last executing test programs: 11.97913887s ago: executing program 0 (id=2887): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000070000000800000008000000003f6fd122faae000000", @ANYRES32, @ANYBLOB="000007000000001c0000000034f2594bf9025678c82cf1259f07487c8625a8ac2461ce91f04e9e01dec43027fdba9e36e0b51fc0f4b9c8c87d0b80eb0e789691291fcf8bf1dd2f6b73c2c9050b9df9632c9a9bada384082c03386bc327320eb86210b20191ecbdb718365b20dc41f0b208db8d5481da12", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="15000000", @ANYRES16=r3, @ANYBLOB="010000000000000000002300000004000100"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000070102000000ffdbdf25037c0000080001800400100014000280100001800c00e10006000000000000007f23344f7e4175acd24f92004514bc7433499fd8a87930643be5fea5673df0d1c59845ebdcfa4e86f8343b8274c9def1f60c5700a80c0987c867ee852b92dc0269bc0b0a7f30c83827a1e4784b37e17c9657e5e69fd6c269f9a0ee65ddc0d8c5e6715b1d20501a2d7af17d5d3a11d11d1f6cdf57fb153e3589b266095a583ff941fc36050a4b80c7b830446976744662f1c315ce5f3040bfdb74a267a15458bb2c3c6b67490090741083b4f7ed80e90ee003b11d5c382e4db59453e8af27cdaa12786b153126337ad3448d3363921f109a5b2e4dd319c628a5a1c7493a890000000ac9a639eef941e72e5b3ba969123dcf5cef80152203b681fb548892cdd0dda09c1168b45da17cce958ff6a2f56e7743e4ab29"], 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) 11.756461437s ago: executing program 0 (id=2890): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0x1, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.383691445s ago: executing program 0 (id=2894): r0 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 11.175377861s ago: executing program 0 (id=2898): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x80003, 0x6) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.015775513s ago: executing program 0 (id=2900): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3c0, &(0x7f0000000040)={@align=0xff, {0x4, 0x0, 0x5, 0xe}}, 0xe, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xdba8}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x3e}]}, 0x24}, 0x1, 0x0, 0x0, 0x10c68523460797d}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) sendmsg$nl_crypto(r0, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)=@alg={0x110, 0x10, 0x800, 0x70bd29, 0x25dfdbfe, {{'aegis128-aesni\x00'}, '\x00', '\x00', 0x2000, 0x1000}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0xfff}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0xd}]}, 0x110}, 0x1, 0x0, 0x0, 0x20000045}, 0x8080) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x4000010, r0, 0x128de000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000015c0)={'nat\x00', 0x0, 0x4, 0xab, [0x7fffffffffffffff, 0xffffffffffffffff, 0x7eb, 0x7479, 0xe, 0x5], 0x5, &(0x7f0000001480)=[{}, {}, {}, {}, {}], &(0x7f0000001500)=""/171}, &(0x7f0000001640)=0x78) bind$inet(r3, &(0x7f0000001680)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r4 = openat$cgroup_procs(r0, &(0x7f00000016c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xe, 0x4010, r4, 0xf992b000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001700)={0x6, 'veth1_macvtap\x00', {0x2}, 0x9}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001880)={'syztnl1\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x286, 0x3, {{0x27, 0x4, 0x0, 0x26, 0x9c, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @multicast1, {[@noop, @timestamp_addr={0x44, 0x2c, 0xc, 0x1, 0x5, [{@private=0xa010102}, {@local, 0x9}, {@multicast1, 0x1}, {@empty, 0xa}, {@multicast2}]}, @lsrr={0x83, 0xb, 0xcf, [@broadcast, @rand_addr=0x64010102]}, @rr={0x7, 0x1f, 0x20, [@empty, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @multicast1]}, @ssrr={0x89, 0x1b, 0xfa, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102, @local, @remote, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0xc, [{@multicast1, 0x7}]}, @rr={0x7, 0x7, 0x6b, [@remote]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001980)={'tunl0\x00', &(0x7f00000018c0)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x0, 0x40000, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x1, 0x4, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x17, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast2, @empty, @broadcast]}, @rr={0x7, 0x13, 0x88, [@dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x64010101, @loopback, @broadcast]}, @end, @noop, @timestamp={0x44, 0x8, 0x9c, 0x0, 0xb, [0x6]}, @cipso={0x86, 0xa, 0x3, [{0x2, 0x4, "36c8"}]}, @timestamp={0x44, 0x1c, 0xf4, 0x0, 0xe, [0x81, 0x7, 0x7f, 0x1, 0x8, 0x401]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xef, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}]}]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000019c0)={0x0}, &(0x7f0000001a00)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001ac0)={'sit0\x00', &(0x7f0000001a40)={'erspan0\x00', 0x0, 0x8, 0x709, 0x7fff, 0x0, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x64, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@ssrr={0x89, 0x2b, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @loopback, @empty, @loopback, @remote, @local, @private=0xa010100, @multicast1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b80)={r0, 0x58, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001c40)={'ip6gre0\x00', &(0x7f0000001bc0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x1, 0xfff, 0x60, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x40, 0x665, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001d00)={'tunl0\x00', &(0x7f0000001c80)={'syztnl2\x00', 0x0, 0x7, 0x10, 0x9, 0x800, {{0x14, 0x4, 0x1, 0x7, 0x50, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xe5, 0x3, 0x7, [{@local, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@local, 0x8}, {@local, 0x9}, {@private=0xa010101}, {@multicast1, 0x1}]}, @noop]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001d40)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000001d80)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000001f80)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x154, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x865e652fd498dd3c}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000002000)={'veth1_vlan\x00', @ifru_settings={0x0, 0x9, @fr_pvc=&(0x7f0000001fc0)={0xb0}}}) r14 = socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000002040)="5fc6dcb5193744b968089d50be7de3493ff7f2c6a385d0ae4ffab690807c963a892ad35260bd033f50247bcff5b883a04b9231e381bfa6640b86ab4f24cf00d0f63f083aff7bb9053402a060c0153d9fa8dc80e299da69c6e694dd18ef13ff942867a7a6ca3a1c3b29b4b78f8065438f0f4a3895d12f1f595f07f3e0f82d1388df1ef554851bdd6b22a3164c7d8318c80314ea7599a4ffa5a4673693205c9b09f04c669381f5713f143dba46eb1c5031ca9139637ff62593481f4d5c7ab1516d6e3ad98998fdec62994b0949a263b0e7bd316099e3f173861a00024be42e2ce8", 0xe0) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002180), r2) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000023c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002380)={&(0x7f00000021c0)={0x18c, r15, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3a, 0x3, "4d38536fd2f90ab62244adff690d54bf8f66c3fb43f90003c615074f23eaaf88012965f2b7715cc64c4494fd520bc4987c6836011314"}, @TIPC_NLA_NODE_ID={0x3d, 0x3, "22c2340e08b36cf88e3575b5c91baabbda5ec10c2826b86249341861b39de5ab27741312bb79c679ec2886e4e93ec43a4a96f9d048aec5465f"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e27a48fb8e5cf4c6cfda5ae66130156181fa98a2967c20f2c8fe679e68060105185870ae"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "94010bb381cfcebb414bdf3b2e047f5e23a69cadb6aa9fbe85754488db"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x4}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) ioctl$sock_inet_SIOCGIFPFLAGS(r14, 0x8935, &(0x7f0000002400)={'veth1_macvtap\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000002440)=0xcf7, 0x4) 10.686778272s ago: executing program 0 (id=2905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.98945114s ago: executing program 2 (id=2963): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x16) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4}, 0x18) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x50000}, 0xc090) 3.582442973s ago: executing program 4 (id=2966): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) (async, rerun: 64) r3 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x2, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x24040000) getsockname$inet(r2, 0x0, &(0x7f0000000140)) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (rerun: 64) 3.357969541s ago: executing program 1 (id=2968): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x5, 0x4e24, 0x5, 0xa, 0x80, 0x80, 0x5e}, {0x9, 0xffffffffffffff01, 0x9, 0x2, 0x7, 0x2, 0x4, 0xcf}, {0x0, 0x6, 0x54a, 0x7}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x6c}, 0x2, @in=@multicast2, 0x3502, 0x1, 0x0, 0x5, 0x8, 0x10001, 0x1ad5bd38}}, 0xe8) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cde701004002000050000000600010005000000080009000200000008000b000000000008000c"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.117850549s ago: executing program 3 (id=2970): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x7fff, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) read$nci(r2, &(0x7f0000000200)=""/100, 0x64) write$nci(r2, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r2, &(0x7f00000002c0)=""/100, 0x64) write$nci(r2, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r2, &(0x7f0000000380)=""/100, 0x64) write$nci(r2, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r2, &(0x7f0000000500)=""/100, 0x64) write$nci(r2, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r2, &(0x7f00000005c0)=""/100, 0x64) write$nci(r2, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r2, &(0x7f0000000680)=""/100, 0x64) write$nci(r2, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) write$nci(r2, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa) sendmsg$NFC_CMD_ACTIVATE_TARGET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) read$nci(r2, &(0x7f0000000840)=""/100, 0x64) write$nci(r2, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.954649495s ago: executing program 2 (id=2971): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0xf20c0000, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0xfffffffc, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d09bbde, 0x2004}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x4b94}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000800) 2.918927996s ago: executing program 1 (id=2972): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b33, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275c, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000000000028100000101000000220000ab8ed0d741b5804396c12ab130654a5702f63ebfb5a6917dbc14bfc997144a10c8562d67dbd30d5bda277fc5cf0ef13861fb3052e263a0a9dcbbf2692a48b5e2fd28cae50d8ff77f560a7bfd3eedbb06bb8bac21c8da6230d920201537173d8b336837c339bd865a0f24b15eed95c65fb7585e83ccb4842d37b5b6c47433d9283cd259d60012e34f974ecf77c2b49b1f3633", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r12, 0x0, &(0x7f0000001700)=""/53}, 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r11, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x24}}, 0x18) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 2.777597834s ago: executing program 3 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000800000000010000000500060000000000050005000000000008000300fdffff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) 2.59774879s ago: executing program 3 (id=2974): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4c, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 2.597055609s ago: executing program 4 (id=2975): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r8, 0x0) connect$bt_sco(r8, &(0x7f0000000000)={0x1f, @none}, 0x8) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r11, 0xf01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001b00)}}, 0x10) 2.570462969s ago: executing program 2 (id=2976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004002cd7080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r6, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) tee(r7, r0, 0x81, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) 2.454440511s ago: executing program 1 (id=2977): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000100)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0xc99b, 0x8, 0x80000001}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) connect$rds(r0, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x200000000000001b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 2.334523286s ago: executing program 3 (id=2978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r1, 0x37}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f40)={0x34, r2, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}]}, 0x34}}, 0x20000000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb0}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008800}, 0x44044) 2.235876897s ago: executing program 1 (id=2979): socket(0x1e, 0x1, 0x0) (async) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) socket(0x10, 0x803, 0x8) (async) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r8, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r4, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x2, 0x4) 1.955699317s ago: executing program 3 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x820) 1.85803541s ago: executing program 2 (id=2981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="a50105947f927a8c60af9734562be87602880b732c3da4f74f092f557738d5d386ccade2deeda4ae1a5478fd885f91", 0x2f}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000000200)={&(0x7f0000000100)='&\x00', &(0x7f00000001c0)='\x00', 0x8}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 1.857229254s ago: executing program 3 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x6, 0x4, 0x2, 0x4}, 0x50) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x83, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r8, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)='\'', 0x1c}], 0x1}, 0x20000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@restrict={0xd}, @enum64={0xe, 0x2, 0x0, 0x13, 0x0, 0x7, [{0x1, 0x5, 0x1}, {0xb, 0x80, 0x40}]}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000080)=""/101, 0x4c, 0x65, 0x0, 0x10001, 0x10000}, 0x28) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180)=0x200, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.855841402s ago: executing program 4 (id=2983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000011000014001680100001800c00050062000000ff01000008001b0000000000b88a18b63b11f136dd14c6147ec9df1e8509df980fd749369b0c6b9299da1e50fc9ebd9fe46e1a69e52ecee14c012bdf270b7bfcc98c3dde81424b2de6a18f43097e1b4297f52555f0a1062c06edc99f3f086ea85996d22b49fcc0c45e3383f497617908d0ddae4e50c947a095bee7d7772a6d751947296586c6d44c1930d8e4c87b0fbe2268d8cd42f86b142883820e53000f3ec6fbea182abb2e5f03e13618ade8449ad125475e96c6c294cdc821bd9d9c40e143e19672e8"], 0x3c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000080)={0xfffffffffffffff8, {0x32, 0x7, 0x7, 0xfffffffffffffffd, 0x58}}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f300", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000f400000000000000f462013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.410157257s ago: executing program 1 (id=2984): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x21) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x21) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) 1.338576876s ago: executing program 4 (id=2985): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r2) socket(0x28, 0x5, 0x0) (async) r3 = socket(0x28, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r4}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x840) 1.254213034s ago: executing program 2 (id=2986): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x60}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) 230.791348ms ago: executing program 2 (id=2987): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1c}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r7 = socket$rds(0x15, 0x5, 0x0) getsockopt(r7, 0x1, 0x45, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 225.403078ms ago: executing program 1 (id=2988): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f00000000c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r3}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}}, 0x0) 25.448205ms ago: executing program 4 (id=2989): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000080)={0x5, 0x60, 0xfffffff8, {0x77359400}, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x28, 0x4, 0x0, 0x0, "eb1848cf98e1815385f796b3988b03c186558334c53d6b254c65c4509677c9764847cb5f085b608500815ac92dad503da4f597ef05fd8a903d5aa6e12832953f"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000080)={0x5, 0x60, 0xfffffff8, {0x77359400}, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x28, 0x4, 0x0, 0x0, "eb1848cf98e1815385f796b3988b03c186558334c53d6b254c65c4509677c9764847cb5f085b608500815ac92dad503da4f597ef05fd8a903d5aa6e12832953f"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 0s ago: executing program 4 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc0500010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010428000480240001800b000100736f636b65740000140002800800024000000001084001400000000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a148602"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10) (async) write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT=r0], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180040fa040000fc00000000000000009110bb00040000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6e2e12bede68ed35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 09][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.189972][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.328840][ T8767] vlan2: left promiscuous mode [ 162.333727][ T8767] hsr0: left promiscuous mode [ 162.341825][ T8767] vlan2: left allmulticast mode [ 162.346812][ T8767] hsr0: left allmulticast mode [ 162.354919][ T8767] hsr_slave_0: left allmulticast mode [ 162.361246][ T8767] hsr_slave_1: left allmulticast mode [ 162.392992][ T8200] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.404074][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 162.416783][ T8200] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.427523][ T8797] macsec0: entered promiscuous mode [ 162.512670][ T8793] macsec0 (unregistering): left promiscuous mode [ 162.549781][ T8200] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.580218][ T8200] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.599946][ T8200] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.613837][ T8200] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.716197][ T8200] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.772100][ T8200] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.092224][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'. [ 163.517305][ T8857] veth0_to_bridge: entered promiscuous mode [ 163.576278][ T8856] veth0_to_bridge: left promiscuous mode [ 164.150286][ T8891] __nla_validate_parse: 1 callbacks suppressed [ 164.150304][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'. [ 164.166170][ T8887] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 164.413296][ T8905] netlink: 'syz.0.843': attribute type 11 has an invalid length. [ 164.996114][ T8938] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 164.996395][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 165.128723][ T8938] can: request_module (can-proto-0) failed. [ 165.140398][ T8937] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.150289][ T8947] netlink: 'syz.0.853': attribute type 4 has an invalid length. [ 165.171216][ T8947] netlink: 152 bytes leftover after parsing attributes in process `syz.0.853'. [ 165.183639][ T8947] .`: renamed from bond0 [ 165.198657][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'. [ 165.350979][ T8946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.362379][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'. [ 165.374570][ T8960] netlink: 'syz.1.855': attribute type 1 has an invalid length. [ 165.385553][ T8946] bond6: (slave bond7): Enslaving as an active interface with an up link [ 165.403538][ T8937] bond6 (unregistering): (slave bond7): Releasing backup interface [ 165.419455][ T8937] bond6 (unregistering): Released all slaves [ 165.475704][ T8965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.508883][ T8965] netlink: 76 bytes leftover after parsing attributes in process `syz.0.858'. [ 165.684148][ T8972] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 165.728193][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'. [ 165.843314][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 165.970253][ T8998] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 166.087367][ T9004] netlink: 40 bytes leftover after parsing attributes in process `syz.1.869'. [ 166.342739][ T9017] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.872'. [ 166.422036][ T9020] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 166.440744][ T9020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.766493][ T9037] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 167.217805][ T9056] pimreg3: entered allmulticast mode [ 167.320870][ T9060] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 167.639733][ T9062] sctp: [Deprecated]: syz.2.886 (pid 9062) Use of int in maxseg socket option. [ 167.639733][ T9062] Use struct sctp_assoc_value instead [ 168.723100][ T9138] syzkaller0: entered promiscuous mode [ 168.762671][ T9138] syzkaller0: entered allmulticast mode [ 169.441189][ T9176] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 169.475636][ T9176] __nla_validate_parse: 8 callbacks suppressed [ 169.475657][ T9176] netlink: 224 bytes leftover after parsing attributes in process `syz.1.910'. [ 169.917643][ T9206] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 170.839178][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.930'. [ 171.423767][ T9273] syzkaller0: entered promiscuous mode [ 171.450666][ T9273] syzkaller0: entered allmulticast mode [ 171.576859][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 171.976338][ T9302] tipc: Enabled bearer , priority 0 [ 172.012126][ T9302] syzkaller0: entered promiscuous mode [ 172.036124][ T9302] syzkaller0: entered allmulticast mode [ 172.164057][ T9302] tipc: Resetting bearer [ 172.276583][ T9302] tipc: Disabling bearer [ 172.743043][ T9345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'. [ 172.766104][ T9345] netlink: 92 bytes leftover after parsing attributes in process `syz.2.952'. [ 172.832337][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 172.852209][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 172.943833][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.954'. [ 173.242981][ T8198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.279406][ T8198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.385068][ T9385] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 173.417400][ T9384] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 173.452045][ T9385] netlink: 280 bytes leftover after parsing attributes in process `syz.3.961'. [ 173.912000][ T9400] netlink: 'syz.3.963': attribute type 11 has an invalid length. [ 173.946053][ T9400] netlink: 'syz.3.963': attribute type 11 has an invalid length. [ 173.996721][ T9400] netlink: 224 bytes leftover after parsing attributes in process `syz.3.963'. [ 174.252111][ T9412] netlink: 'syz.0.967': attribute type 10 has an invalid length. [ 174.288688][ T9412] veth1_virt_wifi: entered promiscuous mode [ 174.626259][ T9429] __nla_validate_parse: 1 callbacks suppressed [ 174.626278][ T9429] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 174.659510][ T9431] netlink: 244 bytes leftover after parsing attributes in process `syz.3.972'. [ 174.875914][ T9443] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 174.887472][ T9443] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 175.027553][ T9445] netlink: 48 bytes leftover after parsing attributes in process `syz.2.976'. [ 175.496991][ T9459] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 175.531556][ T9459] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 175.950654][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 175.978572][ T9489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.286601][ T9506] bond0: Unable to set down delay as MII monitoring is disabled [ 176.385260][ T9506] bond0 (unregistering): Released all slaves [ 176.738065][ T9538] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 176.951691][ T9549] xt_hashlimit: size too large, truncated to 1048576 [ 177.224448][ T9550] netlink: set zone limit has 4 unknown bytes [ 177.277469][ T9565] geneve3: entered promiscuous mode [ 177.310779][ T9565] geneve3: entered allmulticast mode [ 177.347528][ T9568] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.672574][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1009'. [ 177.901674][ T9596] netlink: 'syz.4.1014': attribute type 11 has an invalid length. [ 177.931453][ T9589] 8021q: VLANs not supported on syzkaller1 [ 177.939017][ T9596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1014'. [ 177.966428][ T9585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1011'. [ 177.982763][ T9596] openvswitch: netlink: IP tunnel dst address not specified [ 178.112450][ T9605] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1016'. [ 178.408445][ T9619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1021'. [ 178.476465][ T9623] sit0: entered promiscuous mode [ 178.519718][ T9623] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 178.551561][ T9623] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1023'. [ 179.288940][ T9677] bond5: entered promiscuous mode [ 179.328544][ T9677] bond5: entered allmulticast mode [ 179.799751][ T9694] netlink: 'syz.0.1038': attribute type 83 has an invalid length. [ 179.832878][ T9700] openvswitch: netlink: EtherType 50a is less than min 600 [ 179.947604][ T9703] __nla_validate_parse: 3 callbacks suppressed [ 179.947623][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1040'. [ 179.989427][ T9703] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1040'. [ 180.057590][ T9707] netlink: 'syz.3.1041': attribute type 10 has an invalid length. [ 180.090602][ T9707] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 180.710200][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 180.749839][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1050'. [ 181.294467][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 181.318594][ T9779] netlink: 64179 bytes leftover after parsing attributes in process `syz.4.1057'. [ 181.650919][ T9803] netlink: 'syz.1.1065': attribute type 29 has an invalid length. [ 181.672458][ T9803] netlink: 'syz.1.1065': attribute type 29 has an invalid length. [ 181.682358][ T9803] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1065'. [ 181.700166][ T9803] unsupported nla_type 58 [ 181.724882][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1066'. [ 181.840073][ T9811] xt_ecn: cannot match TCP bits for non-tcp packets [ 182.516695][ T9856] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 182.559922][ T9856] netlink: 'syz.1.1079': attribute type 4 has an invalid length. [ 182.585814][ T9862] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1082'. [ 182.597458][ T9856] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1079'. [ 182.776984][ T9868] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20003 [ 183.292948][ T9895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.581729][ T9913] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 185.229293][ T9838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.364122][ T9920] __nla_validate_parse: 5 callbacks suppressed [ 185.364155][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 185.441032][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1098'. [ 185.508439][ T9925] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1100'. [ 185.530708][ T9925] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1100'. [ 185.682601][ T9935] syzkaller0: entered promiscuous mode [ 185.701982][ T9935] syzkaller0: entered allmulticast mode [ 185.738449][ T9939] syzkaller1: entered promiscuous mode [ 185.755984][ T9939] syzkaller1: entered allmulticast mode [ 185.984260][ T9954] tipc: Enabling of bearer rejected, failed to enable media [ 186.026679][ T9958] netlink: 'syz.4.1109': attribute type 1 has an invalid length. [ 186.060465][ T9963] tunl0: entered allmulticast mode [ 186.063599][ T9958] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1109'. [ 186.133764][ T9958] netlink: 15731 bytes leftover after parsing attributes in process `syz.4.1109'. [ 186.251547][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 186.382568][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 186.448438][ T9982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1116'. [ 186.625402][ T9990] SET target dimension over the limit! [ 186.662704][ T9992] tipc: Failed to remove unknown binding: 66,0,0/0:855618885/855618886 [ 186.684852][ T9990] veth0: entered promiscuous mode [ 186.706160][ T9990] "syz.0.1119" (9990) uses obsolete ecb(arc4) skcipher [ 186.726336][ T9996] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1121'. [ 186.769504][ T9988] veth0: left promiscuous mode [ 187.313427][T10029] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 187.458877][T10029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.621207][T10029] bond0: (slave gretap1): making interface the new active one [ 187.645901][T10029] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 187.774814][T10044] syzkaller0: entered promiscuous mode [ 187.779529][T10052] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 187.823515][T10054] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 187.830534][T10044] syzkaller0: entered allmulticast mode [ 188.159754][T10071] SET target dimension over the limit! [ 188.665299][ T4949] Bluetooth: hci4: link tx timeout [ 188.673421][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.799624][ T4949] Bluetooth: hci4: link tx timeout [ 188.805387][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.840082][ T4949] Bluetooth: hci4: link tx timeout [ 188.845302][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.016858][T10111] xt_hashlimit: invalid rate [ 189.271060][ T4949] Bluetooth: hci4: link tx timeout [ 189.279867][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.302236][T10126] netlink: Unknown conntrack attr (0) [ 189.710768][ T4949] Bluetooth: hci4: link tx timeout [ 189.715981][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 189.767560][T10147] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 189.896652][T10163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.261434][ T4949] Bluetooth: hci4: link tx timeout [ 190.266732][ T4949] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 190.397417][T10179] __nla_validate_parse: 6 callbacks suppressed [ 190.397436][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 190.433242][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 190.716987][T10201] bridge0: port 1(ipvlan2) entered blocking state [ 190.749460][ T4949] Bluetooth: hci4: command 0x0405 tx timeout [ 190.771162][T10201] bridge0: port 1(ipvlan2) entered disabled state [ 190.800368][T10201] ipvlan2: entered allmulticast mode [ 190.824281][T10201] bridge0: entered allmulticast mode [ 190.834415][T10201] ipvlan2: left allmulticast mode [ 190.840525][T10201] bridge0: left allmulticast mode [ 191.085597][T10221] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 191.672711][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1181'. [ 191.716186][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 192.123166][T10284] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.277678][T10289] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 192.307771][T10294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 192.319211][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 192.332876][T10294] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 192.342220][T10294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.367297][T10294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 192.370771][T10292] netlink: 'syz.0.1190': attribute type 10 has an invalid length. [ 192.434628][T10295] bond4: Unable to set up delay as MII monitoring is disabled [ 192.445978][T10295] bond4 (unregistering): Released all slaves [ 192.478999][T10292] ipvlan0: entered allmulticast mode [ 192.484453][T10292] veth0_vlan: entered allmulticast mode [ 192.493887][T10292] team0: Device ipvlan0 failed to register rx_handler [ 192.507367][T10296] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1193'. [ 192.673546][T10296] syzkaller0: entered promiscuous mode [ 192.702324][T10296] syzkaller0: entered allmulticast mode [ 193.640562][T10335] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1198'. [ 194.191014][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.227026][T10308] kthread_run failed with err -4 [ 194.296355][T10329] syzkaller0: entered promiscuous mode [ 194.320999][T10329] syzkaller0: entered allmulticast mode [ 194.511860][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 206.508901][T10391] Bluetooth: hci3: command 0x0406 tx timeout [ 206.517725][T10390] Bluetooth: hci1: command 0x0406 tx timeout [ 206.522643][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 250.448909][ T5640] Bluetooth: hci4: link tx timeout [ 250.454182][ T5640] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 251.552843][T10405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1205'. [ 251.562894][T10409] netlink: 'syz.4.1207': attribute type 21 has an invalid length. [ 251.571579][T10405] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 251.579726][T10409] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1207'. [ 251.589659][T10405] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1205'. [ 251.600908][T10409] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1207'. [ 251.631348][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'. [ 251.973552][T10440] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1213'. [ 252.188502][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1215'. [ 252.330102][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 252.519366][ T5640] Bluetooth: hci4: command 0x0405 tx timeout [ 253.256807][T10507] openvswitch: netlink: Flow key attribute not present in set flow. [ 253.296425][T10511] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1231'. [ 253.331588][T10515] netlink: 'syz.2.1232': attribute type 11 has an invalid length. [ 253.350332][T10511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1231'. [ 253.744352][T10538] veth1_virt_wifi: left promiscuous mode [ 253.775169][T10538] ipvlan0: left allmulticast mode [ 253.781617][T10538] veth0_vlan: left allmulticast mode [ 253.799315][T10538] veth0_macvtap: left allmulticast mode [ 253.897698][T10538] xfrm1: left allmulticast mode [ 253.919001][T10538] geneve2: left promiscuous mode [ 253.932206][T10538] geneve2: left allmulticast mode [ 254.042504][ T8167] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 254.077362][ T8167] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 254.124926][ T8167] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 254.141810][ T8167] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 254.306129][T10572] xt_hashlimit: overflow, rate too high: 0 [ 254.361238][T10572] netlink: 'syz.1.1244': attribute type 23 has an invalid length. [ 254.646189][T10596] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 255.175586][T10631] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 255.194516][T10636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.201825][T10636] IPv6: NLM_F_CREATE should be set when creating new route [ 255.209146][T10636] IPv6: NLM_F_CREATE should be set when creating new route [ 255.268812][T10631] netlink: 'syz.1.1257': attribute type 2 has an invalid length. [ 255.426768][T10645] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 255.555836][T10657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.631306][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.110867][T10688] tipc: Failed to remove unknown binding: 66,0,0/1:93671755/93671756 [ 256.151071][T10688] tipc: Failed to remove unknown binding: 66,0,0/1:93671755/93671756 [ 256.616082][T10710] gtp0: entered promiscuous mode [ 256.641589][T10711] __nla_validate_parse: 9 callbacks suppressed [ 256.641607][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1276'. [ 256.680167][T10710] gtp0: entered allmulticast mode [ 256.863372][T10724] netlink: 'syz.0.1280': attribute type 14 has an invalid length. [ 256.905681][T10724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1280'. [ 257.428705][T10759] batadv_slave_1: entered promiscuous mode [ 257.488894][T10758] batadv_slave_1: left promiscuous mode [ 257.652528][ T8359] IPVS: starting estimator thread 0... [ 257.769119][T10775] IPVS: using max 26 ests per chain, 62400 per kthread [ 257.791999][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1295'. [ 257.806717][T10782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1294'. [ 257.862967][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'. [ 257.864493][T10773] bond4 (unregistering): Released all slaves [ 258.259489][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1299'. [ 258.502630][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 258.534549][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 258.573329][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 258.653166][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.662265][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 258.690780][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.731061][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.745589][T10834] netlink: 'syz.3.1305': attribute type 4 has an invalid length. [ 258.845378][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.134996][T10854] macvlan0: entered promiscuous mode [ 259.147214][T10854] macvlan0: entered allmulticast mode [ 259.158593][T10854] veth1_vlan: entered allmulticast mode [ 259.545198][T10864] tipc: Enabling of bearer rejected, media not registered [ 260.204010][T10883] ip6t_rpfilter: unknown options [ 260.518610][T10908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.694418][T10915] netlink: 'syz.2.1324': attribute type 11 has an invalid length. [ 261.171329][T10925] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.407052][T10944] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 262.001300][T10971] __nla_validate_parse: 6 callbacks suppressed [ 262.001319][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 262.164843][T10978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 262.256677][T10979] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 262.334083][ T8167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 262.369586][ T8167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 262.526554][ T8167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 262.556940][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 262.567337][ T8167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 262.599651][T10992] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1343'. [ 262.612534][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1342'. [ 262.642432][T10994] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 262.711183][T10998] tipc: Failed to remove unknown binding: 66,1,1/0:999127954/999127956 [ 262.743322][T10998] tipc: Failed to remove unknown binding: 66,1,1/0:999127954/999127956 [ 262.757724][T11001] netlink: 'syz.4.1345': attribute type 6 has an invalid length. [ 262.803730][T10994] team1: entered allmulticast mode [ 262.933349][T10995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.167344][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 263.584047][T11032] xt_socket: unknown flags 0xe4 [ 263.794197][T11041] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1352'. [ 263.912373][T11044] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1353'. [ 263.966666][T11044] netlink: 'syz.3.1353': attribute type 9 has an invalid length. [ 264.028595][T11044] tipc: Enabling of bearer rejected, already enabled [ 264.041064][T11050] ieee802154 phy0 wpan0: encryption failed: -90 [ 264.080912][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'. [ 264.155495][T11037] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1351'. [ 264.817006][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1362'. [ 264.856464][T11088] netlink: 'syz.0.1361': attribute type 2 has an invalid length. [ 266.186202][T11148] tipc: Started in network mode [ 266.196526][T11148] tipc: Node identity , cluster identity 4711 [ 266.204635][T11148] tipc: Failed to set node id, please configure manually [ 266.214136][T11148] tipc: Enabling of bearer rejected, failed to enable media [ 266.444220][T11144] syzkaller0: entered promiscuous mode [ 266.451502][T11144] syzkaller0: entered allmulticast mode [ 266.490744][T11160] veth1_vlan (unregistering): left allmulticast mode [ 266.667102][T11171] netlink: 'syz.0.1387': attribute type 1 has an invalid length. [ 267.001860][T11179] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.596285][T11218] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 269.706638][T11224] __nla_validate_parse: 71 callbacks suppressed [ 269.706657][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 269.837509][T11229] netlink: 'syz.1.1404': attribute type 10 has an invalid length. [ 269.848053][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 269.936581][T11229] team0: Port device dummy0 added [ 269.989917][T11235] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1406'. [ 270.175036][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1407'. [ 270.253626][T11239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 270.272005][T11239] bridge0: port 3(bond6) entered blocking state [ 270.279404][T11239] bridge0: port 3(bond6) entered disabled state [ 270.286069][T11239] bond6: entered allmulticast mode [ 270.295008][T11239] bond6: entered promiscuous mode [ 270.876238][T11270] netlink: 'syz.1.1417': attribute type 1 has an invalid length. [ 270.913460][T11269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1416'. [ 270.971266][T11282] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 271.033029][T11282] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1416'. [ 271.468464][T11303] netlink: 'syz.4.1420': attribute type 10 has an invalid length. [ 271.587571][T11303] team0 (unregistering): Port device team_slave_0 removed [ 271.619493][T11303] team0 (unregistering): Port device team_slave_1 removed [ 271.620026][T11306] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 271.681647][T11310] Bluetooth: MGMT ver 1.23 [ 271.722144][T11298] syzkaller1: entered promiscuous mode [ 271.728953][T11298] syzkaller1: entered allmulticast mode [ 271.764372][T11306] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 271.797494][T11280] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 272.011209][T11322] netlink: 'syz.4.1427': attribute type 1 has an invalid length. [ 272.135213][T11329] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1429'. [ 272.146744][T11322] bond7: entered promiscuous mode [ 272.153838][T11322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.193532][T11332] IPv6: Can't replace route, no match found [ 272.200616][T11332] IPv6: Can't replace route, no match found [ 272.215033][T11330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1428'. [ 272.235245][T11330] syzkaller0: entered promiscuous mode [ 272.242455][T11330] syzkaller0: entered allmulticast mode [ 272.254866][T11330] tipc: Enabled bearer , priority 0 [ 272.277414][T11327] tipc: Resetting bearer [ 272.357714][T11327] tipc: Disabling bearer [ 272.510442][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'. [ 272.543141][T11342] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 272.672922][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1435'. [ 272.896805][T11351] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 272.930841][T11356] gtp0: left promiscuous mode [ 272.967916][T11356] gtp0: left allmulticast mode [ 273.052732][ T8162] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.075286][ T8162] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.239388][T11368] macvtap1: entered promiscuous mode [ 273.256878][T11368] vlan0: entered promiscuous mode [ 273.264752][T11368] macvtap1: entered allmulticast mode [ 273.281350][T11368] vlan0: entered allmulticast mode [ 273.296317][T11368] veth0_vlan: entered allmulticast mode [ 273.312295][ T8162] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.327991][ T8162] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.886207][T11409] openvswitch: netlink: EtherType 0 is less than min 600 [ 274.020959][T11420] syzkaller0: entered promiscuous mode [ 274.026666][T11420] syzkaller0: entered allmulticast mode [ 274.249829][T11430] syzkaller0: entered promiscuous mode [ 274.255477][T11430] syzkaller0: entered allmulticast mode [ 274.492730][T11444] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 274.735840][T11452] bond8: (slave bridge1): making interface the new active one [ 274.747192][T11452] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 275.342716][T11499] __nla_validate_parse: 7 callbacks suppressed [ 275.342735][T11499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1481'. [ 275.378823][T11501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'. [ 275.834202][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 275.940842][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1491'. [ 276.484368][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1497'. [ 276.494912][T11555] netlink: 'syz.1.1497': attribute type 17 has an invalid length. [ 276.517121][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1497'. [ 276.538702][T11555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1497'. [ 276.597298][T11555] erspan0: entered promiscuous mode [ 276.641970][T11555] erspan0: left promiscuous mode [ 276.725745][T11565] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1499'. [ 276.989471][T11573] netlink: 'syz.0.1502': attribute type 3 has an invalid length. [ 277.208875][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1505'. [ 277.263539][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1505'. [ 277.280594][T11585] syzkaller0: entered promiscuous mode [ 277.286376][T11585] syzkaller0: entered allmulticast mode [ 277.505579][T11589] bond10: (slave erspan0): Device is not bonding slave [ 277.541378][T11589] bond10: option active_slave: invalid value (erspan0) [ 277.567750][T11589] bond10 (unregistering): Released all slaves [ 278.213468][T11636] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 278.346503][T11642] tipc: Enabling of bearer rejected, media not registered [ 278.399337][T11644] syz_tun: refused to change device tx_queue_len [ 278.723571][T11658] netdevsim netdevsim2 : renamed from netdevsim0 [ 278.947197][T11677] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 279.206059][T11692] tipc: Cannot configure node identity twice [ 280.339312][ T8200] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 280.347971][T11752] __nla_validate_parse: 11 callbacks suppressed [ 280.347991][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1551'. [ 280.376163][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 280.408336][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1553'. [ 280.900746][T11776] infiniband syz2: set down [ 280.905422][T11776] infiniband syz2: added ipvlan0 [ 280.924182][T11776] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 280.939726][T11776] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 280.957016][T11776] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 280.986969][T11776] RDS/IB: syz2: added [ 280.991292][T11776] smc: adding ib device syz2 with port count 1 [ 280.999000][T11776] smc: ib device syz2 port 1 has no pnetid [ 281.039456][T11741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.266773][T11786] tunl0: entered promiscuous mode [ 281.283993][T11786] netlink: 'syz.4.1564': attribute type 3 has an invalid length. [ 281.300150][T11786] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1564'. [ 281.680618][T11815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 281.695158][T11816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1571'. [ 281.878618][T11823] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1571'. [ 281.923520][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1571'. [ 282.030187][T11816] lo speed is unknown, defaulting to 1000 [ 282.084895][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'. [ 282.158148][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'. [ 282.472896][T11829] x_tables: duplicate underflow at hook 1 [ 284.532036][T11807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.945980][T11871] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 285.041413][T11871] 8021q: adding VLAN 0 to HW filter on device bond8 [ 285.064507][T11878] bond8: (slave geneve2): making interface the new active one [ 285.073986][T11878] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 285.142222][ T48] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 20004 - 0 [ 285.159900][ T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.186711][ T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.214824][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 285.997052][T11928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.145960][T11934] Cannot find add_set index 4 as target [ 286.410068][T11952] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 286.773926][T11972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.826943][T11975] netlink: 'syz.3.1612': attribute type 83 has an invalid length. [ 287.004639][T11980] netlink: 'syz.0.1613': attribute type 3 has an invalid length. [ 287.063495][T11985] netlink: 'syz.4.1615': attribute type 49 has an invalid length. [ 287.594440][T11995] __nla_validate_parse: 25 callbacks suppressed [ 287.594461][T11995] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1619'. [ 287.708554][T12017] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1624'. [ 287.795346][T12014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.853024][T12014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.863617][T12014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.880628][T12014] veth1_vlan: left promiscuous mode [ 287.889114][T12014] veth0_vlan: left promiscuous mode [ 287.895252][T12014] veth0_vlan: entered promiscuous mode [ 287.904642][T12014] veth1_vlan: entered promiscuous mode [ 287.916957][T12014] veth1_macvtap: left promiscuous mode [ 287.924668][T12014] veth0_macvtap: left promiscuous mode [ 287.931774][T12014] veth0_macvtap: entered promiscuous mode [ 287.944297][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.953669][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.962515][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.971729][T12014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.989272][T12014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.998852][T12014] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 288.013076][T12014] 8021q: adding VLAN 0 to HW filter on device bond2 [ 288.021516][T12014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.035800][T12014] 8021q: adding VLAN 0 to HW filter on device bond4 [ 288.049036][T12014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.063460][T12014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 288.106170][ T8162] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.113427][ T8162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.125683][ T8162] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.132907][ T8162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.236168][ T1014] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.267221][ T1014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.316296][ T1014] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.342595][ T1014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.358318][ T1014] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.391900][ T1014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.399108][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1628'. [ 288.458841][ T1014] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.507288][ T1014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.547350][T12038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 288.683055][ T1014] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 289.016489][T12064] netlink: 'syz.1.1636': attribute type 14 has an invalid length. [ 289.036603][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 289.066766][T12064] netlink: 'syz.1.1636': attribute type 14 has an invalid length. [ 289.067540][ T8200] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.086893][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 289.104863][ T8200] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.133474][ T8200] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.166965][ T8200] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.220679][T12069] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 289.231234][T12069] sctp: [Deprecated]: syz.3.1638 (pid 12069) Use of int in maxseg socket option. [ 289.231234][T12069] Use struct sctp_assoc_value instead [ 289.440228][T12082] xt_hl: Unknown Hop Limit match mode: 206 [ 289.467570][T12085] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 289.564725][T12089] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1644'. [ 289.674825][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1645'. [ 289.953950][T12113] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 289.998216][T12112] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 290.010844][T12120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.016531][T12113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1648'. [ 290.032968][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1649'. [ 290.058949][T12112] netlink: 'syz.0.1649': attribute type 24 has an invalid length. [ 290.239775][T12127] netlink: 'syz.0.1653': attribute type 1 has an invalid length. [ 290.251064][T12127] netlink: 'syz.0.1653': attribute type 7 has an invalid length. [ 290.279589][T12127] netlink: 'syz.0.1653': attribute type 8 has an invalid length. [ 290.573171][T12142] sctp: [Deprecated]: syz.0.1659 (pid 12142) Use of int in max_burst socket option. [ 290.573171][T12142] Use struct sctp_assoc_value instead [ 290.616651][T12142] sctp: [Deprecated]: syz.0.1659 (pid 12142) Use of int in max_burst socket option deprecated. [ 290.616651][T12142] Use struct sctp_assoc_value instead [ 290.751459][T12140] syzkaller0: entered promiscuous mode [ 290.762058][T12140] syzkaller0: entered allmulticast mode [ 292.753806][T12106] wlan0: Trigger new scan to find an IBSS to join [ 293.020725][T12191] __nla_validate_parse: 4 callbacks suppressed [ 293.020743][T12191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1665'. [ 293.044170][T12188] netlink: 'syz.4.1666': attribute type 29 has an invalid length. [ 293.083613][T12188] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1666'. [ 293.128810][ T1030] batadv1: left promiscuous mode [ 293.302186][T12205] netlink: 'syz.1.1669': attribute type 15 has an invalid length. [ 293.545096][T12215] tipc: Enabled bearer , priority 0 [ 293.594338][T12221] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 293.647374][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 293.657658][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1676'. [ 293.745115][T12215] syzkaller0: entered promiscuous mode [ 293.754639][T12215] syzkaller0: entered allmulticast mode [ 293.767703][T12215] tipc: Resetting bearer [ 293.815931][T12225] gretap2: entered promiscuous mode [ 293.833455][T12225] gretap2: entered allmulticast mode [ 293.852018][T12213] tipc: Resetting bearer [ 293.915004][T12235] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1674'. [ 294.001393][T12241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.389666][T12253] netlink: 'syz.2.1683': attribute type 32 has an invalid length. [ 295.793538][ T5946] wlan0: Trigger new scan to find an IBSS to join [ 296.085788][T12213] tipc: Disabling bearer [ 296.123534][T12226] syzkaller0: entered promiscuous mode [ 296.129450][T12226] syzkaller0: entered allmulticast mode [ 297.640022][T12260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.843621][T12300] x_tables: duplicate underflow at hook 1 [ 298.165293][T12275] lo speed is unknown, defaulting to 1000 [ 298.184062][T12275] lo speed is unknown, defaulting to 1000 [ 298.211286][T12275] lo speed is unknown, defaulting to 1000 [ 298.238990][T12275] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 298.273030][T12275] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 298.293140][T12275] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 298.311546][T12275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.380960][T12275] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.418984][T12308] SET target dimension over the limit! [ 298.459087][T12309] sch_fq: defrate 0 ignored. [ 298.484407][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 298.494014][T12275] lo speed is unknown, defaulting to 1000 [ 298.530062][T12275] lo speed is unknown, defaulting to 1000 [ 298.560709][T12275] lo speed is unknown, defaulting to 1000 [ 298.580241][T12275] lo speed is unknown, defaulting to 1000 [ 298.601930][T12316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1705'. [ 298.626499][T12275] lo speed is unknown, defaulting to 1000 [ 298.694295][T12316] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 298.762111][T12324] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 298.815501][T12327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.831879][T12106] wlan0: Trigger new scan to find an IBSS to join [ 299.169004][T12349] netlink: 'syz.1.1716': attribute type 11 has an invalid length. [ 299.182397][T12349] netlink: 'syz.1.1716': attribute type 11 has an invalid length. [ 299.192811][T12349] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1716'. [ 299.234215][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 299.336362][T12349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 299.368859][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 299.765734][T12366] tunl0: left promiscuous mode [ 299.773715][T12106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.937624][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.946090][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.320472][T12366] bond5: left promiscuous mode [ 300.325583][T12366] bond5: left allmulticast mode [ 300.337589][T12366] bond7: left promiscuous mode [ 300.387481][ T1030] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.409639][ T1030] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.445938][ T1030] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.466425][ T1030] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.482940][T12407] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1728'. [ 300.704778][T12407] bond10 (unregistering): Released all slaves [ 300.734440][ T1348] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.744657][ T1348] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.756780][ T1348] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.766498][ T1348] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.777455][T12426] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1733'. [ 300.827562][T12424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'. [ 300.843106][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1732'. [ 300.979201][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 300.994269][T12420] veth5: entered allmulticast mode [ 301.024044][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.047197][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.076631][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.127725][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.168794][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.192733][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.218534][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.280132][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.312211][T12433] openvswitch: netlink: Port -1307510813 exceeds max allowable 65535 [ 301.681342][T12106] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.728645][T12106] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.758915][T12465] batman_adv: batadv0: Adding interface: dummy0 [ 301.766671][T12465] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.832243][T12465] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 301.856731][T12106] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.874785][T12106] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.958637][T12475] netlink: 'syz.3.1746': attribute type 49 has an invalid length. [ 302.199806][T12475] ip6gretap0: entered promiscuous mode [ 302.216487][T12475] ip6gretap0: entered allmulticast mode [ 305.133593][T12483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.069592][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.311138][ T5632] block nbd1: Receive control failed (result -110) [ 331.788062][ T1030] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 363.148689][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.884637][T12638] net_ratelimit: 24 callbacks suppressed [ 369.884656][T12638] IPVS: rr: FWM 3 0x00000003 - no destination available [ 369.926898][T12650] __nla_validate_parse: 38 callbacks suppressed [ 369.926918][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 369.961431][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 370.020876][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'. [ 370.206306][T12664] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 370.216160][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 370.290560][T12657] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 370.312898][T12657] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 370.385150][T12657] veth5: left allmulticast mode [ 370.397117][ T8196] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 20004 - 0 [ 370.415589][ T8196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 370.435776][ T8196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 370.464614][T12670] xt_cluster: node mask cannot exceed total number of nodes [ 370.464997][ T8196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 370.860238][T12698] netlink: 'syz.2.1766': attribute type 16 has an invalid length. [ 370.888218][T12698] netlink: 'syz.2.1766': attribute type 17 has an invalid length. [ 370.954099][T12698] erspan0: entered promiscuous mode [ 371.039778][T12698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.062319][T12698] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.077576][T12698] batman_adv: batadv0: Interface activated: dummy0 [ 371.090297][T12698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.137666][T12698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.155462][T12698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.172188][T12698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.183512][T12698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.206288][T12698] veth1_macvtap: left promiscuous mode [ 371.218686][T12698] veth0_macvtap: left promiscuous mode [ 371.226232][T12698] veth0_macvtap: entered promiscuous mode [ 371.234998][T12698] veth1_macvtap: entered promiscuous mode [ 371.254408][T12698] 8021q: adding VLAN 0 to HW filter on device  [ 371.263425][T12698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.275715][T12698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.285309][T12698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 371.298623][T12698] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 371.325517][ T7050] lo speed is unknown, defaulting to 1000 [ 371.326596][T12706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.342270][ T7050] syú2: Port: 1 Link ACTIVE [ 371.448790][T12710] ip_vti0: entered promiscuous mode [ 371.497651][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'. [ 371.542962][T12106] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.550314][T12106] bridge0: port 1(bridge_slave_0) entered listening state [ 371.610222][T12106] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.617532][T12106] bridge0: port 2(bridge_slave_1) entered listening state [ 371.715607][ T1030] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 6081 - 0 [ 371.807065][ T1030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.835289][ T1030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.867319][T12731] tipc: Enabling of bearer rejected, media not registered [ 371.977579][ T1030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.095178][T12746] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 372.121501][T12746] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 372.343026][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 372.374158][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 372.441007][T12759] hsr_slave_1 (unregistering): left promiscuous mode [ 372.512772][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 372.638918][T12776] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 372.882985][T12779] gre2: entered promiscuous mode [ 372.930951][T12779] gre2: entered allmulticast mode [ 372.981073][T12798] netlink: 'syz.0.1793': attribute type 8 has an invalid length. [ 373.066656][T12802] netlink: 'syz.1.1794': attribute type 4 has an invalid length. [ 373.083355][T12802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1794'. [ 373.120137][T12803] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1794'. [ 373.144899][T12802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 373.511283][T12824] netlink: 'syz.4.1800': attribute type 1 has an invalid length. [ 373.531008][T12822] xt_CT: No such helper "snmp_trap" [ 373.694993][T12838] netlink: 'syz.2.1802': attribute type 2 has an invalid length. [ 374.163999][T12862] 8021q: VLANs not supported on xfrm0 [ 374.426163][T12880] netlink: 'syz.1.1819': attribute type 6 has an invalid length. [ 374.437376][T12880] netlink: 'syz.1.1819': attribute type 5 has an invalid length. [ 374.563106][T12892] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 374.570478][T12892] IPv6: NLM_F_CREATE should be set when creating new route [ 374.577854][T12892] IPv6: NLM_F_CREATE should be set when creating new route [ 374.877347][T12852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.135151][T12905] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 375.328447][T12909] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 375.329081][T12920] gre1: entered promiscuous mode [ 375.352771][T12920] gre1: entered allmulticast mode [ 375.358736][T12909] __nla_validate_parse: 6 callbacks suppressed [ 375.358755][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 375.408427][T12914] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 375.421370][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1826'. [ 375.439517][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.463641][T12914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.500411][T12909] netlink: 'syz.2.1826': attribute type 2 has an invalid length. [ 375.530248][T12909] netlink: 'syz.2.1826': attribute type 2 has an invalid length. [ 375.553530][T12909] netlink: 'syz.2.1826': attribute type 2 has an invalid length. [ 375.580992][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 375.604596][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 375.728640][T12914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.750509][T12914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.777030][T12914] batman_adv: batadv0: Interface deactivated: dummy0 [ 375.785776][T12914] batman_adv: batadv0: Removing interface: dummy0 [ 375.812593][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 375.829655][T12931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1830'. [ 376.277218][T12955] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1834'. [ 376.300531][T12960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.361809][T12955] syzkaller1: entered promiscuous mode [ 376.367457][T12955] syzkaller1: entered allmulticast mode [ 376.388610][T12955] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 376.670635][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'. [ 378.519499][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.122656][T12944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 379.738179][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1851'. [ 379.750583][T13023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1851'. [ 379.766891][T13023] erspan0: entered promiscuous mode [ 379.775292][T13023] erspan0: left promiscuous mode [ 382.577376][T13008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.586506][T13028] netlink: 'syz.3.1852': attribute type 11 has an invalid length. [ 382.594701][T13028] __nla_validate_parse: 3 callbacks suppressed [ 382.594719][T13028] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.1852'. [ 382.773059][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'. [ 382.984621][T13053] netlink: 'syz.0.1860': attribute type 83 has an invalid length. [ 383.088037][T13061] netlink: 'syz.2.1863': attribute type 1 has an invalid length. [ 383.104887][T13061] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1863'. [ 383.373515][T13077] macvtap0: entered allmulticast mode [ 383.398295][T13077] veth0_macvtap: entered allmulticast mode [ 383.675245][T13094] nbd: must specify at least one socket [ 384.641004][T13139] x_tables: duplicate entry at hook 2 [ 385.284289][T13182] netlink: 'syz.3.1893': attribute type 2 has an invalid length. [ 385.664457][T13198] bridge_slave_0: left allmulticast mode [ 385.670905][T13198] bridge_slave_0: left promiscuous mode [ 385.676984][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.710571][T13198] bridge_slave_1: left allmulticast mode [ 385.725150][T13198] bridge_slave_1: left promiscuous mode [ 385.746990][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.766016][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 385.783558][T13198] bond6: left promiscuous mode [ 385.805738][T13198] bond0: (slave bond_slave_0): Releasing backup interface [ 385.881118][T13198] bond0: (slave bond_slave_1): Releasing backup interface [ 385.910145][T13198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.081543][T13211] tunl0: left allmulticast mode [ 386.093055][T13211] sit0: left promiscuous mode [ 386.119408][T13211] gre2: left promiscuous mode [ 386.124275][T13211] gre2: left allmulticast mode [ 386.134512][T13204] syzkaller0: entered promiscuous mode [ 386.143996][T13204] syzkaller0: entered allmulticast mode [ 386.152280][T13198] vlan0: entered promiscuous mode [ 386.159382][T13218] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 386.190412][T13199] tipc: Enabling of bearer rejected, media not registered [ 386.294385][T13224] netlink: 'syz.3.1900': attribute type 29 has an invalid length. [ 386.317173][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 386.370871][T13226] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 386.415439][T13226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1901'. [ 386.955916][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 387.022552][T13259] macvtap0: entered allmulticast mode [ 387.033277][T13259] veth0_macvtap: entered allmulticast mode [ 387.245989][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 387.264997][T13271] ip_vti0: left promiscuous mode [ 387.272636][T13271] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 387.311516][T13271] team1: left allmulticast mode [ 387.343396][T13271] vlan0: left allmulticast mode [ 387.352966][T13271] veth0_vlan: left allmulticast mode [ 387.359295][T13271] vlan0: left promiscuous mode [ 387.364934][T13271] macvtap1: left promiscuous mode [ 387.378264][T13271] macvtap1: left allmulticast mode [ 387.399028][T13271] gretap2: left promiscuous mode [ 387.407840][T13271] gretap2: left allmulticast mode [ 387.471568][T12106] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.508694][T12106] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.533171][T12106] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.543311][T12106] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 387.996854][T13328] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1921'. [ 388.487079][T13343] ipvlan0: entered allmulticast mode [ 388.507529][T13343] batadv_slave_1: entered allmulticast mode [ 388.563309][T13347] tipc: MTU too low for tipc bearer [ 389.107191][T13383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1931'. [ 389.146444][T13383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1931'. [ 389.208462][T13383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1931'. [ 389.235696][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 389.259595][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 389.394342][T13398] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 389.431744][T13398] bond4 (unregistering): Released all slaves [ 389.640570][T13405] netlink: 'syz.2.1940': attribute type 1 has an invalid length. [ 389.791084][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1943'. [ 389.920477][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 389.952608][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 390.064767][T13423] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 390.077477][T13423] syzkaller1: group set to 0 [ 390.671042][T13468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1960'. [ 390.714303][T13468] lo speed is unknown, defaulting to 1000 [ 391.061774][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c5e9400: rx timeout, send abort [ 391.562160][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806b2e9400: rx timeout, send abort [ 391.572870][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c5e9400: abort rx timeout. Force session deactivation [ 392.047015][T13538] netlink: 'syz.0.1981': attribute type 3 has an invalid length. [ 392.070621][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806b2e9400: abort rx timeout. Force session deactivation [ 392.601334][T13572] gre1: left promiscuous mode [ 392.622770][T13572] gre1: left allmulticast mode [ 392.791313][T13578] openvswitch: netlink: Message has 1 unknown bytes. [ 392.818730][T13578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.184300][T13605] __nla_validate_parse: 37 callbacks suppressed [ 393.184324][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'. [ 393.221595][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1999'. [ 393.273531][T13605] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1999'. [ 393.303345][T13614] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2001'. [ 393.369612][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2000'. [ 393.615894][T13631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2003'. [ 393.642145][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 393.754035][T13637] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 393.779003][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 393.904175][T13644] lo speed is unknown, defaulting to 1000 [ 393.998770][T13644] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 394.362371][T13667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2015'. [ 394.390586][T13668] xt_hashlimit: size too large, truncated to 1048576 [ 394.394890][T13670] xt_hashlimit: size too large, truncated to 1048576 [ 394.974450][T13686] netlink: 'syz.1.2019': attribute type 1 has an invalid length. [ 395.691529][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2023'. [ 396.214439][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.230952][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.251410][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.270626][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.413929][T13720] syzkaller1: entered promiscuous mode [ 396.426051][T13720] syzkaller1: entered allmulticast mode [ 396.513868][T13742] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.677090][T13745] netlink: 'syz.3.2033': attribute type 1 has an invalid length. [ 396.762027][T13745] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.798015][T13752] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 396.821697][T13752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.135741][T13786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.152352][T13787] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 399.162937][ T5823] lo speed is unknown, defaulting to 1000 [ 399.219687][ T5823] syú2: Port: 1 Link DOWN [ 399.290557][T13801] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 399.315116][T13801] netlink: 'syz.2.2047': attribute type 2 has an invalid length. [ 399.340979][T13801] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 399.356603][T13801] netlink: 'syz.2.2047': attribute type 3 has an invalid length. [ 399.369910][T13801] __nla_validate_parse: 8 callbacks suppressed [ 399.369927][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2047'. [ 399.393103][T13809] TCP: TCP_TX_DELAY enabled [ 399.876803][T13843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 400.402557][T13780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.562878][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'. [ 400.779940][T13863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2063'. [ 401.035577][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 401.091766][T13884] xt_ecn: cannot match TCP bits for non-tcp packets [ 401.127318][T13887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2068'. [ 401.184964][T13878] IPv6: sit1: Disabled Multicast RS [ 401.539785][T13903] xt_policy: output policy not valid in PREROUTING and INPUT [ 401.569191][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 402.000725][T13932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2084'. [ 402.193008][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 402.201747][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 402.321242][T13952] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2087'. [ 402.332847][T13953] netem: unknown loss type 8 [ 402.351284][T13953] netem: change failed [ 402.560179][T13958] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2089'. [ 402.635372][T13968] syzkaller1: entered promiscuous mode [ 402.649465][T13968] syzkaller1: entered allmulticast mode [ 403.023349][T13975] syzkaller0: entered promiscuous mode [ 403.038013][T13975] syzkaller0: entered allmulticast mode [ 403.058943][T13986] bond3: entered allmulticast mode [ 405.308158][T14004] bond5: option fail_over_mac: invalid value (16) [ 405.333170][T14004] bond5 (unregistering): Released all slaves [ 405.418845][T14011] __nla_validate_parse: 2 callbacks suppressed [ 405.418867][T14011] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.454391][T14011] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.469214][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.519792][T14014] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.530132][T14014] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.548106][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 405.599397][ T8207] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.620684][ T8207] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.658513][ T8207] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.672341][ T8207] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.776946][T14033] sctp: [Deprecated]: syz.1.2107 (pid 14033) Use of int in max_burst socket option. [ 405.776946][T14033] Use struct sctp_assoc_value instead [ 406.229699][T14061] netlink: 'syz.2.2116': attribute type 2 has an invalid length. [ 406.612844][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2121'. [ 406.628999][T14082] nbd: socks must be embedded in a SOCK_ITEM attr [ 406.649241][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 406.675129][T14086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2122'. [ 406.745427][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2123'. [ 407.023451][T14105] syz.0.2125: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 407.060095][T14105] CPU: 0 UID: 0 PID: 14105 Comm: syz.0.2125 Not tainted syzkaller #0 PREEMPT(full) [ 407.060143][T14105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.060174][T14105] Call Trace: [ 407.060183][T14105] [ 407.060196][T14105] dump_stack_lvl+0xe8/0x150 [ 407.060234][T14105] warn_alloc+0x249/0x340 [ 407.060266][T14105] ? stack_trace_save+0xa9/0x100 [ 407.060300][T14105] ? __pfx_warn_alloc+0x10/0x10 [ 407.060331][T14105] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.060366][T14105] ? kasan_save_track+0x4f/0x80 [ 407.060391][T14105] ? kasan_save_track+0x3e/0x80 [ 407.060416][T14105] ? __kasan_kmalloc+0x93/0xb0 [ 407.060443][T14105] ? __kmalloc_cache_noprof+0x31c/0x660 [ 407.060470][T14105] ? xskq_create+0x56/0x170 [ 407.060496][T14105] ? xsk_setsockopt+0x54c/0x990 [ 407.060520][T14105] ? do_sock_setsockopt+0x17c/0x1b0 [ 407.060553][T14105] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 407.060580][T14105] ? do_syscall_64+0x174/0x580 [ 407.060605][T14105] __vmalloc_node_range_noprof+0x132/0x1750 [ 407.060668][T14105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 407.060700][T14105] ? __kasan_kmalloc+0x93/0xb0 [ 407.060736][T14105] vmalloc_user_noprof+0xad/0xe0 [ 407.060763][T14105] ? xskq_create+0xbf/0x170 [ 407.060793][T14105] xskq_create+0xbf/0x170 [ 407.060824][T14105] xsk_init_queue+0x8a/0xe0 [ 407.060854][T14105] xsk_setsockopt+0x54c/0x990 [ 407.060884][T14105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 407.060911][T14105] ? __pfx_aa_sk_perm+0x10/0x10 [ 407.060944][T14105] ? aa_sock_opt_perm+0xff/0x1a0 [ 407.060977][T14105] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 407.061004][T14105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 407.061034][T14105] do_sock_setsockopt+0x17c/0x1b0 [ 407.061069][T14105] __x64_sys_setsockopt+0x13d/0x1b0 [ 407.061109][T14105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.061131][T14105] do_syscall_64+0x174/0x580 [ 407.061151][T14105] ? trace_irq_disable+0x3b/0x140 [ 407.061181][T14105] ? clear_bhb_loop+0x40/0x90 [ 407.061206][T14105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.061226][T14105] RIP: 0033:0x7fda8659ce59 [ 407.061259][T14105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.061276][T14105] RSP: 002b:00007fda8746a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 407.061298][T14105] RAX: ffffffffffffffda RBX: 00007fda86815fa0 RCX: 00007fda8659ce59 [ 407.061313][T14105] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 407.061326][T14105] RBP: 00007fda86632d6f R08: 0000000000000004 R09: 0000000000000000 [ 407.061338][T14105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.061351][T14105] R13: 00007fda86816038 R14: 00007fda86815fa0 R15: 00007fff8beed208 [ 407.061385][T14105] [ 407.065509][T14105] Mem-Info: [ 407.387433][T14105] active_anon:5869 inactive_anon:0 isolated_anon:0 [ 407.387433][T14105] active_file:2948 inactive_file:40043 isolated_file:0 [ 407.387433][T14105] unevictable:768 dirty:55 writeback:0 [ 407.387433][T14105] slab_reclaimable:11360 slab_unreclaimable:109406 [ 407.387433][T14105] mapped:29417 shmem:1348 pagetables:3566 [ 407.387433][T14105] sec_pagetables:0 bounce:0 [ 407.387433][T14105] kernel_misc_reclaimable:0 [ 407.387433][T14105] free:1315739 free_pcp:8656 free_cma:0 [ 407.456580][T14105] Node 0 active_anon:23676kB inactive_anon:0kB active_file:11792kB inactive_file:159976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117668kB dirty:220kB writeback:0kB shmem:3856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:13900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 407.508474][T14105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 407.594926][T14105] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.701761][T14105] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 407.719637][T14105] Node 0 DMA32 free:1300400kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23476kB inactive_anon:0kB active_file:11792kB inactive_file:159976kB unevictable:1536kB writepending:220kB zspages:0kB present:3129332kB managed:2552800kB mlocked:0kB bounce:0kB free_pcp:35552kB local_pcp:18544kB free_cma:0kB [ 407.766149][T14105] lowmem_reserve[]: 0 0 0 0 0 [ 407.771986][T14105] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 407.805355][T14124] netem: change failed [ 407.879178][T14105] lowmem_reserve[]: 0 0 0 0 0 [ 407.881125][T14129] netlink: 'syz.2.2133': attribute type 1 has an invalid length. [ 407.904575][T14105] Node 1 Normal free:3947324kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 407.954800][T14105] lowmem_reserve[]: 0 0 0 0 0 [ 407.979324][T14105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.026829][T14105] Node 0 DMA32: 5626*4kB (UME) 3995*8kB (UM) 1805*16kB (UME) 249*32kB (UME) 643*64kB (UME) 623*128kB (UME) 421*256kB (UM) 231*512kB (UME) 106*1024kB (UME) 10*2048kB (UM) 179*4096kB (UM) = 1300464kB [ 408.091221][T14105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.108999][T14105] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 8*16kB (UM) 14*32kB (UM) 5*64kB (UM) 3*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3947324kB [ 408.203916][T14105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.234066][T14105] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.274859][T14105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.314504][T14105] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.341755][T14105] 44285 total pagecache pages [ 408.371598][T14105] 0 pages in swap cache [ 408.390758][T14105] Free swap = 124996kB [ 408.403691][T14105] Total swap = 124996kB [ 408.428743][T14105] 2097051 pages RAM [ 408.442912][T14105] 0 pages HighMem/MovableOnly [ 408.467098][T14105] 427066 pages reserved [ 408.489661][T14105] 0 pages cma reserved [ 408.990798][T14176] netlink: 'syz.4.2144': attribute type 1 has an invalid length. [ 409.088224][T14176] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.160964][T14183] bond10: (slave ip6gretap0): making interface the new active one [ 409.196085][T14183] bond10: (slave ip6gretap0): Enslaving as an active interface with an up link [ 409.249620][T14194] netlink: 'syz.4.2144': attribute type 4 has an invalid length. [ 409.285307][T14185] syzkaller1: entered promiscuous mode [ 409.306674][T14185] syzkaller1: entered allmulticast mode [ 409.562985][T14208] netlink: 'syz.3.2149': attribute type 27 has an invalid length. [ 409.596235][T14208] netlink: 'syz.3.2149': attribute type 4 has an invalid length. [ 410.673838][T14268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.807315][T14275] netlink: 'syz.1.2167': attribute type 16 has an invalid length. [ 410.823482][T14275] __nla_validate_parse: 8 callbacks suppressed [ 410.823500][T14275] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2167'. [ 411.025399][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2169'. [ 411.424664][T14309] tipc: Started in network mode [ 411.448695][T14309] tipc: Node identity 4, cluster identity 4711 [ 411.477067][T14309] tipc: Node number set to 4 [ 411.507054][T14323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.701656][T14325] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2183'. [ 411.889303][T14343] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2188'. [ 411.944682][T14340] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.967665][T14340] bond11 (unregistering): Released all slaves [ 412.250609][T14363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.451573][T14372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.539155][T14374] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 412.561767][T14374] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 412.589098][T14374] gretap3: entered promiscuous mode [ 412.607276][T14374] gretap3: entered allmulticast mode [ 412.740192][T14383] netlink: 'syz.3.2197': attribute type 3 has an invalid length. [ 412.906177][T14388] blkio.reset_stats is deprecated [ 413.078340][T14366] IPVS: set_ctl: invalid protocol: 44 172.20.20.65:20004 [ 413.129935][T14366] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 413.137519][T14366] syzkaller1: group set to 0 [ 413.193753][T14400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2205'. [ 413.240358][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 413.471300][T14416] IPVS: set_ctl: invalid protocol: 47 172.20.20.39:2047 [ 413.636205][T14426] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2211'. [ 413.645970][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 413.728900][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 414.057148][T14449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2217'. [ 414.190116][T14454] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 414.255169][T14454] x_tables: duplicate underflow at hook 4 [ 414.983366][T14496] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 415.014131][T14496] netdevsim netdevsim4 : renamed from netdevsim0 [ 415.774907][T14520] netlink: 'syz.2.2240': attribute type 1 has an invalid length. [ 432.268119][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.275432][ C0] bridge0: topology change detected, propagating [ 432.282757][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.290049][ C0] bridge0: topology change detected, propagating [ 439.950512][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 482.667662][T14563] batman_adv: batadv0: Adding interface: dummy0 [ 482.679072][T14563] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.724255][T14563] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 482.836966][T14581] __nla_validate_parse: 12 callbacks suppressed [ 482.836987][T14581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2248'. [ 482.837436][T14566] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2245'. [ 483.109094][T14594] gtp0: entered allmulticast mode [ 483.180872][T14599] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20000 [ 483.517046][T14615] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2258'. [ 483.533271][T14619] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2260'. [ 483.551570][T14618] netlink: 'syz.3.2259': attribute type 3 has an invalid length. [ 483.565179][T14619] netlink: 'syz.4.2260': attribute type 5 has an invalid length. [ 483.820560][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 483.874513][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 483.894723][T14632] veth0_macvtap (unregistering): left allmulticast mode [ 483.931816][T14643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2265'. [ 484.194357][T14659] netlink: 'syz.2.2269': attribute type 1 has an invalid length. [ 484.223883][T14659] netlink: 'syz.2.2269': attribute type 4 has an invalid length. [ 484.247513][T14659] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.2269'. [ 484.353824][T14659] xt_bpf: check failed: parse error [ 484.365715][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'. [ 484.387592][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 484.526614][T14669] vlan3: entered promiscuous mode [ 484.551147][T14669] bridge0: entered promiscuous mode [ 484.860716][T14693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.941960][T14701] netlink: 'syz.3.2282': attribute type 61 has an invalid length. [ 485.067287][T14711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.104619][T14735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.112039][T14735] IPv6: NLM_F_CREATE should be set when creating new route [ 487.119382][T14735] IPv6: NLM_F_CREATE should be set when creating new route [ 487.126670][T14735] IPv6: NLM_F_CREATE should be set when creating new route [ 487.156497][T14739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.443764][T14749] bond0 (unregistering): Released all slaves [ 487.904432][T14784] __nla_validate_parse: 6 callbacks suppressed [ 487.904452][T14784] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2306'. [ 487.925176][T14784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 488.015588][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2306'. [ 488.081379][T14794] rdma_rxe: rxe_newlink: failed to add lo [ 488.381504][T14807] macvlan2: entered promiscuous mode [ 488.391060][T14808] netlink: 'syz.0.2310': attribute type 5 has an invalid length. [ 488.403935][T14807] macvlan2: entered allmulticast mode [ 488.417539][T14807] team0: Device macvlan2 is already an upper device of the team interface [ 488.449615][T14803] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2311'. [ 488.460496][T14803] openvswitch: netlink: Flow actions attr not present in new flow. [ 488.887542][T14821] pim6reg: entered allmulticast mode [ 489.125347][T14830] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 489.193253][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 489.228846][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2319'. [ 489.299787][T14830] bond11: entered promiscuous mode [ 489.311728][T14830] 8021q: adding VLAN 0 to HW filter on device bond11 [ 489.533382][T14852] netlink: 'syz.1.2326': attribute type 4 has an invalid length. [ 489.564413][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 489.566402][T14852] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2326'. [ 489.610726][T14852] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 489.697987][T14870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2330'. [ 489.994071][T14884] bridge0: port 1(ipvlan2) entered blocking state [ 490.015933][T14884] bridge0: port 1(ipvlan2) entered disabled state [ 490.025181][T14884] ipvlan2: entered allmulticast mode [ 490.031031][T14884] bridge0: entered allmulticast mode [ 490.041576][T14884] ipvlan2: left allmulticast mode [ 490.046794][T14884] bridge0: left allmulticast mode [ 490.132374][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2336'. [ 490.421412][T14904] netlink: 'syz.0.2341': attribute type 25 has an invalid length. [ 491.012510][T14929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.329470][ T29] audit: type=1804 audit(1780610365.964:2): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2356" name="/newroot/479/cgroup.controllers" dev="tmpfs" ino=2472 res=1 errno=0 [ 491.404167][ T29] audit: type=1800 audit(1780610365.994:3): pid=14959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2356" name="cgroup.controllers" dev="tmpfs" ino=2472 res=0 errno=0 [ 494.412490][T15047] __nla_validate_parse: 13 callbacks suppressed [ 494.412511][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 494.519043][T15050] v: renamed from erspan0 [ 494.523683][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 494.736099][T15065] openvswitch: netlink: EtherType 0 is less than min 600 [ 494.760279][T15065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 494.940226][T15082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2382'. [ 494.964224][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2382'. [ 495.090450][T15088] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.121211][T15085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2387'. [ 495.322978][T15104] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2390'. [ 497.235310][T15091] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 497.341371][T15113] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2391'. [ 497.476499][T15116] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 497.568353][T15125] netlink: 'syz.3.2394': attribute type 4 has an invalid length. [ 497.600962][T15125] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2394'. [ 497.638066][T15128] netlink: 'syz.0.2396': attribute type 8 has an invalid length. [ 497.661042][T15130] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2394'. [ 497.692878][T15124] bond10: (slave veth7): Enslaving as an active interface with a down link [ 498.190247][T15161] batadv_slave_1: entered promiscuous mode [ 498.221508][T15157] batadv_slave_1: left promiscuous mode [ 498.703675][T15196] netlink: 'syz.3.2414': attribute type 4 has an invalid length. [ 498.873137][T15205] netlink: 'syz.1.2416': attribute type 13 has an invalid length. [ 498.900315][T15205] netlink: 'syz.1.2416': attribute type 58 has an invalid length. [ 498.945080][T15207] netlink: 'syz.3.2417': attribute type 11 has an invalid length. [ 499.385101][T15237] Cannot find set identified by id 65534 to match [ 499.419950][T15242] __nla_validate_parse: 10 callbacks suppressed [ 499.419970][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2427'. [ 499.467500][T15242] openvswitch: netlink: Flow key attr not present in new flow. [ 499.630214][T15257] netlink: 'syz.0.2428': attribute type 4 has an invalid length. [ 499.659722][T15257] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2428'. [ 499.698764][T15261] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 500.020468][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2438'. [ 500.155507][T15284] bond11: option lp_interval: invalid value (0) [ 500.176802][T15284] bond11: option lp_interval: allowed values 1 - 2147483647 [ 500.215475][T15284] bond11 (unregistering): Released all slaves [ 500.290459][T15295] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2441'. [ 500.772178][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 500.774300][T15322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'. [ 500.799678][T15325] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.829130][T15326] xt_TCPMSS: Only works on TCP SYN packets [ 500.840214][T15322] bridge0: entered allmulticast mode [ 500.912172][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 501.104003][T15346] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2453'. [ 501.220345][T15347] macvlan2: entered promiscuous mode [ 501.236056][T15347] macvlan2: entered allmulticast mode [ 501.279902][T15353] syzkaller0: entered promiscuous mode [ 501.313072][T15353] syzkaller0: entered allmulticast mode [ 501.392500][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.686536][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 501.716543][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2464'. [ 501.854853][T15388] openvswitch: netlink: Flow actions attr not present in new flow. [ 502.152493][T15406] sctp: [Deprecated]: syz.4.2473 (pid 15406) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.152493][T15406] Use struct sctp_sack_info instead [ 502.669078][T15432] bond0 (unregistering): Released all slaves [ 502.691561][ T134] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.718054][T15437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 502.763906][ T134] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.775241][T15445] block nbd0: reconnected socket [ 502.782725][T15445] nbd: socks must be embedded in a SOCK_ITEM attr [ 502.785869][ T134] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.842201][ T5632] block nbd0: Receive control failed (result -32) [ 502.874740][ T134] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 503.342999][T15465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.364886][T15465] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.391461][T15465] IPVS: Error connecting to the multicast addr [ 503.704956][T15486] syzkaller0: entered promiscuous mode [ 503.725192][T15486] syzkaller0: entered allmulticast mode [ 503.846804][T15491] netlink: zone id is out of range [ 503.873314][T15491] netlink: zone id is out of range [ 503.886064][T15489] netlink: set zone limit has 4 unknown bytes [ 504.621473][T15535] __nla_validate_parse: 11 callbacks suppressed [ 504.621504][T15535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2511'. [ 504.754853][T15544] netlink: 'syz.3.2513': attribute type 1 has an invalid length. [ 504.867477][T15552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.880805][T15551] xt_hashlimit: size too large, truncated to 1048576 [ 505.006293][T15544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 505.020790][T15546] bond13: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 505.114262][T15550] veth5: entered promiscuous mode [ 505.141271][T15550] bond13: (slave veth5): Enslaving as a backup interface with a down link [ 505.172462][T15544] 8021q: adding VLAN 0 to HW filter on device bond13 [ 505.183313][ T134] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.327871][ T8198] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 505.401126][T15574] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 505.841742][T15603] netlink: 'syz.0.2528': attribute type 11 has an invalid length. [ 505.856793][T15601] veth0: entered promiscuous mode [ 505.863488][T15603] netlink: 'syz.0.2528': attribute type 4 has an invalid length. [ 505.879371][T15603] netlink: 199768 bytes leftover after parsing attributes in process `syz.0.2528'. [ 505.920179][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 505.932663][T15600] veth0: left promiscuous mode [ 505.975351][T15608] syz_tun: entered allmulticast mode [ 505.994182][T15608] netlink: 'syz.2.2529': attribute type 21 has an invalid length. [ 506.131548][T15608] bond11: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 506.145057][T15608] bond11 (unregistering): Released all slaves [ 506.155937][T15624] sctp: [Deprecated]: syz.2.2529 (pid 15624) Use of int in maxseg socket option. [ 506.155937][T15624] Use struct sctp_assoc_value instead [ 506.182108][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'. [ 506.569764][T15642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.716068][T15647] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.2539'. [ 506.895772][T15654] bond4: option mode: invalid value (133) [ 506.913211][T15654] bond4 (unregistering): Released all slaves [ 507.201627][T15680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2545'. [ 507.320261][T15687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2549'. [ 507.544349][T15700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 507.586757][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 507.694038][T15707] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 507.755619][T15707] openvswitch: netlink: Message has 8 unknown bytes. [ 508.039475][T15732] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 510.744446][T15774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.815934][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 511.013942][T15796] .`: entered promiscuous mode [ 511.032571][T15796] bond_slave_0: entered promiscuous mode [ 511.049846][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2577'. [ 511.069955][T15796] bond_slave_1: entered promiscuous mode [ 511.085703][T15794] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 511.374778][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'. [ 511.562327][T15826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2585'. [ 511.722473][T15835] gtp2: entered allmulticast mode [ 511.762639][T15835] team0: Device gtp2 is of different type [ 511.803427][T15832] gtp2: entered allmulticast mode [ 511.810793][T15832] team0: Device gtp2 is of different type [ 511.845518][T15840] syzkaller1: entered promiscuous mode [ 511.860389][T15840] syzkaller1: entered allmulticast mode [ 511.895221][T15840] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 511.989033][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 512.043538][T15845] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2592'. [ 512.244225][T15856] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2596'. [ 512.491669][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 512.528644][T15874] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 512.591245][T15874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2601'. [ 512.637112][T15874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 512.673449][T15879] syzkaller0: entered promiscuous mode [ 512.680025][T15874] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 512.692839][T15879] syzkaller0: entered allmulticast mode [ 512.720674][T15884] tipc: Enabled bearer , priority 10 [ 513.252896][T15919] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 513.277337][T15910] tunl0: entered promiscuous mode [ 513.285294][T15910] netlink: 'syz.2.2612': attribute type 3 has an invalid length. [ 513.391011][T15925] nft_compat: unsupported protocol 0 [ 513.475809][T15930] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 514.277993][T15973] bridge3: entered promiscuous mode [ 514.298847][T15973] bridge3: entered allmulticast mode [ 514.496126][T15989] netlink: zone id is out of range [ 514.541695][T15989] netlink: zone id is out of range [ 514.564943][T15989] netlink: zone id is out of range [ 514.590078][T15989] netlink: zone id is out of range [ 514.595489][T15989] netlink: zone id is out of range [ 514.601215][T15989] netlink: zone id is out of range [ 515.507126][T16036] netem: change failed [ 515.831680][T16049] __nla_validate_parse: 11 callbacks suppressed [ 515.831710][T16049] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2648'. [ 516.441469][T16072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2655'. [ 516.473879][T16072] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2655'. [ 516.527881][T16072] netlink: 'syz.1.2655': attribute type 6 has an invalid length. [ 516.546276][T16077] sctp: [Deprecated]: syz.2.2657 (pid 16077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.546276][T16077] Use struct sctp_sack_info instead [ 516.562800][T16072] netlink: 'syz.1.2655': attribute type 5 has an invalid length. [ 516.562837][T16072] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2655'. [ 516.641172][T16081] sctp: [Deprecated]: syz.2.2657 (pid 16081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.641172][T16081] Use struct sctp_sack_info instead [ 516.926251][T16096] xt_recent: Unsupported userspace flags (000000b1) [ 517.634299][T16115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2666'. [ 517.985251][T16131] xt_hashlimit: size too large, truncated to 1048576 [ 518.002899][T16132] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 518.028990][ T35] net_ratelimit: 49 callbacks suppressed [ 518.029011][ T35] bond13: (slave ip6gretap0): link status up again after 0 ms [ 518.050217][T16133] netlink: 'syz.0.2672': attribute type 61 has an invalid length. [ 518.069174][ T35] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 518.208887][ T35] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 518.263584][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2676'. [ 518.389403][T16147] IPv6: NLM_F_REPLACE set, but no existing node found! [ 518.677930][ T8162] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 518.853633][T16166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.880208][T16166] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 518.919921][T16166] team0: Failed to send options change via netlink (err -105) [ 518.933806][T16166] team0: Port device batadv0 added [ 518.985970][T16179] bond0: entered promiscuous mode [ 519.004015][T16179] gretap1: entered promiscuous mode [ 519.027031][T16179] batadv0: entered promiscuous mode [ 519.053280][T16179] debugfs: 'hsr0' already exists in 'hsr' [ 519.071647][T16179] Cannot create hsr debugfs directory [ 519.080522][T16179] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 519.093395][T16179] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 519.107224][T16179] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 519.116689][T16179] bond0: left promiscuous mode [ 519.125712][T16179] gretap1: left promiscuous mode [ 519.136829][T16179] batadv0: left promiscuous mode [ 519.166690][T16173] netlink: 'syz.0.2684': attribute type 20 has an invalid length. [ 519.192345][T16173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 519.205578][T16189] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2687'. [ 519.216235][T16190] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2687'. [ 519.271178][ T8162] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.282288][T16173] netlink: 'syz.0.2684': attribute type 20 has an invalid length. [ 519.301483][ T8162] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.312596][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 519.335828][ T8162] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.344677][T16190] openvswitch: netlink: Missing key (keys=40, expected=80) [ 519.345190][T16192] openvswitch: netlink: Missing key (keys=40, expected=80) [ 519.391742][T16190] netlink: 'syz.1.2687': attribute type 6 has an invalid length. [ 519.398713][ T8162] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.408730][T16190] netlink: 'syz.1.2687': attribute type 5 has an invalid length. [ 519.621848][ T8162] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 519.723250][T16209] openvswitch: netlink: IP tunnel TTL not specified. [ 519.760146][ T8200] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 519.785368][T16211] openvswitch: netlink: IP tunnel dst address not specified [ 519.786251][T16209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.921897][T16215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.935468][T16219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.216560][T16239] netlink: 'syz.0.2701': attribute type 63 has an invalid length. [ 520.244159][T16239] netlink: 'syz.0.2701': attribute type 63 has an invalid length. [ 520.287553][T16247] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 520.400134][T16249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.972485][T16280] __nla_validate_parse: 13 callbacks suppressed [ 520.972507][T16280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2712'. [ 521.072191][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2705'. [ 521.105726][T16285] lo speed is unknown, defaulting to 1000 [ 521.367473][T16299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2716'. [ 521.394903][T16299] netlink: 'syz.3.2716': attribute type 11 has an invalid length. [ 521.410963][T16299] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2716'. [ 521.946505][T16308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.971563][T16308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.994931][T16308] veth1_vlan: left promiscuous mode [ 522.013943][T16308] vlan0: left promiscuous mode [ 522.029546][T16308] veth1_vlan: entered promiscuous mode [ 522.066632][T16308] 8021q: adding VLAN 0 to HW filter on device  [ 522.075448][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 522.089379][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 522.100319][T16308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 522.114746][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 522.175475][T16329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2726'. [ 522.187455][ T134] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 522.203113][ T134] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.212487][ T134] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.238674][T16331] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2727'. [ 522.330241][T16343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2729'. [ 522.386714][T16333] 8021q: adding VLAN 0 to HW filter on device bond12 [ 522.417550][ T134] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.449531][T16331] 0·: renamed from hsr0 (while UP) [ 522.467638][T16331] 0·: entered allmulticast mode [ 522.486871][T16351] ieee802154 phy0 wpan0: encryption failed: -90 [ 522.498745][T16331] hsr_slave_0: entered allmulticast mode [ 522.785156][T16358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.805167][T16367] netlink: 'syz.1.2733': attribute type 28 has an invalid length. [ 522.842412][T16367] netlink: 'syz.1.2733': attribute type 3 has an invalid length. [ 522.865194][T16369] sit0: entered promiscuous mode [ 522.891938][T16367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2733'. [ 522.911153][T16369] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 522.921069][T16369] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2735'. [ 523.049469][T16376] net_ratelimit: 19 callbacks suppressed [ 523.049489][T16376] openvswitch: netlink: Multiple metadata blocks provided [ 523.077782][T16379] veth0: entered promiscuous mode [ 523.083048][T16377] openvswitch: netlink: Multiple metadata blocks provided [ 523.112437][ T8162] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 523.146709][T16383] veth0: left promiscuous mode [ 523.190034][T16383] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 523.210105][T16383] netlink: 'syz.4.2737': attribute type 2 has an invalid length. [ 523.240621][T12106] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 523.251376][T16383] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 523.370376][ T8162] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 523.502855][T16400] syzkaller1: entered promiscuous mode [ 523.519781][T16400] syzkaller1: entered allmulticast mode [ 523.629065][T16408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.714335][T16408] xfrm1: entered allmulticast mode [ 523.738325][ T134] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 523.858085][ T8209] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 524.090264][T16423] bond13: Unable to set up delay as MII monitoring is disabled [ 524.130645][T16423] bond13 (unregistering): Released all slaves [ 524.251571][ T8162] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 524.444150][T16461] xt_hashlimit: size too large, truncated to 1048576 [ 524.599172][ T8209] bond13: (slave ip6gretap0): failed to get link speed/duplex [ 524.835625][T16475] syzkaller0: entered promiscuous mode [ 524.853374][T16475] syzkaller0: entered allmulticast mode [ 525.619119][T16520] xt_policy: output policy not valid in PREROUTING and INPUT [ 525.820565][T16527] : entered promiscuous mode [ 525.884776][T16532] syz_tun: left allmulticast mode [ 526.169900][T16548] __nla_validate_parse: 19 callbacks suppressed [ 526.169919][T16548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2785'. [ 526.367635][T16559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.780931][T16585] ip6tnl4: entered allmulticast mode [ 526.923722][T16591] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 526.936495][T16591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 527.102638][T16601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2799'. [ 527.201340][T16596] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 527.220157][T16596] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 527.366902][T16617] netlink: 'syz.4.2801': attribute type 11 has an invalid length. [ 527.385991][T16617] netlink: 'syz.4.2801': attribute type 11 has an invalid length. [ 527.394455][T16617] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2801'. [ 527.500560][T16622] netlink: 'syz.2.2804': attribute type 39 has an invalid length. [ 527.569558][T16627] netdevsim netdevsim3 : renamed from netdevsim0 [ 527.712420][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2807'. [ 527.748676][T16632] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2806'. [ 527.870246][T16637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'. [ 527.905746][T16639] erspan0: entered allmulticast mode [ 528.022549][T16637] bond13: (slave ip6gretap0): Removing an active aggregator [ 528.053542][T16637] bond13: (slave ip6gretap0): Releasing backup interface [ 528.068471][T16637] bond13: (slave ip6gretap0): the permanent HWaddr of slave - 36:d4:26:cd:23:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 528.456832][T16660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 528.489481][T16660] syzkaller0: entered promiscuous mode [ 528.496085][T16660] syzkaller0: entered allmulticast mode [ 528.502754][T16668] x_tables: unsorted underflow at hook 1 [ 528.633896][T16672] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2817'. [ 528.682493][T16672] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2817'. [ 528.853705][T16680] tunl0: left promiscuous mode [ 528.990660][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.998063][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.096920][T16680] 0·: left allmulticast mode [ 529.102640][T16680] hsr_slave_0: left allmulticast mode [ 529.117442][T16680] veth0_macvtap: left allmulticast mode [ 529.123955][T16680] macvtap0: left allmulticast mode [ 529.168884][T16680] ipvlan0: left allmulticast mode [ 529.175487][T16680] batadv_slave_1: left allmulticast mode [ 529.213147][T16680] xfrm1: left allmulticast mode [ 529.284603][ T8209] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.293504][ T8209] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.390511][ T8209] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.430160][ T8209] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.480472][T16709] netlink: 'syz.2.2827': attribute type 39 has an invalid length. [ 529.714977][T16721] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 530.004907][T16728] team0: Device xfrm0 is of different type [ 530.051519][T16743] nbd: nbd1 already in use [ 530.085988][T16745] veth0_macvtap: entered allmulticast mode [ 530.106414][T16745] net_ratelimit: 26 callbacks suppressed [ 530.106436][T16745] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 530.211130][T16740] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 530.247626][T16740] bond11 (unregistering): Released all slaves [ 530.584856][T16766] syzkaller0: entered promiscuous mode [ 530.625070][T16766] syzkaller0: entered allmulticast mode [ 530.683840][T16766] openvswitch: netlink: IP tunnel dst address not specified [ 530.865040][T16778] syzkaller1: entered promiscuous mode [ 530.894606][T16778] syzkaller1: entered allmulticast mode [ 530.915048][T16784] netlink: 'syz.4.2846': attribute type 1 has an invalid length. [ 531.089771][T16784] 8021q: adding VLAN 0 to HW filter on device bond11 [ 531.171562][T16753] can: request_module (can-proto-4) failed. [ 531.206151][T16753] __nla_validate_parse: 8 callbacks suppressed [ 531.206172][T16753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2839'. [ 531.241765][T16789] bond11: (slave gretap1): making interface the new active one [ 531.269626][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 531.279483][T16789] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 531.599560][T16821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.639976][T16821] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.2854'. [ 531.803488][T16816] syzkaller0: entered promiscuous mode [ 531.812046][T16816] syzkaller0: entered allmulticast mode [ 534.244346][T16888] netlink: 'syz.0.2862': attribute type 11 has an invalid length. [ 534.403882][T16890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.778345][T16912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2872'. [ 535.730744][T16966] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2885'. [ 535.782870][T16966] batman_adv: batadv0: Removing interface: dummy0 [ 535.914456][T16975] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2887'. [ 536.038860][T16973] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 536.142704][T16981] netlink: 'syz.3.2889': attribute type 10 has an invalid length. [ 536.286351][T16987] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.354239][T16987] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 536.513314][T16997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.730212][ T134] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 536.767495][ T134] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.911930][T17010] veth7: entered allmulticast mode [ 536.931040][ T134] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.965384][ T134] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 537.014138][T17022] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 537.465067][T17045] netlink: 'syz.4.2909': attribute type 2 has an invalid length. [ 537.771236][T17056] netlink: zone id is out of range [ 537.791095][T17056] netlink: zone id is out of range [ 537.811436][T17056] netlink: del zone limit has 4 unknown bytes [ 537.844407][T17056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2911'. [ 537.880560][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.894433][ T4949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.904727][ T4949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.924293][ T4949] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.932603][ T4949] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 538.131377][T17060] erspan0: entered promiscuous mode [ 538.165204][T17060] erspan0: left allmulticast mode [ 538.203315][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2911'. [ 538.264302][T17079] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 538.296136][T17079] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 538.375788][T17033] netlink: zone id is out of range [ 538.397200][T17033] netlink: zone id is out of range [ 538.406531][ T5631] syz_tun (unregistering): left allmulticast mode [ 538.428429][T17033] netlink: zone id is out of range [ 538.446895][T17033] netlink: zone id is out of range [ 538.457317][T17033] netlink: zone id is out of range [ 538.472837][T17033] netlink: zone id is out of range [ 538.488805][T17033] netlink: zone id is out of range [ 538.841441][ T134] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.148346][ T134] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.184371][T17120] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2923'. [ 539.231316][T17117] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2923'. [ 539.310096][ T134] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.656110][ T134] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.691035][T17152] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2929'. [ 539.947257][T17061] lo speed is unknown, defaulting to 1000 [ 539.956950][T17167] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2932'. [ 540.029616][ T5632] Bluetooth: hci5: command tx timeout [ 540.924971][ T134] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 540.951630][ T134] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 540.981942][ T134] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - be:04:6f:a1:2a:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 541.255284][ T134] bond0 (unregistering): (slave gretap1): Releasing active interface [ 541.377281][ T134] bond2 (unregistering): (slave geneve3): Releasing backup interface [ 541.725784][ T134] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.734845][ T134] bond_slave_0: left promiscuous mode [ 541.743589][ T134] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.752696][ T134] bond_slave_1: left promiscuous mode [ 541.759789][ T134] .` (unregistering): Released all slaves [ 541.774440][ T134] bond1 (unregistering): (slave veth1): Releasing backup interface [ 541.784185][ T134] bond1 (unregistering): Released all slaves [ 541.802734][ T134] bond0 (unregistering): Released all slaves [ 541.820234][ T134] bond2 (unregistering): Released all slaves [ 541.846408][ T134] bond3 (unregistering): Released all slaves [ 541.915198][T17215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2944'. [ 542.021551][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 542.110724][ T5632] Bluetooth: hci5: command tx timeout [ 542.233833][ T134] : left promiscuous mode [ 542.288386][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2947'. [ 542.632894][ T134] tipc: Left network mode [ 542.752445][T17061] lo speed is unknown, defaulting to 1000 [ 542.942799][T17272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2955'. [ 543.575338][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 543.773120][T17308] sit0: left promiscuous mode [ 543.812610][T17308] bond11: left promiscuous mode [ 543.846382][T17308] veth5: left promiscuous mode [ 543.875001][T17308] veth7: left allmulticast mode [ 543.949573][T17314] team0: Port device dummy0 removed [ 543.961591][T17314] net_ratelimit: 7 callbacks suppressed [ 543.961608][T17314] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.115071][ T8200] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 544.162406][T17333] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 544.172594][T17324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.189551][ T5632] Bluetooth: hci5: command tx timeout [ 544.193842][ T8200] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 544.395786][T17343] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 544.404513][T17343] netlink: 'syz.3.2967': attribute type 1 has an invalid length. [ 544.819788][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 545.569739][T17383] syz_tun: entered allmulticast mode [ 545.713151][ T35] tipc: Subscription rejected, illegal request [ 545.767132][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2979'. [ 546.045098][T17413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2981'. [ 546.084219][T17413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2981'. [ 546.125237][T17403] bond0: entered promiscuous mode [ 546.144952][T17403] bond0: entered allmulticast mode [ 546.268139][ T5632] Bluetooth: hci5: command tx timeout [ 546.295084][T17410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.369207][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.428564][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.445608][T17061] bridge_slave_0: entered allmulticast mode [ 546.471900][T17061] bridge_slave_0: entered promiscuous mode [ 546.605036][T17432] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2984'. [ 546.641875][ T134] hsr_slave_0: left promiscuous mode [ 546.649229][ T134] hsr_slave_1: left promiscuous mode [ 546.655594][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.164155][ T134] pim6reg (unregistering): left allmulticast mode [ 547.249620][ T8162] smc: removing ib device syz2 [ 547.363909][ T134] team0 (unregistering): Port device team_slave_1 removed [ 547.470970][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.478931][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.486193][T17061] bridge_slave_1: entered allmulticast mode [ 547.500824][T17061] bridge_slave_1: entered promiscuous mode [ 547.641343][T17426] syzkaller0: entered promiscuous mode [ 547.647497][T17426] syzkaller0: entered allmulticast mode [ 547.671107][T17439] veth11: entered allmulticast mode [ 547.691311][T17440] veth13: entered allmulticast mode [ 547.697639][T17442] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 547.885105][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 547.904520][T17457] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2990'. [ 549.724942][ T6962] ================================================================== [ 549.733142][ T6962] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 549.741931][ T6962] Read of size 8 at addr ffff888079a022f0 by task kworker/0:12/6962 [ 549.749935][ T6962] [ 549.752279][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 549.752305][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.752320][ T6962] Workqueue: events smc_ib_port_event_work [ 549.752352][ T6962] Call Trace: [ 549.752360][ T6962] [ 549.752367][ T6962] dump_stack_lvl+0xe8/0x150 [ 549.752387][ T6962] print_address_description+0x55/0x1e0 [ 549.752403][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 549.752421][ T6962] print_report+0x58/0x70 [ 549.752435][ T6962] kasan_report+0x117/0x150 [ 549.752451][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 549.752473][ T6962] __ethtool_get_link_ksettings+0x5e/0x170 [ 549.752493][ T6962] ib_get_eth_speed+0x180/0x7f0 [ 549.752516][ T6962] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 549.752542][ T6962] ? do_raw_spin_unlock+0xf5/0x210 [ 549.752570][ T6962] rxe_query_port+0x93/0x3d0 [ 549.752593][ T6962] ib_query_port+0x170/0x830 [ 549.752618][ T6962] smc_ib_port_event_work+0x15a/0x940 [ 549.752646][ T6962] ? process_scheduled_works+0xa70/0x1860 [ 549.752662][ T6962] ? process_scheduled_works+0xa70/0x1860 [ 549.752678][ T6962] process_scheduled_works+0xb5d/0x1860 [ 549.752708][ T6962] ? __pfx_process_scheduled_works+0x10/0x10 [ 549.752727][ T6962] ? assign_work+0x3d5/0x5e0 [ 549.752745][ T6962] worker_thread+0xa53/0xfc0 [ 549.752775][ T6962] kthread+0x389/0x470 [ 549.752795][ T6962] ? __pfx_worker_thread+0x10/0x10 [ 549.752811][ T6962] ? __pfx_kthread+0x10/0x10 [ 549.752831][ T6962] ret_from_fork+0x514/0xb70 [ 549.752850][ T6962] ? __pfx_ret_from_fork+0x10/0x10 [ 549.752866][ T6962] ? __switch_to+0xc79/0x1410 [ 549.752889][ T6962] ? __pfx_kthread+0x10/0x10 [ 549.752910][ T6962] ret_from_fork_asm+0x1a/0x30 [ 549.752936][ T6962] [ 549.752941][ T6962] [ 549.926331][ T6962] Allocated by task 5631: [ 549.930702][ T6962] kasan_save_track+0x3e/0x80 [ 549.935449][ T6962] __kasan_kmalloc+0x93/0xb0 [ 549.940078][ T6962] __kvmalloc_node_noprof+0x528/0x8a0 [ 549.945490][ T6962] alloc_netdev_mqs+0xa8/0x1210 [ 549.950365][ T6962] rtnl_create_link+0x31f/0xd70 [ 549.955239][ T6962] rtnl_newlink_create+0x277/0xb70 [ 549.960381][ T6962] rtnl_newlink+0x166a/0x1bb0 [ 549.965085][ T6962] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 549.970043][ T6962] netlink_rcv_skb+0x232/0x4b0 [ 549.974831][ T6962] netlink_unicast+0x75c/0x8e0 [ 549.979616][ T6962] netlink_sendmsg+0x813/0xb40 [ 549.984518][ T6962] __sys_sendto+0x672/0x710 [ 549.989049][ T6962] __x64_sys_sendto+0xde/0x100 [ 549.993917][ T6962] do_syscall_64+0x174/0x580 [ 549.998522][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.004430][ T6962] [ 550.006766][ T6962] Freed by task 134: [ 550.010668][ T6962] kasan_save_track+0x3e/0x80 [ 550.015363][ T6962] kasan_save_free_info+0x46/0x50 [ 550.020408][ T6962] __kasan_slab_free+0x5c/0x80 [ 550.025191][ T6962] kfree+0x1c5/0x640 [ 550.029109][ T6962] device_release+0xc4/0x1f0 [ 550.033726][ T6962] kobject_put+0x228/0x560 [ 550.038165][ T6962] netdev_run_todo+0xc75/0xde0 [ 550.042980][ T6962] default_device_exit_batch+0x967/0x9e0 [ 550.048637][ T6962] ops_undo_list+0x52b/0x940 [ 550.053249][ T6962] cleanup_net+0x56b/0x800 [ 550.057686][ T6962] process_scheduled_works+0xb5d/0x1860 [ 550.063249][ T6962] worker_thread+0xa53/0xfc0 [ 550.067851][ T6962] kthread+0x389/0x470 [ 550.071935][ T6962] ret_from_fork+0x514/0xb70 [ 550.076539][ T6962] ret_from_fork_asm+0x1a/0x30 [ 550.081327][ T6962] [ 550.083667][ T6962] The buggy address belongs to the object at ffff888079a02000 [ 550.083667][ T6962] which belongs to the cache kmalloc-cg-4k of size 4096 [ 550.097998][ T6962] The buggy address is located 752 bytes inside of [ 550.097998][ T6962] freed 4096-byte region [ffff888079a02000, ffff888079a03000) [ 550.111906][ T6962] [ 550.114246][ T6962] The buggy address belongs to the physical page: [ 550.120684][ T6962] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79a00 [ 550.129458][ T6962] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 550.137973][ T6962] memcg:ffff888076899041 [ 550.142231][ T6962] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 550.149795][ T6962] page_type: f5(slab) [ 550.153792][ T6962] raw: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 550.162409][ T6962] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff888076899041 [ 550.171013][ T6962] head: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 550.179705][ T6962] head: 0000000000000000 0000000800040004 00000000f5000000 ffff888076899041 [ 550.188404][ T6962] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 550.197093][ T6962] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 550.205773][ T6962] page dumped because: kasan: bad access detected [ 550.212209][ T6962] page_owner tracks the page as allocated [ 550.217950][ T6962] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5639, tgid 5639 (syz-executor), ts 87173920035, free_ts 65220951982 [ 550.241066][ T6962] post_alloc_hook+0x22d/0x280 [ 550.245861][ T6962] get_page_from_freelist+0x2593/0x2610 [ 550.251433][ T6962] __alloc_frozen_pages_noprof+0x18d/0x380 [ 550.257263][ T6962] allocate_slab+0x77/0x660 [ 550.261777][ T6962] refill_objects+0x339/0x3d0 [ 550.266464][ T6962] __pcs_replace_empty_main+0x321/0x720 [ 550.272072][ T6962] __kvmalloc_node_noprof+0x657/0x8a0 [ 550.277465][ T6962] alloc_netdev_mqs+0xa8/0x1210 [ 550.282333][ T6962] rtnl_create_link+0x31f/0xd70 [ 550.287212][ T6962] rtnl_newlink_create+0x277/0xb70 [ 550.292344][ T6962] rtnl_newlink+0x166a/0x1bb0 [ 550.297042][ T6962] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 550.301997][ T6962] netlink_rcv_skb+0x232/0x4b0 [ 550.306813][ T6962] netlink_unicast+0x75c/0x8e0 [ 550.311602][ T6962] netlink_sendmsg+0x813/0xb40 [ 550.316399][ T6962] __sys_sendto+0x672/0x710 [ 550.320942][ T6962] page last free pid 5480 tgid 5480 stack trace: [ 550.327282][ T6962] __free_frozen_pages+0xc1c/0xd30 [ 550.332429][ T6962] __slab_free+0x274/0x2c0 [ 550.336871][ T6962] qlist_free_all+0x99/0x100 [ 550.341479][ T6962] kasan_quarantine_reduce+0x148/0x160 [ 550.346956][ T6962] __kasan_slab_alloc+0x22/0x80 [ 550.351827][ T6962] kmem_cache_alloc_noprof+0x2bc/0x650 [ 550.357309][ T6962] do_getname+0x2e/0x250 [ 550.361568][ T6962] vfs_fstatat+0x45/0x170 [ 550.365912][ T6962] __x64_sys_newfstatat+0x151/0x200 [ 550.371127][ T6962] do_syscall_64+0x174/0x580 [ 550.375730][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.381648][ T6962] [ 550.383992][ T6962] Memory state around the buggy address: [ 550.389633][ T6962] ffff888079a02180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 550.397712][ T6962] ffff888079a02200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 550.405785][ T6962] >ffff888079a02280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 550.413854][ T6962] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 550.421578][ T6962] ffff888079a02300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 550.430098][ T6962] ffff888079a02380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 550.438178][ T6962] ================================================================== [ 550.495289][ T6962] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 550.502576][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: kworker/0:12 Not tainted syzkaller #0 PREEMPT(full) [ 550.512073][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 550.522164][ T6962] Workqueue: events smc_ib_port_event_work [ 550.528024][ T6962] Call Trace: [ 550.531331][ T6962] [ 550.534294][ T6962] vpanic+0x56c/0xa60 [ 550.538321][ T6962] ? __pfx_vpanic+0x10/0x10 [ 550.542955][ T6962] ? __pfx___schedule+0x10/0x10 [ 550.547853][ T6962] panic+0xc5/0xd0 [ 550.551607][ T6962] ? __pfx_panic+0x10/0x10 [ 550.556058][ T6962] ? preempt_schedule_common+0x82/0xd0 [ 550.561564][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 550.567587][ T6962] check_panic_on_warn+0x89/0xb0 [ 550.572559][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 550.578574][ T6962] end_report+0x73/0x170 [ 550.582847][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 550.588858][ T6962] kasan_report+0x128/0x150 [ 550.593383][ T6962] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 550.599390][ T6962] __ethtool_get_link_ksettings+0x5e/0x170 [ 550.605231][ T6962] ib_get_eth_speed+0x180/0x7f0 [ 550.610108][ T6962] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 550.615508][ T6962] ? do_raw_spin_unlock+0xf5/0x210 [ 550.620650][ T6962] rxe_query_port+0x93/0x3d0 [ 550.625263][ T6962] ib_query_port+0x170/0x830 [ 550.629879][ T6962] smc_ib_port_event_work+0x15a/0x940 [ 550.635284][ T6962] ? process_scheduled_works+0xa70/0x1860 [ 550.641022][ T6962] ? process_scheduled_works+0xa70/0x1860 [ 550.646849][ T6962] process_scheduled_works+0xb5d/0x1860 [ 550.652435][ T6962] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.658444][ T6962] ? assign_work+0x3d5/0x5e0 [ 550.663056][ T6962] worker_thread+0xa53/0xfc0 [ 550.667680][ T6962] kthread+0x389/0x470 [ 550.671773][ T6962] ? __pfx_worker_thread+0x10/0x10 [ 550.676896][ T6962] ? __pfx_kthread+0x10/0x10 [ 550.681509][ T6962] ret_from_fork+0x514/0xb70 [ 550.686115][ T6962] ? __pfx_ret_from_fork+0x10/0x10 [ 550.691244][ T6962] ? __switch_to+0xc79/0x1410 [ 550.695945][ T6962] ? __pfx_kthread+0x10/0x10 [ 550.700558][ T6962] ret_from_fork_asm+0x1a/0x30 [ 550.705369][ T6962] [ 550.709019][ T6962] Kernel Offset: disabled [ 550.713359][ T6962] Rebooting in 86400 seconds..