last executing test programs: 1m44.893528763s ago: executing program 0 (id=4565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000b04000000080000002300004000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYRESDEC=r1], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m44.548376999s ago: executing program 0 (id=4567): pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x831d, 0x10000, @value=r0}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x831d, 0x10000, @value=r0}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0xffffffffffffffff, 0x12) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100230100003459000006b4bc0008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r9, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x5}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000070bb74cb003c0c080000000000008802000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1m44.182385941s ago: executing program 0 (id=4569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$netlink(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000016c0)={0x10, 0x26, 0x1}, 0x10}], 0x1}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000008140)=ANY=[@ANYBLOB="c4220000120001000000000000000000100000000c0000000000000000000000a42221"], 0x22c4}], 0x1}, 0x0) 1m43.960422979s ago: executing program 0 (id=4571): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = accept(r2, &(0x7f0000000080)=@l2={0x1f, 0x0, @none}, &(0x7f0000000140)=0x80) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40088d5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000380)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) 1m41.049692983s ago: executing program 0 (id=4576): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000300000004"], 0x50) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180006ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m40.524597967s ago: executing program 0 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)="74625458e902c13e3a9bca84000000030000", &(0x7f0000000580), 0xffffffff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000240)={'wg1\x00', {0x2, 0x0, @multicast2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) 1m25.366404103s ago: executing program 32 (id=4581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)="74625458e902c13e3a9bca84000000030000", &(0x7f0000000580), 0xffffffff, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000240)={'wg1\x00', {0x2, 0x0, @multicast2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x85c}) 29.16866651s ago: executing program 5 (id=4668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x1feff, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 13.683974411s ago: executing program 33 (id=4668): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x804) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x20, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x1feff, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) 8.080402243s ago: executing program 2 (id=4922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x6, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000001340)={0x0, 'lo\x00', {0x4}, 0x5}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xff, 0x705, 0x4, 0x0, 0x3}, &(0x7f0000000200)=0x14) (rerun: 32) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r7, 0x4, 0xfffb, 0x0, 0x10001, 0x3}, &(0x7f0000000280)=0x14) 7.090382948s ago: executing program 2 (id=4930): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x294, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x5, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x0, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8}}, {0x0, 0x2, [0x6, 0x6]}}, {{0x0, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3}}, {0x0, 0x2, [0x5fd]}}, {{0x0, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088}}, {0x0, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0x2}}, @TCA_RATE={0x0, 0x5, {0x10, 0x2}}]}, 0x2c4}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e22, @empty}}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 6.983548838s ago: executing program 1 (id=4931): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x92258420943190a, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x40091}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122'], 0xa) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000400000000000000000c00078008000640000000070500010007000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="e590659a0000000000000000000000009500000000000000cc996a60343db7208cd66f440b55c1fa3197174d0797e66dff8147951cd9a247657bb7f3d8138e788121cf9084db269f7ca967e6b0437296157eb64f64f3431aecd1a8a386b247f8c7596cf89238e3352542cc8bf783960621b3ca96044b9fdbb858234980b86370db8fb71dff0cd45fedced0d7dd1d726e13609146e3fc"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_timeval(r6, 0x1, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x1e, 0x5, 0x0) getsockname$packet(r9, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491717916deb4", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 6.655599877s ago: executing program 3 (id=4933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) (async) 6.620027622s ago: executing program 2 (id=4934): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x3, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08602, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4009, 0x6b000000, 0x4, 0x100202, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa7, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0xba4, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x80000001, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r2) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x44}}, 0x1) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '/'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 6.339918772s ago: executing program 1 (id=4936): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value, &(0x7f0000000500)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000680)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000002c0)={r3, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r3, 0x1000}, 0x8) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=r4, @ANYBLOB="46000600000400620b6e64003bd5299f000280050001000200000005000e00020000007f4cecc0fec769091425e8c35afe9a21b18096a1616b6f492c74300722157387c3c42f63195c462538932bbf09a688350cc93ed87f81f6e3f97b9d43459172a15898f8bc64d2e13952d3ee2de58ce96dbc0fdd762ba311fddb30ecd8162c5a63e66e95f9"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r4, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r4, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 6.233607361s ago: executing program 3 (id=4937): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5.849005991s ago: executing program 3 (id=4938): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r1, 0x7) socket$rxrpc(0x21, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x6, 0x48, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x19, 0x2, [{0x0, 0x6, "00479c0f"}, {0x7, 0xa, "91705fbed77a6c81"}, {0x2, 0x3, "a3"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000500)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x54}}}, 0x5) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x24000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}}, 0xff, 0x3}, 0x90) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) 5.743694376s ago: executing program 4 (id=4939): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) 5.361207855s ago: executing program 1 (id=4940): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x1c, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x9, 0x2, {0x2, 0x3ff}}}]}, 0x3c}}, 0x0) 5.324738229s ago: executing program 4 (id=4941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0x8ff6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f00000000c0)) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 4.735865513s ago: executing program 4 (id=4942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073319e310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24040814}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, &(0x7f0000000480), &(0x7f00000005c0)='syzkaller\x00', 0xa}, 0x94) 4.50501578s ago: executing program 4 (id=4943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.115482575s ago: executing program 4 (id=4944): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4) 3.044757564s ago: executing program 1 (id=4945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f000000000000000002001315"], 0xd8}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) 3.043274346s ago: executing program 3 (id=4946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006cef770aaa898bfffddb23aed73c6f6164"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={@private2, @remote, @dev={0xfe, 0x80, '\x00', 0x18}, 0x80000000, 0xf85f, 0xffff, 0x400, 0xffff, 0x200000, r4}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r6, 0x25, 0x2, @val=@perf_event={0x5}}, 0x18) (async) r8 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x1) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r9, 0x4, r0}, 0x10) 3.01813777s ago: executing program 2 (id=4947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000071100000000e9500000000000000000000000020aea1da1ab9ecdf93e740a590e15f8529e0419c9f28711a33a1058bea086f37d9e707428638cf790b9c7786516cd5f694f3be67b4399e2bcc48ab0788"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000071100000000e9500000000000000000000000020aea1da1ab9ecdf93e740a590e15f8529e0419c9f28711a33a1058bea086f37d9e707428638cf790b9c7786516cd5f694f3be67b4399e2bcc48ab0788"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 2.603745312s ago: executing program 2 (id=4948): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xc, 0x0, 0x0, 0x2000000, [@sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x20, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0xfffffffd}]}}}]}, 0x3c}}, 0x0) 2.512520179s ago: executing program 1 (id=4949): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000007111bf00000000009610000095000810000000009500a50500000000b8b16cc6a9395e1a218ea199713399477f2819933e786d2a5a5ecfadadd6f6c78138c0ce78aaf06788e9df7a9af0020000009c9e12326b3024b9f0ee301eb653e96ea9ca74a940de581d81f64ce71bc8514c403389bc100332dcca1b88bc99d300"/144], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.401169922s ago: executing program 4 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @remote}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r9 = socket$kcm(0x11, 0x3, 0x0) sendto$inet6(r7, &(0x7f00000022c0)="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", 0x1000, 0x8000, &(0x7f00000032c0)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffff56d}, 0x1c) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0) 2.074230094s ago: executing program 1 (id=4951): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) (async) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 1.940467895s ago: executing program 3 (id=4952): r0 = socket(0x527508e68a643af5, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES8=r1], 0x1c}}, 0x0) socket(0x527508e68a643af5, 0x80000, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x27, 0x0, 0x0, @str='\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES8=r1], 0x1c}}, 0x0) (async) 1.722843203s ago: executing program 3 (id=4953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 0s ago: executing program 2 (id=4954): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) close(0x3) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0xc8, r2, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0xac, 0x14, '+}\xb1\x91\x96\x9f\x19\xc4\xde;9S\xc2\xa7k\xcc\rR6V\x9fO\xb4\xb4R\x86\xdc0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x948d}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40000) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x40002102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) kernel console output (not intermixed with test programs): lave_0 [ 410.886887][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.914265][T18061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.949118][ T5626] Bluetooth: hci0: command tx timeout [ 410.960465][T18061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.981643][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.011603][ T86] smbdirect: ib_dev[syz0] removed [ 411.012346][T18061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.032082][ T10] syz0: Port: 1 Link DOWN [ 411.341232][T18061] hsr_slave_0: entered promiscuous mode [ 411.351328][T18061] hsr_slave_1: entered promiscuous mode [ 411.384045][T18061] debugfs: 'hsr0' already exists in 'hsr' [ 411.390830][T18061] Cannot create hsr debugfs directory [ 412.294647][T18327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.715904][T17515] IPVS: stop unused estimator thread 0... [ 412.773968][T18383] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3261'. [ 412.911878][T18391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3261'. [ 413.403196][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3266'. [ 413.619323][T18412] syzkaller1: entered promiscuous mode [ 413.684462][T18412] syzkaller1: entered allmulticast mode [ 413.930611][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'. [ 414.056096][T18448] netlink: 'syz.0.3271': attribute type 49 has an invalid length. [ 414.473366][T18061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.514962][T18061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.541711][T18061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.586563][T18061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.606633][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'. [ 414.610056][T18061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 414.662135][T18061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.680202][T18061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.733296][T18061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.751606][T18461] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 415.055030][T18484] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 415.101624][T18484] syzkaller0: entered promiscuous mode [ 415.122879][T18484] syzkaller0: entered allmulticast mode [ 415.450291][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3284'. [ 415.496025][T18506] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 415.539032][T18061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.551100][T18506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3284'. [ 415.645770][T18061] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.712304][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.719557][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.784348][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.791603][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.906270][T18524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 416.579154][T18061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.641793][T18061] veth0_vlan: entered promiscuous mode [ 416.656008][T18061] veth1_vlan: entered promiscuous mode [ 416.694022][T18061] veth0_macvtap: entered promiscuous mode [ 416.712690][T18061] veth1_macvtap: entered promiscuous mode [ 416.733868][T18061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.750250][T18061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.770945][ T3364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.780953][ T3364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.792777][ T3364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.805124][ T3364] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.918846][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.927455][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.956596][ T257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.965602][ T257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.786931][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 449.588049][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 450.226975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.027104][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 483.663202][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3297'. [ 483.720795][T18566] syzkaller0: entered promiscuous mode [ 483.762357][T18566] syzkaller0: entered allmulticast mode [ 483.764138][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.786175][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.796429][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.805422][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.825854][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.605757][T18611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3305'. [ 484.976118][T17515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 484.977854][T18629] netlink: 'syz.2.3311': attribute type 1 has an invalid length. [ 485.011151][T17515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 16384 - 0 [ 485.011767][T18630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 485.041620][T18635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 485.045883][T17515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 485.053564][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 485.174525][T18629] bond16: entered promiscuous mode [ 485.191502][T18629] 8021q: adding VLAN 0 to HW filter on device bond16 [ 485.213734][T18630] team0 (unregistering): Port device team_slave_0 removed [ 485.220951][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3314'. [ 485.223794][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 485.245573][T18630] team0 (unregistering): Port device team_slave_1 removed [ 485.291630][T17515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 485.304998][T17515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 16384 - 0 [ 485.319547][T17515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 485.386390][T18629] 8021q: adding VLAN 0 to HW filter on device bond16 [ 485.403022][T18629] bond16: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 485.415585][T18629] bond16: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 485.437902][T18629] bond16: (slave ip6gre1): making interface the new active one [ 485.445522][T18629] ip6gre1: entered promiscuous mode [ 485.454865][T18629] bond16: (slave ip6gre1): Enslaving as an active interface with an up link [ 485.481862][T18647] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3316'. [ 485.683865][T17515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 485.717720][T17515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 16384 - 0 [ 485.746118][T18652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3318'. [ 485.748567][T17515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 8472 - 0 [ 485.906925][ T5642] Bluetooth: hci4: command tx timeout [ 486.048202][T18661] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 486.084422][T18661] bond1: (slave lo): Enslaving as an active interface with an up link [ 486.101124][T18661] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 486.141327][T18676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3322'. [ 486.669505][T18702] xt_nat: multiple ranges no longer supported [ 487.002784][T18713] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 487.996464][ T5642] Bluetooth: hci4: command tx timeout [ 490.076988][ T5642] Bluetooth: hci4: command tx timeout [ 490.787535][T18735] __nla_validate_parse: 1 callbacks suppressed [ 490.787572][T18735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3337'. [ 491.014679][T18743] sctp: [Deprecated]: syz.2.3339 (pid 18743) Use of int in max_burst socket option deprecated. [ 491.014679][T18743] Use struct sctp_assoc_value instead [ 491.131904][T17515] batadv1: left allmulticast mode [ 491.137470][T17515] bridge0: port 3(batadv1) entered disabled state [ 491.154985][T17515] bridge_slave_1: left allmulticast mode [ 491.162177][T17515] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.175432][T17515] bridge_slave_0: left allmulticast mode [ 491.182392][T17515] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.329747][T17515] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 491.623863][T17515] bond4 (unregistering): (slave gretap3): Releasing active interface [ 491.781260][T17515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.800827][T17515] bond0 (unregistering): (slave bond6): Releasing backup interface [ 491.809497][T17515] bond6 (unregistering): left promiscuous mode [ 491.815981][T17515] bond0 (unregistering): Released all slaves [ 491.830021][T17515] bond1 (unregistering): Released all slaves [ 491.850398][T17515] bond2 (unregistering): Released all slaves [ 491.869613][T17515] bond3 (unregistering): Released all slaves [ 491.888539][T17515] bond4 (unregistering): Released all slaves [ 491.908604][T17515] bond5 (unregistering): (slave veth3): Releasing active interface [ 491.939437][T17515] bond5 (unregistering): Released all slaves [ 491.958034][T17515] bond6 (unregistering): Released all slaves [ 491.978461][T17515] bond7 (unregistering): Released all slaves [ 491.998394][T17515] bond8 (unregistering): Released all slaves [ 492.018595][T17515] bond9 (unregistering): Released all slaves [ 492.041649][T17515] bond10 (unregistering): Released all slaves [ 492.060285][T17515] bond11 (unregistering): Released all slaves [ 492.080678][T17515] bond12 (unregistering): Released all slaves [ 492.149928][ T5642] Bluetooth: hci4: command tx timeout [ 492.322369][ T30] audit: type=1800 audit(1784077551.209:13): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3343" name="memory.events" dev="tmpfs" ino=377 res=0 errno=0 [ 492.411311][T17515] tipc: Left network mode [ 492.650105][T18778] x_tables: duplicate underflow at hook 1 [ 492.670443][T18770] x_tables: duplicate underflow at hook 1 [ 492.672144][T18574] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.705388][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.746271][T18574] bridge_slave_0: entered allmulticast mode [ 492.758794][T18574] bridge_slave_0: entered promiscuous mode [ 492.869077][T18574] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.887201][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.907119][T18574] bridge_slave_1: entered allmulticast mode [ 492.950937][T18574] bridge_slave_1: entered promiscuous mode [ 493.274201][T18800] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 493.324793][T18796] bridge7: entered promiscuous mode [ 493.352499][T18796] bridge7: entered allmulticast mode [ 493.405641][T18574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.421660][T18574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.475164][T18800] bond2: entered promiscuous mode [ 493.481690][T18800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.591903][T18810] bond1 (unregistering): Released all slaves [ 493.905015][T18811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.932740][T18811] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 493.975198][T18811] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 494.005572][T18811] bond2: (slave ip6gre1): making interface the new active one [ 494.011189][T18834] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 494.018073][T18811] ip6gre1: entered promiscuous mode [ 494.049279][T18811] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 494.152418][T17515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.185424][T17515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.223350][T18841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'. [ 494.224027][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3360'. [ 494.587863][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 494.644778][T18841] xfrm1: entered promiscuous mode [ 494.663343][T18841] xfrm1: entered allmulticast mode [ 494.706613][T18574] team0: Port device team_slave_0 added [ 494.729911][T18574] team0: Port device team_slave_1 added [ 494.771006][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3362'. [ 495.027578][T18574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.051059][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.117622][T18574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.150288][T18574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.159895][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.205496][T18574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.522120][T18574] hsr_slave_0: entered promiscuous mode [ 495.529372][T18574] hsr_slave_1: entered promiscuous mode [ 495.535907][T18574] debugfs: 'hsr0' already exists in 'hsr' [ 495.543855][T18574] Cannot create hsr debugfs directory [ 495.713355][T18884] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 495.825445][T18896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3372'. [ 495.929521][T18889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 495.939677][T18889] bond1: (slave bond2): making interface the new active one [ 495.949368][T18889] bond1: (slave bond2): Enslaving as an active interface with an up link [ 495.983572][T18886] pim6reg1: entered promiscuous mode [ 495.995636][T18886] pim6reg1: entered allmulticast mode [ 496.186033][T18909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.855485][T18931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3382'. [ 496.918603][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3382'. [ 496.933400][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 497.947604][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 498.667081][T18574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 498.709317][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.735393][T18574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 498.805761][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.975873][T18574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 499.026006][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.071922][T18574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 499.129561][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.206131][T19025] Cannot find set identified by id 65534 to match [ 499.279482][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3400'. [ 499.385593][T19025] bond3: option all_slaves_active: invalid value (222) [ 499.405150][T19025] bond3 (unregistering): Released all slaves [ 499.849767][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.917888][T18574] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.963047][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.970372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.071302][T18721] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.078588][T18721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.166493][T19053] 8021q: VLANs not supported on wg0 [ 500.181299][T19062] netlink: 'syz.3.3404': attribute type 32 has an invalid length. [ 500.234414][T19064] netlink: 'syz.3.3404': attribute type 32 has an invalid length. [ 500.885032][T19085] bridge0: port 3(ipvlan2) entered blocking state [ 500.909683][T19085] bridge0: port 3(ipvlan2) entered disabled state [ 500.939759][T19085] ipvlan2: entered allmulticast mode [ 500.950612][T19085] bridge0: entered allmulticast mode [ 500.981275][T19085] ipvlan2: left allmulticast mode [ 501.010972][T19085] bridge0: left allmulticast mode [ 501.127457][T19087] : entered promiscuous mode [ 501.146370][T19087] dummy0: entered promiscuous mode [ 501.729904][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3415'. [ 501.751879][T19123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 501.829152][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.868252][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.897870][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 501.922146][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.061447][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 502.103128][T19140] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3417'. [ 502.138662][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.510969][T18574] veth0_vlan: entered promiscuous mode [ 502.577358][T18574] veth1_vlan: entered promiscuous mode [ 502.737587][T18574] veth0_macvtap: entered promiscuous mode [ 502.775803][T18574] veth1_macvtap: entered promiscuous mode [ 502.838048][T18574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.883793][T18574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.934976][ T1112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.956591][ T1112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.986554][ T1112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.009284][ T1112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.848120][T19198] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3424'. [ 503.872068][T18723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.903180][T18723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.137535][T19207] C: renamed from lo (while UP) [ 504.206102][T19207] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 504.247654][T18723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.291592][T18723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.304797][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 504.316564][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 504.339980][T19220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.904156][T19247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3436'. [ 505.466380][T19263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3440'. [ 505.544309][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 505.558615][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 505.574003][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 505.585409][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 505.599468][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 505.784762][T19276] netlink: 'syz.0.3442': attribute type 10 has an invalid length. [ 505.857555][T19276] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 505.911589][T19280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3443'. [ 506.450883][T19305] netlink: 'syz.4.3448': attribute type 2 has an invalid length. [ 506.696114][T19280] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 507.086643][T19333] __nla_validate_parse: 1 callbacks suppressed [ 507.086677][T19333] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3456'. [ 507.095273][T19332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3456'. [ 507.124575][T19332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3456'. [ 507.165165][T19332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3456'. [ 507.181144][T19267] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.213218][T19267] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.231265][T19267] bridge_slave_0: entered allmulticast mode [ 507.241135][T19267] bridge_slave_0: entered promiscuous mode [ 507.265445][T19267] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.292093][T19267] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.309131][T19267] bridge_slave_1: entered allmulticast mode [ 507.321914][T19267] bridge_slave_1: entered promiscuous mode [ 507.479019][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3461'. [ 507.494458][T19267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.506457][T19357] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3461'. [ 507.524158][T19267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.674395][T19267] team0: Port device team_slave_0 added [ 507.696845][ T5642] Bluetooth: hci1: command tx timeout [ 507.741319][T19267] team0: Port device team_slave_1 added [ 507.781005][T19362] xt_hashlimit: size too large, truncated to 1048576 [ 507.913307][T19267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.945273][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.987033][ T5642] Bluetooth: hci0: command 0x0401 tx timeout [ 508.027555][T19267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.042528][T19267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.051656][T19267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.080171][T19267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.241082][T19384] netlink: 'syz.0.3468': attribute type 1 has an invalid length. [ 508.328680][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3467'. [ 508.436347][T19384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 508.507571][T19388] bond3: (slave geneve2): making interface the new active one [ 508.532725][T19388] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 508.585443][T19267] hsr_slave_0: entered promiscuous mode [ 508.594614][T19267] hsr_slave_1: entered promiscuous mode [ 508.602996][T19267] debugfs: 'hsr0' already exists in 'hsr' [ 508.609719][T19267] Cannot create hsr debugfs directory [ 508.628830][T18724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.674539][T19392] dvmrp1: entered allmulticast mode [ 508.687203][T18724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.710888][T18724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.739325][T18724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.922143][T19377] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 508.932087][T19377] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 509.070846][T19377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.084668][T19377] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 509.296471][T19377] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 509.323183][T19377] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 509.373132][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 509.443347][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 509.533184][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3479'. [ 509.673374][T19377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 509.683294][T19377] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 509.748471][ T5642] Bluetooth: hci1: command tx timeout [ 509.852302][T19377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 509.859580][T19377] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 510.206313][T19457] tipc: Started in network mode [ 510.238220][T19457] tipc: Node identity 7fff, cluster identity 4711 [ 510.271549][T19457] tipc: Node number set to 32767 [ 510.460009][T19465] syzkaller0: entered promiscuous mode [ 510.466523][T19465] syzkaller0: entered allmulticast mode [ 510.561066][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 510.630992][T19468] syzkaller0: entered promiscuous mode [ 510.644012][T19468] syzkaller0: entered allmulticast mode [ 510.653603][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 510.722687][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 510.749306][T19473] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 510.789592][T19473] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 510.853410][T19473] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 510.979035][T19473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 511.188522][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f5a4400: rx timeout, send abort [ 511.685522][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f5a4000: rx timeout, send abort [ 511.699447][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f5a4400: abort rx timeout. Force session deactivation [ 512.195093][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f5a4000: abort rx timeout. Force session deactivation [ 514.639561][T19476] bond1: (slave gre0): Device is not bonding slave [ 514.646382][T19476] bond1: option active_slave: invalid value (gre0) [ 514.655552][T19476] bond1 (unregistering): Released all slaves [ 514.696570][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 514.703064][T19495] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.710784][T19495] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.728049][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 514.736242][T19499] __nla_validate_parse: 5 callbacks suppressed [ 514.736273][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 514.758354][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 514.793373][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 514.807692][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3496'. [ 514.897411][T19499] xt_HMARK: proto mask must be zero with L3 mode [ 514.905543][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 514.942816][T19473] xfrm0 speed is unknown, defaulting to 1000 [ 515.066985][T19499] 8021q: VLANs not supported on sit0 [ 515.080294][T19508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 515.129634][T19508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3499'. [ 515.384075][T19521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3502'. [ 515.420035][T19267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.432575][T19522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3502'. [ 515.461708][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.487099][T19267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.544398][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.587781][T19267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.649564][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.663135][T19267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.694540][T19267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.982651][T19267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.038762][T19267] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.065976][T18725] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.073926][T18725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.100141][T18725] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.108055][T18725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.144828][T19551] SET target dimension over the limit! [ 516.169799][T19551] team0: entered promiscuous mode [ 516.175537][T19551] team_slave_0: entered promiscuous mode [ 516.182822][T19551] team_slave_1: entered promiscuous mode [ 516.421868][T19558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3509'. [ 516.499391][T19559] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 516.616174][T19565] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3512'. [ 516.657749][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3512'. [ 516.832903][T19575] netlink: 'syz.3.3515': attribute type 1 has an invalid length. [ 516.870242][T19575] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3515'. [ 516.905613][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3515'. [ 516.995337][T19580] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 517.065946][T19580] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 517.097605][T19580] gretap1: entered promiscuous mode [ 517.143070][T19580] gretap1: entered allmulticast mode [ 517.863681][T19267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.044196][T19267] veth0_vlan: entered promiscuous mode [ 518.095256][T19267] veth1_vlan: entered promiscuous mode [ 518.235638][T19267] veth0_macvtap: entered promiscuous mode [ 518.265179][T19267] veth1_macvtap: entered promiscuous mode [ 518.332633][T19267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.387399][T19267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.464129][ T76] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.496279][ T76] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.554881][ T76] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.585902][ T76] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.687494][T19652] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20000 [ 518.874659][T19658] xt_time: unknown flags 0xf4 [ 518.987828][T19662] netlink: 'syz.4.3538': attribute type 1 has an invalid length. [ 519.084831][T19662] bond3: entered promiscuous mode [ 519.093528][T19662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 519.194260][T19666] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 519.240557][T19666] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 519.252092][T19666] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 519.305651][T18725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.342759][T18725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.499669][T18697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.535003][T18697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.632226][T19689] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.795729][T19696] __nla_validate_parse: 4 callbacks suppressed [ 519.795761][T19696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3548'. [ 520.595036][T19727] bond1: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.623612][T19727] bond1: (slave C): Enslaving as an active interface with an up link [ 520.647642][T19727] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 520.992386][T19755] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 521.157640][T19763] netdevsim netdevsim1: Direct firmware load for ÿ failed with error -2 [ 521.198931][T19763] netdevsim netdevsim1: Falling back to sysfs fallback for: ÿ [ 521.620690][T19785] netlink: 'syz.4.3568': attribute type 1 has an invalid length. [ 521.674006][T19785] bond4: entered promiscuous mode [ 521.682358][T19785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 521.713161][T19787] bond4: (slave bridge1): making interface the new active one [ 521.721987][T19787] bridge1: entered promiscuous mode [ 521.741793][T19787] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 522.313500][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3575'. [ 522.695998][T19825] syzkaller0: entered promiscuous mode [ 522.711580][T19825] syzkaller0: entered allmulticast mode [ 522.894011][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 522.917007][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 522.945001][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 522.965011][T19842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3582'. [ 523.004561][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 523.015151][T19842] openvswitch: netlink: Missing key (keys=40, expected=80) [ 523.023274][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 523.058638][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 523.111728][T19838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 523.226631][T19848] syzkaller1: entered promiscuous mode [ 523.253766][T19848] syzkaller1: entered allmulticast mode [ 524.066506][T19877] netlink: 'syz.1.3594': attribute type 64 has an invalid length. [ 524.084468][T19876] macsec1: entered promiscuous mode [ 524.092608][T19876] bridge0: entered promiscuous mode [ 524.098837][T19876] macsec1: entered allmulticast mode [ 524.104245][T19876] bridge0: entered allmulticast mode [ 524.115072][T19876] bridge0: port 3(macsec1) entered blocking state [ 524.123065][T19876] bridge0: port 3(macsec1) entered disabled state [ 524.136388][T19876] bridge0: left allmulticast mode [ 524.171150][T19875] macsec1: entered promiscuous mode [ 524.178122][T19875] macsec1: entered allmulticast mode [ 524.183541][T19875] bridge0: entered allmulticast mode [ 524.193042][T19875] bridge0: port 3(macsec1) entered blocking state [ 524.211120][T19875] bridge0: port 3(macsec1) entered disabled state [ 524.323582][T19875] bridge0: left allmulticast mode [ 524.478543][ T5819] bridge0: left promiscuous mode [ 524.700340][T19895] IPv6: sit1: Disabled Multicast RS [ 524.742484][T19896] lo: entered promiscuous mode [ 524.774048][T19896] tunl0: entered promiscuous mode [ 524.806673][T19896] gre0: entered promiscuous mode [ 524.856237][T19896] gretap0: entered promiscuous mode [ 524.873271][T19896] erspan0: entered promiscuous mode [ 524.889446][T19896] ip_vti0: entered promiscuous mode [ 524.897251][T19905] netlink: 'syz.4.3603': attribute type 1 has an invalid length. [ 525.034131][T19909] __nla_validate_parse: 61 callbacks suppressed [ 525.034168][T19909] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3603'. [ 525.303517][T19905] bond5: entered promiscuous mode [ 525.338974][T19905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 525.365708][T19909] bond5: entered allmulticast mode [ 525.385363][T19925] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.3608'. [ 525.399354][T19917] syzkaller0: entered promiscuous mode [ 525.415071][T19905] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3603'. [ 525.432836][T19917] syzkaller0: entered allmulticast mode [ 525.454508][T19905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3603'. [ 526.058969][T19936] tipc: Started in network mode [ 526.076293][T19936] tipc: Node identity 4ee272813bcb, cluster identity 4711 [ 526.106160][T19936] tipc: Enabled bearer , priority 0 [ 526.128412][T19936] syzkaller0: entered promiscuous mode [ 526.141041][T19936] syzkaller0: entered allmulticast mode [ 526.169822][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'. [ 526.190809][T19933] tipc: Started in network mode [ 526.201547][T19933] tipc: Node identity 9a5672399ed6, cluster identity 4711 [ 526.226449][T19933] tipc: Enabled bearer , priority 0 [ 526.250042][T19938] tipc: Resetting bearer [ 526.290600][T19935] tipc: Disabling bearer [ 526.484573][T19934] tipc: Resetting bearer [ 526.609950][T19934] tipc: Disabling bearer [ 526.877058][T19965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3617'. [ 527.115242][T19973] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3621'. [ 527.144998][T19973] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3621'. [ 527.151786][T19975] netlink: 816 bytes leftover after parsing attributes in process `syz.1.3622'. [ 527.166629][T19973] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3621'. [ 527.185831][T19975] syz_tun: tun_net_xmit 42 [ 527.192301][T19971] syzkaller0: entered promiscuous mode [ 527.192323][T19971] syzkaller0: entered allmulticast mode [ 527.275669][T19971] bond1: (slave ip6tnl0): Device is not bonding slave [ 527.327002][T19971] bond1: option active_slave: invalid value (ip6tnl0) [ 527.341730][T19971] bond1 (unregistering): Released all slaves [ 527.524273][T19983] Unsupported ieee802154 address type: 0 [ 527.714687][T19792] Set syz1 is full, maxelem 65536 reached [ 527.790806][T19999] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 527.829865][T19997] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 528.230741][ C1] syz_tun: tun_net_xmit 42 [ 528.514335][T20014] syzkaller0: entered promiscuous mode [ 528.531256][T20014] syzkaller0: entered allmulticast mode [ 529.286875][ C1] syz_tun: tun_net_xmit 42 [ 531.865097][T20039] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 531.866563][T20042] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 532.036580][T20071] __nla_validate_parse: 2 callbacks suppressed [ 532.036616][T20071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3643'. [ 532.049893][T20075] sock: sock_timestamping_bind_phc: sock not bind to device [ 532.100084][T20065] netlink: 'syz.2.3643': attribute type 12 has an invalid length. [ 532.109187][T20065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3643'. [ 532.205161][T20078] netlink: 'syz.0.3646': attribute type 61 has an invalid length. [ 532.364755][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3649'. [ 532.376210][T20084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.741513][T20106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3655'. [ 533.308203][T20128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3657'. [ 533.729836][T20150] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3663'. [ 533.785338][T20150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3663'. [ 533.814948][T20155] x_tables: duplicate underflow at hook 1 [ 534.151554][T20166] netlink: 'syz.1.3670': attribute type 1 has an invalid length. [ 534.183998][T20170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'. [ 534.272550][T20166] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 534.781743][T20194] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 534.876015][T20194] bond2: entered promiscuous mode [ 534.885240][T20194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.919897][T20202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.929927][T20202] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 534.941148][T20202] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 534.956135][T20202] bond2: (slave vti0): making interface the new active one [ 534.965177][T20202] vti0: entered promiscuous mode [ 534.978528][T20202] bond2: (slave vti0): Enslaving as an active interface with an up link [ 535.208433][T20214] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 535.278348][T20221] netlink: 'syz.2.3688': attribute type 5 has an invalid length. [ 535.301557][T20224] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3689'. [ 535.307610][T20216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.533559][T20236] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.542911][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3692'. [ 535.734027][T20245] veth0: entered promiscuous mode [ 535.754557][T20243] veth0: left promiscuous mode [ 536.014170][T20260] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 536.163075][T20261] bond4: option lp_interval: invalid value (0) [ 536.186540][T20261] bond4: option lp_interval: allowed values 1 - 2147483647 [ 536.225978][T20261] bond4 (unregistering): Released all slaves [ 536.436636][T20293] netlink: 'syz.0.3705': attribute type 1 has an invalid length. [ 536.541551][T20260] 8021q: adding VLAN 0 to HW filter on device bond3 [ 536.631583][T20277] bond3: (slave batadv1): Opening slave failed [ 536.632979][T20299] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 536.681851][T20288] pim6reg1: entered promiscuous mode [ 536.705948][T20288] pim6reg1: entered allmulticast mode [ 537.189738][T20330] __nla_validate_parse: 4 callbacks suppressed [ 537.189756][T20330] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3712'. [ 537.261354][T20333] netlink: 'syz.4.3713': attribute type 2 has an invalid length. [ 537.310468][T20333] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3713'. [ 537.648383][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'. [ 537.895183][T20357] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3718'. [ 537.974857][T20362] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 538.010993][T20362] xt_hashlimit: size too large, truncated to 1048576 [ 538.258403][T20368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3721'. [ 538.277384][T20368] netlink: 'syz.4.3721': attribute type 7 has an invalid length. [ 538.330506][T20368] netlink: 'syz.4.3721': attribute type 8 has an invalid length. [ 538.356999][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 538.509966][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'. [ 538.680900][T20390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3727'. [ 538.745037][T20395] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3728'. [ 538.806614][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3730'. [ 539.231097][T20426] IPv4: Oversized IP packet from 127.202.26.0 [ 539.633474][T20445] netlink: 'syz.3.3741': attribute type 3 has an invalid length. [ 539.829436][T20447] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 539.844780][T20448] can: request_module (can-proto-0) failed. [ 539.859146][T20447] netlink: 'syz.4.3742': attribute type 32 has an invalid length. [ 540.031017][T20447] bond6: option coupled_control: invalid value (192) [ 540.062223][T20447] bond6 (unregistering): Released all slaves [ 540.306656][T20473] syzkaller0: entered promiscuous mode [ 540.318191][T20473] syzkaller0: entered allmulticast mode [ 540.369214][ T257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.379173][ T257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.389647][ T257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.398543][ T257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.515654][T20486] syz_tun: tun_net_xmit 86 [ 540.522818][T20486] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 540.872269][T20502] tipc: Enabled bearer , priority 0 [ 540.882608][T20502] syzkaller0: entered promiscuous mode [ 540.891094][T20502] syzkaller0: entered allmulticast mode [ 540.903046][T20502] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 540.981783][T20500] tipc: Resetting bearer [ 541.034960][T20500] tipc: Disabling bearer [ 541.070675][T20513] bridge0: port 3(vlan2) entered blocking state [ 541.077725][T20513] bridge0: port 3(vlan2) entered disabled state [ 541.084275][T20513] vlan2: entered allmulticast mode [ 541.091465][T20513] geneve0: entered allmulticast mode [ 541.100338][T20513] vlan2: entered promiscuous mode [ 541.105557][T20513] geneve0: entered promiscuous mode [ 541.113808][T20514] syzkaller0: entered promiscuous mode [ 541.121266][T20514] syzkaller0: entered allmulticast mode [ 541.132069][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.156559][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.279475][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.302652][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.362553][T20520] gtp0: entered promiscuous mode [ 541.376880][T20520] gtp0: entered allmulticast mode [ 541.481178][T20526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.587020][ C0] syz_tun: tun_net_xmit 86 [ 541.975455][T20550] netlink: 'syz.0.3772': attribute type 10 has an invalid length. [ 542.009237][T20550] geneve3: entered promiscuous mode [ 542.014988][T20550] geneve3: entered allmulticast mode [ 542.043732][T20552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.243687][T20562] netlink: 'syz.0.3776': attribute type 4 has an invalid length. [ 542.252350][T20562] __nla_validate_parse: 14 callbacks suppressed [ 542.252367][T20562] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3776'. [ 542.301340][T20562] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.3776'. [ 542.626986][ C0] syz_tun: tun_net_xmit 86 [ 607.542094][T20583] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3783'. [ 607.568917][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 607.580071][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 607.589738][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3780'. [ 607.855684][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3785'. [ 607.857894][T20605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3786'. [ 608.028287][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.064162][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.095542][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.120939][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.227487][T20617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3791'. [ 608.244743][T20617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3791'. [ 608.257109][T20617] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3791'. [ 608.707867][T20651] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3799'. [ 609.182282][T20667] netlink: 'syz.2.3805': attribute type 4 has an invalid length. [ 611.209121][T20626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.569211][T20689] veth0: entered promiscuous mode [ 611.641319][T20691] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 611.676642][T20693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.148365][T20711] netlink: 'syz.1.3821': attribute type 2 has an invalid length. [ 612.211950][T20716] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 612.319478][T20684] veth0: left promiscuous mode [ 612.425927][T20720] vlan2: entered allmulticast mode [ 612.436909][T20720] bond0: entered allmulticast mode [ 612.445587][T20720] bond_slave_0: entered allmulticast mode [ 612.461348][T20720] bond_slave_1: entered allmulticast mode [ 612.491954][T20720] dummy0: entered allmulticast mode [ 613.012481][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.019792][T20749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.027451][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.034636][T20749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.301791][T20749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 613.313717][T20749] bond2: left promiscuous mode [ 613.323959][T20749] ip6gre1: left promiscuous mode [ 613.332825][T20749] xfrm1: left promiscuous mode [ 613.346498][T20749] bond3: left promiscuous mode [ 613.353271][T20749] bond4: left promiscuous mode [ 613.360051][T20749] bridge1: left promiscuous mode [ 613.366609][T20749] bond5: left promiscuous mode [ 613.968489][T20781] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 614.018780][T20792] ªªªªªª: renamed from bond_slave_0 (while UP) [ 614.106936][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.132585][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.374938][T20882] __nla_validate_parse: 9 callbacks suppressed [ 616.374975][T20882] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3869'. [ 616.413415][T20881] netlink: 'syz.1.3871': attribute type 2 has an invalid length. [ 616.458847][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3871'. [ 616.787959][T20893] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 616.801737][T20893] syzkaller1: linktype set to 823 [ 617.386133][T20904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 617.409530][T20904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 617.562825][T20908] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3880'. [ 618.236199][T20930] netlink: 'syz.1.3887': attribute type 1 has an invalid length. [ 618.582073][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3892'. [ 618.739756][T20938] veth3: entered allmulticast mode [ 618.757403][T20949] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 618.985245][T20958] siw: device registration error -23 [ 619.131732][T20950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3893'. [ 619.354866][T20961] tipc: Enabling not permitted [ 619.388879][T20961] tipc: Enabling of bearer rejected, failed to enable media [ 619.956062][T20983] netlink: 'syz.0.3903': attribute type 4 has an invalid length. [ 620.016390][T20986] netlink: 'syz.0.3903': attribute type 4 has an invalid length. [ 620.025302][T20982] netlink: 'syz.1.3904': attribute type 12 has an invalid length. [ 620.055299][T20982] netlink: 'syz.1.3904': attribute type 29 has an invalid length. [ 620.071024][T20982] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3904'. [ 620.331371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.092574][T21013] SET target dimension over the limit! [ 621.425965][T21020] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3912'. [ 621.439786][T21020] syzkaller1: entered promiscuous mode [ 621.445990][T21020] syzkaller1: entered allmulticast mode [ 621.471730][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3912'. [ 621.888040][T21041] veth0_to_bridge: entered promiscuous mode [ 622.014201][T21043] veth0_to_bridge: left promiscuous mode [ 622.276155][T21048] syzkaller0: entered promiscuous mode [ 622.282769][T21048] syzkaller0: entered allmulticast mode [ 622.420805][T21057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3921'. [ 622.485972][T21048] netlink: 'syz.3.3918': attribute type 1 has an invalid length. [ 622.519981][T21048] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3918'. [ 622.704973][T21061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3923'. [ 622.997595][T21073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.389125][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 623.589762][T21092] netlink: 'syz.4.3933': attribute type 1 has an invalid length. [ 623.624655][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 623.657192][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 623.726170][T21100] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 623.875838][T21105] netlink: 'syz.0.3934': attribute type 10 has an invalid length. [ 623.961500][T21113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3936'. [ 624.003303][T21100] bond4: entered promiscuous mode [ 624.010586][T21100] 8021q: adding VLAN 0 to HW filter on device bond4 [ 624.057502][T21105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.112944][T21105] batadv0: entered allmulticast mode [ 624.143883][T21105] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 624.664776][T21135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3943'. [ 625.281469][T21144] bond0: (slave dummy0): Releasing backup interface [ 625.337927][T21144] dummy0 (unregistering): left allmulticast mode [ 625.622622][T21157] netlink: 'syz.4.3949': attribute type 49 has an invalid length. [ 626.081642][T21163] syzkaller1: entered promiscuous mode [ 626.102294][T21163] syzkaller1: entered allmulticast mode [ 626.214118][T21176] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 626.374066][T21176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.503763][T21184] __nla_validate_parse: 1 callbacks suppressed [ 626.503800][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 626.532547][T21184] openvswitch: netlink: Missing key (keys=40, expected=100) [ 626.539577][T21183] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3957'. [ 627.170035][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 627.198784][ T30] audit: type=1804 audit(1784077686.079:14): pid=21205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3963" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=717 res=1 errno=0 [ 627.305937][ T30] audit: type=1800 audit(1784077686.079:15): pid=21205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3963" name="cgroup.controllers" dev="tmpfs" ino=717 res=0 errno=0 [ 627.334014][ T30] audit: type=1800 audit(1784077686.079:16): pid=21204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3963" name="cgroup.controllers" dev="tmpfs" ino=717 res=0 errno=0 [ 627.340784][T21203] team0 (unregistering): Port device team_slave_0 removed [ 627.401036][T21203] team0 (unregistering): Port device team_slave_1 removed [ 627.558286][T21199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.057733][T21230] netlink: 'syz.3.3971': attribute type 23 has an invalid length. [ 628.147651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 628.473234][T21247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 628.511367][T21247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3976'. [ 628.702752][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 629.904410][T21303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3992'. [ 630.437765][T21318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3996'. [ 630.605107][T21326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3996'. [ 631.150328][T21338] syzkaller0: entered promiscuous mode [ 631.167859][T21338] syzkaller0: entered allmulticast mode [ 632.574988][T21392] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4019'. [ 632.760164][T21397] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 632.769545][T21399] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 632.865695][T21399] 8021q: adding VLAN 0 to HW filter on device bond6 [ 632.928600][T21366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.180401][T21414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4024'. [ 633.191511][T21414] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4024'. [ 633.229643][T21414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4024'. [ 633.315069][T21415] netlink: 'syz.0.4025': attribute type 13 has an invalid length. [ 633.324504][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 633.480041][T21415] netlink: 'syz.0.4025': attribute type 13 has an invalid length. [ 633.513615][T21415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4025'. [ 634.296238][T21443] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 634.450726][T21443] bond7 (unregistering): Released all slaves [ 634.576127][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4039'. [ 634.889959][T21456] C: renamed from lo (while UP) [ 634.910625][T21456] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 634.944819][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 635.004633][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4038'. [ 635.348948][T21484] netlink: 'syz.0.4045': attribute type 16 has an invalid length. [ 635.390732][T21484] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4045'. [ 635.422159][T21484] veth0_macvtap: entered allmulticast mode [ 636.113152][T21503] team0: Device xfrm0 is of different type [ 636.930081][T21533] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 636.999297][T21533] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 637.040030][T21533] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 637.106396][T21539] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 637.171859][T21543] netlink: 'syz.0.4064': attribute type 21 has an invalid length. [ 637.956384][T21568] __nla_validate_parse: 1 callbacks suppressed [ 637.956436][T21568] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4072'. [ 638.012748][T21573] netlink: 'syz.2.4073': attribute type 33 has an invalid length. [ 638.106693][T21568] netlink: 'syz.1.4072': attribute type 32 has an invalid length. [ 638.130518][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 638.332075][T21568] bond3: option coupled_control: invalid value (192) [ 638.356191][T21568] bond3 (unregistering): Released all slaves [ 638.519607][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 638.559729][T21587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4078'. [ 638.575780][T21587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4078'. [ 638.604247][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4079'. [ 638.955261][T21597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.105321][T21603] vlan0: entered promiscuous mode [ 639.152679][T21603] team0: Port device vlan0 added [ 639.448185][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4087'. [ 639.764049][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 639.800030][T21621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4092'. [ 639.808767][T21624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4093'. [ 640.094591][T21621] geneve2: entered promiscuous mode [ 641.118789][T21670] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 641.267178][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.279174][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.474953][T21650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.499421][T21650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.768205][T21650] xfrm1: left allmulticast mode [ 641.825223][T21650] bond5: left allmulticast mode [ 641.848172][T21650] geneve2: left promiscuous mode [ 641.854581][T21658] veth1_to_bond: entered allmulticast mode [ 642.045715][T21670] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 642.078727][T21674] veth1_to_bond: entered promiscuous mode [ 642.113849][T21674] veth1_to_bond: left promiscuous mode [ 642.133447][T21674] veth1_to_bond: left allmulticast mode [ 642.255513][T21675] bond0: (slave bond_slave_1): Releasing backup interface [ 642.311656][T21688] xt_hashlimit: max too large, truncated to 1048576 [ 642.329047][T21689] xt_hashlimit: max too large, truncated to 1048576 [ 642.338053][T21688] No such timeout policy "syz1" [ 642.343671][T21689] No such timeout policy "syz1" [ 642.370763][T18723] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.424985][T18723] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.488448][T18723] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.522067][T18723] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.600285][T21695] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 642.805529][T21695] bond3: entered promiscuous mode [ 642.811604][T21695] bond3: entered allmulticast mode [ 642.818675][T21695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 643.060670][T21709] Cannot find add_set index 2 as target [ 643.080674][T21709] __nla_validate_parse: 9 callbacks suppressed [ 643.080708][T21709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4112'. [ 643.120187][T21709] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4112'. [ 643.261444][T21714] wg2: entered promiscuous mode [ 643.278093][T21714] wg2: entered allmulticast mode [ 643.334326][T21716] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4115'. [ 643.574005][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 643.617738][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 643.738178][T18723] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.740440][T21721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 643.766518][T18723] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.789388][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 643.813409][T18723] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.850534][T18723] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.895440][T21732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4119'. [ 644.135959][T21738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4122'. [ 644.189579][T21739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4122'. [ 644.550183][T21754] netlink: 'syz.3.4129': attribute type 1 has an invalid length. [ 644.673875][T21754] bond5: entered promiscuous mode [ 644.676018][T21761] xt_hashlimit: size too large, truncated to 1048576 [ 644.682191][T21754] 8021q: adding VLAN 0 to HW filter on device bond5 [ 644.852344][T21758] bond5: (slave bridge4): making interface the new active one [ 644.887015][T21758] bridge4: entered promiscuous mode [ 644.912827][T21758] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 645.546414][T21781] ip6t_srh: unknown srh match flags 5F28 [ 646.111738][T21800] bridge5: entered promiscuous mode [ 646.937868][T21834] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 647.642139][T21859] netlink: 'syz.2.4157': attribute type 1 has an invalid length. [ 647.869557][T21871] syz_tun: tun_net_xmit 86 [ 648.012564][ T5761] syz_tun: tun_net_xmit 110 [ 648.298327][T21882] __nla_validate_parse: 11 callbacks suppressed [ 648.298364][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4165'. [ 648.374400][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4165'. [ 648.577269][ T5756] syz_tun: tun_net_xmit 110 [ 648.894406][T21896] syzkaller0: entered promiscuous mode [ 648.916927][T21896] syzkaller0: entered allmulticast mode [ 648.947138][ C1] syz_tun: tun_net_xmit 86 [ 649.025323][T21910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4170'. [ 649.096127][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 649.594706][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4174'. [ 649.871109][T21938] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4176'. [ 649.895301][T21938] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4176'. [ 649.898262][T21940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4177'. [ 649.988108][ C1] syz_tun: tun_net_xmit 86 [ 650.092408][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4177'. [ 654.488184][T21931] macsec2: entered promiscuous mode [ 654.494147][T21931] bridge0: entered promiscuous mode [ 654.502433][T21931] macsec2: entered allmulticast mode [ 654.509278][T21931] bridge0: entered allmulticast mode [ 654.517563][T21931] bridge0: port 3(macsec2) entered blocking state [ 654.525237][T21931] bridge0: port 3(macsec2) entered disabled state [ 654.546039][T21931] bridge0: left allmulticast mode [ 654.558796][T21931] bridge0: left promiscuous mode [ 654.920477][T21954] syzkaller0: entered promiscuous mode [ 654.939515][T21954] syzkaller0: entered allmulticast mode [ 655.627983][T21974] syz_tun: tun_net_xmit 62 [ 655.644467][T21977] syzkaller0: entered promiscuous mode [ 655.651804][T21977] syzkaller0: entered allmulticast mode [ 656.216420][T21999] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4192'. [ 656.320553][T21994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.473777][T22002] syz_tun: entered allmulticast mode [ 656.563891][T21995] dvmrp1: left allmulticast mode [ 656.836060][T22009] vlan2: entered promiscuous mode [ 656.855312][T22009] bridge0: entered promiscuous mode [ 656.993997][T21993] syz_tun: left allmulticast mode [ 657.107082][T22016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4198'. [ 657.464879][T22026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.503713][T22024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.886625][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4208'. [ 657.900389][T22047] netlink: 'syz.0.4205': attribute type 21 has an invalid length. [ 657.918830][T22051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4207'. [ 657.929505][T22051] netlink: 'syz.4.4207': attribute type 5 has an invalid length. [ 657.939205][T22047] netlink: 'syz.0.4205': attribute type 22 has an invalid length. [ 657.940745][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4208'. [ 657.949267][T22051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4207'. [ 657.970205][T22047] netlink: 'syz.0.4205': attribute type 23 has an invalid length. [ 657.980383][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4209'. [ 657.984849][T22047] netlink: 'syz.0.4205': attribute type 25 has an invalid length. [ 658.024078][T22051] netlink: 'syz.4.4207': attribute type 1 has an invalid length. [ 658.049143][T22047] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4205'. [ 658.198910][T22051] 8021q: adding VLAN 0 to HW filter on device bond7 [ 658.409393][T22059] bond7: (slave geneve3): making interface the new active one [ 658.482680][T22059] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 658.504184][T22061] ipt_ECN: cannot use operation on non-tcp rule [ 658.525179][T19022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.552605][T19022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.879357][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4215'. [ 658.926869][T22087] netlink: 'syz.0.4215': attribute type 6 has an invalid length. [ 658.956857][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4215'. [ 659.290692][T19022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.301032][T19022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.247156][T22105] netlink: 'syz.0.4222': attribute type 1 has an invalid length. [ 660.273009][T22107] netlink: 'syz.4.4223': attribute type 6 has an invalid length. [ 660.307387][T22107] netlink: 'syz.4.4223': attribute type 5 has an invalid length. [ 661.080888][T22114] bond5: entered promiscuous mode [ 661.121400][T22114] 8021q: adding VLAN 0 to HW filter on device bond5 [ 661.253122][T22119] syzkaller0: entered promiscuous mode [ 661.273189][T22119] syzkaller0: entered allmulticast mode [ 662.707594][T22157] bridge0: port 1(bridge_slave_0) entered listening state [ 663.369662][T22173] __nla_validate_parse: 5 callbacks suppressed [ 663.369715][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4240'. [ 663.408709][T22173] openvswitch: netlink: EtherType 0 is less than min 600 [ 664.319701][T22198] validate_nla: 2 callbacks suppressed [ 664.319753][T22198] netlink: 'syz.1.4248': attribute type 32 has an invalid length. [ 665.105350][T22225] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4255'. [ 665.222800][T22228] syzkaller1: entered promiscuous mode [ 665.289368][T22228] syzkaller1: entered allmulticast mode [ 665.305618][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 665.343470][T22231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4257'. [ 665.356246][T22235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 665.374090][T22231] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4257'. [ 665.392049][T22231] netlink: 'syz.0.4257': attribute type 5 has an invalid length. [ 665.416222][T22231] netlink: 'syz.0.4257': attribute type 6 has an invalid length. [ 665.426547][T22231] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4257'. [ 665.439311][T22241] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4259'. [ 665.495214][T22234] syzkaller0: entered promiscuous mode [ 665.510078][T22234] syzkaller0: entered allmulticast mode [ 665.537835][T22240] bond0: entered promiscuous mode [ 665.554352][T22240] bond_slave_0: entered promiscuous mode [ 665.575020][T22240] bond_slave_1: entered promiscuous mode [ 665.592710][T22240] batadv0: entered promiscuous mode [ 665.888166][T22250] netlink: 'syz.1.4263': attribute type 1 has an invalid length. [ 666.122644][T22250] bond5: entered promiscuous mode [ 666.138508][T22250] 8021q: adding VLAN 0 to HW filter on device bond5 [ 666.213642][T22263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4267'. [ 666.227493][T22258] block nbd1: server does not support multiple connections per device. [ 666.275510][T22254] bond5: (slave bridge4): making interface the new active one [ 666.310029][T22258] block nbd1: shutting down sockets [ 666.322729][T22254] bridge4: entered promiscuous mode [ 666.355148][T22254] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 666.497131][T22277] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4269'. [ 667.315797][T22303] netlink: 'syz.4.4276': attribute type 8 has an invalid length. [ 668.290336][T22342] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 668.764377][T22359] netlink: 'syz.4.4291': attribute type 1 has an invalid length. [ 668.774129][T22359] __nla_validate_parse: 2 callbacks suppressed [ 668.774146][T22359] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4291'. [ 668.791926][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4291'. [ 668.991329][T22355] 8021q: adding VLAN 0 to HW filter on device bond6 [ 669.050275][T22355] bond6: entered promiscuous mode [ 669.064802][T22364] netlink: 'syz.2.4293': attribute type 1 has an invalid length. [ 669.064880][T22367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 669.088620][T22355] bond6: entered allmulticast mode [ 669.114103][T22355] bond0: (slave bond6): Enslaving as an active interface with an up link [ 669.123130][T22373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 669.294130][T22364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.512809][T22377] bond2: (slave geneve2): making interface the new active one [ 669.579996][T22377] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 669.663005][T22377] syz.2.4293 (22377) used greatest stack depth: 18224 bytes left [ 670.052434][T22403] x_tables: duplicate underflow at hook 1 [ 670.087006][T22407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4301'. [ 670.113985][T22403] IPv6: sit1: Disabled Multicast RS [ 670.150183][T22408] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4305'. [ 670.261434][T22411] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 670.282372][ T1225] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 670.769292][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 670.835102][T22429] syzkaller0: entered promiscuous mode [ 670.841518][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4311'. [ 670.846639][T22429] syzkaller0: entered allmulticast mode [ 670.923089][T22429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4312'. [ 671.189088][ T1225] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 671.729816][T22464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4320'. [ 672.345161][T22486] netlink: 'syz.1.4326': attribute type 8 has an invalid length. [ 672.727005][T22496] syzkaller0: entered promiscuous mode [ 672.746871][T22496] syzkaller0: entered allmulticast mode [ 672.997356][T22500] siw: device registration error -23 [ 673.535827][T22511] syzkaller0: entered promiscuous mode [ 673.581721][T22511] syzkaller0: entered allmulticast mode [ 673.632189][T22509] sch_tbf: peakrate 2 is lower than or equals to rate 16 ! [ 674.064613][T22528] __nla_validate_parse: 2 callbacks suppressed [ 674.064648][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4339'. [ 674.253970][T22536] netlink: 'syz.1.4340': attribute type 1 has an invalid length. [ 674.324774][T22539] netlink: 'syz.3.4342': attribute type 13 has an invalid length. [ 674.579350][T22551] netlink: 'syz.4.4344': attribute type 1 has an invalid length. [ 674.601137][T22541] bond6: (slave geneve2): making interface the new active one [ 674.617424][T22541] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 674.629671][T22539] veth1_macvtap: left promiscuous mode [ 674.636214][T22539] macsec0: entered allmulticast mode [ 675.015435][T22551] 8021q: adding VLAN 0 to HW filter on device bond8 [ 675.040505][T19022] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.068754][T19022] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.111310][T22552] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 675.183501][T22558] macvlan3: entered promiscuous mode [ 675.216957][T22558] macvlan3: entered allmulticast mode [ 675.238423][T22558] bond8: entered promiscuous mode [ 675.244359][T22558] veth0_to_bond: entered promiscuous mode [ 675.264765][T22558] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 675.287207][T22558] bond8: left promiscuous mode [ 675.292768][T22558] veth0_to_bond: left promiscuous mode [ 675.348923][T19022] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.391809][T19022] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 675.658784][T22573] netlink: 'syz.4.4350': attribute type 12 has an invalid length. [ 675.897401][T22582] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.4351'. [ 676.000106][T22577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4349'. [ 676.098914][T22586] netlink: 'syz.0.4354': attribute type 83 has an invalid length. [ 676.620783][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4358'. [ 676.661610][T22602] block nbd1: Unsupported socket: should be TCP or UNIX. [ 676.730002][T22610] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4360'. [ 677.223896][T22628] netlink: 'syz.2.4362': attribute type 3 has an invalid length. [ 677.245593][T22631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4365'. [ 678.662489][T22674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.683223][T22680] sock: sock_timestamping_bind_phc: sock not bind to device [ 678.699388][T22682] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4379'. [ 678.714698][T22682] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 678.724201][T22682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.870712][T22674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.902825][T22685] netlink: 'syz.4.4378': attribute type 12 has an invalid length. [ 678.953179][T22674] bond0 (unregistering): Released all slaves [ 679.181231][T22685] bond9: option primary_reselect: invalid value (255) [ 679.222801][T22685] bond9 (unregistering): Released all slaves [ 679.342659][T22709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4383'. [ 679.540015][T22716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.869160][T22722] netlink: 'syz.1.4387': attribute type 2 has an invalid length. [ 679.887474][T22722] netlink: 'syz.1.4387': attribute type 9 has an invalid length. [ 679.993601][ T30] audit: type=1800 audit(1784077738.879:17): pid=22727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4388" name="memory.events" dev="tmpfs" ino=1104 res=0 errno=0 [ 680.095345][T22731] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4390'. [ 680.106072][T22731] nbd: illegal input index -8454144 [ 680.125717][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.177131][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.200631][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.233707][T22731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4390'. [ 680.469363][T22733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.487490][T22733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.503445][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4389'. [ 680.716644][T22749] openvswitch: netlink: Message has 1 unknown bytes. [ 680.745856][T22749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.031877][T22755] netdevsim netdevsim1 netdevsim2: IPsec offload requires 128 bit authentication [ 681.123148][T22765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4400'. [ 681.171877][T22764] netlink: 'syz.2.4401': attribute type 27 has an invalid length. [ 681.203224][T22764] netlink: 'syz.2.4401': attribute type 4 has an invalid length. [ 681.654476][T22774] xfrm0 speed is unknown, defaulting to 1000 [ 682.248861][T22801] netlink: 'syz.0.4410': attribute type 1 has an invalid length. [ 682.347792][T22807] netlink: 'syz.4.4412': attribute type 1 has an invalid length. [ 682.658963][T22801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 683.033195][T22814] bond7: (slave bridge3): making interface the new active one [ 683.083283][T22814] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 683.191172][T22816] veth5: entered allmulticast mode [ 683.742029][T22838] x_tables: duplicate underflow at hook 1 [ 683.794339][T22839] syzkaller1: entered promiscuous mode [ 683.806095][T22839] syzkaller1: entered allmulticast mode [ 684.019335][T22843] tc_dump_action: action bad kind [ 684.120573][T22852] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 684.639495][T22868] __nla_validate_parse: 8 callbacks suppressed [ 684.639548][T22868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4430'. [ 685.006213][T22880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4434'. [ 685.042832][T22875] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 685.061511][T22875] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 685.102334][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c998400: rx timeout, send abort [ 685.143112][T22882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4435'. [ 685.174453][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 685.184927][T22880] IPVS: Error connecting to the multicast addr [ 685.202855][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4433'. [ 685.249282][T22886] tipc: Started in network mode [ 685.277169][T22886] tipc: Node identity 16fb9e7ecfc3, cluster identity 4711 [ 685.321375][T22886] tipc: Enabled bearer , priority 11 [ 685.422470][T22892] gre0: entered promiscuous mode [ 685.428436][T22892] gre0: entered allmulticast mode [ 685.538610][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4439'. [ 685.602595][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057babc00: rx timeout, send abort [ 685.614271][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c998400: abort rx timeout. Force session deactivation [ 685.723498][T22902] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.731482][T22902] IPv6: NLM_F_CREATE should be set when creating new route [ 685.851195][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4440'. [ 686.113574][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057babc00: abort rx timeout. Force session deactivation [ 686.307131][T18021] tipc: Node number set to 3644366462 [ 749.740567][T22916] netlink: 'syz.3.4445': attribute type 3 has an invalid length. [ 749.769696][T22916] netlink: 'syz.3.4445': attribute type 1 has an invalid length. [ 749.792776][T22916] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4445'. [ 749.833493][T22916] NCSI netlink: No device for ifindex 813332851 [ 749.876210][T22927] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4442'. [ 749.957122][T22928] vlan3: entered promiscuous mode [ 749.983300][T22928] bridge0: entered promiscuous mode [ 750.194535][T22922] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 750.411805][T22945] netlink: 'syz.3.4450': attribute type 29 has an invalid length. [ 750.663023][T22948] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4451'. [ 750.682913][T22950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4452'. [ 750.718173][T22957] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4451'. [ 750.724719][T22955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4454'. [ 750.747209][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4452'. [ 750.804838][T22960] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4455'. [ 750.832255][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.860003][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.988462][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4456'. [ 751.173676][T22970] netlink: 'syz.2.4457': attribute type 23 has an invalid length. [ 751.220926][T22973] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.4459'. [ 751.250503][T22973] xt_l2tp: v2 doesn't support IP mode [ 751.413664][T22966] team0 (unregistering): Port device team_slave_0 removed [ 751.485133][T22966] team0 (unregistering): Port device team_slave_1 removed [ 752.308962][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 752.404396][T23014] C: entered promiscuous mode [ 752.434196][T23016] netlink: 'syz.0.4469': attribute type 11 has an invalid length. [ 752.498861][T23014] tunl0: entered promiscuous mode [ 752.538357][T23014] gre0: left allmulticast mode [ 752.581598][T23014] gretap0: entered promiscuous mode [ 752.635215][T23014] erspan0: entered promiscuous mode [ 752.658358][T23014] ip_vti0: entered promiscuous mode [ 752.684274][T23008] macvlan0: entered promiscuous mode [ 753.149724][T23033] bond3: entered promiscuous mode [ 753.173522][T23033] bond3: entered allmulticast mode [ 753.180895][T23033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 754.952711][T23100] bond0: entered promiscuous mode [ 754.984925][T23100] bond_slave_0: entered promiscuous mode [ 755.000552][T23100] bond_slave_1: entered promiscuous mode [ 755.015829][T23100] batadv0: entered promiscuous mode [ 755.037459][T23100] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 755.052854][T23100] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 755.080518][T23100] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 755.101168][T23100] bond0: left promiscuous mode [ 755.107427][T23100] bond_slave_0: left promiscuous mode [ 755.114236][T23100] bond_slave_1: left promiscuous mode [ 755.138784][T23100] batadv0: left promiscuous mode [ 755.254115][T23113] __nla_validate_parse: 8 callbacks suppressed [ 755.254168][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4499'. [ 756.129164][T23147] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 756.172477][T23147] netlink: 'syz.4.4510': attribute type 1 has an invalid length. [ 756.542105][ T30] audit: type=1804 audit(1784077815.429:18): pid=23157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4514" name="/newroot/194/cgroup.controllers" dev="tmpfs" ino=1002 res=1 errno=0 [ 756.704453][ T30] audit: type=1800 audit(1784077815.429:19): pid=23157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4514" name="cgroup.controllers" dev="tmpfs" ino=1002 res=0 errno=0 [ 756.706142][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4516'. [ 757.839114][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'. [ 758.088734][T23214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4528'. [ 758.151376][T23218] netlink: 'syz.0.4530': attribute type 4 has an invalid length. [ 758.191103][T23218] netlink: 170676 bytes leftover after parsing attributes in process `syz.0.4530'. [ 758.218967][T23218] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 758.246990][T23218] openvswitch: netlink: Message has 512 unknown bytes. [ 758.522344][T23228] xt_hashlimit: size too large, truncated to 1048576 [ 758.580742][T23223] veth5: entered allmulticast mode [ 758.802234][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 758.845921][T23243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4535'. [ 759.385192][T23258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4541'. [ 759.684652][T23271] netlink: 'syz.1.4543': attribute type 5 has an invalid length. [ 759.727478][T23271] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4543'. [ 759.780415][T23279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4544'. [ 759.861542][T23279] xt_nfacct: accounting object `syz1' does not exist [ 760.736539][T23305] pimreg: entered allmulticast mode [ 760.795387][T23310] geneve3: entered promiscuous mode [ 761.184337][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 761.621882][T23338] netlink: 'syz.3.4563': attribute type 1 has an invalid length. [ 761.683253][T23338] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 761.684280][T23343] netlink: 'syz.3.4563': attribute type 1 has an invalid length. [ 761.701326][T23343] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 763.060832][T23338] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.069064][T23338] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.066200][T23338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 764.163988][T23338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.153643][T21151] xfrm0 speed is unknown, defaulting to 1000 [ 765.156154][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.201257][T21151] syz2: Port: 1 Link DOWN [ 765.217197][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.264703][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.324553][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.871699][T23406] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4576'. [ 765.952981][T23408] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 766.005563][T23408] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 766.142270][T23416] netlink: 'syz.3.4580': attribute type 2 has an invalid length. [ 766.460724][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4584'. [ 766.506626][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4584'. [ 766.824037][T23441] netlink: 'syz.2.4584': attribute type 1 has an invalid length. [ 767.065949][T23446] netlink: 'syz.1.4588': attribute type 1 has an invalid length. [ 767.256262][T23446] bond0: entered promiscuous mode [ 767.263201][T23446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.348221][T23451] bond0: (slave bridge5): making interface the new active one [ 767.372002][T23451] bridge5: entered promiscuous mode [ 767.399606][T23451] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 767.429244][T23450] 8021q: VLANs not supported on tunl0 [ 767.828052][T23468] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4595'. [ 767.847805][T23468] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4595'. [ 768.052649][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4597'. [ 768.197215][T23475] xt_hashlimit: size too large, truncated to 1048576 [ 768.246271][T23480] netlink: 'syz.3.4599': attribute type 1 has an invalid length. [ 769.030323][T23498] xt_HMARK: spi-set and port-set can't be combined [ 769.131351][T23498] xt_HMARK: spi-set and port-set can't be combined [ 769.225942][T23504] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4603'. [ 769.406839][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 769.434310][T23504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.975633][T23527] netlink: 'syz.3.4609': attribute type 3 has an invalid length. [ 770.039681][T23508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.114170][T23529] netlink: 'syz.4.4610': attribute type 1 has an invalid length. [ 770.413957][T23529] 8021q: adding VLAN 0 to HW filter on device bond9 [ 770.551781][T23532] bond9: (slave geneve4): making interface the new active one [ 770.616560][T23532] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 770.909941][T23546] netlink: 'syz.2.4614': attribute type 1 has an invalid length. [ 771.025460][T23546] syzkaller1: entered promiscuous mode [ 771.049462][T23546] syzkaller1: entered allmulticast mode [ 771.060784][ T10] IPVS: starting estimator thread 0... [ 771.177003][T23554] IPVS: using max 32 ests per chain, 76800 per kthread [ 774.521617][T23576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 774.785658][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4621'. [ 774.861561][T23583] syzkaller0: entered promiscuous mode [ 774.883968][T23583] syzkaller0: entered allmulticast mode [ 775.294321][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 775.425380][T23604] syzkaller0: entered promiscuous mode [ 775.460794][T23604] syzkaller0: entered allmulticast mode [ 775.621836][T23611] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4629'. [ 776.587743][T23634] tipc: Enabling of bearer rejected, failed to enable media [ 776.827834][T23637] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 777.348140][T23655] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4641'. [ 777.634110][T23663] netlink: 'syz.1.4644': attribute type 13 has an invalid length. [ 777.660252][T23663] veth1_macvtap: left promiscuous mode [ 777.677225][T23663] macsec0: entered allmulticast mode [ 778.886351][T23700] geneve5: entered promiscuous mode [ 778.971875][T23695] team_slave_0: entered promiscuous mode [ 779.008966][T23695] team_slave_0: entered allmulticast mode [ 780.302275][T23740] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4661'. [ 780.669998][T23748] netlink: 'syz.2.4663': attribute type 1 has an invalid length. [ 781.034510][T23758] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 781.115050][T23758] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 781.511205][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4669'. [ 781.644731][T23767] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4669'. [ 781.736982][T23761] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4669'. [ 781.802757][T23761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4669'. [ 781.872021][T23761] netlink: 'syz.1.4669': attribute type 5 has an invalid length. [ 781.947848][T23773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 781.951685][T23761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4669'. [ 781.991491][T23773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.001199][T23773] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.014233][T23773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.025040][T23773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.089636][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 782.099205][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.109147][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.120216][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.137353][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.306231][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 782.922691][T23791] netlink: 666 bytes leftover after parsing attributes in process `syz.1.4676'. [ 783.042242][T23789] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4675'. [ 783.165065][T23793] syzkaller1: entered promiscuous mode [ 783.220099][T23793] syzkaller1: entered allmulticast mode [ 783.727135][T23809] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 784.230435][T23773] Bluetooth: hci3: command tx timeout [ 784.427381][T23770] xfrm0 speed is unknown, defaulting to 1000 [ 785.213482][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 785.660147][T23848] erspan0: entered allmulticast mode [ 786.148667][T23853] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 786.171973][T23853] bond6 (unregistering): Released all slaves [ 786.307357][T23773] Bluetooth: hci3: command tx timeout [ 786.576308][T23770] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.617111][T23770] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.637886][T23770] bridge_slave_0: entered allmulticast mode [ 786.668087][T23770] bridge_slave_0: entered promiscuous mode [ 786.700992][T23770] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.715215][T23770] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.726522][T23770] bridge_slave_1: entered allmulticast mode [ 786.739083][T23770] bridge_slave_1: entered promiscuous mode [ 786.770224][T23861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.855634][T23770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.883452][T23770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.942366][T23816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 787.043757][T23770] team0: Port device team_slave_0 added [ 787.094524][T23770] team0: Port device team_slave_1 added [ 787.435250][T23873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4695'. [ 787.459559][T23770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.474244][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.501129][T23869] netlink: 'syz.2.4693': attribute type 1 has an invalid length. [ 787.517966][T23871] netlink: 'syz.2.4693': attribute type 1 has an invalid length. [ 787.549095][T23770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.584048][T23869] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 787.590318][T23871] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 787.634741][T23770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.687761][T23770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.785577][T23770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.924633][T23886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4697'. [ 787.972200][T23885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 788.075390][T23770] hsr_slave_0: entered promiscuous mode [ 788.084574][T23770] hsr_slave_1: entered promiscuous mode [ 788.105149][T23770] debugfs: 'hsr0' already exists in 'hsr' [ 788.118023][T23770] Cannot create hsr debugfs directory [ 788.389745][T23773] Bluetooth: hci3: command tx timeout [ 788.434608][T23902] sctp: [Deprecated]: syz.4.4699 (pid 23902) Use of int in max_burst socket option. [ 788.434608][T23902] Use struct sctp_assoc_value instead [ 788.648583][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4702'. [ 788.968928][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4704'. [ 789.009552][T23912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4704'. [ 789.166598][T23908] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 789.312004][T23921] xt_nat: multiple ranges no longer supported [ 789.382712][T23922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4706'. [ 789.613671][T23929] netlink: 'syz.4.4707': attribute type 1 has an invalid length. [ 789.637426][T23929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4707'. [ 789.666948][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4707'. [ 790.469950][T23773] Bluetooth: hci3: command tx timeout [ 798.300134][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4715'. [ 798.361547][T23955] syzkaller0: entered promiscuous mode [ 798.383726][T23955] syzkaller0: entered allmulticast mode [ 798.426331][T23770] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 798.496033][T23770] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.563778][T23958] syzkaller0: left promiscuous mode [ 798.579300][T23958] syzkaller0: left allmulticast mode [ 798.625427][T23770] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 798.689836][T23770] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.715824][T23770] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 798.775580][T23770] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.814591][T23770] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 798.828175][T23980] netlink: 'syz.1.4719': attribute type 1 has an invalid length. [ 798.837162][T23980] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4719'. [ 798.853918][T23770] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.041970][T24008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4723'. [ 805.157907][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.228751][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.543320][T24013] team0: Cannot enslave team device to itself [ 805.818326][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.841426][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.161188][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.186612][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.535641][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.570503][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.591869][T24044] xt_socket: unknown flags 0x50 [ 806.862959][T23770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.063717][T23770] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.359908][T24054] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4739'. [ 807.537394][T18722] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.545592][T18722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.825808][T18723] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.833785][T18723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 808.032968][T24070] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4745'. [ 808.578360][ T35] bridge_slave_1: left allmulticast mode [ 808.592234][ T35] bridge_slave_1: left promiscuous mode [ 808.620182][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.692306][ T35] bridge_slave_0: left allmulticast mode [ 808.724678][ T35] bridge_slave_0: left promiscuous mode [ 808.754553][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.987850][ T35] bond3 (unregistering): (slave geneve2): Releasing active interface [ 810.136378][ T35] bond7 (unregistering): (slave bridge3): Releasing active interface [ 810.249557][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.278549][ T35] bond_slave_0: left promiscuous mode [ 810.287720][ T35] bond_slave_0: left allmulticast mode [ 810.296405][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.312369][ T35] bond_slave_1: left promiscuous mode [ 810.318996][ T35] bond_slave_1: left allmulticast mode [ 810.327350][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 810.350149][ T35] batadv0: left promiscuous mode [ 810.358279][ T35] batadv0: left allmulticast mode [ 810.379790][ T35] bond0 (unregistering): (slave bond6): Releasing backup interface [ 810.408581][ T35] bond6 (unregistering): left promiscuous mode [ 810.428468][ T35] bond6 (unregistering): left allmulticast mode [ 810.443385][ T35] bond0 (unregistering): Released all slaves [ 810.466651][ T35] bond1 (unregistering): (slave bond2): Releasing backup interface [ 810.477983][ T35] bond1 (unregistering): Released all slaves [ 810.512716][ T35] bond2 (unregistering): Released all slaves [ 810.542377][ T35] bond3 (unregistering): Released all slaves [ 810.578320][ T35] bond4 (unregistering): Released all slaves [ 810.610078][ T35] bond5 (unregistering): Released all slaves [ 810.660798][ T35] bond6 (unregistering): Released all slaves [ 810.693179][ T35] bond7 (unregistering): Released all slaves [ 810.811838][T24091] tap0: tun_chr_ioctl cmd 1074025676 [ 810.846057][T24091] tap0: owner set to 0 [ 810.923885][T24110] veth1_to_bond: entered allmulticast mode [ 810.944159][T24112] veth1_to_bond: entered promiscuous mode [ 810.977939][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 811.151507][T24112] veth1_to_bond: left promiscuous mode [ 811.228731][T24112] veth1_to_bond: left allmulticast mode [ 811.506241][T24128] netlink: 'syz.1.4752': attribute type 1 has an invalid length. [ 811.577347][T24128] netlink: 'syz.1.4752': attribute type 2 has an invalid length. [ 811.814362][T24136] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4755'. [ 812.303279][ T35] hsr_slave_0: left promiscuous mode [ 812.359215][ T35] hsr_slave_1: left promiscuous mode [ 812.372878][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 812.406048][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.472437][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 812.518667][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.574865][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4757'. [ 814.219262][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 814.240773][T24180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4756'. [ 814.251785][T24180] block nbd0: Unsupported socket: should be TCP or UNIX. [ 814.669895][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 814.702245][T24167] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 814.856019][T24179] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 814.918840][T24179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4761'. [ 815.050769][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 815.343256][T24189] netlink: 'syz.1.4763': attribute type 1 has an invalid length. [ 815.513009][T24197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4763'. [ 815.838130][T24187] syzkaller0: entered promiscuous mode [ 815.858511][T24187] syzkaller0: entered allmulticast mode [ 816.085478][T24186] kthread_run failed with err -4 [ 816.165957][T24197] 8021q: adding VLAN 0 to HW filter on device bond7 [ 816.483160][T24190] xfrm0 speed is unknown, defaulting to 1000 [ 816.775331][T24228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4766'. [ 816.946061][T24238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4768'. [ 817.520535][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4769'. [ 817.583283][T24248] netlink: 'syz.2.4769': attribute type 1 has an invalid length. [ 817.621761][T24248] netlink: 'syz.2.4769': attribute type 1 has an invalid length. [ 817.703622][T24248] netlink: 'syz.2.4769': attribute type 2 has an invalid length. [ 817.738833][T24248] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4769'. [ 817.784196][T23770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.768385][T24280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4776'. [ 824.017772][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 824.731732][T24311] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4782'. [ 824.870553][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4782'. [ 825.261504][T24321] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4786'. [ 825.661306][T24325] veth7: entered allmulticast mode [ 826.351750][T24355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4790'. [ 826.540514][T24359] bridge_slave_1: left allmulticast mode [ 826.560045][T24359] bridge_slave_1: left promiscuous mode [ 826.571889][T24358] netlink: 'syz.1.4791': attribute type 23 has an invalid length. [ 826.603454][T24359] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.736449][T24359] bridge_slave_0: left allmulticast mode [ 826.765851][T24359] bridge_slave_0: left promiscuous mode [ 826.810468][T24359] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.885562][T24370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4794'. [ 826.925014][T24370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4794'. [ 826.992551][T24375] netlink: 'syz.1.4795': attribute type 2 has an invalid length. [ 827.049171][T24375] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4795'. [ 827.201701][T23770] veth0_vlan: entered promiscuous mode [ 827.348025][T23770] veth1_vlan: entered promiscuous mode [ 827.432318][T24380] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4796'. [ 827.494786][T24380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4796'. [ 827.565251][T24380] netlink: 31 bytes leftover after parsing attributes in process `syz.3.4796'. [ 827.620200][T24380] netlink: 'syz.3.4796': attribute type 2 has an invalid length. [ 827.785855][T23770] veth0_macvtap: entered promiscuous mode [ 827.843562][T23770] veth1_macvtap: entered promiscuous mode [ 828.314415][T23770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.465541][T23770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.562731][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 828.622206][T24414] netlink: 'syz.2.4803': attribute type 1 has an invalid length. [ 828.688116][T18722] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.860213][T24414] bond6: entered promiscuous mode [ 828.868145][T24414] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.909742][T18722] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.923944][T18722] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.103465][T24414] ipvlan2: entered allmulticast mode [ 829.129742][T24414] bond6: entered allmulticast mode [ 829.170566][T18722] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.313522][T24415] bond6: (slave bridge5): making interface the new active one [ 829.343164][T24415] bridge5: entered promiscuous mode [ 829.354567][T24415] bridge5: entered allmulticast mode [ 829.370725][T24415] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 829.724959][T24422] syzkaller0: entered promiscuous mode [ 829.745226][T24422] syzkaller0: entered allmulticast mode [ 830.865739][T24461] __nla_validate_parse: 3 callbacks suppressed [ 830.865774][T24461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4812'. [ 830.883936][T24461] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4812'. [ 830.894999][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4812'. [ 836.081718][T24469] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.4813'. [ 836.452566][T17515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.541528][T17515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.857748][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.903942][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.001700][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4819'. [ 837.090441][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4819'. [ 837.636184][T24504] netlink: 'syz.1.4823': attribute type 1 has an invalid length. [ 837.663217][T24502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4822'. [ 837.812466][T24511] netlink: 'syz.5.4668': attribute type 1 has an invalid length. [ 837.865500][T24512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4824'. [ 838.434349][T24529] netlink: 'syz.3.4828': attribute type 1 has an invalid length. [ 838.563178][T24525] netlink: 'syz.3.4828': attribute type 10 has an invalid length. [ 838.817790][T24529] bond7: entered promiscuous mode [ 838.824462][T24529] 8021q: adding VLAN 0 to HW filter on device bond7 [ 838.848976][T24525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.885778][T24525] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 839.385598][T24547] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4832'. [ 839.450119][T24550] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4832'. [ 839.534686][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4832'. [ 839.618225][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4832'. [ 840.116131][T24508] infiniband syz0: set down [ 840.177725][T24508] infiniband syz0: added ipvlan1 [ 840.403307][T24508] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 840.441665][T24508] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 840.514896][T24508] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 840.855377][T24508] RDS/IB: syz0: added [ 840.870111][T24508] smc: adding ib device syz0 with port count 1 [ 840.878069][T24508] smc: ib device syz0 port 1 has no pnetid [ 841.706466][T24595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4842'. [ 841.862726][T24599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4843'. [ 841.950423][T24603] netlink: 'syz.2.4842': attribute type 1 has an invalid length. [ 842.893994][T24634] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 843.168842][T24633] sctp: [Deprecated]: syz.2.4852 (pid 24633) Use of int in maxseg socket option. [ 843.168842][T24633] Use struct sctp_assoc_value instead [ 843.627235][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4857'. [ 843.898550][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4859'. [ 843.953583][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 844.195215][T24662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 844.425126][T24657] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4858'. [ 844.470867][T24655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4859'. [ 844.516983][T24655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4859'. [ 844.872135][T24667] vcan1: entered promiscuous mode [ 844.921815][T24667] vcan1: entered allmulticast mode [ 845.892787][T24689] syzkaller0: entered promiscuous mode [ 845.993357][T24689] syzkaller0: entered allmulticast mode [ 846.216574][T24705] netlink: 'syz.4.4869': attribute type 83 has an invalid length. [ 846.522288][T24711] can: request_module (can-proto-5) failed. [ 846.648828][T24705] bond10: Removing last arp target with arp_interval on [ 847.522409][T24734] xt_hashlimit: size too large, truncated to 1048576 [ 848.661471][T24760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4878'. [ 849.276752][T24770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4880'. [ 849.355925][T24773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4881'. [ 849.402120][T24775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4880'. [ 849.951428][T24784] netlink: 'syz.1.4883': attribute type 1 has an invalid length. [ 849.980080][T24787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4883'. [ 850.053442][T24787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4883'. [ 850.455686][T24784] bond8: entered promiscuous mode [ 850.503237][T24784] 8021q: adding VLAN 0 to HW filter on device bond8 [ 850.628876][T24801] netlink: 'syz.3.4887': attribute type 2 has an invalid length. [ 850.688660][T24801] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4887'. [ 850.872546][T24783] bond8: (slave bridge7): making interface the new active one [ 850.936022][T24783] bridge7: entered promiscuous mode [ 851.010712][T24783] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 852.033630][ T5723] IPVS: starting estimator thread 0... [ 852.224808][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4895'. [ 852.245626][T24837] IPVS: using max 26 ests per chain, 62400 per kthread [ 852.647326][T24825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.352249][T24856] syzkaller1: entered promiscuous mode [ 853.376967][T24856] syzkaller1: entered allmulticast mode [ 853.574292][T24863] ip6t_srh: unknown srh match flags 4000 [ 854.277789][ T5642] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 854.292294][ T5642] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 854.305478][ T5642] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 854.348405][ T5642] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 854.370644][ T5642] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 855.378614][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4908'. [ 855.501020][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 855.681292][T24904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 856.373559][T24923] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4911'. [ 856.469178][T23773] Bluetooth: hci5: command tx timeout [ 858.317610][T24946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.381232][T24880] xfrm0 speed is unknown, defaulting to 1000 [ 858.548433][T23773] Bluetooth: hci5: command tx timeout [ 858.895753][T24946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.896685][T24986] netlink: 'syz.2.4922': attribute type 17 has an invalid length. [ 858.967053][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4922'. [ 859.003851][T24986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4922'. [ 859.116976][T24985] 8021q: VLANs not supported on lo [ 859.126588][T24992] netlink: 576 bytes leftover after parsing attributes in process `syz.4.4926'. [ 859.496184][T24946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.604669][T24993] netlink: 'syz.3.4927': attribute type 3 has an invalid length. [ 859.628278][T24993] netlink: 'syz.3.4927': attribute type 3 has an invalid length. [ 860.023566][T24946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.556628][T25029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4936'. [ 860.634514][T23773] Bluetooth: hci5: command tx timeout [ 860.783460][T25032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.086333][T25041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.667288][T24946] bridge_slave_1: left allmulticast mode [ 861.675936][T24946] bridge_slave_1: left promiscuous mode [ 861.689693][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.729250][T24946] bridge_slave_0: left allmulticast mode [ 861.742075][T24946] bridge_slave_0: left promiscuous mode [ 861.762371][T24946] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.635129][T24946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.660733][T24946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.674668][T24946] bond0 (unregistering): Released all slaves [ 862.708844][T23773] Bluetooth: hci5: command tx timeout [ 863.271619][T25021] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 864.809518][T25115] netlink: 'syz.3.4952': attribute type 2 has an invalid length. [ 864.823641][T24946] hsr_slave_0: left promiscuous mode [ 864.825915][T25115] netlink: 'syz.3.4952': attribute type 2 has an invalid length. [ 864.846507][T24946] hsr_slave_1: left promiscuous mode [ 864.870587][T24946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.910706][T24946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.964453][T24946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.996926][T24946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.132294][T24946] veth1_macvtap: left promiscuous mode [ 865.146957][T24946] veth0_macvtap: left promiscuous mode [ 865.171908][T24946] veth1_vlan: left promiscuous mode [ 865.186080][T24946] veth0_vlan: left promiscuous mode [ 865.784342][ T86] smc: removing ib device syz0 [ 866.167030][T24946] team0 (unregistering): Port device team_slave_1 removed [ 866.219522][T24946] team0 (unregistering): Port device team_slave_0 removed [ 866.544628][T25101] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 866.556304][T24880] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.611852][T24880] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.639461][T24880] bridge_slave_0: entered allmulticast mode [ 866.671605][T24880] bridge_slave_0: entered promiscuous mode [ 866.701029][T24880] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.715829][T24880] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.751485][T24880] bridge_slave_1: entered allmulticast mode [ 866.786169][T24880] bridge_slave_1: entered promiscuous mode [ 866.894655][T23383] ================================================================== [ 866.903218][T23383] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 866.912368][T23383] Read of size 1 at addr ffff88807f75ae09 by task kworker/1:8/23383 [ 866.921593][T23383] [ 866.924080][T23383] CPU: 1 UID: 0 PID: 23383 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 866.924105][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 866.924118][T23383] Workqueue: events smc_ib_port_event_work [ 866.924269][T23383] Call Trace: [ 866.924281][T23383] [ 866.924291][T23383] dump_stack_lvl+0xe8/0x150 [ 866.924324][T23383] print_address_description+0x55/0x1e0 [ 866.924360][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 866.924384][T23383] print_report+0x58/0x70 [ 866.924408][T23383] kasan_report+0x117/0x150 [ 866.924443][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 866.924468][T23383] __ethtool_get_link_ksettings+0x230/0x250 [ 866.924492][T23383] __ethtool_get_link_ksettings+0x11f/0x250 [ 866.924515][T23383] ib_get_eth_speed+0x180/0x7f0 [ 866.924644][T23383] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 866.924675][T23383] ? do_raw_spin_unlock+0xf5/0x210 [ 866.924697][T23383] ? rxe_query_port+0x6b/0x3d0 [ 866.924791][T23383] rxe_query_port+0x93/0x3d0 [ 866.924819][T23383] ib_query_port+0x16e/0x830 [ 866.924865][T23383] smc_ib_port_event_work+0x147/0x920 [ 866.924891][T23383] ? rcu_is_watching+0x15/0xb0 [ 866.924932][T23383] ? process_scheduled_works+0xa20/0x14e0 [ 866.924966][T23383] process_scheduled_works+0xa8e/0x14e0 [ 866.924999][T23383] ? __pfx_process_scheduled_works+0x10/0x10 [ 866.925023][T23383] ? assign_work+0x3cf/0x5d0 [ 866.925044][T23383] worker_thread+0xa47/0xfb0 [ 866.925076][T23383] kthread+0x388/0x470 [ 866.925101][T23383] ? __pfx_worker_thread+0x10/0x10 [ 866.925120][T23383] ? __pfx_kthread+0x10/0x10 [ 866.925144][T23383] ret_from_fork+0x514/0xb70 [ 866.925187][T23383] ? __pfx_ret_from_fork+0x10/0x10 [ 866.925212][T23383] ? __switch_to+0xc89/0x1420 [ 866.925235][T23383] ? __pfx_kthread+0x10/0x10 [ 866.925259][T23383] ret_from_fork_asm+0x1a/0x30 [ 866.925283][T23383] [ 866.925291][T23383] [ 867.113085][T23383] Allocated by task 23770: [ 867.117663][T23383] kasan_save_track+0x3e/0x80 [ 867.122354][T23383] __kasan_kmalloc+0x93/0xb0 [ 867.126959][T23383] __kvmalloc_node_noprof+0x53f/0x860 [ 867.132359][T23383] alloc_netdev_mqs+0xa9/0x12b0 [ 867.137375][T23383] rtnl_create_link+0x321/0xd70 [ 867.142495][T23383] rtnl_newlink_create+0x25f/0xb00 [ 867.147609][T23383] rtnl_newlink+0x167f/0x1bd0 [ 867.152385][T23383] rtnetlink_rcv_msg+0x802/0xc00 [ 867.157350][T23383] netlink_rcv_skb+0x226/0x4a0 [ 867.162240][T23383] netlink_unicast+0x7bb/0x940 [ 867.167092][T23383] netlink_sendmsg+0x813/0xb40 [ 867.171852][T23383] sock_sendmsg_nosec+0x13a/0x180 [ 867.176945][T23383] __sys_sendto+0x408/0x5a0 [ 867.181495][T23383] __x64_sys_sendto+0xde/0x100 [ 867.186275][T23383] do_syscall_64+0x174/0x580 [ 867.190871][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.196787][T23383] [ 867.199113][T23383] Freed by task 24946: [ 867.203265][T23383] kasan_save_track+0x3e/0x80 [ 867.208139][T23383] kasan_save_free_info+0x40/0x50 [ 867.213169][T23383] __kasan_slab_free+0x5c/0x80 [ 867.218021][T23383] kfree+0x1c5/0x640 [ 867.221924][T23383] device_release+0xc4/0x1f0 [ 867.226625][T23383] kobject_put+0x222/0x550 [ 867.231125][T23383] netdev_run_todo+0xf56/0x10d0 [ 867.235969][T23383] default_device_exit_batch+0x966/0x9e0 [ 867.241664][T23383] ops_undo_list+0x4b4/0x8d0 [ 867.246326][T23383] cleanup_net+0x572/0x810 [ 867.250766][T23383] process_scheduled_works+0xa8e/0x14e0 [ 867.256309][T23383] worker_thread+0xa47/0xfb0 [ 867.260930][T23383] kthread+0x388/0x470 [ 867.265003][T23383] ret_from_fork+0x514/0xb70 [ 867.269858][T23383] ret_from_fork_asm+0x1a/0x30 [ 867.274890][T23383] [ 867.277220][T23383] The buggy address belongs to the object at ffff88807f75a000 [ 867.277220][T23383] which belongs to the cache kmalloc-cg-4k of size 4096 [ 867.291797][T23383] The buggy address is located 3593 bytes inside of [ 867.291797][T23383] freed 4096-byte region [ffff88807f75a000, ffff88807f75b000) [ 867.305948][T23383] [ 867.308269][T23383] The buggy address belongs to the physical page: [ 867.314719][T23383] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7f758 [ 867.323481][T23383] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 867.331973][T23383] memcg:ffff888026b1ce41 [ 867.336299][T23383] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 867.343928][T23383] page_type: f5(slab) [ 867.347905][T23383] raw: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122 [ 867.356747][T23383] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff888026b1ce41 [ 867.365592][T23383] head: 00fff00000000040 ffff88801b01b500 dead000000000100 dead000000000122 [ 867.374299][T23383] head: 0000000000000000 0000000800040004 00000000f5000000 ffff888026b1ce41 [ 867.383057][T23383] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 867.392091][T23383] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 867.401558][T23383] page dumped because: kasan: bad access detected [ 867.408184][T23383] page_owner tracks the page as allocated [ 867.414013][T23383] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5004, tgid 5004 (udevd), ts 44010689450, free_ts 37394925760 [ 867.435051][T23383] post_alloc_hook+0x1f9/0x250 [ 867.439876][T23383] get_page_from_freelist+0x21fa/0x2270 [ 867.445605][T23383] __alloc_frozen_pages_noprof+0x18d/0x380 [ 867.451426][T23383] allocate_slab+0x79/0x5e0 [ 867.455940][T23383] refill_objects+0x2d5/0x350 [ 867.460701][T23383] __pcs_replace_empty_main+0x2bf/0x6b0 [ 867.466297][T23383] __kvmalloc_node_noprof+0x66b/0x860 [ 867.471854][T23383] seq_read_iter+0x1ea/0xca0 [ 867.476471][T23383] vfs_read+0x595/0xa80 [ 867.480753][T23383] ksys_read+0x150/0x270 [ 867.485104][T23383] do_syscall_64+0x174/0x580 [ 867.489789][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.495690][T23383] page last free pid 5073 tgid 5073 stack trace: [ 867.502451][T23383] __free_frozen_pages+0xc1e/0xd10 [ 867.507928][T23383] __slab_free+0x274/0x2c0 [ 867.512349][T23383] qlist_free_all+0x99/0x100 [ 867.516936][T23383] kasan_quarantine_reduce+0x148/0x160 [ 867.522483][T23383] __kasan_slab_alloc+0x22/0x80 [ 867.527380][T23383] __kmalloc_noprof+0x311/0x720 [ 867.532349][T23383] tomoyo_realpath_from_path+0xef/0x640 [ 867.538017][T23383] tomoyo_path_perm+0x283/0x560 [ 867.543123][T23383] security_inode_getattr+0x12b/0x310 [ 867.548590][T23383] __x64_sys_newfstat+0x133/0x270 [ 867.553829][T23383] do_syscall_64+0x174/0x580 [ 867.558465][T23383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.564352][T23383] [ 867.566664][T23383] Memory state around the buggy address: [ 867.572464][T23383] ffff88807f75ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 867.580657][T23383] ffff88807f75ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 867.588816][T23383] >ffff88807f75ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 867.596872][T23383] ^ [ 867.601213][T23383] ffff88807f75ae80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 867.609283][T23383] ffff88807f75af00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 867.617422][T23383] ================================================================== [ 867.741956][T23383] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 867.749215][T23383] CPU: 1 UID: 0 PID: 23383 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) [ 867.758773][T23383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 867.768884][T23383] Workqueue: events smc_ib_port_event_work [ 867.774718][T23383] Call Trace: [ 867.778017][T23383] [ 867.780974][T23383] vpanic+0x56c/0xa60 [ 867.785074][T23383] ? __pfx_vpanic+0x10/0x10 [ 867.789590][T23383] panic+0xc5/0xd0 [ 867.793319][T23383] ? __pfx_panic+0x10/0x10 [ 867.797763][T23383] ? preempt_schedule_thunk+0x16/0x40 [ 867.803150][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 867.809216][T23383] ? preempt_schedule_thunk+0x16/0x40 [ 867.814680][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 867.820749][T23383] check_panic_on_warn+0x89/0xb0 [ 867.825733][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 867.831998][T23383] end_report+0x73/0x170 [ 867.836289][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 867.842359][T23383] kasan_report+0x128/0x150 [ 867.846870][T23383] ? __ethtool_get_link_ksettings+0x230/0x250 [ 867.852955][T23383] __ethtool_get_link_ksettings+0x230/0x250 [ 867.858947][T23383] __ethtool_get_link_ksettings+0x11f/0x250 [ 867.864847][T23383] ib_get_eth_speed+0x180/0x7f0 [ 867.869711][T23383] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 867.875149][T23383] ? do_raw_spin_unlock+0xf5/0x210 [ 867.880268][T23383] ? rxe_query_port+0x6b/0x3d0 [ 867.885038][T23383] rxe_query_port+0x93/0x3d0 [ 867.889640][T23383] ib_query_port+0x16e/0x830 [ 867.894495][T23383] smc_ib_port_event_work+0x147/0x920 [ 867.899964][T23383] ? rcu_is_watching+0x15/0xb0 [ 867.904736][T23383] ? process_scheduled_works+0xa20/0x14e0 [ 867.910727][T23383] process_scheduled_works+0xa8e/0x14e0 [ 867.916322][T23383] ? __pfx_process_scheduled_works+0x10/0x10 [ 867.922340][T23383] ? assign_work+0x3cf/0x5d0 [ 867.926943][T23383] worker_thread+0xa47/0xfb0 [ 867.931543][T23383] kthread+0x388/0x470 [ 867.935614][T23383] ? __pfx_worker_thread+0x10/0x10 [ 867.940723][T23383] ? __pfx_kthread+0x10/0x10 [ 867.945340][T23383] ret_from_fork+0x514/0xb70 [ 867.949935][T23383] ? __pfx_ret_from_fork+0x10/0x10 [ 867.955086][T23383] ? __switch_to+0xc89/0x1420 [ 867.959891][T23383] ? __pfx_kthread+0x10/0x10 [ 867.964743][T23383] ret_from_fork_asm+0x1a/0x30 [ 867.969600][T23383] [ 867.972904][T23383] Kernel Offset: disabled [ 867.977221][T23383] Rebooting in 86400 seconds..