last executing test programs: 3m12.631922759s ago: executing program 4 (id=547): r0 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @mcast1, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x40080) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@empty, @multicast1, 0x0, "d83e73929b76e99ca122bb85948aba5e9df91aaefd30378e249c4983ed4a59a7", 0x7fff, 0x0, 0x7, 0x401}, 0x3c) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x7c, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x6, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x57}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 3m11.64247185s ago: executing program 4 (id=561): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={0x0, &(0x7f0000000080)=""/158, &(0x7f0000000140), &(0x7f00000001c0)="7168ed55d44b4553", 0xb8e, 0xffffffffffffffff, 0x4}, 0x38) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 3m11.390149022s ago: executing program 4 (id=565): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x23) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000000000000000fc010000000000dd9db187301c0b1195c3647a224fdc33d0d6aaeb", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3m11.315698667s ago: executing program 4 (id=568): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000340), &(0x7f00000003c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440643, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61e3, &(0x7f0000000100)={'dvmrp0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000034c0)) sendmmsg(r3, &(0x7f0000000140), 0x0, 0x48815) r4 = socket$kcm(0x2, 0xa, 0x2) getuid() ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r4], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x20) 3m9.488686315s ago: executing program 4 (id=580): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf2f05000000200001800d0001007564703a73ad333ef200"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x50, r5, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x400}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x20000080) r7 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r8, {0xffe0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve0\x00'}, @TCA_FW_POLICE={0xfd16, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}]}]}}, @TCA_CHAIN={0x0, 0xb, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 3m9.277925971s ago: executing program 4 (id=583): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9", 0x24}], 0x1}}], 0x1, 0x20044044) socket$inet(0x2, 0x4, 0x819c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5e5b}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) 2m54.231661959s ago: executing program 32 (id=583): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="a9050000fb00746400010000000000462bfbdf41009f3f699c9c78616e591ed0c6b856f9", 0x24}], 0x1}}], 0x1, 0x20044044) socket$inet(0x2, 0x4, 0x819c) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5e5b}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) 1.875831215s ago: executing program 0 (id=2381): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r4 = socket(0x11, 0x2, 0x0) close(r4) (async) getsockname$tipc(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xa4, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfe24, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="f37bb9edf99b"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0xa4}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x5a}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000011000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000030000000000000000000000e36cd37646144ae176e7a2473f0cf53e33b97f007ce3e07477151f8fe05b2f356a7a9fe3b5ed198137ee"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r5, &(0x7f0000000180), &(0x7f00000009c0)=""/182}, 0x20) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_hci(r4, &(0x7f00000004c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"4d35a4422209857b79977ba6af9b96ec", 0x0, 0x0, {0xffffffff7fffffff, 0xb91}, {0xb, 0x3}, 0x3d, [0x1, 0x2, 0x6, 0x7f, 0x1, 0x6, 0x2, 0x7, 0x10, 0x3, 0xfff, 0x8, 0x5b, 0x6, 0xc5f5, 0x2]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001500)={{r4}, r9, 0x8, @inherit={0x80, &(0x7f0000000400)={0x0, 0x7, 0x6, 0x100, {0x0, 0x5, 0x5, 0x5, 0x5}, [0x35, 0x7, 0x4, 0x3, 0x0, 0x10000, 0xffff]}}, @name="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"}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r10) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000001c0)={0xfffa, 0x5, 0x8, 0x8}, 0x8) 1.842919325s ago: executing program 5 (id=2383): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470"], 0x60}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 1.653900316s ago: executing program 0 (id=2385): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000100)=[{0x1000}, {0x0, 0x7}, {0x1, 0x0, 0xa2}, {0x6}, {0x9, 0x1, 0x4, 0x2a3}, {0x2, 0x40, 0x3, 0x9}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001200375f"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r5) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) write$tun(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e0000001000086dd00189078040000000000000086ddffff0000000027"], 0xfdef) 1.581568639s ago: executing program 5 (id=2387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="2cbd805c88d340ee696918dc6afb", 0x0, 0xef0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) accept(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000140)=0x80) 1.537328869s ago: executing program 1 (id=2388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 1.493999849s ago: executing program 2 (id=2398): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.439672528s ago: executing program 1 (id=2389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newrule={0x48, 0x20, 0x100, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x0, 0xf8, 0x9, 0x0, 0x0, 0x8}, [@FRA_FLOW={0x8, 0xb, 0x5}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x10}, @FRA_FLOW={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x11) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040000020000020008000100030000000500020003000000050002000800000024"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x8, 0x0, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$sock_netrom_SIOCADDRT(r4, 0x6180, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000000080)="b82619", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="75e2170b7a8528e9bc6df9a425040ff02dea431ec2aff2516c010001004d68cb7c7237b75d6618694a1de7829f5a2f513a567acc", 0x34}, {&(0x7f00000000c0)}, {&(0x7f00000000c0)}], 0x3, &(0x7f0000000340)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xc}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x2f, 0x7, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x2, 0x2, 0xff, 0x8001, [0x4]}}, @jumbo={0xc2, 0x4, 0x29}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6f, 0x8, [0x2, 0x1dca]}}]}}}], 0x90}}], 0x2, 0xc0000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) splice(r3, &(0x7f0000000400)=0x1, 0xffffffffffffffff, &(0x7f0000000480)=0x80, 0x2, 0xa) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24048020}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '-]$\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 1.377631895s ago: executing program 2 (id=2390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100021"], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000400), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x21eae}}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1.305940615s ago: executing program 5 (id=2391): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000200000000000020000002c00048028000180080001006e6174001c00028008a60540000000030800014000000000080002400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a4de9fc19e6b89f245942349be078ccd3b16420948ff777d1000f4271ec0d219283945613b7eda187bc31cdd2d8d73418cecf09e54dfa6fe8cfda6d4816ccbdc15cfd9da4498b459045daf062e3b221ad361869d18b725cee68d5048fe267ce7e4cd2bec5861d0b19"], 0x80}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0x1ff, 0x600000, 0x4, 0xdf, 0x2}, &(0x7f00000002c0)={0x3, 0x8000, 0x3, 0xfffffffffffffffb, 0x4d, 0x1, 0x0, 0x3}, &(0x7f0000000300)={0x7, 0x6, 0x1, 0xd, 0x6, 0x7ff, 0x9, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000400)={[0x7]}, 0x8}) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r5], 0x28}}, 0x802) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ebd7000fedbdf250c00000008000300", @ANYRES32=r10, @ANYBLOB="0a00060008021100000000001400508009000100727afffa9700000004080500"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) readv(r12, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="9d5ab229d99f6a8e10bb5fd52316e117eee892d86a067b4ae693515c2f15508e4d2d7c3d8a0ca7d2f3469320bce3097147e2e1816fe001f04afec25f5b9aaa55646b232a465b2c0deb426a084a2220ab94ff8be945f2a80ac0b0d740961893e41b80741213be111e59de4d56b3f64fb98fbf7b1153833e89545ca0f5b265", 0x7e) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440), 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, r0, 0x0, 0x1b400}, [@IFLA_OPERSTATE={0x5, 0x10, 0xa3}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x30}}, 0x0) 1.205840732s ago: executing program 3 (id=2392): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x80, 0x7, 0xff, 0x9}, {0x7c, 0x6, 0x3, 0xffff}, {0x8001, 0x86, 0x80, 0x5}, {0x8, 0x8, 0x9, 0xfffffff3}, {0x9, 0x0, 0xd, 0x3}]}, 0x10) 1.19212522s ago: executing program 0 (id=2393): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000340), &(0x7f00000003c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61e3, &(0x7f0000000100)={'dvmrp0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000034c0)) sendmmsg(r1, &(0x7f0000000140), 0x0, 0x48815) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 1.133823033s ago: executing program 2 (id=2394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="86", 0x1}, {0x0, 0x63}], 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4342, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x40, 0xe7d, 0x10000, {{0x15, 0x4, 0x1, 0x3, 0x54, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_addr={0x44, 0x3c, 0xa2, 0x1, 0x2, [{@empty, 0x7}, {@local, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xa}, {@multicast1, 0xd}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic={0x82, 0x4, "a993"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r8, 0x4, 0xa6, 0xff, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xa, 0x2}}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r4) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x200}) 953.948006ms ago: executing program 5 (id=2395): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0xff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="98", 0x1}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000b00)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b27, &(0x7f0000000040)) r6 = socket(0x1e, 0x4, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x27, 0x487, 0x81, 0x1b0e95b5}}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x20008840) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x29, 0x0, 0x25dfdbfe}, 0x14}}, 0x40) 864.659216ms ago: executing program 3 (id=2396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 777.175332ms ago: executing program 3 (id=2397): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}], 0x30}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"]) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) read(r3, &(0x7f00000044c0)=""/22, 0x16) 738.402623ms ago: executing program 2 (id=2399): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xce5b, 0x6b, 0x40000, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xf}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x305}, {0xfffffffd}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) 716.498761ms ago: executing program 0 (id=2400): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100010000"], 0x3c}}, 0xc050) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r5) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r4) r7 = socket$kcm(0x10, 0x2, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r4, @ANYRES8=r6, @ANYRESHEX=r7], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000) socket(0x10, 0x6, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote}, &(0x7f00000000c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="00003646cfd977", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10, 0x0, 0x3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 628.257356ms ago: executing program 1 (id=2401): mmap(&(0x7f0000509000/0x4000)=nil, 0x4000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @loopback, 0x80000000}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async, rerun: 32) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) 434.408531ms ago: executing program 1 (id=2402): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000049c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xb, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x43, 0xfe}}, @dstopts_2292={{0x18}}, @flowinfo={{0x14, 0x29, 0xb, 0xc5}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x60}}], 0x1, 0x20004000) syz_emit_ethernet(0x87, &(0x7f0000000000)={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x49, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @empty, [@hopopts], "fafb17c163a3040b7758ba1b5be6d88a91"}}}}}}}, 0x0) 389.987646ms ago: executing program 2 (id=2412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="86", 0x1}, {0x0, 0x63}], 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4342, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x40, 0xe7d, 0x10000, {{0x15, 0x4, 0x1, 0x3, 0x54, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x40}, {[@timestamp_addr={0x44, 0x3c, 0xa2, 0x1, 0x2, [{@empty, 0x7}, {@local, 0x8}, {@rand_addr=0x64010101, 0x3}, {@broadcast, 0xa}, {@multicast1, 0xd}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic={0x82, 0x4, "a993"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r8, 0x4, 0xa6, 0xff, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xa, 0x2}}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r4) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x200}) 341.870976ms ago: executing program 3 (id=2403): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xce5b, 0x6b, 0x40000, r1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xf}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r5, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x305}, {0xfffffffd}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) 340.071342ms ago: executing program 5 (id=2404): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r2 = socket(0x10, 0x803, 0x400) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async) ioctl$SIOCRSACCEPT(r2, 0x89e3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) (async, rerun: 64) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 333.479621ms ago: executing program 0 (id=2405): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) 276.417874ms ago: executing program 1 (id=2406): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000002"], 0x2c}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fb4bffff00000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xd, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f0000000240), 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000200)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x45}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xd}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xa1, &(0x7f0000000340)=""/161, 0x40f00, 0xc, '\x00', 0x0, 0x18, r7, 0x8, &(0x7f0000000540)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xd, 0x8}, 0x10, 0x1c088, r6, 0x4, &(0x7f00000005c0)=[r4, r8, r4], &(0x7f0000000680)=[{0x2, 0x3, 0x1, 0xb}, {0x1, 0x1, 0x6, 0x818756ace82a5141}, {0x5, 0x5, 0x4, 0x9}, {0x4, 0x4, 0x3}], 0x10, 0x6}, 0x94) 127.778024ms ago: executing program 0 (id=2407): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x1) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000008004503002400000000002f907800000000ffffffff0000883e001090784206000000000000e9bb2a4fde2cfa6d96935b0e0c16f54872c15bf94f9a823dcec46e4c0ad906f37f0d75976b917cc8bf6be97aa8d4c5837fc61a371eabf4dc772c0ce4dc8f0b2d8494aecb2d14a06ee1652815e796a507478000f2ab8a0357f2501a086a0fb483715f49bd0573e091b3e96935153335b70da73e21de28debbc51927d51b84482a98db385a478c96c68fd588febc1051aa713564a1f72a96e54f12"], 0x0) setsockopt$inet6_int(r0, 0x29, 0xcb, &(0x7f0000000300)=0xdf, 0x4) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b000000016007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d522ac78876a4595146add31b35355848794ca3f8b38aef1e114ab9fb0200000000000000a3b0c81c6f8144e74fe13b80ca46c1a6c04ad73c9d", 0x8b}, {&(0x7f00000000c0)="68c32a7de6a2395800"/18, 0x12}], 0x2}, 0x8800) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) accept$phonet_pipe(r4, &(0x7f0000000140), &(0x7f0000000200)=0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f00000004c0)=0x8000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRESDEC=r6, @ANYBLOB="020000000200", @ANYRES32, @ANYBLOB="957ace27bdbf4c9f086c5e68d59edbcaf0bfa61d702457d170b44af6a9b47ee3394c61077304632b0e09238381538ce6d4c293ab6b260000000000000000719aafba836ea2f71d88fba75ccd58ff4d3417dd23d6b52b157afbfaf6b2b57abfa4793f42fcdf0e6212bae736d1668a20bfe75833375900"/135, @ANYRES64=0x0], 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1, 0x4}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 126.946931ms ago: executing program 3 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 25.986483ms ago: executing program 3 (id=2409): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000340), &(0x7f00000003c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1bc, 0x0, 0x46, 0x407006}, 0x104) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x61e3, &(0x7f0000000100)={'dvmrp0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000034c0)) sendmmsg(r2, &(0x7f0000000140), 0x0, 0x48815) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 23.176955ms ago: executing program 2 (id=2410): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfffffff9}]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000140)='GPL\x00', 0xa}, 0x94) 8.222358ms ago: executing program 5 (id=2411): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="86", 0x1}, {0x0, 0x63}], 0x2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4342, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x40, 0xe7d, 0x10000, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x67, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x40}, {[@generic={0x82, 0x5, "a99350"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', r8, 0x4, 0xa6, 0xff, 0x7, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xa, 0x2}}) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r4) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r9, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'caif0\x00', 0x200}) 0s ago: executing program 1 (id=2413): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xce5b, 0x6b, 0x40000, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0xf}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) kernel console output (not intermixed with test programs): 2473][ T9324] netlink: 'syz.5.825': attribute type 4 has an invalid length. [ 210.849940][ T9333] netlink: 'syz.5.825': attribute type 4 has an invalid length. [ 210.887867][ T9330] syzkaller0: entered promiscuous mode [ 210.893523][ T9330] syzkaller0: entered allmulticast mode [ 210.952753][ T9338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.013674][ T9333] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 211.181079][ T9346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'. [ 211.367070][ T9355] can: request_module (can-proto-3) failed. [ 211.433320][ T9362] IPv6: Can't replace route, no match found [ 211.464726][ T9363] netlink: 156 bytes leftover after parsing attributes in process `syz.3.835'. [ 211.790280][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.791736][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 211.796465][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 213.655240][ T9407] netlink: 'syz.0.844': attribute type 9 has an invalid length. [ 213.720930][ T9415] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 213.752183][ T9415] bond1: (slave geneve2): Releasing backup interface [ 213.794253][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.803998][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.814994][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.825926][ T9415] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 213.850082][ T9415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.863089][ T9415] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.872378][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 213.924585][ T9417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.935617][ T9417] team0: Port device bond1 added [ 214.104100][ T9426] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.118026][ T9426] ieee802154 phy1 wpan1: encryption failed: -22 [ 214.288046][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'. [ 214.559844][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.856'. [ 214.633245][ T9449] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 214.700205][ T9450] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 215.154566][ T9426] Bluetooth: MGMT ver 1.23 [ 215.160594][ T9467] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 215.182679][ T9467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.862'. [ 215.234296][ T9467] dummy0: entered promiscuous mode [ 215.252308][ T9467] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 215.341076][ T9476] ¾x9ÿ: renamed from bridge_slave_0 [ 215.424930][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 215.782178][ T9499] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 215.998734][ T9508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.067604][ T9512] siw: device registration error -23 [ 216.089244][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 216.098058][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.870'. [ 216.338237][ T9522] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 216.372711][ T9522] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 216.706611][ T9540] netlink: 'syz.3.879': attribute type 8 has an invalid length. [ 216.715080][ T9546] netlink: 'syz.1.881': attribute type 2 has an invalid length. [ 216.876703][ T9556] openvswitch: netlink: IP tunnel dst address not specified [ 217.261918][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.889'. [ 217.393353][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.416949][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.455457][ T9578] 0ªX¹¦À: left allmulticast mode [ 217.461241][ T9578] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 218.052546][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.902'. [ 218.073829][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.902'. [ 218.109866][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.902'. [ 218.231024][ T7968] IPVS: starting estimator thread 0... [ 218.318789][ T9632] IPVS: using max 25 ests per chain, 60000 per kthread [ 218.675949][ T9650] netlink: 'syz.0.910': attribute type 3 has an invalid length. [ 218.688571][ T9650] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 218.696540][ T9650] NCSI netlink: No device for ifindex 0 [ 219.481361][ T9689] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 219.634602][ T9696] __nla_validate_parse: 9 callbacks suppressed [ 219.634622][ T9696] netlink: 5 bytes leftover after parsing attributes in process `syz.0.922'. [ 220.891057][ T9747] FAULT_INJECTION: forcing a failure. [ 220.891057][ T9747] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 220.938555][ T9747] CPU: 1 UID: 0 PID: 9747 Comm: syz.0.934 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 220.938586][ T9747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.938598][ T9747] Call Trace: [ 220.938606][ T9747] [ 220.938616][ T9747] dump_stack_lvl+0x189/0x250 [ 220.938645][ T9747] ? __pfx____ratelimit+0x10/0x10 [ 220.938677][ T9747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.938699][ T9747] ? __pfx__printk+0x10/0x10 [ 220.938724][ T9747] ? __might_fault+0xb0/0x130 [ 220.938764][ T9747] should_fail_ex+0x414/0x560 [ 220.938802][ T9747] _copy_from_user+0x2d/0xb0 [ 220.938828][ T9747] core_sys_select+0x4b7/0xa20 [ 220.938871][ T9747] ? __pfx_core_sys_select+0x10/0x10 [ 220.938928][ T9747] ? __pfx_set_user_sigmask+0x10/0x10 [ 220.938965][ T9747] __se_sys_pselect6+0x27a/0x300 [ 220.938999][ T9747] ? __pfx___se_sys_pselect6+0x10/0x10 [ 220.939026][ T9747] ? __pfx_ksys_write+0x10/0x10 [ 220.939048][ T9747] ? rcu_is_watching+0x15/0xb0 [ 220.939077][ T9747] ? __x64_sys_pselect6+0x21/0xf0 [ 220.939107][ T9747] do_syscall_64+0xfa/0x3b0 [ 220.939126][ T9747] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.939145][ T9747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.939165][ T9747] ? clear_bhb_loop+0x60/0xb0 [ 220.939189][ T9747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.939208][ T9747] RIP: 0033:0x7fef7558e9a9 [ 220.939227][ T9747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.939243][ T9747] RSP: 002b:00007fef763ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 220.939265][ T9747] RAX: ffffffffffffffda RBX: 00007fef757b6080 RCX: 00007fef7558e9a9 [ 220.939280][ T9747] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 220.939293][ T9747] RBP: 00007fef763ce090 R08: 0000000000000000 R09: 0000000000000000 [ 220.939305][ T9747] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 220.939318][ T9747] R13: 0000000000000000 R14: 00007fef757b6080 R15: 00007ffeb48ed888 [ 220.939351][ T9747] [ 221.498915][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 221.511138][ C1] vcan0: j1939_session_tx_dat: 0xffff888045968800: queue data error: -100 [ 221.519988][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 221.526331][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 221.532697][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 221.539173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.547176][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.555071][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.563113][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.570986][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.579001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.586969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.595080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.602954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.611001][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.618873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.626872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.634757][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.642760][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.650623][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.658596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.666450][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.674449][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.682425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.690364][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.698191][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.706153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.714023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.721978][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.729849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.737783][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.745668][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.753610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.761478][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.769434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.777260][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.785224][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.793092][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.801047][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.808995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.816918][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.824783][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.832745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.840619][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.848578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.856409][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.864375][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.872264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.880218][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.888046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.896011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.903876][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.911842][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.919711][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.927627][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.935483][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.943440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.951313][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.959365][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.967199][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.975170][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.983035][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 221.991000][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 221.998886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.006828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.014700][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.022677][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.030559][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.038528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.046361][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.054357][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.062227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.070185][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.078017][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.085979][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.093839][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.101792][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.109645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.117567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.125447][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.133406][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.141281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.149274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.157119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.165117][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.172981][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.180967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.188834][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.196769][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.204641][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.212648][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.220617][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.228579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.236408][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.244399][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.252261][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.260231][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.268055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.276003][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.283860][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.291894][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.299759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.307701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.315554][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.323494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.331350][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.339298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.347118][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.355066][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.362924][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.370873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.378730][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.386639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.394511][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.402458][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.410322][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.418246][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.426110][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.434065][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.441923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.449861][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.457693][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.465640][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.473498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.481433][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.489292][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.497201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.505063][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.513028][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.520896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.531338][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.539239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.547289][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.555153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.563112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.570975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.578944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.586775][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.594738][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.602604][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.610560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.618415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.626331][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.634186][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.642133][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.649994][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.657914][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.665861][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.673827][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.681693][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.689701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.697527][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.705510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.713363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.721314][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.729196][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.737153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.745032][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.753081][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.760944][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.768898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.776726][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.784676][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.792529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.800499][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.808323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.816288][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.824141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.832099][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.839960][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.847878][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.855734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.863680][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.871540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.879494][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.887315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.895254][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.903108][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.911071][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.918935][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.926870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.934734][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.942691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.950551][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.958498][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.966323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.974285][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.982166][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 222.990167][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 222.998006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.005962][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.013819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.021806][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.029681][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.037608][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.045490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.053448][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.061305][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.069248][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.077066][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.085019][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.092874][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.100820][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.108673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.116584][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.124450][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.132391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.140245][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.148157][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.156014][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.163946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.171797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.179937][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.187781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.195752][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.203608][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.211578][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.219440][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.227353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.235214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.243183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.251068][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.259027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.266853][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.274819][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.282756][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.290702][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.298553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.306482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.314343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.322301][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.330153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.338074][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.345929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.353873][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.361728][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.369689][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.377598][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.385546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.393391][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.401340][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.409201][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.417148][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.425006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.432947][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.440798][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.448743][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.456565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.464553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.472424][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.480377][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.488965][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.496980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.504841][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.512789][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.520662][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.528665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 223.536501][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 223.635442][ T9767] @ÿ: renamed from bond_slave_0 (while UP) [ 223.656347][ T9762] veth1_to_bond: entered allmulticast mode [ 223.718726][ T9766] netlink: 256 bytes leftover after parsing attributes in process `syz.5.939'. [ 223.853435][ T9768] veth1_to_bond: left allmulticast mode [ 223.874145][ T9772] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 223.962833][ T9775] netlink: 14 bytes leftover after parsing attributes in process `syz.5.942'. [ 224.104687][ T9784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.154047][ T9787] IPVS: length: 99 != 8 [ 224.315903][ T9793] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 224.433913][ T24] IPVS: starting estimator thread 0... [ 224.435115][ T9793] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 224.466953][ T9775] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 224.479727][ T9775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.494945][ T9775] bond0 (unregistering): Released all slaves [ 224.548594][ T9797] IPVS: using max 23 ests per chain, 55200 per kthread [ 224.770881][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 224.904971][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.951'. [ 224.975150][ T9821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.951'. [ 225.004817][ T9823] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (34) [ 225.244511][ T9833] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.958'. [ 225.437568][ T9838] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 225.514060][ T9843] netlink: 140 bytes leftover after parsing attributes in process `syz.0.961'. [ 225.542253][ T9842] netlink: 140 bytes leftover after parsing attributes in process `syz.0.961'. [ 225.559678][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.961'. [ 226.037148][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.966'. [ 226.154539][ T9870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.302807][ T9851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.318808][ T9873] siw: device registration error -23 [ 226.442894][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 226.787330][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 227.093208][ T9896] team0: left promiscuous mode [ 227.129980][ T9896] batadv0: left promiscuous mode [ 227.136269][ T9896] batadv0: left allmulticast mode [ 227.218268][ T9896] wg2: left promiscuous mode [ 227.223611][ T9896] wg2: left allmulticast mode [ 227.573182][ T9896] hsr0: left promiscuous mode [ 227.769154][ T9896] gretap1: left promiscuous mode [ 227.774912][ T9896] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 227.847025][ T9904] pim6reg: entered allmulticast mode [ 227.857980][ T9901] pim6reg: left allmulticast mode [ 227.911791][ T6241] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.936977][ T6241] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.970262][ T6241] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.008909][ T6241] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.266771][ T6241] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.289216][ T6241] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.307308][ T6241] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.317249][ T6241] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.162002][ T9955] IPVS: Error joining to the multicast group [ 229.335140][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.502242][ T9981] Unsupported ieee802154 address type: 0 [ 230.122438][T10006] netlink: 'syz.5.1004': attribute type 1 has an invalid length. [ 230.181407][T10010] netlink: 'syz.5.1004': attribute type 1 has an invalid length. [ 230.319025][T10013] tipc: Started in network mode [ 230.338089][T10013] tipc: Node identity 2ae09b190b4e, cluster identity 4711 [ 230.359722][T10013] tipc: Enabled bearer , priority 0 [ 230.382283][T10006] syzkaller0: entered promiscuous mode [ 230.405245][T10006] syzkaller0: entered allmulticast mode [ 230.463823][T10005] tipc: Resetting bearer [ 230.531393][T10005] tipc: Disabling bearer [ 230.852389][T10027] __nla_validate_parse: 7 callbacks suppressed [ 230.852411][T10027] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1007'. [ 231.075213][T10037] bridge0: entered allmulticast mode [ 231.097765][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 231.137661][T10035] pim6reg1: entered promiscuous mode [ 231.146789][T10035] pim6reg1: entered allmulticast mode [ 231.194425][T10040] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1010'. [ 231.235993][T10046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.256901][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1013'. [ 231.315644][T10048] policy can only be matched on NF_INET_PRE_ROUTING [ 231.315666][T10048] unable to load match [ 231.457966][T10054] siw: device registration error -23 [ 231.479882][T10055] nbd: device at index 5 is going down [ 231.578915][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 231.602685][T10058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1018'. [ 231.618627][T10058] tipc: Invalid UDP bearer configuration [ 231.618693][T10058] tipc: Enabling of bearer rejected, failed to enable media [ 231.641228][T10066] v: renamed from ip6_vti0 (while UP) [ 231.654462][T10062] netlink: 'syz.2.1019': attribute type 3 has an invalid length. [ 231.672789][T10063] netlink: 'syz.2.1019': attribute type 3 has an invalid length. [ 232.069877][T10082] bridge_slave_0: entered promiscuous mode [ 232.082872][T10082] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 232.115760][T10085] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1024'. [ 232.158882][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 232.453091][T10087] dvmrp0: entered allmulticast mode [ 232.605186][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 232.623594][T10095] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1028'. [ 232.720279][T10100] siw: device registration error -23 [ 232.864090][T10102] nbd: device at index 0 is going down [ 233.078177][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.223158][T10124] bridge0: port 1(erspan0) entered blocking state [ 233.246783][T10124] bridge0: port 1(erspan0) entered disabled state [ 233.261246][T10124] erspan0: entered allmulticast mode [ 233.276475][T10124] erspan0: entered promiscuous mode [ 233.286613][T10124] bridge0: port 1(erspan0) entered blocking state [ 233.293474][T10124] bridge0: port 1(erspan0) entered forwarding state [ 233.331001][T10128] erspan0: left allmulticast mode [ 233.336081][T10128] erspan0: left promiscuous mode [ 233.359907][T10128] bridge0: port 1(erspan0) entered disabled state [ 233.902317][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.927657][T10157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.141042][T10172] tipc: Enabling of bearer rejected, failed to enable media [ 234.167587][T10172] tipc: Enabling of bearer rejected, failed to enable media [ 234.180768][T10172] netlink: 'syz.3.1051': attribute type 1 has an invalid length. [ 234.501625][T10184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.526353][T10185] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 234.682978][T10190] team0: Port device team_slave_0 removed [ 234.966318][T10202] netlink: 'syz.0.1060': attribute type 1 has an invalid length. [ 235.087234][T10210] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 235.098922][T10210] netlink: 'syz.2.1063': attribute type 4 has an invalid length. [ 235.353151][T10214] 8021q: adding VLAN 0 to HW filter on device bond6 [ 235.453536][T10221] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 235.465001][T10221] bond6: (slave macvlan4): Enslaving as a backup interface with a down link [ 235.494534][ T7530] bond6: Warning: Found an uninitialized port [ 235.517271][T10214] bond6: (slave macvlan4): Releasing backup interface [ 235.897701][T10233] tipc: Enabled bearer , priority 0 [ 235.945946][T10218] IPv6: syztnl1: Disabled Multicast RS [ 235.955326][T10233] syzkaller0: entered promiscuous mode [ 235.973345][T10233] syzkaller0: entered allmulticast mode [ 236.009658][T10233] tipc: Resetting bearer [ 236.023953][T10231] tipc: Resetting bearer [ 236.095600][T10237] __nla_validate_parse: 13 callbacks suppressed [ 236.095623][T10237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 236.112792][T10231] tipc: Disabling bearer [ 236.372100][T10255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1075'. [ 237.173895][T10291] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 237.191811][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1086'. [ 237.351518][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1091'. [ 237.752183][T10315] IPVS: set_ctl: invalid protocol: 94 172.30.1.2:20001 [ 237.864597][T10318] IPVS: set_ctl: invalid protocol: 0 12.0.0.0:16388 [ 237.866488][T10312] hsr0: entered allmulticast mode [ 237.889416][T10312] hsr_slave_0: entered allmulticast mode [ 237.903490][T10312] hsr_slave_1: entered allmulticast mode [ 238.000601][T10324] tipc: Enabled bearer , priority 0 [ 238.019350][T10326] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 238.059575][T10325] tipc: Enabling of bearer rejected, already enabled [ 238.068101][T10324] syzkaller0: entered promiscuous mode [ 238.077190][T10324] syzkaller0: entered allmulticast mode [ 238.112168][T10325] tipc: Resetting bearer [ 238.207378][T10330] netlink: 'syz.0.1098': attribute type 4 has an invalid length. [ 238.209589][T10325] tipc: Disabling bearer [ 238.326500][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 238.365662][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1100'. [ 238.704400][T10359] netlink: 'syz.1.1106': attribute type 3 has an invalid length. [ 238.769997][T10359] netlink: 'syz.1.1106': attribute type 3 has an invalid length. [ 238.840128][T10365] tipc: Enabled bearer , priority 0 [ 238.850078][T10365] syzkaller0: entered promiscuous mode [ 238.894462][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 238.904920][T10365] syzkaller0: entered allmulticast mode [ 238.929135][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 239.027536][T10371] tipc: Resetting bearer [ 239.144720][T10362] tipc: Resetting bearer [ 239.221405][T10362] tipc: Disabling bearer [ 239.242280][T10386] netlink: 'syz.2.1114': attribute type 4 has an invalid length. [ 239.393129][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 239.458584][T10393] netlink: 'syz.5.1115': attribute type 21 has an invalid length. [ 239.466568][T10393] netlink: 'syz.5.1115': attribute type 6 has an invalid length. [ 239.508737][T10393] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1115'. [ 240.962805][T10464] : entered promiscuous mode [ 241.608695][T10491] __nla_validate_parse: 7 callbacks suppressed [ 241.608716][T10491] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1139'. [ 241.624330][T10491] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1139'. [ 241.987349][T10508] openvswitch: netlink: IP tunnel dst address not specified [ 242.413306][T10523] openvswitch: netlink: IP tunnel TTL not specified. [ 242.500350][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 242.572571][T10536] dvmrp0: left allmulticast mode [ 242.648761][T10536] siw: device registration error -23 [ 242.982959][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 243.011213][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 243.522777][T10570] syzkaller1: entered promiscuous mode [ 243.534169][T10570] syzkaller1: entered allmulticast mode [ 244.154434][T10579] siw: device registration error -23 [ 244.275082][T10584] smc: net device bond0 applied user defined pnetid SYZ2 [ 244.343664][T10593] smc: net device bond0 erased user defined pnetid SYZ2 [ 244.406950][T10584] netlink: 'syz.0.1163': attribute type 1 has an invalid length. [ 244.438792][T10584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.639923][T10607] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1169'. [ 244.705111][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 244.792813][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'. [ 244.838750][T10621] geneve3: entered promiscuous mode [ 244.844048][T10621] geneve3: entered allmulticast mode [ 244.861841][T10616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.044557][T10631] siw: device registration error -23 [ 245.156847][T10638] netlink: 'syz.5.1177': attribute type 10 has an invalid length. [ 245.230965][T10638] team0: Port device dummy0 added [ 245.269153][T10646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1180'. [ 245.272419][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 245.288857][T10642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.450080][T10644] nbd: device at index 3 is going down [ 246.203081][T10680] siw: device registration error -23 [ 246.827883][T10701] __nla_validate_parse: 4 callbacks suppressed [ 246.827908][T10701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1195'. [ 246.962259][T10709] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1197'. [ 247.426143][T10723] siw: device registration error -23 [ 247.816850][T10738] netlink: 'syz.1.1200': attribute type 13 has an invalid length. [ 247.847060][T10738] netlink: 'syz.1.1200': attribute type 17 has an invalid length. [ 248.033151][T10738] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 248.229542][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 249.334731][T10801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'. [ 249.597698][T10814] sctp: [Deprecated]: syz.1.1221 (pid 10814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.597698][T10814] Use struct sctp_sack_info instead [ 249.621322][T10816] tipc: Enabled bearer , priority 0 [ 249.634184][T10816] syzkaller0: entered promiscuous mode [ 249.646135][T10816] syzkaller0: entered allmulticast mode [ 249.734117][T10815] tipc: Resetting bearer [ 249.802814][T10815] tipc: Disabling bearer [ 250.170905][T10840] TCP: TCP_TX_DELAY enabled [ 250.245239][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1228'. [ 250.393854][T10852] netlink: 'syz.0.1233': attribute type 3 has an invalid length. [ 250.403197][T10852] netlink: 'syz.0.1233': attribute type 3 has an invalid length. [ 250.421260][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 250.435739][T10840] macsec1: entered promiscuous mode [ 250.442086][T10852] netlink: 'syz.0.1233': attribute type 10 has an invalid length. [ 250.488555][T10840] macsec1: entered allmulticast mode [ 250.513841][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 250.568161][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 250.664759][T10867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1236'. [ 250.801778][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1238'. [ 250.808969][T10864] macvtap1: entered promiscuous mode [ 250.840966][T10864] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 251.196007][T10864] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 251.651183][T10889] tipc: Enabled bearer , priority 0 [ 251.659965][T10889] syzkaller0: entered promiscuous mode [ 251.665471][T10889] syzkaller0: entered allmulticast mode [ 251.854279][T10888] tipc: Resetting bearer [ 251.890294][T10888] tipc: Disabling bearer [ 252.129546][T10911] __nla_validate_parse: 4 callbacks suppressed [ 252.129567][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'. [ 252.193080][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1248'. [ 252.497742][T10923] netlink: 'syz.2.1252': attribute type 3 has an invalid length. [ 252.570331][T10918] IPv6: sit1: Disabled Multicast RS [ 252.630945][T10923] siw: device registration error -23 [ 252.653758][T10930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1253'. [ 252.719915][T10923] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.772328][T10923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.974433][T10942] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 252.999764][T10942] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 253.210143][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 253.257211][T10955] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1259'. [ 253.271428][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1260'. [ 253.308225][T10954] macvlan3: entered promiscuous mode [ 253.340108][T10954] bond0: entered promiscuous mode [ 253.345744][T10954] bond_slave_0: entered promiscuous mode [ 253.379557][T10954] bond_slave_1: entered promiscuous mode [ 253.388305][T10954] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 253.596443][T10967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1263'. [ 253.699330][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1264'. [ 253.806603][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1264'. [ 253.816821][T10977] vxcan1: entered allmulticast mode [ 253.883898][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'. [ 254.008868][T10990] tun0: tun_chr_ioctl cmd 35111 [ 254.610898][T11027] Bluetooth: MGMT ver 1.23 [ 254.767396][T11034] dvmrp8: entered allmulticast mode [ 255.202729][T11053] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20000 [ 255.293147][T11017] dvmrp8: left allmulticast mode [ 255.797753][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.247555][T11089] syzkaller1: entered promiscuous mode [ 256.268091][T11089] syzkaller1: entered allmulticast mode [ 256.332359][T11091] netlink: 'syz.1.1296': attribute type 15 has an invalid length. [ 256.362386][T11091] netlink: 'syz.1.1296': attribute type 13 has an invalid length. [ 256.374636][T11091] netlink: 'syz.1.1296': attribute type 12 has an invalid length. [ 256.414789][T11091] IPVS: set_ctl: invalid protocol: 41 172.30.1.2:20003 [ 256.636123][T11108] tipc: Enabling of bearer rejected, failed to enable media [ 256.686858][T11107] netlink: 'syz.3.1302': attribute type 3 has an invalid length. [ 257.128954][T11131] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20001 [ 257.318257][T11142] !: renamed from dummy0 (while UP) [ 257.549409][T11135] __nla_validate_parse: 11 callbacks suppressed [ 257.549431][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 257.691128][T11160] netlink: 7292 bytes leftover after parsing attributes in process `syz.2.1317'. [ 257.703110][T11135] bridge0: entered promiscuous mode [ 257.725867][T11135] bridge0: entered allmulticast mode [ 257.772376][T11164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1317'. [ 257.783311][T11164] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1317'. [ 258.348065][T11172] siw: device registration error -23 [ 258.397287][T11190] syz_tun: entered allmulticast mode [ 258.444285][T11189] syz_tun: left allmulticast mode [ 258.462522][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'. [ 258.579764][T11196] syzkaller1: entered promiscuous mode [ 258.585284][T11196] syzkaller1: entered allmulticast mode [ 258.623236][T11204] netlink: 'syz.5.1327': attribute type 8 has an invalid length. [ 258.632136][T11202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.642427][T11205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 258.781748][T11204] syzkaller0: entered promiscuous mode [ 258.787798][T11204] syzkaller0: entered allmulticast mode [ 258.798196][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1330'. [ 258.886167][T11216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 258.914225][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 258.938617][T11219] nbd: couldn't find device at index 0 [ 258.947460][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1332'. [ 260.372904][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 260.507107][T11226] siw: device registration error -23 [ 260.942201][T11257] veth1_to_team: entered allmulticast mode [ 260.948230][T11257] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 261.035563][T11262] 8021q: VLANs not supported on gre0 [ 261.063813][T11259] 8021q: VLANs not supported on gre0 [ 261.159875][T11264] "syz.0.1344" (11264) uses obsolete ecb(arc4) skcipher [ 261.301869][T11277] nbd: couldn't find device at index 5 [ 261.353257][T11282] siw: device registration error -23 [ 261.682504][T11294] netlink: 'syz.0.1353': attribute type 13 has an invalid length. [ 261.736911][T11294] netlink: 'syz.0.1353': attribute type 17 has an invalid length. [ 261.774074][T11284] syzkaller0: entered promiscuous mode [ 261.782520][T11284] syzkaller0: entered allmulticast mode [ 261.831665][T11308] netlink: 'syz.1.1354': attribute type 4 has an invalid length. [ 261.845013][T11297] tipc: New replicast peer: 255.255.255.255 [ 261.883418][T11297] tipc: Enabled bearer , priority 10 [ 261.894606][T11294] ip6_vti0: left promiscuous mode [ 261.919945][T11294] ip6_vti0: left allmulticast mode [ 261.939982][T11294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.884857][ T5992] tipc: Node number set to 565091097 [ 263.900806][T11291] __nla_validate_parse: 2 callbacks suppressed [ 263.900825][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1352'. [ 264.370583][T11356] nbd: couldn't find device at index 3 [ 264.841158][T11363] geneve3: entered promiscuous mode [ 264.965888][T11366] bond0: (slave wlan1): Releasing backup interface [ 264.980690][T11366] bond0: Destroying bond [ 265.135535][T11366] bond0 (unregistering): Released all slaves [ 265.492077][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1371'. [ 265.528605][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1371'. [ 265.539056][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 265.569502][T11395] macvlan5: entered promiscuous mode [ 265.583914][T11395] bond0: entered promiscuous mode [ 265.639667][T11395] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 265.697035][T11404] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 265.751832][ T5992] IPVS: starting estimator thread 0... [ 265.795358][T11414] netlink: 'syz.3.1375': attribute type 21 has an invalid length. [ 265.848749][T11408] IPVS: using max 24 ests per chain, 57600 per kthread [ 265.875041][T11409] bond1: (slave geneve2): making interface the new active one [ 265.890568][T11409] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 265.900083][ T7534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.909578][ T7534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 265.955752][T11409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1374'. [ 265.959944][T11414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1375'. [ 266.019105][T11404] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 266.059940][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.083389][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 266.367672][T11409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.668072][T11438] tipc: Enabled bearer , priority 0 [ 266.723678][T11438] syzkaller0: entered promiscuous mode [ 266.743242][T11438] syzkaller0: entered allmulticast mode [ 266.745381][T11445] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1384'. [ 266.896558][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1386'. [ 266.924702][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1386'. [ 267.183442][T11445] bond0 (unregistering): left promiscuous mode [ 267.255871][T11445] bond0 (unregistering): Released all slaves [ 267.333890][T11452] tipc: Resetting bearer [ 267.345767][T11463] syz_tun: entered allmulticast mode [ 267.353357][T11469] syz_tun: left allmulticast mode [ 267.365206][T11470] pim6reg: entered allmulticast mode [ 267.371436][T11473] pim6reg: left allmulticast mode [ 267.401310][T11437] tipc: Resetting bearer [ 267.421850][T11437] tipc: Disabling bearer [ 267.442248][T11475] tipc: Enabled bearer , priority 0 [ 267.462094][T11475] syzkaller0: entered promiscuous mode [ 267.467615][T11475] syzkaller0: entered allmulticast mode [ 267.610305][T11475] tipc: Resetting bearer [ 267.638037][T11474] tipc: Resetting bearer [ 267.689709][T11474] tipc: Disabling bearer [ 267.807785][T11495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.053879][T11513] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1402'. [ 269.312132][T11566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.496117][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1417'. [ 269.677194][T11578] pimreg: entered allmulticast mode [ 269.706290][T11578] pimreg: left allmulticast mode [ 270.240557][T11584] syzkaller0: entered promiscuous mode [ 270.246219][T11584] syzkaller0: entered allmulticast mode [ 270.395602][T11596] netlink: 'syz.1.1421': attribute type 12 has an invalid length. [ 270.435951][T11596] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1421'. [ 270.789153][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 271.332645][T11620] netlink: 'syz.0.1427': attribute type 1 has an invalid length. [ 271.372108][T11620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1427'. [ 275.207628][T11646] IPVS: length: 209 != 24 [ 275.426090][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 275.773979][T11665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1439'. [ 276.499370][T11659] ipvlan1: entered promiscuous mode [ 276.512110][T11659] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 276.985787][T11669] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1441'. [ 277.098511][T11670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1440'. [ 277.594167][T11684] lo speed is unknown, defaulting to 1000 [ 277.634520][T11684] lo speed is unknown, defaulting to 1000 [ 277.660726][T11684] lo speed is unknown, defaulting to 1000 [ 277.691112][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 277.828962][T11693] wg1: entered promiscuous mode [ 277.942544][T11684] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 278.022522][T11695] netlink: 'syz.1.1447': attribute type 1 has an invalid length. [ 278.252316][T11706] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1445'. [ 278.287660][T11701] bond3 (unregistering): Released all slaves [ 278.398830][T11684] lo speed is unknown, defaulting to 1000 [ 278.413881][T11684] lo speed is unknown, defaulting to 1000 [ 278.510006][T11684] lo speed is unknown, defaulting to 1000 [ 278.571605][T11684] lo speed is unknown, defaulting to 1000 [ 278.578781][T11694] delete_channel: no stack [ 278.623741][T11684] lo speed is unknown, defaulting to 1000 [ 278.682661][T11684] lo speed is unknown, defaulting to 1000 [ 278.866258][ T5864] Bluetooth: hci5: link tx timeout [ 278.898453][ T30] audit: type=1800 audit(1753597685.735:3): pid=11706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1445" name="cgroup.controllers" dev="tmpfs" ino=694 res=0 errno=0 [ 278.936314][T11740] syzkaller1: entered promiscuous mode [ 278.955092][ T5864] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 278.955830][T11740] syzkaller1: entered allmulticast mode [ 278.963969][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806da49800: rx timeout, send abort [ 278.979423][ T5864] Bluetooth: hci5: link tx timeout [ 278.984585][ T5864] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 278.997701][T11744] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1453'. [ 279.037663][T11745] dvmrp0: entered allmulticast mode [ 279.477629][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806da49800: abort rx timeout. Force session deactivation [ 279.499838][T11764] netlink: 'syz.5.1458': attribute type 12 has an invalid length. [ 279.507708][T11764] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1458'. [ 279.614341][T11767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1460'. [ 279.644178][T11767] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 279.841589][T11774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'. [ 279.926886][T11774] ip6tnl3: entered promiscuous mode [ 279.952610][T11774] ip6tnl3: entered allmulticast mode [ 280.184739][T11796] netlink: 'syz.3.1467': attribute type 29 has an invalid length. [ 280.440260][T11811] __nla_validate_parse: 34 callbacks suppressed [ 280.440284][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'. [ 280.579237][T11812] lo speed is unknown, defaulting to 1000 [ 280.861376][T11829] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1477'. [ 280.908245][T11832] netlink: 'syz.3.1476': attribute type 1 has an invalid length. [ 280.918046][T11832] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1476'. [ 281.074952][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 281.366752][T11860] netlink: 'syz.0.1481': attribute type 4 has an invalid length. [ 281.753080][T11870] tipc: Enabled bearer , priority 0 [ 281.774183][T11869] tipc: Enabling of bearer rejected, already enabled [ 281.794961][T11870] syzkaller0: entered promiscuous mode [ 281.802015][T11870] syzkaller0: entered allmulticast mode [ 281.842945][T11870] tipc: Resetting bearer [ 281.875551][T11868] tipc: Resetting bearer [ 281.899066][T11868] tipc: Disabling bearer [ 281.945790][T11843] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 282.484753][T11899] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 282.548541][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1493'. [ 282.714051][T11901] lo speed is unknown, defaulting to 1000 [ 283.123154][T11928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.130470][T11928] IPv6: NLM_F_CREATE should be set when creating new route [ 283.148950][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 283.534555][T11940] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 283.559179][T11940] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1503'. [ 283.573561][T11940] netlink: 'syz.0.1503': attribute type 1 has an invalid length. [ 283.590315][T11940] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1503'. [ 283.702827][T11946] netlink: 'syz.0.1505': attribute type 29 has an invalid length. [ 283.713410][T11946] netlink: 'syz.0.1505': attribute type 29 has an invalid length. [ 284.626688][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1517'. [ 284.739157][T11988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.788812][T11987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.985856][T12000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1523'. [ 284.997361][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1520'. [ 285.019974][T11998] pim6reg: entered allmulticast mode [ 285.027630][T11998] pim6reg: left allmulticast mode [ 285.381001][T12013] lo speed is unknown, defaulting to 1000 [ 286.312692][T12051] gre1: entered allmulticast mode [ 286.677000][T12061] lo speed is unknown, defaulting to 1000 [ 286.905699][T12072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1540'. [ 287.529466][T12099] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1547'. [ 287.683391][T12106] lo speed is unknown, defaulting to 1000 [ 288.532181][T12130] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1554'. [ 288.865394][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1558'. [ 288.874445][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1558'. [ 288.916305][T12143] gretap1: entered promiscuous mode [ 289.062411][T12136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1549'. [ 289.111551][T12154] netlink: 'syz.5.1561': attribute type 32 has an invalid length. [ 289.123802][T12157] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1562'. [ 289.158386][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1562'. [ 289.178722][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1562'. [ 289.182136][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1561'. [ 289.235755][T12154] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128) [ 289.397173][T12165] lo speed is unknown, defaulting to 1000 [ 289.929892][T12180] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 290.011874][T12167] lo speed is unknown, defaulting to 1000 [ 290.048129][T12182] syzkaller0: entered promiscuous mode [ 290.053820][T12182] syzkaller0: entered allmulticast mode [ 290.672758][T12206] bridge5: entered promiscuous mode [ 290.678023][T12206] bridge5: entered allmulticast mode [ 290.746377][T12207] lo speed is unknown, defaulting to 1000 [ 291.622935][T12235] lo speed is unknown, defaulting to 1000 [ 291.808821][T12248] batadv_slave_0: entered promiscuous mode [ 292.135632][T12263] __nla_validate_parse: 6 callbacks suppressed [ 292.135653][T12263] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 292.701601][T12286] lo speed is unknown, defaulting to 1000 [ 293.427503][T12309] ipvlan2: entered promiscuous mode [ 293.546265][T12314] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 293.566187][T12314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1603'. [ 293.589260][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 293.625066][T12325] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 293.682699][T12317] erspan0: entered promiscuous mode [ 293.707276][T12317] vlan0: entered promiscuous mode [ 293.783701][T12330] IPv6: Can't replace route, no match found [ 293.850003][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 294.026541][T12335] ¾x9ÿ: renamed from bridge_slave_0 [ 294.115258][T12346] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 294.160044][T12346] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 294.195436][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 294.258917][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1615'. [ 294.400067][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 294.562291][T12375] gtp0: entered promiscuous mode [ 294.576033][T12375] netlink: 'syz.1.1623': attribute type 13 has an invalid length. [ 294.601805][T12364] lo speed is unknown, defaulting to 1000 [ 294.611171][T12375] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1623'. [ 294.641405][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 294.673883][T12375] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 294.942390][T12386] syzkaller0: entered promiscuous mode [ 294.965228][T12386] syzkaller0: entered allmulticast mode [ 295.204283][T12395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.126224][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1637'. [ 296.758282][T12469] sctp: [Deprecated]: syz.0.1646 (pid 12469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.758282][T12469] Use struct sctp_sack_info instead [ 296.818780][T12465] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 296.886498][T12478] netlink: 'syz.2.1650': attribute type 39 has an invalid length. [ 297.041077][T12487] tipc: Enabled bearer , priority 0 [ 297.058633][T12487] syzkaller0: entered promiscuous mode [ 297.079444][T12487] syzkaller0: entered allmulticast mode [ 297.183735][T12487] tipc: Resetting bearer [ 297.216887][T12482] tipc: Resetting bearer [ 297.259615][T12482] tipc: Disabling bearer [ 297.371626][T12498] __nla_validate_parse: 6 callbacks suppressed [ 297.371647][T12498] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1655'. [ 297.824596][T12523] netlink: 'syz.5.1663': attribute type 7 has an invalid length. [ 297.852655][T12523] netlink: 'syz.5.1663': attribute type 8 has an invalid length. [ 297.975620][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 298.005802][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 298.465978][T12558] lo speed is unknown, defaulting to 1000 [ 298.708277][T12575] netlink: 'syz.2.1675': attribute type 1 has an invalid length. [ 298.737956][T12576] ieee802154 phy1 wpan1: encryption failed: -22 [ 299.059630][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1682'. [ 299.363290][T12610] ip6gretap0: entered promiscuous mode [ 299.540862][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 299.782490][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1696'. [ 299.845521][T12633] netlink: zone id is out of range [ 299.856080][T12633] netlink: zone id is out of range [ 299.925143][T12633] netlink: zone id is out of range [ 299.950725][T12633] netlink: zone id is out of range [ 299.969577][T12633] netlink: zone id is out of range [ 299.976952][T12633] netlink: zone id is out of range [ 299.990949][T12633] netlink: zone id is out of range [ 300.006078][T12633] netlink: zone id is out of range [ 300.227817][T12658] nbd: must specify at least one socket [ 300.239026][T12658] nbd: couldn't find device at index 3 [ 300.343616][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 300.557135][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 301.111822][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 301.766433][T12707] nbd: must specify at least one socket [ 301.800310][T12707] nbd: couldn't find device at index 1 [ 302.486129][ T7535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.521901][ T7535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.589040][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 302.603336][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.624437][T12737] lo: MTU too low for tipc bearer [ 302.646062][T12737] tipc: Enabling of bearer rejected, failed to enable media [ 302.664875][T12737] netlink: 'syz.2.1725': attribute type 15 has an invalid length. [ 302.674181][T12684] lo speed is unknown, defaulting to 1000 [ 303.135052][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1730'. [ 303.345556][T12761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 303.544152][T12771] tipc: Enabled bearer , priority 0 [ 303.634579][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 303.806356][T12771] syzkaller0: entered promiscuous mode [ 303.826400][T12771] syzkaller0: entered allmulticast mode [ 303.849508][T12771] tipc: Resetting bearer [ 304.020519][ T7534] tipc: Resetting bearer [ 304.146923][T12782] macvlan2: entered allmulticast mode [ 304.204653][T12768] tipc: Resetting bearer [ 304.398043][T12806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1741'. [ 304.443134][T12808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.216438][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 306.070939][T12768] tipc: Disabling bearer [ 306.087926][T12806] macvlan0: entered promiscuous mode [ 306.093436][T12806] bond0: entered promiscuous mode [ 306.463956][T12849] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.494421][T12849] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 306.555757][T12858] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1751'. [ 306.611185][T12859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.712614][T12861] delete_channel: no stack [ 306.732440][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1755'. [ 306.827975][T12864] macvlan4: entered promiscuous mode [ 306.856443][T12864] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 307.021348][T12880] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 307.217861][T12892] macsec1: entered promiscuous mode [ 307.226514][T12892] macsec1: entered allmulticast mode [ 307.234863][T12892] ip6gretap0: entered allmulticast mode [ 307.565219][T12905] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.584100][T12905] net_ratelimit: 96 callbacks suppressed [ 307.584108][T12905] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.701074][T12907] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1765'. [ 307.825562][T12912] nbd: must specify a size in bytes for the device [ 307.850234][T12912] nbd: couldn't find device at index 0 [ 307.915686][T12916] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 308.089974][T12928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 308.134697][T12930] tipc: Enabled bearer , priority 0 [ 308.144172][T12926] syzkaller0: entered promiscuous mode [ 308.168008][T12926] syzkaller0: entered allmulticast mode [ 308.206680][T12927] veth0: entered promiscuous mode [ 308.225950][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1771'. [ 308.267316][T12934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.346248][T12939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1774'. [ 308.427180][T12925] tipc: Resetting bearer [ 308.489137][T12925] tipc: Disabling bearer [ 308.683660][T12953] netlink: 'syz.0.1778': attribute type 1 has an invalid length. [ 308.699101][T12949] netlink: 'syz.0.1778': attribute type 9 has an invalid length. [ 308.814838][T12958] nbd: couldn't find device at index 2 [ 309.068967][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 309.081398][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1785'. [ 309.086364][T12962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.098565][T12973] macvlan2: entered promiscuous mode [ 309.104822][T12973] bond0: entered promiscuous mode [ 309.121330][T12970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.259971][ T9024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.298038][T12980] netlink: 'syz.2.1787': attribute type 2 has an invalid length. [ 309.307233][T12980] netlink: 'syz.2.1787': attribute type 2 has an invalid length. [ 309.323367][T12980] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1787'. [ 309.532565][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1788'. [ 309.571893][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1790'. [ 309.605879][T12982] lo speed is unknown, defaulting to 1000 [ 309.948845][ T9024] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.972941][T12999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.005630][T13001] nbd: couldn't find device at index 2 [ 310.194368][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1794'. [ 310.214425][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 310.232383][T13009] macvlan1: entered promiscuous mode [ 310.442430][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1799'. [ 310.468993][T13018] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1797'. [ 310.490897][T13016] ip6tnl1: entered promiscuous mode [ 310.538468][T13016] ip6tnl1: entered allmulticast mode [ 310.855047][T13027] lo speed is unknown, defaulting to 1000 [ 311.313451][T13037] nbd: couldn't find device at index 1 [ 311.334083][T13036] nft_compat: unsupported protocol 1 [ 311.599959][T13046] macvlan5: entered promiscuous mode [ 311.621331][T13046] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 311.671204][T13053] netlink: 'syz.2.1810': attribute type 16 has an invalid length. [ 311.807641][T13056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.003792][T13069] netlink: 'syz.5.1816': attribute type 4 has an invalid length. [ 312.006918][T13066] pim6reg1: entered promiscuous mode [ 312.017847][T13066] pim6reg1: entered allmulticast mode [ 312.035053][T13069] netlink: 'syz.5.1816': attribute type 4 has an invalid length. [ 312.154675][T13078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.215138][ T5992] lo speed is unknown, defaulting to 1000 [ 312.221409][ T5992] syz1: Port: 1 Link DOWN [ 312.242178][ T7973] lo speed is unknown, defaulting to 1000 [ 312.390689][T13090] tipc: Enabled bearer , priority 0 [ 312.401625][T13090] syzkaller0: entered promiscuous mode [ 312.407202][T13090] syzkaller0: entered allmulticast mode [ 312.492205][T13090] tipc: Resetting bearer [ 312.542146][T13088] tipc: Resetting bearer [ 312.575925][T13088] tipc: Disabling bearer [ 312.795938][T13098] macvlan2: entered promiscuous mode [ 313.402774][T13130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.525678][T13137] __nla_validate_parse: 13 callbacks suppressed [ 313.525700][T13137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1836'. [ 313.614326][T13140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'. [ 313.696536][T13144] gretap1: entered promiscuous mode [ 313.704873][T13146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.818842][T13153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1839'. [ 313.830182][T13151] delete_channel: no stack [ 313.834862][T13151] delete_channel: no stack [ 313.840437][T13151] delete_channel: no stack [ 313.841495][T13153] macvlan6: entered promiscuous mode [ 313.845075][T13151] delete_channel: no stack [ 313.857175][T13151] delete_channel: no stack [ 313.864711][T13151] delete_channel: no stack [ 313.869638][T13151] delete_channel: no stack [ 313.880411][T13151] delete_channel: no stack [ 313.885074][T13151] delete_channel: no stack [ 313.897273][T13151] delete_channel: no stack [ 313.902700][T13151] delete_channel: no stack [ 313.907532][T13151] delete_channel: no stack [ 313.918842][T13151] delete_channel: no stack [ 313.923610][T13151] delete_channel: no stack [ 313.928280][T13151] delete_channel: no stack [ 313.941416][T13151] delete_channel: no stack [ 313.946141][T13151] delete_channel: no stack [ 313.948275][T13156] nbd: must specify at least one socket [ 313.952172][T13151] delete_channel: no stack [ 313.961144][T13156] nbd: couldn't find device at index 1 [ 313.967050][T13151] delete_channel: no stack [ 313.972103][T13151] delete_channel: no stack [ 313.976767][T13151] delete_channel: no stack [ 313.981809][T13151] delete_channel: no stack [ 313.986510][T13151] delete_channel: no stack [ 313.993790][T13151] delete_channel: no stack [ 314.008635][T13151] delete_channel: no stack [ 314.013336][T13151] delete_channel: no stack [ 314.018237][T13151] delete_channel: no stack [ 314.037285][T13151] delete_channel: no stack [ 314.051895][T13151] delete_channel: no stack [ 314.062519][T13151] delete_channel: no stack [ 314.070164][T13151] delete_channel: no stack [ 314.075305][T13151] delete_channel: no stack [ 314.080310][T13151] delete_channel: no stack [ 314.319009][T13134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 314.698255][T13184] nbd: must specify at least one socket [ 314.714882][T13184] nbd: couldn't find device at index 0 [ 314.748129][T13188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.817920][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1852'. [ 314.862332][T13191] macvlan3: entered promiscuous mode [ 314.991140][T13200] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1855'. [ 315.200888][T13206] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1858'. [ 315.277152][T13211] batadv_slave_1: entered promiscuous mode [ 315.284392][T13211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 315.304936][T13209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1858'. [ 315.447375][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'. [ 315.696288][T13220] lo speed is unknown, defaulting to 1000 [ 315.797284][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1866'. [ 315.891521][T13237] macvlan3: entered promiscuous mode [ 316.029062][T13248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.266371][T13220] tipc: Trying to set illegal importance in message [ 317.253109][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.481919][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.098165][T13365] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 318.242595][T13372] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 318.534389][T13382] bridge3: entered promiscuous mode [ 318.560595][T13382] bridge3: port 1(macsec2) entered blocking state [ 318.596660][T13382] bridge3: port 1(macsec2) entered disabled state [ 318.614150][T13382] macsec2: entered allmulticast mode [ 318.633104][T13382] bridge3: entered allmulticast mode [ 318.677419][T13382] macsec2: left allmulticast mode [ 318.683488][T13382] bridge3: left allmulticast mode [ 318.695436][T13382] bridge3: left promiscuous mode [ 318.757525][T13384] dvmrp0: left allmulticast mode [ 319.199544][T13422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.284042][T13423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.473612][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 319.593711][T13434] __nla_validate_parse: 7 callbacks suppressed [ 319.593732][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1916'. [ 319.736444][ T30] audit: type=1804 audit(1753597726.575:4): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1918" name="/newroot/391/cgroup.controllers" dev="tmpfs" ino=2023 res=1 errno=0 [ 319.764247][T13437] 8021q: VLANs not supported on 60ªX¹¦À [ 319.797548][T13450] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 319.814969][ T30] audit: type=1800 audit(1753597726.605:5): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1918" name="cgroup.controllers" dev="tmpfs" ino=2023 res=0 errno=0 [ 319.829216][T13450] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 319.905372][ T30] audit: type=1800 audit(1753597726.605:6): pid=13437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1918" name="cgroup.controllers" dev="tmpfs" ino=2023 res=0 errno=0 [ 320.084178][T13462] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1924'. [ 320.114041][T13462] delete_channel: no stack [ 320.669119][T13484] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1931'. [ 320.700012][T13484] netdevsim netdevsim2 netdevsim0: Device is already in use. [ 320.763596][T13484] syzkaller0: entered promiscuous mode [ 320.776890][T13484] syzkaller0: entered allmulticast mode [ 320.845029][T13484] macsec2: entered promiscuous mode [ 320.900216][T13488] can: request_module (can-proto-3) failed. [ 320.974666][T13489] lo speed is unknown, defaulting to 1000 [ 321.033854][T13496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.429413][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 321.523400][T13511] macvlan4: entered promiscuous mode [ 321.735064][T13525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.742378][T13525] IPv6: NLM_F_CREATE should be set when creating new route [ 321.749699][T13525] IPv6: NLM_F_CREATE should be set when creating new route [ 322.274169][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1954'. [ 322.638244][T13565] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1956'. [ 323.136904][T13585] Bluetooth: MGMT ver 1.23 [ 323.187056][T13585] geneve5: entered promiscuous mode [ 323.431505][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'. [ 323.441086][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'. [ 323.596342][T13606] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 323.879859][T13611] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1966'. [ 323.937396][T13606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.964779][T13614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 324.004233][T13611] hsr_slave_0: left promiscuous mode [ 324.066870][T13611] hsr_slave_1: left promiscuous mode [ 324.199563][T13620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.136004][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1974'. [ 325.220417][T13638] lo speed is unknown, defaulting to 1000 [ 325.953109][T13650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 326.327035][T13668] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 326.513770][T13672] bond2: (slave bridge4): making interface the new active one [ 326.557081][T13672] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 326.724704][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1981'. [ 327.156083][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 327.527380][T13693] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 329.069025][T13749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2002'. [ 329.574846][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2007'. [ 330.153111][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2013'. [ 330.306593][T13798] netlink: 'syz.0.2015': attribute type 7 has an invalid length. [ 330.317976][T13798] netlink: 'syz.0.2015': attribute type 8 has an invalid length. [ 330.558979][T13809] vlan2: entered promiscuous mode [ 330.571062][T13809] bridge0: entered promiscuous mode [ 330.590283][T13809] vlan2: entered allmulticast mode [ 330.609082][T13809] bridge0: entered allmulticast mode [ 330.674784][T13810] netlink: 'syz.0.2017': attribute type 6 has an invalid length. [ 330.728969][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 330.758496][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2019'. [ 330.772925][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2019'. [ 330.799163][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2019'. [ 330.913847][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2020'. [ 330.963536][T13817] macvlan4: entered promiscuous mode [ 330.981855][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 331.102094][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 331.394779][T13826] hsr_slave_1 (unregistering): left promiscuous mode [ 331.428900][T13848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.663244][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2030'. [ 331.882737][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2034'. [ 331.911555][T13874] macvlan5: entered promiscuous mode [ 332.048937][T13881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 332.080582][T13879] lo speed is unknown, defaulting to 1000 [ 332.121200][T13885] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 333.136455][T13905] raw_sendmsg: syz.0.2044 forgot to set AF_INET. Fix it! [ 333.330681][T13909] tipc: Enabled bearer , priority 0 [ 333.338242][T13909] syzkaller0: entered promiscuous mode [ 333.344088][T13909] syzkaller0: entered allmulticast mode [ 333.376719][T13909] tipc: Resetting bearer [ 333.408703][T13906] tipc: Resetting bearer [ 333.522343][T13906] tipc: Disabling bearer [ 333.553977][T13915] macvlan6: entered promiscuous mode [ 333.712650][T13928] netlink: 'syz.2.2052': attribute type 29 has an invalid length. [ 333.727013][T13928] netlink: 'syz.2.2052': attribute type 29 has an invalid length. [ 333.769128][T13927] veth1_macvtap: left promiscuous mode [ 334.133825][T13948] netlink: 'syz.1.2058': attribute type 4 has an invalid length. [ 334.225480][T13951] warn_alloc: 1 callbacks suppressed [ 334.225503][T13951] syz.0.2060: vmalloc error: size 14184448, failed to allocated page array size 27704, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 334.268417][T13951] CPU: 1 UID: 0 PID: 13951 Comm: syz.0.2060 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 334.268449][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.268462][T13951] Call Trace: [ 334.268470][T13951] [ 334.268483][T13951] dump_stack_lvl+0x189/0x250 [ 334.268516][T13951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.268537][T13951] ? __pfx__printk+0x10/0x10 [ 334.268562][T13951] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 334.268587][T13951] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 334.268613][T13951] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 334.268640][T13951] warn_alloc+0x214/0x310 [ 334.268677][T13951] ? __pfx_warn_alloc+0x10/0x10 [ 334.268717][T13951] ? __get_vm_area_node+0x28f/0x300 [ 334.268746][T13951] ? ip_set_sockfn_get+0x13a/0xc30 [ 334.268777][T13951] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 334.268849][T13951] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 334.268887][T13951] ? ip_set_sockfn_get+0x13a/0xc30 [ 334.268914][T13951] vmalloc_noprof+0xb2/0xf0 [ 334.268941][T13951] ? ip_set_sockfn_get+0x13a/0xc30 [ 334.268970][T13951] ip_set_sockfn_get+0x13a/0xc30 [ 334.269005][T13951] nf_getsockopt+0x26b/0x290 [ 334.269039][T13951] ip_getsockopt+0x1c4/0x220 [ 334.269078][T13951] ? __pfx_ip_getsockopt+0x10/0x10 [ 334.269113][T13951] ? sock_common_getsockopt+0x2d/0xb0 [ 334.269141][T13951] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 334.269173][T13951] do_sock_getsockopt+0x372/0x450 [ 334.269200][T13951] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 334.269223][T13951] ? do_syscall_64+0x20/0x3b0 [ 334.269242][T13951] ? __fget_files+0x3a0/0x420 [ 334.269269][T13951] ? __fget_files+0x2a/0x420 [ 334.269306][T13951] __x64_sys_getsockopt+0x1a5/0x250 [ 334.269329][T13951] ? do_syscall_64+0x20/0x3b0 [ 334.269351][T13951] ? do_syscall_64+0x20/0x3b0 [ 334.269375][T13951] do_syscall_64+0xfa/0x3b0 [ 334.269393][T13951] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.269412][T13951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.269431][T13951] ? clear_bhb_loop+0x60/0xb0 [ 334.269456][T13951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.269476][T13951] RIP: 0033:0x7fef7558e9a9 [ 334.269496][T13951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.269514][T13951] RSP: 002b:00007fef763ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 334.269537][T13951] RAX: ffffffffffffffda RBX: 00007fef757b6080 RCX: 00007fef7558e9a9 [ 334.269552][T13951] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000005 [ 334.269564][T13951] RBP: 00007fef75610d69 R08: 0000200000000040 R09: 0000000000000000 [ 334.269577][T13951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.269589][T13951] R13: 0000000000000000 R14: 00007fef757b6080 R15: 00007ffeb48ed888 [ 334.269623][T13951] [ 334.269701][T13951] Mem-Info: [ 334.559741][T13951] active_anon:4174 inactive_anon:0 isolated_anon:0 [ 334.559741][T13951] active_file:1686 inactive_file:39937 isolated_file:0 [ 334.559741][T13951] unevictable:768 dirty:127 writeback:0 [ 334.559741][T13951] slab_reclaimable:12390 slab_unreclaimable:184080 [ 334.559741][T13951] mapped:34375 shmem:1596 pagetables:1180 [ 334.559741][T13951] sec_pagetables:0 bounce:0 [ 334.559741][T13951] kernel_misc_reclaimable:0 [ 334.559741][T13951] free:1224329 free_pcp:11494 free_cma:0 [ 334.605218][T13951] Node 0 active_anon:16696kB inactive_anon:0kB active_file:6744kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137500kB dirty:504kB writeback:0kB shmem:4848kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13184kB pagetables:4568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 334.651905][T13951] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 334.740302][T13951] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.770262][T13951] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 334.776220][T13951] Node 0 DMA32 free:975900kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16648kB inactive_anon:0kB active_file:6744kB inactive_file:157976kB unevictable:1536kB writepending:504kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:30376kB local_pcp:13652kB free_cma:0kB [ 334.812347][T13951] lowmem_reserve[]: 0 0 1 1 1 [ 334.817295][T13951] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 334.876292][T13951] lowmem_reserve[]: 0 0 0 0 0 [ 334.881452][T13951] Node 1 Normal free:3906044kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16036kB local_pcp:9904kB free_cma:0kB [ 334.917198][T13951] lowmem_reserve[]: 0 0 0 0 0 [ 334.917802][T13943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 334.926651][T13951] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 334.962012][T13951] Node 0 DMA32: 1468*4kB (UM) 617*8kB (UM) 701*16kB (UM) 2480*32kB (UME) 772*64kB (UME) 340*128kB (UM) 303*256kB (UME) 177*512kB (UM) 47*1024kB (UME) 10*2048kB (UM) 133*4096kB (UM) = 975880kB [ 334.985925][T13951] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 334.999666][T13951] Node 1 Normal: 201*4kB (UM) 51*8kB (UME) 42*16kB (UME) 147*32kB (UME) 43*64kB (UME) 13*128kB (UME) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3906044kB [ 335.020549][T13951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.030706][T13951] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.040558][T13951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.050330][T13951] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.060141][T13951] 43218 total pagecache pages [ 335.064912][T13951] 0 pages in swap cache [ 335.069465][T13951] Free swap = 124996kB [ 335.073641][T13951] Total swap = 124996kB [ 335.077880][T13951] 2097051 pages RAM [ 335.082088][T13951] 0 pages HighMem/MovableOnly [ 335.089675][T13951] 425382 pages reserved [ 335.093854][T13951] 0 pages cma reserved [ 335.114272][T13948] bond0: left promiscuous mode [ 335.124413][T13948] bond_slave_0: left promiscuous mode [ 335.137491][T13948] bond_slave_1: left promiscuous mode [ 335.165119][T13957] macvlan5: entered promiscuous mode [ 335.312263][T13963] lo speed is unknown, defaulting to 1000 [ 335.372151][T13972] netlink: 'syz.1.2064': attribute type 3 has an invalid length. [ 335.395619][T13969] lo speed is unknown, defaulting to 1000 [ 336.034114][T14008] __nla_validate_parse: 9 callbacks suppressed [ 336.034135][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 336.066826][T14008] macvlan7: entered promiscuous mode [ 336.072281][T14008] bond0: entered promiscuous mode [ 336.077859][T14008] bond_slave_0: entered promiscuous mode [ 336.109298][T14008] bond_slave_1: entered promiscuous mode [ 336.182635][T14020] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20004 [ 336.825419][T14049] lo speed is unknown, defaulting to 1000 [ 336.924676][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'. [ 337.196928][T14068] block nbd0: server does not support multiple connections per device. [ 337.206396][T14068] block nbd0: shutting down sockets [ 337.376400][T14078] syzkaller1: entered promiscuous mode [ 337.401580][T14078] syzkaller1: entered allmulticast mode [ 337.468840][T14078] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2092'. [ 337.560483][T14090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 337.850637][T14100] netlink: 'syz.2.2097': attribute type 5 has an invalid length. [ 338.124588][T14116] nbd: must specify an index to disconnect [ 338.211809][T14130] netlink: 'syz.2.2105': attribute type 29 has an invalid length. [ 338.224143][T14131] netlink: 'syz.2.2105': attribute type 29 has an invalid length. [ 338.242609][T14130] netlink: 488 bytes leftover after parsing attributes in process `syz.2.2105'. [ 338.956780][T14173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 339.238148][T14183] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2116'. [ 339.310418][T14185] netlink: 'syz.2.2117': attribute type 1 has an invalid length. [ 339.355927][T14185] bond2: entered promiscuous mode [ 339.365694][T14185] bond2: entered allmulticast mode [ 339.406790][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2117'. [ 339.423775][T14185] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 340.160218][T14232] netlink: 'syz.1.2126': attribute type 4 has an invalid length. [ 340.225345][T14234] nbd: device at index 5 is going down [ 340.548943][T14240] nbd: must specify an index to disconnect [ 342.542724][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2134'. [ 342.576038][T14257] macvlan7: entered promiscuous mode [ 342.740769][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2137'. [ 342.753680][T14268] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 342.760012][T14265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.792848][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2137'. [ 342.893223][T14276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.932261][T14274] hsr_slave_1 (unregistering): left promiscuous mode [ 343.020808][T14279] veth7: entered allmulticast mode [ 343.345395][T14293] syzkaller0: entered promiscuous mode [ 343.354107][T14293] syzkaller0: entered allmulticast mode [ 343.583825][T14302] syzkaller1: entered promiscuous mode [ 343.589555][T14302] syzkaller1: entered allmulticast mode [ 343.596788][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2147'. [ 343.906703][T14313] team0: entered promiscuous mode [ 343.913216][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2151'. [ 343.966949][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058941400: rx timeout, send abort [ 343.975544][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058941400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 344.017332][T14313] team0 (unregistering): left promiscuous mode [ 344.250723][T14324] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2153'. [ 344.273010][T14324] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2153'. [ 344.587769][T14339] nbd: device at index 5 is going down [ 344.604084][T14335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.749436][T14348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2162'. [ 344.811735][T14348] macvlan8: entered promiscuous mode [ 344.983050][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2164'. [ 345.106977][T14360] hsr_slave_1 (unregistering): left promiscuous mode [ 345.164944][T14357] lo speed is unknown, defaulting to 1000 [ 345.259974][T14371] macsec0: entered allmulticast mode [ 345.305035][T14371] gretap0: entered allmulticast mode [ 345.317199][T14371] macsec0: left allmulticast mode [ 345.323673][T14371] gretap0: left allmulticast mode [ 345.823629][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2165'. [ 346.093337][T14394] lo speed is unknown, defaulting to 1000 [ 346.171200][T14396] sctp: [Deprecated]: syz.5.2174 (pid 14396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.171200][T14396] Use struct sctp_sack_info instead [ 346.349185][T14402] macvlan6: entered promiscuous mode [ 346.655040][T14411] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 346.939215][T14431] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 347.040900][T14428] erspan0: entered promiscuous mode [ 347.072441][T14428] vlan3: entered promiscuous mode [ 347.225877][T14420] lo speed is unknown, defaulting to 1000 [ 348.158109][T14461] __nla_validate_parse: 4 callbacks suppressed [ 348.158129][T14461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2189'. [ 348.190723][T14461] macvlan2: entered promiscuous mode [ 348.196057][T14461] bond0: entered promiscuous mode [ 348.201963][T14461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.212736][T14459] lo speed is unknown, defaulting to 1000 [ 348.708804][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2193'. [ 348.899773][T14488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.955395][T14484] lo speed is unknown, defaulting to 1000 [ 349.107675][T14492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.473349][T14495] lo speed is unknown, defaulting to 1000 [ 349.635483][T14501] netlink: 'syz.2.2198': attribute type 83 has an invalid length. [ 349.684333][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 349.707110][T14504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2198'. [ 349.837185][T14510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2201'. [ 350.008858][T14508] nbd: device at index 5 is going down [ 350.022352][T14510] macvlan9: entered promiscuous mode [ 350.035849][T14514] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 350.294165][T14531] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2206'. [ 350.389278][T14533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.402878][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.566291][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2214'. [ 350.585843][T14544] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 350.606431][T14544] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 350.629975][T14544] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2212'. [ 350.639915][T14544] team0: entered promiscuous mode [ 350.645054][T14544] team_slave_0: entered promiscuous mode [ 350.651131][T14544] team_slave_1: entered promiscuous mode [ 350.666723][T14544] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.761110][T14558] netlink: 'syz.1.2217': attribute type 3 has an invalid length. [ 351.063212][T14554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2215'. [ 351.091910][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 351.173231][T14568] ip6tnl2: entered promiscuous mode [ 351.198808][T14568] ip6tnl2: entered allmulticast mode [ 351.246297][T14569] macvlan8: entered promiscuous mode [ 351.566928][ T30] audit: type=1107 audit(1753597758.405:7): pid=14580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 351.603057][T14581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.642974][ T30] audit: type=1800 audit(1753597758.465:8): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2215" name="cgroup.controllers" dev="tmpfs" ino=2336 res=0 errno=0 [ 351.748222][T14596] netlink: 'syz.2.2227': attribute type 4 has an invalid length. [ 351.832123][T14596] netlink: 'syz.2.2227': attribute type 4 has an invalid length. [ 351.867446][T14601] siw: device registration error -23 [ 352.284503][T14631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.308787][T14626] team0: Port device dummy0 removed [ 352.392719][T14626] team0: Port device team_slave_1 removed [ 352.446473][T14626] team0: Port device bond1 removed [ 352.459667][T14626] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 352.616959][T14646] siw: device registration error -23 [ 352.743357][T14653] siw: device registration error -23 [ 352.995655][T14660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.215964][T14671] __nla_validate_parse: 205 callbacks suppressed [ 353.215985][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 353.248725][T14671] macvlan9: entered promiscuous mode [ 353.500087][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2254'. [ 353.538474][T14688] siw: device registration error -23 [ 353.549255][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 353.680953][T14692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.803739][T14694] lo speed is unknown, defaulting to 1000 [ 353.872804][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'. [ 353.896637][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2261'. [ 354.003766][T14699] batadv0: left allmulticast mode [ 354.009182][T14699] veth0: left allmulticast mode [ 354.021641][T14699] veth1: left allmulticast mode [ 354.026788][T14699] wg0: left allmulticast mode [ 354.033214][T14699] wg1: left promiscuous mode [ 354.037833][T14699] wg1: left allmulticast mode [ 354.047830][T14699] wg2: left allmulticast mode [ 354.053090][T14699] veth0_to_bridge: left allmulticast mode [ 354.059479][T14699] bridge_slave_0: left allmulticast mode [ 354.065281][T14699] veth1_to_bridge: left allmulticast mode [ 354.071503][T14699] bridge_slave_1: left allmulticast mode [ 354.077235][T14699] veth0_to_bond: left allmulticast mode [ 354.083453][T14699] bond_slave_0: left allmulticast mode [ 354.090037][T14699] veth1_to_bond: left allmulticast mode [ 354.095837][T14699] bond_slave_1: left allmulticast mode [ 354.101804][T14699] veth0_to_team: left allmulticast mode [ 354.107513][T14699] team_slave_0: left allmulticast mode [ 354.113640][T14699] veth1_to_team: left allmulticast mode [ 354.119821][T14699] team_slave_1: left allmulticast mode [ 354.125495][T14699] veth0_to_batadv: left allmulticast mode [ 354.131635][T14699] batadv_slave_0: left allmulticast mode [ 354.137435][T14699] veth1_to_batadv: left allmulticast mode [ 354.143955][T14699] batadv_slave_1: left allmulticast mode [ 354.149987][T14699] xfrm0: left allmulticast mode [ 354.155618][T14699] veth0_to_hsr: left allmulticast mode [ 354.162307][T14699] veth1_to_hsr: left allmulticast mode [ 354.169147][T14699] veth1_vlan: left allmulticast mode [ 354.175623][T14699] vlan1: left allmulticast mode [ 354.181095][T14699] macvlan1: left allmulticast mode [ 354.186419][T14699] ipvlan0: left allmulticast mode [ 354.191775][T14699] ipvlan1: left allmulticast mode [ 354.196895][T14699] geneve0: left allmulticast mode [ 354.215429][T14699] geneve1: left allmulticast mode [ 354.233034][T14699] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 354.251179][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 354.267872][T14710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 354.357411][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 354.471543][T14699] bond0: left promiscuous mode [ 354.482678][T14699] macvlan2: left promiscuous mode [ 354.613440][T14712] macvlan10: entered promiscuous mode [ 354.648399][ T6241] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.668094][ T6241] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.737677][ T6241] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.771390][ T6241] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.311423][T14747] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2277'. [ 355.515275][T14746] syzkaller0: entered promiscuous mode [ 355.532538][T14746] syzkaller0: entered allmulticast mode [ 356.010769][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2280'. [ 357.616894][T14777] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 357.634304][T14782] netlink: 'syz.0.2284': attribute type 21 has an invalid length. [ 357.962421][T14800] lo speed is unknown, defaulting to 1000 [ 357.989680][T14804] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2290'. [ 358.205599][T14814] macvlan11: entered promiscuous mode [ 358.273867][T14818] netlink: 'syz.0.2295': attribute type 1 has an invalid length. [ 358.282088][T14818] netlink: 'syz.0.2295': attribute type 4 has an invalid length. [ 358.290627][T14818] __nla_validate_parse: 1 callbacks suppressed [ 358.290644][T14818] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.2295'. [ 358.704858][T14838] netlink: 'syz.3.2299': attribute type 3 has an invalid length. [ 358.714177][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 358.735016][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2299'. [ 358.796176][T14833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2300'. [ 359.236060][T14860] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 359.244782][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'. [ 359.277533][T14862] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2306'. [ 359.284873][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 359.306245][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2304'. [ 359.356768][T14865] macvlan3: entered promiscuous mode [ 359.390710][T14865] bond0: entered promiscuous mode [ 359.402891][T14868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2308'. [ 359.418649][T14868] openvswitch: netlink: Flow key attr not present in new flow. [ 359.693958][T14883] lo speed is unknown, defaulting to 1000 [ 360.207253][T14909] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2318'. [ 360.515623][T14920] macsec0: entered allmulticast mode [ 360.560429][T14920] veth1_macvtap: entered allmulticast mode [ 360.576613][T14920] macsec0: left allmulticast mode [ 360.583330][T14875] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.602609][T14920] veth1_macvtap: left allmulticast mode [ 360.664827][T14928] macvlan10: entered promiscuous mode [ 360.830648][T14937] netlink: 'syz.1.2324': attribute type 64 has an invalid length. [ 360.921630][T14944] macvlan4: entered promiscuous mode [ 360.978000][T14948] veth0: entered promiscuous mode [ 360.992560][T14947] veth0: left promiscuous mode [ 361.485442][T14963] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 361.586811][T14969] netlink: 'syz.2.2334': attribute type 3 has an invalid length. [ 362.139414][T14989] bond0: left promiscuous mode [ 362.178894][ T7526] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.209598][ T7526] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.259387][ T7526] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.274704][ T7526] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.295314][T15011] netlink: ct family unspecified [ 362.299047][T15012] netlink: ct family unspecified [ 362.300567][T15011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.345910][T15012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.417542][T15022] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 362.443032][T15023] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 362.546513][T15028] syzkaller0: entered promiscuous mode [ 362.552741][T15028] syzkaller0: entered allmulticast mode [ 364.404743][T15043] syz.5.2355: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 364.423050][T15043] CPU: 1 UID: 0 PID: 15043 Comm: syz.5.2355 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 364.423080][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.423092][T15043] Call Trace: [ 364.423100][T15043] [ 364.423109][T15043] dump_stack_lvl+0x189/0x250 [ 364.423143][T15043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.423168][T15043] ? __pfx__printk+0x10/0x10 [ 364.423196][T15043] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 364.423222][T15043] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 364.423250][T15043] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 364.423289][T15043] warn_alloc+0x214/0x310 [ 364.423328][T15043] ? __pfx_warn_alloc+0x10/0x10 [ 364.423371][T15043] ? __get_vm_area_node+0x28f/0x300 [ 364.423401][T15043] ? fq_pie_init+0x430/0x840 [ 364.423435][T15043] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 364.423495][T15043] ? up_write+0x1c4/0x420 [ 364.423518][T15043] ? tcf_block_get_ext+0x8d4/0x17d0 [ 364.423553][T15043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 364.423591][T15043] ? rcu_is_watching+0x15/0xb0 [ 364.423615][T15043] ? fq_pie_init+0x430/0x840 [ 364.423642][T15043] ? fq_pie_init+0x430/0x840 [ 364.423667][T15043] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 364.423695][T15043] ? fq_pie_init+0x430/0x840 [ 364.423724][T15043] ? tcf_block_get+0x67/0xa0 [ 364.423742][T15043] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 364.423769][T15043] fq_pie_init+0x430/0x840 [ 364.423803][T15043] ? __pfx_fq_pie_init+0x10/0x10 [ 364.423832][T15043] qdisc_create+0x7a9/0xea0 [ 364.423873][T15043] tc_modify_qdisc+0x1538/0x20e0 [ 364.423924][T15043] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 364.423992][T15043] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 364.424018][T15043] rtnetlink_rcv_msg+0x779/0xb70 [ 364.424046][T15043] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 364.424067][T15043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.424086][T15043] ? ref_tracker_free+0x63a/0x7d0 [ 364.424110][T15043] ? __asan_memcpy+0x40/0x70 [ 364.424132][T15043] ? __pfx_ref_tracker_free+0x10/0x10 [ 364.424168][T15043] netlink_rcv_skb+0x205/0x470 [ 364.424192][T15043] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.424216][T15043] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.424254][T15043] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.424294][T15043] netlink_unicast+0x82f/0x9e0 [ 364.424336][T15043] ? __pfx_netlink_unicast+0x10/0x10 [ 364.424370][T15043] ? netlink_sendmsg+0x642/0xb30 [ 364.424390][T15043] ? skb_put+0x11b/0x210 [ 364.424418][T15043] netlink_sendmsg+0x805/0xb30 [ 364.424453][T15043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.424481][T15043] ? aa_sock_msg_perm+0x94/0x160 [ 364.424505][T15043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 364.424526][T15043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.424550][T15043] __sock_sendmsg+0x219/0x270 [ 364.424585][T15043] ____sys_sendmsg+0x505/0x830 [ 364.424618][T15043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.424656][T15043] ? import_iovec+0x74/0xa0 [ 364.424688][T15043] ___sys_sendmsg+0x21f/0x2a0 [ 364.424718][T15043] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.424793][T15043] ? __fget_files+0x2a/0x420 [ 364.424821][T15043] ? __fget_files+0x3a0/0x420 [ 364.424862][T15043] __x64_sys_sendmsg+0x19b/0x260 [ 364.424890][T15043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.424929][T15043] ? rcu_is_watching+0x15/0xb0 [ 364.424958][T15043] ? do_syscall_64+0xbe/0x3b0 [ 364.424984][T15043] do_syscall_64+0xfa/0x3b0 [ 364.425002][T15043] ? lockdep_hardirqs_on+0x9c/0x150 [ 364.425020][T15043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.425040][T15043] ? clear_bhb_loop+0x60/0xb0 [ 364.425065][T15043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.425084][T15043] RIP: 0033:0x7f3b3018e9a9 [ 364.425103][T15043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.425120][T15043] RSP: 002b:00007f3b31031038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.425142][T15043] RAX: ffffffffffffffda RBX: 00007f3b303b6080 RCX: 00007f3b3018e9a9 [ 364.425157][T15043] RDX: 000000002000400c RSI: 0000200000000300 RDI: 000000000000000c [ 364.425170][T15043] RBP: 00007f3b30210d69 R08: 0000000000000000 R09: 0000000000000000 [ 364.425183][T15043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.425195][T15043] R13: 0000000000000000 R14: 00007f3b303b6080 R15: 00007ffc6b217348 [ 364.425230][T15043] [ 364.425237][T15043] Mem-Info: [ 364.859201][T15043] active_anon:3984 inactive_anon:0 isolated_anon:0 [ 364.859201][T15043] active_file:1686 inactive_file:39949 isolated_file:0 [ 364.859201][T15043] unevictable:768 dirty:210 writeback:0 [ 364.859201][T15043] slab_reclaimable:11786 slab_unreclaimable:192191 [ 364.859201][T15043] mapped:36423 shmem:1418 pagetables:1202 [ 364.859201][T15043] sec_pagetables:0 bounce:0 [ 364.859201][T15043] kernel_misc_reclaimable:0 [ 364.859201][T15043] free:1211203 free_pcp:18128 free_cma:0 [ 364.906817][T15043] Node 0 active_anon:15936kB inactive_anon:0kB active_file:6744kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145692kB dirty:836kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13156kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.941838][T15043] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.973972][T15043] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 365.006802][T15043] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 365.012879][T15043] Node 0 DMA32 free:925596kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15844kB inactive_anon:0kB active_file:6744kB inactive_file:158024kB unevictable:1536kB writepending:788kB present:3129332kB managed:2558508kB mlocked:0kB bounce:0kB free_pcp:54388kB local_pcp:20752kB free_cma:0kB [ 365.045268][T15043] lowmem_reserve[]: 0 0 1 1 1 [ 365.050266][T15043] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 365.080425][T15043] lowmem_reserve[]: 0 0 0 0 0 [ 365.085336][T15043] Node 1 Normal free:3907372kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14768kB local_pcp:9456kB free_cma:0kB [ 365.117550][T15043] lowmem_reserve[]: 0 0 0 0 0 [ 365.122423][T15043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.135274][T15043] Node 0 DMA32: 2359*4kB (UME) 739*8kB (UME) 432*16kB (UE) 1078*32kB (UME) 819*64kB (UME) 374*128kB (UME) 307*256kB (UME) 178*512kB (UM) 47*1024kB (UME) 9*2048kB (UM) 130*4096kB (M) = 925812kB [ 365.154844][T15043] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 365.167644][T15043] Node 1 Normal: 201*4kB (UM) 53*8kB (UME) 48*16kB (UME) 155*32kB (UME) 50*64kB (UME) 15*128kB (UME) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3907372kB [ 365.186639][T15043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.196300][T15043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.205904][T15043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.216597][T15043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.226174][T15043] 43050 total pagecache pages [ 365.233672][T15043] 0 pages in swap cache [ 365.237938][T15043] Free swap = 124996kB [ 365.242788][T15043] Total swap = 124996kB [ 365.246957][T15043] 2097051 pages RAM [ 365.250797][T15043] 0 pages HighMem/MovableOnly [ 365.255477][T15043] 425382 pages reserved [ 365.259774][T15043] 0 pages cma reserved [ 365.362317][T15062] siw: device registration error -23 [ 365.797140][T15086] __nla_validate_parse: 7 callbacks suppressed [ 365.797160][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 365.830651][T15092] nbd: device at index 2 is going down [ 365.998041][T15096] netlink: 'syz.5.2366': attribute type 10 has an invalid length. [ 366.021791][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 366.054675][T15096] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 366.351683][T15113] syzkaller0: entered promiscuous mode [ 366.361580][T15113] syzkaller0: entered allmulticast mode [ 366.834592][T15149] nbd: device at index 5 is going down [ 368.242858][T15127] lo speed is unknown, defaulting to 1000 [ 368.408195][T15165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2383'. [ 368.457940][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'. [ 368.458616][T15165] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2383'. [ 368.611734][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 368.686020][T15182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2398'. [ 368.855165][T15190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2391'. [ 368.987418][T15191] lo speed is unknown, defaulting to 1000 [ 369.245483][T15206] nbd: device at index 2 is going down [ 369.582768][T15225] netlink: 'syz.0.2400': attribute type 10 has an invalid length. [ 369.613141][T15225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 369.936928][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 369.953623][T15245] macvlan5: entered promiscuous mode [ 369.959611][T15245] bond0: entered promiscuous mode [ 369.999763][T15249] nbd: device at index 2 is going down [ 370.222151][T15264] [ 370.224542][T15264] ============================================ [ 370.230694][T15264] WARNING: possible recursive locking detected [ 370.236843][T15264] 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 Not tainted [ 370.244040][T15264] -------------------------------------------- [ 370.250233][T15264] syz.2.2410/15264 is trying to acquire lock: [ 370.256302][T15264] ffff88805a3d0d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 370.267289][T15264] [ 370.267289][T15264] but task is already holding lock: [ 370.274657][T15264] ffff88805a3d0d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 370.284507][T15264] and the lock comparison function returns 0: [ 370.290565][T15264] [ 370.290565][T15264] other info that might help us debug this: [ 370.298617][T15264] Possible unsafe locking scenario: [ 370.298617][T15264] [ 370.306063][T15264] CPU0 [ 370.309340][T15264] ---- [ 370.312618][T15264] lock(&dev_instance_lock_key#20); [ 370.317909][T15264] lock(&dev_instance_lock_key#20); [ 370.323199][T15264] [ 370.323199][T15264] *** DEADLOCK *** [ 370.323199][T15264] [ 370.331347][T15264] May be due to missing lock nesting notation [ 370.331347][T15264] [ 370.339662][T15264] 2 locks held by syz.2.2410/15264: [ 370.344852][T15264] #0: ffffffff8f51f788 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 370.353830][T15264] #1: ffff88805a3d0d20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 370.364118][T15264] [ 370.364118][T15264] stack backtrace: [ 370.370005][T15264] CPU: 0 UID: 0 PID: 15264 Comm: syz.2.2410 Not tainted 6.16.0-rc7-syzkaller-02024-gfa582ca7e187 #0 PREEMPT(full) [ 370.370027][T15264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.370037][T15264] Call Trace: [ 370.370043][T15264] [ 370.370051][T15264] dump_stack_lvl+0x189/0x250 [ 370.370071][T15264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.370088][T15264] ? __pfx__printk+0x10/0x10 [ 370.370109][T15264] ? print_lock_name+0xde/0x100 [ 370.370130][T15264] print_deadlock_bug+0x28b/0x2a0 [ 370.370149][T15264] validate_chain+0x1a3f/0x2140 [ 370.370168][T15264] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 370.370189][T15264] ? arch_stack_walk+0xfc/0x150 [ 370.370213][T15264] __lock_acquire+0xab9/0xd20 [ 370.370229][T15264] ? __netdev_update_features+0xcb1/0x1be0 [ 370.370249][T15264] lock_acquire+0x120/0x360 [ 370.370262][T15264] ? __netdev_update_features+0xcb1/0x1be0 [ 370.370283][T15264] ? ethnl_multicast+0xb6/0x100 [ 370.370298][T15264] ? ethnl_netdev_event+0xe2/0x160 [ 370.370318][T15264] __mutex_lock+0x182/0xe80 [ 370.370334][T15264] ? __netdev_update_features+0xcb1/0x1be0 [ 370.370355][T15264] ? do_raw_spin_lock+0x121/0x290 [ 370.370376][T15264] ? __netdev_update_features+0xcb1/0x1be0 [ 370.370397][T15264] ? __pfx___mutex_lock+0x10/0x10 [ 370.370412][T15264] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 370.370435][T15264] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.370455][T15264] __netdev_update_features+0xcb1/0x1be0 [ 370.370481][T15264] ? __pfx___netdev_update_features+0x10/0x10 [ 370.370503][T15264] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 370.370531][T15264] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 370.370549][T15264] ? __lock_acquire+0xab9/0xd20 [ 370.370565][T15264] ? do_raw_spin_lock+0x121/0x290 [ 370.370587][T15264] netdev_update_features+0x6d/0xe0 [ 370.370602][T15264] ? __pfx_netdev_update_features+0x10/0x10 [ 370.370621][T15264] macsec_notify+0x2f5/0x660 [ 370.370646][T15264] ? __pfx_macsec_notify+0x10/0x10 [ 370.370671][T15264] notifier_call_chain+0x1b3/0x3e0 [ 370.370691][T15264] netdev_features_change+0x85/0xc0 [ 370.370714][T15264] ? __pfx_netdev_features_change+0x10/0x10 [ 370.370738][T15264] ? security_capable+0x7e/0x2e0 [ 370.370755][T15264] dev_ethtool+0x1536/0x19b0 [ 370.370779][T15264] ? __pfx_dev_ethtool+0x10/0x10 [ 370.370802][T15264] ? dev_load+0x21/0x1f0 [ 370.370816][T15264] dev_ioctl+0x392/0x1150 [ 370.370831][T15264] sock_do_ioctl+0x22c/0x300 [ 370.370854][T15264] ? __pfx_sock_do_ioctl+0x10/0x10 [ 370.370881][T15264] ? __lock_acquire+0xab9/0xd20 [ 370.370900][T15264] sock_ioctl+0x576/0x790 [ 370.370921][T15264] ? __pfx_sock_ioctl+0x10/0x10 [ 370.370941][T15264] ? __fget_files+0x2a/0x420 [ 370.370963][T15264] ? __fget_files+0x3a0/0x420 [ 370.370983][T15264] ? __fget_files+0x2a/0x420 [ 370.371005][T15264] ? bpf_lsm_file_ioctl+0x9/0x20 [ 370.371022][T15264] ? __pfx_sock_ioctl+0x10/0x10 [ 370.371042][T15264] __se_sys_ioctl+0xfc/0x170 [ 370.371060][T15264] do_syscall_64+0xfa/0x3b0 [ 370.371076][T15264] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.371090][T15264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.371105][T15264] ? clear_bhb_loop+0x60/0xb0 [ 370.371123][T15264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.371138][T15264] RIP: 0033:0x7f167d78e9a9 [ 370.371153][T15264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.371167][T15264] RSP: 002b:00007f167b5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.371185][T15264] RAX: ffffffffffffffda RBX: 00007f167d9b5fa0 RCX: 00007f167d78e9a9 [ 370.371196][T15264] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 370.371207][T15264] RBP: 00007f167d810d69 R08: 0000000000000000 R09: 0000000000000000 [ 370.371217][T15264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.371227][T15264] R13: 0000000000000000 R14: 00007f167d9b5fa0 R15: 00007ffc2917bcf8 [ 370.371244][T15264] [ 370.828598][T15272] nbd: device at index 5 is going down