][T17308] Modules linked in: [ 307.708503][T17308] ---[ end trace 0000000000000000 ]--- [ 307.747562][T17308] RIP: 0010:add_grec+0x79f/0x1740 [ 307.754179][T17308] Code: c6 e8 d5 15 87 f7 45 85 ff 0f 84 b1 00 00 00 e8 87 11 87 f7 eb 05 e8 80 11 87 f7 4c 89 e0 48 c1 e8 03 48 89 84 24 a0 00 00 00 <42> 80 3c 30 00 74 08 4c 89 e7 e8 b2 7a ea f7 4d 8b 3c 24 48 8b 7c [ 307.774673][T17308] RSP: 0018:ffffc9000af1f8f8 EFLAGS: 00010206 [ 307.781068][T17308] RAX: 000000001fffe000 RBX: 0000000000000000 RCX: ffff88807a9a9e00 [ 307.789068][T17308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.798189][T17308] RBP: 0000000000000000 R08: ffff88807a9a9e00 R09: 0000000000000002 [ 307.806775][T17308] R10: 0000000000000004 R11: 0000000000000000 R12: 00000000ffff0000 [ 307.815087][T17308] R13: 0000000000000005 R14: dffffc0000000000 R15: 0000000000000000 [ 307.823663][T17308] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 307.833229][T17308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.841398][T17308] CR2: 00005555765495c8 CR3: 0000000032236000 CR4: 00000000003526f0 [ 307.849404][T17308] Kernel panic - not syncing: Fatal exception [ 307.855774][T17308] Kernel Offset: disabled [ 307.860086][T17308] Rebooting in 86400 seconds..