last executing test programs: 3.6275002s ago: executing program 2 (id=2498): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000700)="426f395e093e4310d7c901dbc1075973b462009b2d940bd370d8e32b83985b32928521774c54ce80c342669630983249dd5bbe2cf2fe072b296405a00dcf7af3d6680d1a9b356a3dab1e55fe6256219c888b8359c6e8454826d78020d2fdc09e9eb8afcb0e8bce5817c74c2e3f24ebb276dc0e8b59baa7fe3f0253962e088ec5ecb2ac8c9601f14ca2b669afcdccce0a1c526c43d01026cfcd4fd4fdf6a43bb873264d4541b77edbdd482c525c6f9e55585fbbfae1e29730438cdb18479c2c41b3145cc5d436407c687291701145a9621dd31d4b0c0e2eaeb2037c744df3b71e27117ebebadd7c93280d77dccfc257", 0xef}, {&(0x7f0000000800)="0a8fe7f09ce6336c9eefdf500eb03bff94aab5129ec93c77c53fa40be7091fadfce007e11ea87cd2931b5175987ad2906f67b5256c19e53a9ce8e552c84b383af5cc5c143baef54cc6b2e9584ba6a0ad232d4745011461217ebd96a8cfea1e38ba16081f902df6284fef", 0x6a}, {&(0x7f0000000880)="fcee542ae2d5ab2c2e116d8a2bf8b20a439be6b52e8c8550493b231982eb22d6107f6375c860ecf85f998fc6e4325db2076200278511eed581bf1a00e0bfb528d4d3615a455e8b51ffe039edc1515fe48ff17270558f9917407f32fac1ec2b0dae155296985213f7745d36d3b57957dc46dd60b3b7fbc3b72e224ae57b688c7dda9c51ef73dfae6d36b3ff9a4f", 0x8d}, {&(0x7f0000000940)="e30c2d7929a2aaa901146aceb83925c2bfc4a371adc7fe03b03c5a29249fd93f33714cd00bed65b9114e11f40dd70ffa5cc8e9eaf2b116755bce97af4a27295ef2b6bc9e2f21a33b217de2b77d1c744965833d316fb87501b08065001c8cff9c5f0fea15c0494d81ebf7911aba85af98115a", 0x72}, {&(0x7f00000009c0)="544c3068f6f80310f6dca0425feff05776e07e9d06f4990dc453e49dc9bd5d02825b05138ba2ba491a1e6cb36c3d8f68c6671721c49f30d3b3ad5188706f1ac2ba7c2b80a014186237e051b05f56bb212ea3d378d66159c0bf12fe8347a13e7fe05ef22e07cc603ae5d8de848a23def053f9123676b0cc01bd081cc8f88aed49b9ed0f59e48cfab34837979a2d0894c083057e3b8688fc90f37b22e6095a72bbe12085864a40bc2a28d77b1b1f809d52905e2f463c187371c0cb1af348ce11a5412ee122", 0xc4}], 0x5, &(0x7f0000000b40)=[{0x60, 0x10c, 0xfffffa53, "0cfc3edf478503347a590d9e37632ff4bf863f748df8cf8dcc1960545c341d1f55df6c9bafd85fa394cad3e817bd62bdd1bec66db9b7bf56389ea672f5ac3b8a1354858e5672d3cf56a57c"}, {0xb0, 0x116, 0x2, "1dd7be8ab916be09fb5f5254a3a166c50c618f6bd6adc77c7843425cc67c829770c12b8523e24ba922a8f0039b8fc5dd40058a3890cc5ad2e5e5608c5172ca559969fdcfca0430a72e52204f4c5cbce85de700eb3fdc4b59acc63d94ff5f70107ec8200ffe378e6fcf74e56db968700b6afb874df34cd4055f74734a4ef0d80b13597aaf0154f86105b84401a9553686906eb518f06688d28c7c0fcdecc8"}, {0x100, 0x115, 0x80000001, "91cf5b0d69205914a56e167927fa9a4c66b1c253b37d5e1c03b69f4bcdfdadf8ac0233519b403a93186304988f4743f4b9accf212430ae82308dfa65cf56caa9cdc0ca81a1aa48e9b51bcec444ead53b7de3810d2e71fe7849b80576478f20faf3a9f1215a092e432f176e8a615f6ee1a23ec6d4f67750b5242eb3730a5dfce2761594f2c858efda7013b3a01aac00f9782f083c2ff5e1af704bf7d8da7f6e50a557671e57c7ff52250a4333d00c696a6bc86f549a7768b2a6f46d1d4bf71148acb1f980ede3e3c97a630e10e38d47a499b9216bc1b6a97b971f4cdbc0ce340961ee5b52b597f9905f4627"}, {0xc8, 0x113, 0x8, "4da66cea79be493d49118bf4e4650b8241453ffb78524190671da32329698916fee0dc1a24a99c01248a8dc88897ccae25383f3d893ce98b8a28d6d0271d52d23993cbf247aa40b002b804c0d39f17ef35d5f0b112af7e45525c1c2a3fd8fa67d6a149ca7a432e0f50e6141ac5698441a9cb0c16801b346b0615606e81a1c0ae27228e978b4c8caab63fdb7d521625778b42239e3ceb1530db1bc24f2fcc534800f7964c65bfee2b2d018688cea2db0b869b5e92"}, {0xf0, 0x0, 0x8, "43743fdde28116102f06a38525af0bd030d4d1e4064d157a236db05fa7be8ecb4421baab7307c5142386b700e728d76a77fa27f5fa4676d66905323c4d20a6d4b688c5508561fec0077479892165dba36991a211a08c83b843268587d24971fc05632d2c913f7dcd6a47c627fd2185142f93651163f12cb11f831e104b737a66d49cf0465d278d389e8ff52e8c337d0d56b88c08ea29fa53c4d426507eef80a1d3ccf31375433de90e171de9a03deeec864d421bc0ea46b7e0f36b28aa9d4cc5dc191c02a0c5cfc2b5cbe93219ffc262a2d33d01e9bb3af19c24dbd3ee"}, {0x88, 0x10e, 0x3, "b198a1bb6cfb85e8831ab16efd91eaacb11b2904d900687e6a09dcd14c0afee41697e0f75e9cb2f279ce64cf480b25b02e7fb96803f40752499704cb4834bb72442d96770d5b8935a35f37e9129b4d77d8c8c3a06301e1a00772b3291dd7a9b7c1cd42dfb2aa9ec5fe3bd5df8c50d7870904"}, {0x1010, 0x118, 0xffec, "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"}, {0x30, 0x117, 0x2, "98b5c15a19fb3a7837a58350fcf8dd1e96b7caa16c7675fb6138fc4aa2fd"}], 0x1490}, 0x40011) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r3}) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6f390000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30000000000800014000000001"], 0xd4}}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x338, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcfc2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd5, 0x3, "ad279d6388e1c5b931cff4f02719e64be26331f0c1d5f06488bf1e55cf9bd1692a66ba5ec0b0e1ecf26235c81b8931b252d31cdc55ebb21c2ed4276d47ff500a4034258ef2fa2ad18fc31c60f4f397d5acebe9e7d6fbff2210245341fe0efcb735558b7b07485e906dd5a87d87aece8e358fed2cee1ae4cfed83538503242e4ed60e09fec88389de6274662c37f13f58443398ebab6a50483eddc42bef7006255ce5e6d78fe28617de11b42d86ba14be0f298ce6fe6fb435106c355d6476ccc5838401b804a8d88d8f52e3d9cc4e9222de"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2eb5ac9710dff7a5bb5e21c8c2cd5ae3d68fe42232"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x205b}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ff58f71005da3f5f19307886f18a177b46c4ef9ab402befdcbc1ff0d9b93fd12f7"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0xe4d0}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @loopback, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x100, @empty, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x338}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 3.380704336s ago: executing program 4 (id=2502): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xf, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0xd, 0x1}, {0x6, 0x2}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x7, [{0x10, 0xa56, 0x401}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x0, 0x61, 0x2e, 0x30, 0x30]}}, &(0x7f0000000900)=""/251, 0x87, 0xfb, 0x1, 0x400040}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7ed6, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1f, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x2a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000feffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70000000800000085000000a50000009500000100000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) r4 = socket(0x10, 0x3, 0x9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x7, 0x20}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112140000d4d1e94400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x90) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={r9, 0x1, 0x1, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000780)={r9, 0x1, 0x6, @remote}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x14, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) write(r5, &(0x7f0000000040)="05004000010000", 0x7) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0xfffffebb}, 0x10}, {&(0x7f0000000400)=ANY=[@ANYBLOB="10000000f30700"/16], 0x10}], 0x2}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f0000000580)=0x7, 0x4) 3.372312383s ago: executing program 2 (id=2503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000200)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local}, 0x6e6bba, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000200)=@getpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, @in=@local}, 0x6e6bba, 0x2}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x5c}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) (async) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @multicast1}, &(0x7f0000000180)=0xc) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @mcast1, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x37, {0x2f}}}], 0x18}, 0x200000c4) 3.101942653s ago: executing program 4 (id=2506): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x10, 0x0}, 0x3c) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_delroute={0x30, 0x19, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}}, 0x0) 2.976630905s ago: executing program 0 (id=2508): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0)=0x7f00, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES16, @ANYRES64=r2], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) accept4(r1, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80, 0x80800) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="f0090000", @ANYRES16=r3, @ANYBLOB="080029bd7000fcdbdf258900000008000300", @ANYRES32=0x0, @ANYBLOB="80091d80c0010080bc010d80e80002801400050008000000ff070200010081008cb99d070500070001000000330002000128583c394e3d380c5508383f0527462a461f441a2842151b060e561956543f4232190b0f43294741251e1d402119001f000100480b0c041b161604031b6c36091b030b01180e0b2e0909241b760000200001000c300130066c6c010236091b6c003603601609ef301806000c16030614000300ff7fffff0700020000100100ca000800050007000100000014000300ff7fff0793bfff000400020008000000210002003f3d511b230e384929231a50300000251c053e1b434c2e0614354e3e500000003c00008014000500400004000004080003002c7e7500ff0f0500070001000000050006000000000014000500060008006200c581040003000000ff0f38000080320002002d324a5648222c2e09562142314e1a3b08400124294f22203f0936083e28381016180d4d00401b180704403a030e00001c00008015000200032a134a4f2c51502c3a29461f0240090d000000280001802100020000144b463f2f3047333141150e4a230f421810172c380f444a28502ab800000018000180130001003618780136021b301605180b0560160014000080050009000100000005000a0001000000080200800c000300060000000000000005000b000000000004000d800500070043000000e4010d801c000280040001001400050008000200030003000500030004000600700002804b00020041034d232b41571c4b2721554c18421940112e285049113dde0854301f3a17140702532a084c2e2550520e05270b2f3c154f0d4f474d081018392104214f1b462210560f071742000b0002005002374f50082500120002003d541829054e162f0e250525333000005c000280240001000b6c024d0b0c051b6c0b0409246c0c16600c1609011803160318180b1648010b160001004830123006044801130b0b48096409160b1800000500040001000000140003000600c40000ff050000010500356f0101f8000080050007000000000014000500db030200000008000c00010005000000140005000000100003001b000b000101060000001300010009040f1b090b1b01121b6c24360f2400210002004d323d30285135311d1c305716562a055749452e213301443909083c2e000000050007000100000014000300020003000300020001800600090001fc14000300df006105410306000900ff0707000800510002005449080e244d022042030916214e4640312009062e113e303c5736023434003b3e171c4b4d0534431e2a4f1648424a0e4d86004d172e481d510251570e54074521231b4114413417501f194a3a0000000500040001000000d404008005000700f500000005000b000100000005000a0001000000c4010d8030000180140003000800050089686db80000000014fd09000500040002000000050007000200000005000600000000000400038084000080050006000100000005000400010000001a000200253519195749273f35031b013b00310c4b2b011a090a000014000300f3fffbff0002000000000300050004000f0001004b186006030224030112030005000600020000001400030009000700fdff00f20d0059920080060009000100060c060104000000070001001b026c00580003802000010004020324091802037f30240c1618060312030c0c1b01011b05603006220002002b2641414f184e334d4f0334384e51010232041d2f554849571050261a48000005000400010000000500070001000000280000800500040000000000140005000100060005000400400040000200050005000700000000008800028005000400010000001600010036182436000236030b360b0c2401181b0930000011000100160209040324f90b1805166c0100000005000400000000000d0001000b0103056c4148060d00000014000300080059d281ff44bf03000900060002000500070002000000120002004106203243123f0b032510290d1f00000500040001000000060005005000000005000700a3000000e4020d80d80002800e0001003c6c240505481b0b160c0000140003000500020000040e0000000900010006000500070002000000140003000800070005000600030004000100000017000100c2600212050c36023212061b6c043600186c03001400030000000300070000000800ff03ffff050005000700000000004a0002003b06041c2a1e343148462921372852102e251e193e1d182913442219091a5439424f04080c32231319303020385519063a2d0f4e1b4f441a3337041b460600401304064b062f000014000500040009009700270201040100000103000c00008007000100304708000c00018005000400000000004c00038005000400010000000500040000000000220002004228401b193c292d443704055709070d234834153d062c0d56563b48314e000014000300ff07ff0f01000700010002005100d900d40003801c00010001481201242430010c050c09241b48240516402436166016160001000b0c040b16180560481602240648180c3016000050000200103f4f332717352a404d102f0450084d51224b2d15390216310f4710273000382455291900252007363e00293440570b043f40541644185239532f201e1d3c4c4d4f094c30394423044c154d1400030003000200c9080101fdff0900060005000500040000000000050007000000000014000300030068f00800fa73d98f07004000ff01140005b1000200010300050104000900a5000004d00003803c00020040382cac00282305190928244e3c1e302950150a20375132320130183b0a144c2148344c393708261a403c4c5129003020562157196c0e511a0002002a2e18272d42012d3d37384212081d1854461109025500000c00010030040536360330300500060000000000050006000200000005000600020000000500070002000000480002000217294f1302114501453d063619103d2055404602412e14402c3946172652002b41500e2a315632013b1a292d234021374d0b47213f2c0731431f014d4b0a073a0818172c00008005000c000100000005000b000000000005000a0001000000060005002d00000005000700cb0000009000008005000a000100000005000800970000000c000300020000000000000068000d8064000280050004000200000014000300ff7fffff0180000007003700f9ff0000050004000000000014000300060001000b00fcff030006000400ff7f2000010005010c486012360460360405360c091624000b16090b240236000912050007000200000005000900010000001000008005000800fc0000000400040044001d800c00008005000a0000000000340000800400040005000c00000000000400040005000b000000000005000800250000000500090000000000050006000100000010001d800c00008005000b0000000000"], 0x9f0}, 0x1, 0x0, 0x0, 0x2004000}, 0x80) 2.97599789s ago: executing program 2 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x80000, @loopback, 0x3}, 0x1c) shutdown(r1, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x5c, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x22, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x22, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "301ce602000079dea6b6f056d75cddf97abb"}}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x84, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x38, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x1}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_BACKUP_PORT={0x8}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0) 2.88942016s ago: executing program 0 (id=2511): r0 = socket$kcm(0x29, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffb}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x87}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0xff78}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x33c8438d}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff3}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x140}}, 0x4000) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000280)={0x1, 'pimreg1\x00', 0x2}, 0x18) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x39, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) (async, rerun: 32) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) (rerun: 32) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000740)={'raw\x00', 0xd6, "4c12cd39f9ceb5003efa63309c86d842fb839bcbb5db88b38fcef0a2fd099911165ae830279be94e7da9e7c99b62812609d021c62f33d7a61069ca35d48eff92592985eb4dcbabaf874bc50d96bda47285fd98d0008a304349b5358764af461b494382276349766ca4bb744c0463ef00850d6f5c8759107d03d7feadbb9897766dda2c561cb2d3ac157fac53cbe370af1389fb647813226047c8c256707b50374d388232e53ed917f856fd2228c0d6a0c94da993e21a708414c5b60641c940687b9f8e6d320e5ce7c2593dd70ee39b14446ad86f1965"}, &(0x7f0000000840)=0xfa) (async, rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0x0, [0x9, 0x9, 0x3]}, &(0x7f0000000900)=0x44) (async, rerun: 32) r7 = socket(0x16, 0x80000, 0x7) (rerun: 32) sendmsg$can_j1939(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x1d, r4, 0x2, {0x0, 0x1}, 0x1}, 0x18, &(0x7f0000000a80)={&(0x7f0000000980)="0012ba4d4e0381366be02f608918ec6ae8fa9db8a87e30437973be702f262a8f86e07b6055461a3f4910d22fa5b86aaf2416e936759af051fc5a04242a22414215512a49684978b56ea1f1366cc811d74eb26f4b4f7d0757e9a4c8d517ce1c254bcaa5f8be3d1462292903df3c5b4bf4164af9272d064debc60f09f97d84e865484fcf2cca6a88fffe23fc6848a494097f7084476a48b41b031a42fba78c39ce33480d7e12463877af6bb76d64877813e7e76b7ed527491eeada4fdccbda003cee2c9cb3c6c6261e654936081cc6cd8ac4d7602009c363b7a2a03f5af05bd79fce5e74d124225fee5c37212056130f9b14b547563b3e79e837416edd29", 0xfd}, 0x1, 0x0, 0x0, 0x24004080}, 0x24044081) (async, rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r1) (rerun: 32) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x44041}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) sendmsg$NL80211_CMD_GET_REG(r9, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r10, 0x300, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x80) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000dc0)={@loopback, @dev={0xac, 0x14, 0x14, 0x35}, r4}, 0xc) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r7) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r11, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000002140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40006800}, 0xc, &(0x7f0000002100)={&(0x7f0000000fc0)={0x111c, r10, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffff7fff}, @NL80211_ATTR_VENDOR_DATA={0xe3, 0xc5, "3ba82e344006f061110c1cf60c49dc28e87fcc3683557119e7acbff90be94465fd7e3e863d5cca433410c9cf4b97a8f3ded3af72a785267bbaf8e71e5903587690204e31b2987be77bf6c46569ccaf0ff643250b64fd59c615b31dfe8107bdbe8864e03635de9b91cab99d459862146d6c54001a3a8dbfe8e33f52609854a25f90c48e06e079b7caddee605c965e29fce1583ed3771c5d550c59c6b874f4b07f65da411f8482d37a45173d9e4ec238a2ed6646690d97b2166f4cc856e678a95248406b6034c635cf1a537e97d3e13d611100dcc8ef352220866ccd9976e26f"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5171}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6}]}, 0x111c}, 0x1, 0x0, 0x0, 0x4884}, 0x404c000) sendmsg$BATADV_CMD_GET_HARDIF(r7, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x302000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x64, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x8050) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f00000022c0)={0x1, 'veth1_to_bond\x00', 0x4}, 0x18) (async) r13 = socket$inet6(0xa, 0x80000, 0xa9c) (async, rerun: 32) r14 = getuid() (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@remote, 0x4e22, 0x0, 0x4e23, 0x5, 0x2, 0x20, 0x0, 0x4, r4, r14}, {0x3, 0x9, 0xf, 0x6, 0x80000000, 0x7ff, 0xfd48, 0x8000000000000001}, {0x5524, 0x6, 0xfffffffffffffff7, 0x5}, 0x885, 0x6e6bbf, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x34ff, 0x4, 0x1, 0x3, 0xfffffff8, 0x3bd2bbaa, 0xffffffff}}, 0xe8) 2.819353213s ago: executing program 4 (id=2513): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x4000005, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x1000, 0x4000005, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffb6, &(0x7f0000000380)={0x0}}, 0xc040) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffb6, &(0x7f0000000380)={0x0}}, 0xc040) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="ffffffffff05bcbbbbbbbbbb8100100086dd624bc7fb001021000000000000000000000000000000000000000000000000000000ffff000000004e204e22043190782cc8fd14070ebb69786267d4984af9b37a3a59d6b1892016c83ce41fa9febd6ebe3f89004e989d69e2a129bef2e94584aea7989398c4db7649668fdfbc1ca6bbef57c83b8b72c7b2bac981f198de6a04174b8cc5145b12ce95cf48d43681792721f9476d8f27052a4307f8ff196a3da03a090c9bda4fcb65da68d87f5667482bb198ab08f68ab2c58a22f7925a3de33de872db376c37f364120716d011a92f91a3ccef3b0ad6f33671dfe6b9241d2debbaae9121435559ffcd4e069bd18f949f6fb16ca365cfec4801fffb040bd70e65efc9e782f77e246fe6ad903a0f1b3c78e699323d8a0bbce6e925b1b308f2d33a690f60c43bafdb3a8af00d51e523295742916a6f9f76d91b4a81a33cfc04f8e7d8cb96a1bedc19515a796966"], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000140001000000000000000000021f0454", @ANYRES32=r7, @ANYBLOB="08000200ac1414"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0x10}, {0x2}}, [@TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x6, 0x3, 0x1, 0xffff7ee2, 0xfff, 0xfffffffffffffdf3}}, {0x16, 0x2, [0x2, 0xe562, 0x9, 0x6, 0x2, 0x4, 0x5ed3, 0x1000, 0x6]}}, {{0x1c, 0x1, {0x24, 0x9, 0x1, 0x8000, 0x1, 0x3, 0x10000, 0x5}}, {0xffea, 0x2, [0x6, 0x4, 0x0, 0x6, 0x480]}}, {{0x1c, 0x1, {0x81, 0xfc, 0x92, 0x5, 0x0, 0x7f, 0x8, 0x2}}, {0x8, 0x2, [0x800, 0x1fff]}}, {{0x1c, 0x1, {0x9, 0x6, 0xed2, 0x100, 0x1, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x8, 0x2, 0x8000, 0x60000000, 0x2, 0x8, 0xfffffffc, 0x2}}, {0x8, 0x2, [0x8, 0x8001]}}, {{0x1c, 0x1, {0xec, 0x6, 0x8, 0x4, 0x1, 0xff, 0x8, 0x2}}, {0x8, 0x2, [0xae, 0x5]}}, {{0x1c, 0x1, {0x7, 0x8, 0x3, 0x6, 0x2, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0x6, 0x0, 0x9, 0xe]}}, {{0x1c, 0x1, {0x1, 0x9, 0x5, 0x8, 0x1, 0x7ffffff6, 0x8, 0x3}}, {0xa, 0x2, [0x1, 0x1, 0x6]}}]}]}, 0x164}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r9, 0x34de5000) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000700)=@x25, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000800)="2828eb12ca22bbc6f2695df2cd9b0afb76a84f5d4fd1c8ef7a118339dbe01c79e45e421e81f39aa6866bad0d3094a04f3e5b1cbf05f189ae362f5ace91cb61634857e0d369848dac681df8f52021b18bac1fc6de6cd13a9bd302e6b1f3d81548cb4de76a486dd64750559bec71e4fb3b4f1692f1", 0x74}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f00000002c0)="7004f1561bff080bc9027376cec036b1c7ea589dce93", 0x16}, {&(0x7f0000001880)="d6f8008f163dfa87bfa32dd056bc2506aa0466daea29a1a4a8a7a0b76b53887266197ca2087d5361cd9b060000002e8404130f2d05a7477bc94e26d364dcdef48e20a62a5e1882c5def57e7297", 0x4d}, {&(0x7f00000019c0)="75b07f9f13c9da08c259c8cf653754900da21571086df19059d2b015ac592a4c9b4b224414ca19ae2337c865fd9b338178833ae97a991a429365b6611912dc011e57aa0000d28319ad9e6fdc29e884a3d915854f8f06e8d09cdd33dd07042f2fcf353affc160d481510efdc7c0c7844d9b3acef9e6a6bbc38eb240c4a44222fd", 0x80}], 0x100000ba, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x158}, 0x4000084) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000020a010100000000000000000500000108000240000000010900010073797a310000000054000000000a05000000000000000000050000080900010073797a300000000031000600d18e65a2eb356862b60316dc4c5c9bff05ee8171bb25a74d2f8f78a1024ac42b04b0cdfc3ab4bf48b9b0ed1e5f000000140000001100010000000000002000000200000a693f0abf5010cbc69e65fd59ee102156d6fdf8fbf20919ae5b7e5e71f9dc75bc3cbbec5995940ca46d948e1a42c65a269bceb10cf8a14535b8faa01d89dccb433de6a4b2eb52924b5f9fffbac787"], 0xa4}, 0x1, 0x0, 0x0, 0x20040044}, 0xc001) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200183afffe9d00000000000000000000000000feffffffffffffff0000000000000000018800907803000000ff0100000052f54d68ad31111c000001"], 0x0) 2.665879017s ago: executing program 3 (id=2514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$x25(r1, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r3, &(0x7f0000000340)="fcbb15a3059da8817d1c36fc0529e857f31c65df7adcb7363e9c817a8f6bf5a34822055721e6373c37f80bdaa7b92b73eb7acdbed7004b02081addaa2925b95a4c7fe77683d55fab766bf75ece52", 0x4e, 0x4000004, &(0x7f00000004c0)=@llc={0x1a, 0x336, 0x6, 0x81, 0x7, 0x8, @broadcast}, 0x80) (async) r4 = accept4(r3, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000080)=0x80, 0x0) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4040) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=@tcp6}, 0x98) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40081) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x30, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) r9 = getuid() sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)={0x150, 0x11, 0x509, 0x70bd28, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @nested={0xb2, 0xb, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x10}}, @typed={0x6, 0x13a, 0x0, 0x0, @str='\x05\x00'}, @typed={0x8, 0x137, 0x0, 0x0, @uid=r9}, @nested={0xc, 0xdc, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="3b8fab25134447c14d8ed21c8b6d749bf166f0b710ce91bf1b02ee1820bff4614cd9066213fc412d1f703fefade450eafe5ac421ca0007a0dc8d4e49a57097556efb639885086e7f5caeed8a97b2821d063412e8f041735434df9c1ffed336734dfc880c4c88c0663f5aae85a5dc5231606ba2044004"]}]}, 0x150}], 0x1}, 0x0) 2.607879329s ago: executing program 0 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/48, 0x30}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.514706536s ago: executing program 2 (id=2517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc1400000b4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.424983279s ago: executing program 4 (id=2518): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x600801, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0xdf47f90e76787471, 'net_prio'}]}, 0xa) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@broadcast, @random="6a00084fa53b", @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "1bf859", 0x0, 0x11, 0x0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x3c, 0x0, 0x1, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0x3b, 0x0, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, @mcast1, @mcast1, @mcast2, @mcast2]}, @fragment={0xff, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}, @srh={0x1, 0x0, 0x4, 0x0, 0x9, 0x50, 0xe15b, [@ipv4={'\x00', '\xff\xff', @local}, @private0, @ipv4={'\x00', '\xff\xff', @remote}, @remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @srh={0x6c, 0x0, 0x4, 0x0, 0x4, 0x50, 0x4, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev={0xfe, 0x80, '\x00', 0x39}]}], {0x4e20, 0x4e21, 0x0, 0x0, @opaque="dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"}}}}}}, 0x0) 2.356652433s ago: executing program 3 (id=2519): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x2a, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r2, 0x24, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x0, 0x0) 2.240361349s ago: executing program 3 (id=2520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x140, &(0x7f0000002e80)) (async) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003a971f12e3a0000000000000001000000024000007f0000010204"], 0x110) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002401886c30128000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x700}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x7b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffa}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 2.212031605s ago: executing program 0 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xd7, "97df1b01a4aadbd1fca66eb13e41bb1635b4f48fb8b41c006ccfa6e2120ced1ffb96ec49ccc95b6342ea22f8d8c479725de023854dd20535d07c1a918f68c34ce68a6b4aaaadc53865b1269c91aa5ab3b7e6321bd3dd5e0263106fa0f150f771dab10f9ec61cfcd13783e435606971a64cf78bdcefaadd53982bc39e670e11c518ade48ed728986535050db45f5765228ee049b5a1bdeeeb27ee6ffcce707c8dde4e957ac32aa720822d37f65336947e168d99007f310879fa4dce3eb292f7cec9d7bd3e208037250babc7ba921adfac5057e80ef7971e"}, &(0x7f0000000140)=0xdf) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x7cf5}, &(0x7f00000001c0)=0x8) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x11, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002e00)=[{{&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/102, 0x66}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000500)=""/32, 0x20}, {&(0x7f0000000680)=""/118, 0x76}], 0x8, &(0x7f0000001840)=""/201, 0xc9}, 0x7}, {{&(0x7f0000001940)=@rc, 0x80, &(0x7f0000002cc0)=[{&(0x7f00000019c0)=""/178, 0xb2}, {&(0x7f0000000540)}, {&(0x7f0000001a80)=""/187, 0xbb}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/184, 0xb8}, {&(0x7f0000002c00)=""/166, 0xa6}], 0x6, &(0x7f0000002d40)=""/140, 0x8c}, 0x2000000}], 0x2, 0x80000020, &(0x7f0000000700)={0x0, 0x3938700}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r5], 0x50}, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000002e80)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x4, 0x7, 0xb, 0x7ff00000, 0x7a071b9d, 0x8}, {0x4, 0xfffffffd, 0x8, 0x2, 0x4, 0x6d5f00}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet6_udp(0xa, 0x2, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.164673688s ago: executing program 1 (id=2522): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x240, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1ac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x94, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x104, 0x1, [@m_ctinfo={0x100, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9fb, 0x1, 0x5, 0xd, 0x7fffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffff}]}, {0xb1, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x11, 0x1, r1, 0x1, 0xe0}, 0x14) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2.042545882s ago: executing program 3 (id=2523): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={0x0, 0xfd0, 0x1fe0000, 0x1}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000001000390429bd7000fbdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0198f9ffffff0000180012800b000100697036677265000008000280040012"], 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r5, &(0x7f0000000640)="e8b77052a9", 0x5, 0x40, &(0x7f0000000200)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000390400000000ff7f0000000000b2702ed46df1be3500", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000001"], 0x5c}}, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000840)={r3, 0x3dd4, 0x4800}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (rerun: 32) 2.024241041s ago: executing program 2 (id=2524): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x24, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000}, [@IFLA_PROP_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.955429521s ago: executing program 1 (id=2525): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54dd5e54}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) 1.889467631s ago: executing program 1 (id=2526): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500000003"], 0x48}}, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'gre0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) 1.846085614s ago: executing program 3 (id=2527): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r3, 0xdac7a804b810efff}, 0x14}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61e3, 0x0) 1.7764195s ago: executing program 1 (id=2528): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x5, 0x20, 0x0, 0xdde}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x84) r3 = socket(0x26, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xe, &(0x7f0000000180), 0x4) ppoll(&(0x7f0000001100)=[{r4, 0x7202}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_opts(r7, 0x29, 0x39, 0x0, &(0x7f00000010c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000005000100000000000500070019000000050011007f0000000c0009000200aaaaaaaaaaaa06000a00ffff00000c0009"], 0x4c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000119078000000000000000000004e20000890136c1778"], 0x0) 1.571660278s ago: executing program 1 (id=2529): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000010) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002800500030004000000140007000000000000000000000000000000000108000a00", @ANYRES32=r3, @ANYBLOB="80fd0f70f8cad672800f744ea8f5aba5ef1e66daec1f2e20bbfc2e02f47ab1167479f2007711a7d76312e58b87bd63ed9188fb637c2d8598f7393da3a08b3896b3aacc0a0e359441a17573192d4e82089b4ddc23844a8f8a515b93ea1cfd62790acbe872f99802d224c1c3fb5dcbf05905ad1c"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 831.193853ms ago: executing program 3 (id=2530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2080, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f0000000080)=0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) write$cgroup_int(r0, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x5}) 192.649528ms ago: executing program 4 (id=2531): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x40}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) 165.86306ms ago: executing program 2 (id=2532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x36) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) close(0x3) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000001c0)="1800000016005f0227ffffff95127032046dd136f00fffff", 0x18) 145.082527ms ago: executing program 0 (id=2533): r0 = socket(0x10, 0x803, 0xfffffffc) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0xff, r2}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7, 0x6, 0x9}}]}, 0x40}}, 0x0) socket(0x10, 0x803, 0xfffffffc) (async) socket(0x200000100000011, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0xff, r2}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7, 0x6, 0x9}}]}, 0x40}}, 0x0) (async) 20.334611ms ago: executing program 1 (id=2534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xe2e8, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="25ffff1bb7b6"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a99decc45b04"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4cda45f8476c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x8faa291436b40f26}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x69}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2f0, r5, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x63}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ef006e92c92d4f09465da3ed559dc68498888f588cbc00d9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1a8dc05324661b50c73135a2cce4e70a0a209c93d4ce6bee"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "027e471d63624a9ab8c78a353ea597069cff55fe29615623"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1082af6b96e6d22b0e5e2ca2c8a679b5abdb81f08da5bd64"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bad7e4235d20369d04fff3a5b5e413d1dd0c5d664a6d42cb"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eee99cd944506f4d3acfc2c584b43f4527d547d8543d83ae"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c00cd997c8da692022b7e2c7efc6b4a14236c5dda77bc41e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6e1aea150825f1fd9ee5d8c269b4cf9246293f68025c8c61"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "743f516843562abe8eca6c125e9663c14dd22710a23266e0"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4a86daf31710052759f14cb8ed3e99908eb7854a02c3696"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "73b0df927040deefaaa30fe23c9d6261bc1e3766b848b696"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "27fa6ac41f98918fc24d8ffa38b45e07176cf3effca60284"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b00)={&(0x7f0000000800)="8e1feac274d80cfa0b2be31a4673cea9fb90bdf89713dc396b0b6b3e11dfa2f698ae38c75cb1f2651046f74e31918adb34e4", &(0x7f0000000840)=""/106, &(0x7f00000008c0)="aca90129e9921522847bb7ec067e657993dcefc0a4a75676e90fd7f459aa65490c439ebe43be7e7e671fb187c44fd7f2542544b0366f0054f3a2b41a7da964b0bb8648fb7eb58786ae8301238099450465e8d340d700569c975d87633ea26fe2cd5500cc1a0504c2d303", &(0x7f0000000940)="51d39290e462f63dc18d0ca8ef88ec9017c31fca44ab191c820158ff1fcaa56e7edca5ec9cc8f8c8f7a7f59973db10d27fa799d3b60aa94b9055b910cc3dab179a4e22e5f8628ed2b621d4ec4f1d41b6e52e8cbdc1bf837734914b6faee5c2383cd4e4bd6ecc084e9ae065196bda4d6be8cf858b53d6755f361918386896022c85d02f9eb3b0db0bb5a711f8d7151b88688a892eeab01770e97351cafa9902f2a0cbce12276e1f1d63af3ea1f67b3811e36881ac05059adbaab30a9431b0eedfc06efba21e414343628de1448ba6f9930985", 0x9, r7}, 0x38) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket(0x5, 0x6, 0x4) setsockopt$inet6_tcp_int(r8, 0x6, 0x5, &(0x7f0000000b40), 0x4) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000b80)={0x0, 0x10001}, 0x8) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000bc0)=0x5, 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r7, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000cc0)=r9}, 0x20) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xff, 0x4, 0x1, 0x6, 0xffffffff}, @alu={0x4, 0x1, 0x1, 0x3, 0x8, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x60}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9980}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='GPL\x00', 0x2, 0x1000, &(0x7f0000000ec0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x16fdc, r9, 0x2, &(0x7f0000001f00)=[r7, r7, r10, r9], &(0x7f0000001f40)=[{0x4, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x1, 0x4}], 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003180)={r11, 0x0, 0x1000, 0x5c, &(0x7f0000002040)="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", &(0x7f0000003040)=""/92, 0x8, 0x0, 0x71, 0x2b, &(0x7f00000030c0)="5aa82438ddd7b53bafe08137df644a560b38911eadf1494149fdd3350a5d3d8c22c398be4c79a092caedef409cca22d0eb2f5bb2f51e7a334ad87df31c2f7e22365ba57d4f831ff702cb8c7047cc58ffd6ed68e270dd8362e129312f75ed966ce191eb1a558b1dbd05d949084e691ba71e", &(0x7f0000003140)="c7b5ddf3debabfbc066e1aaee67dc4079a0ff28e9b40dc70b56306872f6e46ab5421126e18eb939690514c", 0x0, 0x0, 0xffff}, 0x50) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003240), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x30, r12, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x80, 0x2}, {0x8, 0x1}, {0x80, 0x3}, {0xff}, {0x3, 0x2}, {0x1, 0x7}, {0x8, 0x2}, {0x2, 0x4}], "c99a23e97c94d4da"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004040) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000003340)={0x9, 0x8, 0x3}) bind$rds(r8, &(0x7f0000003380)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000003600)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003400)={0x188, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5d51f8e62ecc854b5db930ff9d7a2d6670a6573d9ddf38a1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dd70a4fef3e9bad1509fde7bef141517e05da55ea7c4fe9c"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d490ebc49d78cd368a0606d9416f7b0fdfd0f7e9fa6c41d1"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d87212291a4031604c2e5eb97e44b5432da55be4ca6e59e0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c02634bf318161ee2d6302531d5281f9d44c37468e379c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x188}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003d40)={0x1e, 0x27, &(0x7f00000036c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd7cf}, {}, {}, [@exit, @printk={@u}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000003800)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000003980)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r9, 0x6, 0x0, &(0x7f0000003cc0)=[{0x5, 0x5, 0xd, 0x2}, {0x0, 0x2, 0xc}, {0x0, 0x1, 0x5, 0x2}, {0x2, 0x4, 0x6, 0xa}, {0x0, 0x1, 0x7, 0xc}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0x1614}, 0x94) 20.087657ms ago: executing program 0 (id=2535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x604ab000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x81, 0x1, 0x10}}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40) 0s ago: executing program 4 (id=2536): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x4c044}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): 'syz.4.270': attribute type 2 has an invalid length. [ 117.197557][ T6975] netlink: 76 bytes leftover after parsing attributes in process `syz.4.270'. [ 117.362050][ T6983] netlink: zone id is out of range [ 117.381349][ T6983] netlink: zone id is out of range [ 117.402378][ T6983] netlink: zone id is out of range [ 117.408420][ T6983] netlink: zone id is out of range [ 117.421683][ T6983] netlink: zone id is out of range [ 117.427416][ T6983] netlink: zone id is out of range [ 117.434489][ T6983] netlink: zone id is out of range [ 117.440308][ T6983] netlink: zone id is out of range [ 117.446007][ T6983] netlink: zone id is out of range [ 117.776958][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 117.956596][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 118.017470][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.281'. [ 118.256342][ T7030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.285'. [ 118.468101][ T7039] netlink: 'syz.3.289': attribute type 11 has an invalid length. [ 118.508474][ T7039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.289'. [ 118.534811][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 118.642234][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 118.656288][ T7042] netlink: 'syz.1.290': attribute type 7 has an invalid length. [ 118.664777][ T7042] netlink: 'syz.1.290': attribute type 8 has an invalid length. [ 118.690961][ T7050] tipc: Cannot configure node identity twice [ 119.144169][ T7071] tipc: Enabled bearer , priority 0 [ 119.173709][ T7075] syzkaller0: entered promiscuous mode [ 119.190937][ T7075] syzkaller0: entered allmulticast mode [ 119.276344][ T7075] tipc: Resetting bearer [ 119.292338][ T7080] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 119.295312][ T6341] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.315339][ T6341] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.325957][ T7069] tipc: Resetting bearer [ 119.360964][ T7069] tipc: Disabling bearer [ 119.432594][ T6341] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.462664][ T6341] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.485136][ T7080] sch_tbf: burst 127 is lower than device dummy0 mtu (1514) ! [ 120.164416][ T7126] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 120.421808][ T7137] netlink: 'syz.1.318': attribute type 9 has an invalid length. [ 120.594704][ T7143] syzkaller1: entered promiscuous mode [ 120.606989][ T7143] syzkaller1: entered allmulticast mode [ 120.752713][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 120.759256][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.767206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.775127][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.783125][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.791122][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.799130][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.806988][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.815005][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.822910][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.830916][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.838803][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.846828][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.854712][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.862716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.870610][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.878553][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.886467][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.894451][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.902372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 120.910363][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 120.918214][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.050144][ T7154] pim6reg: entered allmulticast mode [ 121.057501][ T7157] pim6reg: left allmulticast mode [ 121.127410][ T7159] tipc: Enabling of bearer rejected, failed to enable media [ 121.130523][ T7166] netlink: 'syz.0.325': attribute type 1 has an invalid length. [ 121.391157][ T7166] bond1: entered promiscuous mode [ 121.396857][ T7166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.661633][ T7184] netlink: 'syz.1.332': attribute type 21 has an invalid length. [ 122.147411][ T7216] net_ratelimit: 395 callbacks suppressed [ 122.147434][ T7216] netlink: zone id is out of range [ 122.178672][ T7216] netlink: zone id is out of range [ 122.222818][ T7216] netlink: zone id is out of range [ 122.228044][ T7216] netlink: zone id is out of range [ 122.276425][ T7220] 8021q: VLANs not supported on sit0 [ 122.282099][ T7216] netlink: zone id is out of range [ 122.290709][ T7216] netlink: zone id is out of range [ 122.295877][ T7216] netlink: zone id is out of range [ 122.318539][ T7216] netlink: del zone limit has 4 unknown bytes [ 122.348277][ T7221] 8021q: VLANs not supported on sit0 [ 122.448654][ T7228] netlink: 'syz.2.344': attribute type 9 has an invalid length. [ 122.469217][ T7228] __nla_validate_parse: 13 callbacks suppressed [ 122.469236][ T7228] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.344'. [ 122.623384][ T7237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.348'. [ 122.816642][ T7246] trusted_key: syz.1.351 sent an empty control message without MSG_MORE. [ 122.939162][ T7248] geneve2: entered promiscuous mode [ 123.498095][ T7274] syzkaller0: entered promiscuous mode [ 123.504554][ T7274] syzkaller0: entered allmulticast mode [ 123.517756][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054828c00: rx timeout, send abort [ 123.527485][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888054828c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.697944][ T7283] tipc: Enabled bearer , priority 0 [ 123.714397][ T7282] tipc: Disabling bearer [ 123.849910][ T7290] netlink: 'syz.3.363': attribute type 27 has an invalid length. [ 123.859496][ T7290] netlink: 'syz.3.363': attribute type 4 has an invalid length. [ 123.885699][ T7290] netlink: 144 bytes leftover after parsing attributes in process `syz.3.363'. [ 123.957817][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.366'. [ 124.178025][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 124.338754][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.364'. [ 125.403293][ T7315] tipc: Enabled bearer , priority 0 [ 125.430315][ T7316] syzkaller0: entered promiscuous mode [ 125.435874][ T7316] syzkaller0: entered allmulticast mode [ 125.637274][ T7316] tipc: Resetting bearer [ 125.783519][ T7316] tipc: Disabling bearer [ 125.815121][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.371'. [ 125.923610][ T7341] netlink: 788 bytes leftover after parsing attributes in process `syz.0.375'. [ 126.259136][ T7356] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 126.283790][ T7361] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 126.417347][ T7356] bond1 (unregistering): Released all slaves [ 126.537303][ T7364] ip6tnl1: entered promiscuous mode [ 126.542788][ T7364] ip6tnl1: entered allmulticast mode [ 126.574264][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 126.585621][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 127.232261][ T7389] bond2: ARP target 1.0.0.0 is already present [ 127.266077][ T7389] bond2: option arp_ip_target: invalid value (1) [ 127.545329][ T7389] bond2 (unregistering): Released all slaves [ 128.003759][ T7417] netlink: 'syz.1.395': attribute type 30 has an invalid length. [ 128.143887][ T7431] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 128.200147][ T7417] bond1: option arp_missed_max: invalid value (0) [ 128.206804][ T7417] bond1: option arp_missed_max: allowed values 1 - 255 [ 128.230012][ T7431] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 128.279195][ T7417] bond1 (unregistering): Released all slaves [ 128.406350][ T7440] __nla_validate_parse: 1 callbacks suppressed [ 128.406384][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 128.425616][ T7431] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.571510][ T7431] bond2: (slave veth0_to_bond): making interface the new active one [ 128.586583][ T7431] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 128.751815][ T7453] syz.3.402: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.785265][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.3.402 Not tainted syzkaller #0 PREEMPT(full) [ 128.785297][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.785318][ T7453] Call Trace: [ 128.785327][ T7453] [ 128.785336][ T7453] dump_stack_lvl+0x189/0x250 [ 128.785379][ T7453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.785406][ T7453] ? __pfx__printk+0x10/0x10 [ 128.785444][ T7453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 128.785471][ T7453] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 128.785498][ T7453] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 128.785527][ T7453] warn_alloc+0x214/0x310 [ 128.785570][ T7453] ? stack_depot_save_flags+0x41b/0x860 [ 128.785605][ T7453] ? __pfx_warn_alloc+0x10/0x10 [ 128.785640][ T7453] ? kasan_save_track+0x4f/0x80 [ 128.785668][ T7453] ? xskq_create+0x56/0x170 [ 128.785687][ T7453] ? xsk_init_queue+0xb0/0x110 [ 128.785705][ T7453] ? xsk_setsockopt+0x4dc/0x8d0 [ 128.785736][ T7453] ? do_sock_setsockopt+0x179/0x1b0 [ 128.785761][ T7453] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 128.785785][ T7453] ? do_syscall_64+0xfa/0x3b0 [ 128.785809][ T7453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.785840][ T7453] __vmalloc_node_range_noprof+0x125/0x12f0 [ 128.785905][ T7453] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.785946][ T7453] ? __kasan_kmalloc+0x93/0xb0 [ 128.785979][ T7453] vmalloc_user_noprof+0xad/0xf0 [ 128.786012][ T7453] ? xskq_create+0xbf/0x170 [ 128.786036][ T7453] xskq_create+0xbf/0x170 [ 128.786062][ T7453] xsk_init_queue+0xb0/0x110 [ 128.786087][ T7453] xsk_setsockopt+0x4dc/0x8d0 [ 128.786124][ T7453] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.786158][ T7453] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.786197][ T7453] ? aa_sock_opt_perm+0xff/0x1b0 [ 128.786223][ T7453] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 128.786247][ T7453] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.786283][ T7453] do_sock_setsockopt+0x179/0x1b0 [ 128.786314][ T7453] __x64_sys_setsockopt+0x13f/0x1b0 [ 128.786349][ T7453] do_syscall_64+0xfa/0x3b0 [ 128.786372][ T7453] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.786395][ T7453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.786417][ T7453] ? clear_bhb_loop+0x60/0xb0 [ 128.786443][ T7453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.786465][ T7453] RIP: 0033:0x7f951478eec9 [ 128.786490][ T7453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.786508][ T7453] RSP: 002b:00007f9515611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.786531][ T7453] RAX: ffffffffffffffda RBX: 00007f95149e5fa0 RCX: 00007f951478eec9 [ 128.786547][ T7453] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 128.786566][ T7453] RBP: 00007f9514811f91 R08: 0000000000000004 R09: 0000000000000000 [ 128.786579][ T7453] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.786593][ T7453] R13: 00007f95149e6038 R14: 00007f95149e5fa0 R15: 00007ffd4d266d78 [ 128.786628][ T7453] [ 128.786648][ T7453] Mem-Info: [ 129.114075][ T7453] active_anon:5766 inactive_anon:0 isolated_anon:0 [ 129.114075][ T7453] active_file:2500 inactive_file:39885 isolated_file:0 [ 129.114075][ T7453] unevictable:768 dirty:55 writeback:0 [ 129.114075][ T7453] slab_reclaimable:10682 slab_unreclaimable:97246 [ 129.114075][ T7453] mapped:30154 shmem:1357 pagetables:1219 [ 129.114075][ T7453] sec_pagetables:0 bounce:0 [ 129.114075][ T7453] kernel_misc_reclaimable:0 [ 129.114075][ T7453] free:1332143 free_pcp:15294 free_cma:0 [ 129.162211][ T7453] Node 0 active_anon:23064kB inactive_anon:0kB active_file:10000kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120616kB dirty:220kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12744kB pagetables:4716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.216221][ T7453] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 129.249835][ T7453] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.338946][ T7453] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 129.344885][ T7453] Node 0 DMA32 free:1428904kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22820kB inactive_anon:0kB active_file:10000kB inactive_file:157772kB unevictable:1536kB writepending:220kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:41120kB local_pcp:20736kB free_cma:0kB [ 129.462561][ T7453] lowmem_reserve[]: 0 0 1 1 1 [ 129.508960][ T7453] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 129.590295][ T7453] lowmem_reserve[]: 0 0 0 0 0 [ 129.595098][ T7453] Node 1 Normal free:3884284kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21388kB local_pcp:14408kB free_cma:0kB [ 129.643656][ T7453] lowmem_reserve[]: 0 0 0 0 0 [ 129.657628][ T7453] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.671252][ T7453] Node 0 DMA32: 956*4kB (UME) 1143*8kB (UME) 358*16kB (UME) 337*32kB (UM) 123*64kB (UME) 109*128kB (UME) 60*256kB (UME) 26*512kB (UM) 10*1024kB (UM) 10*2048kB (UM) 322*4096kB (UM) = 1429608kB [ 129.690916][ T7453] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 129.703671][ T7453] Node 1 Normal: 217*4kB (UE) 61*8kB (UME) 43*16kB (UME) 74*32kB (UME) 19*64kB (UME) 8*128kB (UME) 3*256kB (ME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3884284kB [ 129.723243][ T7453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.733088][ T7453] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.745313][ T7453] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.755623][ T7453] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.765942][ T7453] 43740 total pagecache pages [ 129.771210][ T7453] 0 pages in swap cache [ 129.775455][ T7453] Free swap = 124996kB [ 129.780039][ T7453] Total swap = 124996kB [ 129.784242][ T7453] 2097051 pages RAM [ 129.784775][ T7492] syzkaller1: entered promiscuous mode [ 129.788073][ T7453] 0 pages HighMem/MovableOnly [ 129.801760][ T7453] 425673 pages reserved [ 129.805954][ T7453] 0 pages cma reserved [ 129.811931][ T7492] syzkaller1: entered allmulticast mode [ 130.425700][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.434799][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.597676][ T7510] wg1: left promiscuous mode [ 130.627339][ T7510] bridge_slave_0: left allmulticast mode [ 130.636599][ T7510] bridge_slave_0: left promiscuous mode [ 130.646583][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.678326][ T7510] bridge_slave_1: left allmulticast mode [ 130.693242][ T7510] bridge_slave_1: left promiscuous mode [ 130.700230][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.714522][ T7510] bond2: (slave veth0_to_bond): Releasing active interface [ 130.725358][ T7510] bond0: (slave bond_slave_0): Releasing backup interface [ 130.742025][ T7510] bond0: (slave bond_slave_1): Releasing backup interface [ 130.762028][ T7510] team0: Port device team_slave_0 removed [ 130.777294][ T7510] team0: Port device team_slave_1 removed [ 130.787606][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.800488][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.812797][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.824404][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.943879][ T7510] veth3: left promiscuous mode [ 130.951396][ T7510] geneve2: left promiscuous mode [ 131.094206][ T6341] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.126090][ T6341] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.225810][ T6341] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.270305][ T6341] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.583231][ T7555] raw_sendmsg: syz.3.422 forgot to set AF_INET. Fix it! [ 131.961661][ T7568] netlink: 'syz.0.428': attribute type 5 has an invalid length. [ 132.041160][ T7567] netlink: 48 bytes leftover after parsing attributes in process `syz.4.429'. [ 132.294123][ T7583] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 132.325817][ T7582] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.433'. [ 132.397823][ T7583] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 132.551842][ T7592] netlink: 'syz.1.435': attribute type 10 has an invalid length. [ 132.614174][ T7592] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.875613][ T7605] netlink: 'syz.0.439': attribute type 7 has an invalid length. [ 132.890803][ T7608] tipc: Enabled bearer , priority 10 [ 133.162768][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 133.179871][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 133.225236][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.444'. [ 133.636516][ T7640] netlink: 7 bytes leftover after parsing attributes in process `syz.2.453'. [ 133.645917][ T5870] Bluetooth: hci4: command tx timeout [ 133.669788][ T7641] netlink: 7 bytes leftover after parsing attributes in process `syz.2.453'. [ 134.012656][ T981] tipc: Node number set to 2130706433 [ 134.379301][ T7666] netlink: 'syz.2.464': attribute type 16 has an invalid length. [ 134.400218][ T7664] netlink: 'syz.0.463': attribute type 7 has an invalid length. [ 134.409667][ T7666] netlink: 'syz.2.464': attribute type 17 has an invalid length. [ 134.556127][ T7666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.577307][ T7666] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.621102][ T7680] netlink: 68 bytes leftover after parsing attributes in process `syz.1.467'. [ 134.639247][ T7666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.668614][ T7664] : entered promiscuous mode [ 134.820092][ T7685] netlink: 'syz.4.468': attribute type 10 has an invalid length. [ 134.847171][ T7685] netlink: 40 bytes leftover after parsing attributes in process `syz.4.468'. [ 134.857012][ T7687] netlink: 'syz.0.469': attribute type 10 has an invalid length. [ 134.900820][ T7690] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 134.987930][ T7685] team0: Port device geneve0 added [ 135.431986][ T7721] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 135.474566][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 135.513904][ T7721] netlink: 'syz.3.479': attribute type 21 has an invalid length. [ 135.547432][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 136.123631][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 136.237201][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 136.266810][ T7746] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.575415][ T7757] A link change request failed with some changes committed already. Interface veth2 may have been left with an inconsistent configuration, please check. [ 136.638663][ T7770] netlink: 'syz.0.492': attribute type 33 has an invalid length. [ 136.761372][ T7762] bond1: invalid ARP target 0.0.0.0 specified for addition [ 136.768771][ T7762] bond1: option arp_ip_target: invalid value (0) [ 136.780689][ T7762] bond1 (unregistering): Released all slaves [ 136.808004][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 136.822689][ T7778] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 136.833358][ T7778] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 136.838544][ T7770] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 136.841523][ T7778] netlink: 68 bytes leftover after parsing attributes in process `syz.2.494'. [ 136.872730][ T7770] bond2 (unregistering): Released all slaves [ 136.904621][ T7774] veth0_to_bond: entered allmulticast mode [ 137.242499][ T7793] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 137.553735][ T7807] syzkaller1: entered promiscuous mode [ 137.561645][ T7807] syzkaller1: entered allmulticast mode [ 137.573517][ T7808] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 138.040042][ T7829] 8021q: VLANs not supported on ip_vti0 [ 138.108114][ T7829] 8021q: VLANs not supported on ip_vti0 [ 138.138241][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.147471][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.292023][ T24] IPVS: starting estimator thread 0... [ 138.389426][ T7845] IPVS: using max 25 ests per chain, 60000 per kthread [ 139.163179][ T7857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.552193][ T7934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.667679][ T7945] __nla_validate_parse: 10 callbacks suppressed [ 140.667700][ T7945] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.543'. [ 140.875806][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'. [ 140.929709][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 141.514650][ T7979] netlink: 'syz.2.554': attribute type 11 has an invalid length. [ 141.573132][ T7979] netlink: 224 bytes leftover after parsing attributes in process `syz.2.554'. [ 142.129695][ T8008] pim6reg1: entered promiscuous mode [ 142.145431][ T8008] pim6reg1: entered allmulticast mode [ 142.306378][ T8014] netlink: 256 bytes leftover after parsing attributes in process `syz.4.563'. [ 142.436815][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 142.489799][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 142.507386][ T8026] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 142.579988][ T8025] validate_nla: 2 callbacks suppressed [ 142.580009][ T8025] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 142.641762][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 142.654105][ T8023] bridge2: entered promiscuous mode [ 142.678147][ T8023] bridge2: entered allmulticast mode [ 142.950611][ T8041] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 143.108417][ T8045] tipc: Enabled bearer , priority 0 [ 143.134658][ T8045] syzkaller0: entered promiscuous mode [ 143.160640][ T8045] syzkaller0: entered allmulticast mode [ 143.205979][ T8052] vlan2: entered allmulticast mode [ 143.233399][ T8052] bridge0: entered allmulticast mode [ 143.287326][ T8053] tipc: Resetting bearer [ 143.415632][ T8058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.474214][ T8058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.565167][ T8044] tipc: Resetting bearer [ 143.613988][ T8044] tipc: Disabling bearer [ 143.667437][ T8068] gre1: entered promiscuous mode [ 143.676737][ T8068] gre1: entered allmulticast mode [ 143.747897][ T8058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.761913][ T8058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.822749][ T8056] syzkaller1: entered promiscuous mode [ 143.842103][ T8056] syzkaller1: entered allmulticast mode [ 144.074688][ T8058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.126120][ T8058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.153125][ T8090] openvswitch: netlink: Missing key (keys=40, expected=100) [ 144.168494][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 144.196765][ T8090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.254008][ T8058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.272313][ T8058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.525774][ T8093] team0 (unregistering): Port device team_slave_0 removed [ 144.545688][ T8093] team0 (unregistering): Port device team_slave_1 removed [ 144.596519][ T8096] 8021q: VLANs not supported on gre0 [ 144.787017][ T8109] netlink: 'syz.2.586': attribute type 1 has an invalid length. [ 144.799513][ T68] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.814711][ T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.902242][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.587'. [ 144.970264][ T8115] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 144.996839][ T8115] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 145.022034][ T8115] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 145.099803][ T8119] veth0_to_bond: entered allmulticast mode [ 145.154315][ T68] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.172916][ T68] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.337166][ T68] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.370505][ T68] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.386629][ T68] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.407957][ T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.676134][ T8149] __nla_validate_parse: 3 callbacks suppressed [ 145.676155][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 145.699059][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 145.797280][ T8153] netlink: 68 bytes leftover after parsing attributes in process `syz.3.594'. [ 145.836922][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.919168][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.955428][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.973062][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.630847][ T8185] tipc: Enabling of bearer rejected, failed to enable media [ 146.638113][ T8190] netlink: 1 bytes leftover after parsing attributes in process `syz.3.601'. [ 146.932339][ T8201] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 146.953299][ T8201] netlink: 48 bytes leftover after parsing attributes in process `syz.3.605'. [ 146.977794][ T8206] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 147.013524][ T8206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.605'. [ 147.032326][ T8205] tipc: Started in network mode [ 147.037250][ T8205] tipc: Node identity 06845ae2953f, cluster identity 4711 [ 147.045612][ T8205] tipc: Enabled bearer , priority 0 [ 147.069941][ T8202] syzkaller0: entered promiscuous mode [ 147.075871][ T8202] syzkaller0: entered allmulticast mode [ 147.162956][ T8205] syzkaller0: entered promiscuous mode [ 147.172536][ T8205] syzkaller0: entered allmulticast mode [ 147.342410][ T8205] tipc: Resetting bearer [ 147.415705][ T8205] tipc: Disabling bearer [ 147.437515][ T8227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 147.857617][ T8242] tipc: Enabled bearer , priority 0 [ 147.858280][ T8243] netlink: 104 bytes leftover after parsing attributes in process `syz.4.616'. [ 147.886755][ T8242] syzkaller0: entered promiscuous mode [ 147.899244][ T8242] syzkaller0: entered allmulticast mode [ 147.948368][ T8237] tipc: Resetting bearer [ 147.958432][ T8236] tipc: Resetting bearer [ 147.972790][ T8236] tipc: Disabling bearer [ 148.144838][ T8250] netlink: 'syz.4.618': attribute type 33 has an invalid length. [ 148.384378][ T8258] tipc: Enabling of bearer rejected, failed to enable media [ 148.601684][ T8264] netlink: 'syz.4.622': attribute type 5 has an invalid length. [ 148.629606][ T8273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.706527][ T8264] geneve2: entered promiscuous mode [ 148.734107][ T8264] geneve2: entered allmulticast mode [ 148.766044][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 148.801273][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 148.880397][ T49] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 148.933580][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 149.134319][ T8295] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 149.372466][ T8295] bond1: entered promiscuous mode [ 149.419860][ T8295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.538775][ T8300] bond1: (slave bridge3): making interface the new active one [ 149.547070][ T8300] bridge3: entered promiscuous mode [ 149.556140][ T8300] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 149.863688][ T8324] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 149.899265][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.941681][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.985611][ T8324] bridge_slave_1: left allmulticast mode [ 150.016661][ T8324] bridge_slave_1: left promiscuous mode [ 150.031136][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.057507][ T8324] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 150.859164][ T8373] __nla_validate_parse: 12 callbacks suppressed [ 150.859185][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.646'. [ 150.893843][ T8376] netlink: 'syz.1.647': attribute type 32 has an invalid length. [ 150.902044][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'. [ 151.108130][ T8376] bond1: Setting coupled_control to off (0) [ 151.201909][ T8373] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 151.241652][ T8373] bond2 (unregistering): Released all slaves [ 151.338364][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 151.962986][ T8416] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 151.978259][ T5870] block nbd1: Receive control failed (result -32) [ 151.985591][ T8425] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 152.076268][ T8425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.106442][ T8427] bond1: entered allmulticast mode [ 152.206311][ T8438] Bluetooth: MGMT ver 1.23 [ 152.328333][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 152.403099][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 152.636974][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 152.659873][ T8449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 152.669978][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 152.822153][ T8451] bond4: option mode: invalid value (133) [ 152.866954][ T8465] ieee802154 phy0 wpan0: encryption failed: -90 [ 152.867681][ T8451] bond4 (unregistering): Released all slaves [ 152.974066][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 153.025163][ T8464] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.175168][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.674'. [ 153.950036][ T8513] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 154.002950][ T8513] nbd: couldn't find device at index 1048576 [ 154.298134][ T8530] netlink: 'syz.0.689': attribute type 1 has an invalid length. [ 154.412337][ T8530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.859214][ T8531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.903542][ T8531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.925944][ T8531] bond0 (unregistering): Released all slaves [ 155.169597][ T8561] netlink: 'syz.2.699': attribute type 1 has an invalid length. [ 155.305086][ T8577] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 155.344385][ T8561] bond4: entered promiscuous mode [ 155.350159][ T8561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.441329][ T8571] 8021q: adding VLAN 0 to HW filter on device bond4 [ 155.463948][ T8571] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 155.483705][ T8571] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 155.557485][ T8571] bond4: (slave wireguard0): making interface the new active one [ 155.571667][ T8571] wireguard0: entered promiscuous mode [ 155.595905][ T8571] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 155.615653][ T8592] sch_fq: defrate 0 ignored. [ 155.681379][ T8595] : entered promiscuous mode [ 155.994302][ T8608] netlink: 'syz.0.709': attribute type 32 has an invalid length. [ 156.037574][ T8615] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.232311][ T8620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 156.338255][ T8625] netlink: 'syz.3.714': attribute type 23 has an invalid length. [ 156.491876][ T8630] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 156.548204][ T8634] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 156.758798][ T8639] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 156.774464][ T8641] __nla_validate_parse: 13 callbacks suppressed [ 156.774485][ T8641] netlink: 204 bytes leftover after parsing attributes in process `syz.2.718'. [ 156.844026][ T8639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.893161][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.717'. [ 156.988085][ T8644] bond2: (slave veth5): Enslaving as an active interface with a down link [ 157.037393][ T8654] vlan2: entered allmulticast mode [ 157.042738][ T8654] bond2: entered allmulticast mode [ 157.055886][ T8654] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 157.174798][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 157.359471][ T8666] syzkaller0: entered allmulticast mode [ 157.636497][ T8676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.727'. [ 157.801781][ T8680] netlink: 13 bytes leftover after parsing attributes in process `syz.4.730'. [ 157.885079][ T8685] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 157.917119][ T8685] netlink: 'syz.1.729': attribute type 3 has an invalid length. [ 158.013872][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.043932][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.178010][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.234223][ T8691] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.253874][ T8691] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 158.318289][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.351209][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.392899][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.425480][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.459829][ T8691] wg1 speed is unknown, defaulting to 1000 [ 158.709146][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 158.892021][ T8739] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 158.902408][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 159.343417][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.372787][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.747'. [ 159.422132][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.452537][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.747'. [ 159.516902][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 159.601238][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.673016][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.717779][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.787081][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.828982][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.871151][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.905318][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 159.946687][ T8764] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 160.373043][ T8805] can: request_module (can-proto-0) failed. [ 160.594525][ T8816] Driver unsupported XDP return value 0 on prog (id 167) dev N/A, expect packet loss! [ 160.692369][ T8819] bond0: Invalid ad_actor_system MAC address. [ 160.701293][ T8819] bond0: option ad_actor_system: invalid value (1) [ 163.503244][ T8819] bond0 (unregistering): Released all slaves [ 163.902426][ T51] block nbd2: Receive control failed (result -32) [ 163.955780][ T8856] __nla_validate_parse: 70 callbacks suppressed [ 163.955801][ T8856] netlink: 256 bytes leftover after parsing attributes in process `syz.2.768'. [ 163.974708][ T8856] unsupported nlmsg_type 40 [ 164.210422][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'. [ 164.412396][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 164.932473][ T8897] validate_nla: 55 callbacks suppressed [ 164.932493][ T8897] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 164.976022][ T8905] netlink: 596 bytes leftover after parsing attributes in process `syz.0.779'. [ 165.046524][ T8900] netlink: 'syz.0.779': attribute type 29 has an invalid length. [ 165.519889][ T8931] tipc: Enabled bearer , priority 0 [ 165.553355][ T8926] syzkaller0: entered promiscuous mode [ 165.630302][ T8926] syzkaller0: entered allmulticast mode [ 165.664954][ T8926] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.728514][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 165.734755][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.861622][ T8926] tipc: Resetting bearer [ 165.926273][ T8925] tipc: Resetting bearer [ 166.024057][ T8925] tipc: Disabling bearer [ 166.122714][ T8935] ip6tnl2: entered promiscuous mode [ 166.237840][ T8951] tipc: Started in network mode [ 166.243029][ T8951] tipc: Node identity 6251d8bcab2f, cluster identity 4711 [ 166.250441][ T8951] tipc: Enabled bearer , priority 0 [ 166.276290][ T8951] syzkaller0: entered promiscuous mode [ 166.314938][ T8951] syzkaller0: entered allmulticast mode [ 166.455631][ T8952] tipc: Resetting bearer [ 166.526216][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 166.549168][ T8952] tipc: Disabling bearer [ 166.560955][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.798'. [ 166.594366][ T8962] tipc: Enabled bearer , priority 0 [ 166.609654][ T8963] syzkaller0: entered promiscuous mode [ 166.616150][ T8963] syzkaller0: entered allmulticast mode [ 166.640266][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.641293][ T8970] tipc: Enabled bearer , priority 10 [ 166.661047][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.679607][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.683713][ T8962] tipc: Resetting bearer [ 166.704590][ T8970] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 166.727628][ T8970] tipc: Enabled bearer , priority 10 [ 166.767110][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.767172][ T8961] tipc: Resetting bearer [ 166.820803][ T8961] tipc: Disabling bearer [ 166.855508][ T6343] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.886719][ T6343] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.908640][ T6343] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.954080][ T6343] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.224394][ T68] nci: nci_rx_work: unknown MT 0x1 [ 167.412622][ T9013] bridge_slave_0: invalid flags given to default FDB implementation [ 167.759258][ T981] tipc: Node number set to 2478529250 [ 167.786369][ T9015] wg2: entered promiscuous mode [ 167.791611][ T9015] wg2: entered allmulticast mode [ 168.337329][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.427655][ T9036] netlink: 'syz.4.819': attribute type 30 has an invalid length. [ 168.596684][ T9044] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 168.702099][ T9043] macvlan2: entered promiscuous mode [ 168.726601][ T9043] team_slave_0: entered promiscuous mode [ 168.732581][ T9043] team_slave_1: entered promiscuous mode [ 168.791767][ T9043] team0: entered promiscuous mode [ 168.830208][ T9043] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.870990][ T9043] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 169.161734][ T9062] sctp: [Deprecated]: syz.3.826 (pid 9062) Use of int in maxseg socket option. [ 169.161734][ T9062] Use struct sctp_assoc_value instead [ 169.246179][ T9064] __nla_validate_parse: 6 callbacks suppressed [ 169.246197][ T9064] netlink: 666 bytes leftover after parsing attributes in process `syz.4.827'. [ 169.272538][ T9064] unknown channel width for channel at 909000KHz? [ 169.280086][ T9064] unknown channel width for channel at 909000KHz? [ 169.286224][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 169.294162][ T9064] unknown channel width for channel at 909000KHz? [ 169.376091][ T9068] netlink: 'syz.1.828': attribute type 83 has an invalid length. [ 169.519716][ T9072] netlink: 44 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.528639][ T9072] netlink: 21 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.578440][ T9072] netlink: 21 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.722735][ T9082] netlink: 666 bytes leftover after parsing attributes in process `syz.3.829'. [ 169.749639][ T9083] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 170.470914][ T9120] netlink: 252 bytes leftover after parsing attributes in process `syz.3.842'. [ 170.792965][ T9126] wg1 speed is unknown, defaulting to 1000 [ 170.982296][ T9140] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 171.016904][ T9140] netlink: 'syz.3.846': attribute type 2 has an invalid length. [ 171.831569][ T5870] block nbd3: Receive control failed (result -32) [ 172.012732][ T9185] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 172.168574][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 172.208362][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.860'. [ 172.415477][ T9195] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 172.446399][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 172.449691][ T9195] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 172.540739][ T9207] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 172.546358][ T9195] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 172.557470][ T9195] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 172.562894][ T9207] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 172.592025][ T9195] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 172.597980][ T9195] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 172.656902][ T9195] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.665125][ T9195] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 172.712976][ T9195] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 172.736856][ T9195] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 173.517299][ T9245] pim6reg: entered allmulticast mode [ 173.792157][ T9253] dvmrp1: entered allmulticast mode [ 173.818153][ T9260] netlink: 'syz.4.876': attribute type 11 has an invalid length. [ 173.850010][ T9260] netlink: 'syz.4.876': attribute type 11 has an invalid length. [ 174.541309][ T9293] __nla_validate_parse: 12 callbacks suppressed [ 174.541329][ T9293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.884'. [ 174.575719][ T9293] netlink: 43 bytes leftover after parsing attributes in process `syz.4.884'. [ 174.585291][ T9284] wg1 speed is unknown, defaulting to 1000 [ 174.661709][ T9293] netlink: 'syz.4.884': attribute type 5 has an invalid length. [ 174.673780][ T9293] netlink: 43 bytes leftover after parsing attributes in process `syz.4.884'. [ 174.780833][ T9308] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.794186][ T9301] bond0: (slave wlan1): Releasing backup interface [ 174.850016][ T9315] netlink: 'syz.0.886': attribute type 21 has an invalid length. [ 175.009060][ T9315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.886'. [ 175.237308][ T9335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.890'. [ 175.641818][ T9358] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 175.686851][ T9358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.893'. [ 175.799713][ T9355] batadv_slave_1: entered promiscuous mode [ 175.806142][ T9358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.893'. [ 175.837754][ T9352] batadv_slave_1: left promiscuous mode [ 176.137122][ T9380] netlink: 'syz.0.901': attribute type 1 has an invalid length. [ 176.149825][ T9379] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 176.180412][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.229333][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.289104][ T9381] netlink: 'syz.2.899': attribute type 11 has an invalid length. [ 176.416602][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 176.446525][ T9381] netlink: 'syz.2.899': attribute type 11 has an invalid length. [ 176.466434][ T9387] veth3: entered promiscuous mode [ 176.575753][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.624916][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.755597][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.792636][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.743652][ T9444] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 178.795351][ T9483] syzkaller1: entered promiscuous mode [ 178.812366][ T9483] syzkaller1: entered allmulticast mode [ 179.993697][ T9536] __nla_validate_parse: 11 callbacks suppressed [ 179.993733][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 180.084256][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 180.629365][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 182.071662][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 182.097916][ T9615] netlink: 156 bytes leftover after parsing attributes in process `syz.3.984'. [ 182.124160][ T9617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'. [ 182.535719][ T9627] bond2: option resend_igmp: invalid value (32767) [ 182.569230][ T9627] bond2: option resend_igmp: allowed values 0 - 255 [ 182.613973][ T9627] bond2 (unregistering): Released all slaves [ 182.875383][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.995'. [ 182.918782][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.994'. [ 183.289692][ T9671] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.339174][ T9672] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.391253][ T9671] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.412234][ T9671] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.423297][ T9671] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.438206][ T9683] netlink: 'syz.4.1003': attribute type 1 has an invalid length. [ 183.482705][ T9672] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.535750][ T9671] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.535765][ T9672] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 183.536033][ T9672] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 184.206856][ T9713] openvswitch: netlink: IP tunnel dst address not specified [ 184.309182][ T9721] bond0: (slave wlan1): Opening slave failed [ 184.792759][ T9735] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.867653][ T9744] ip6gre1: entered allmulticast mode [ 185.146337][ T9754] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 185.269278][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 185.688107][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 185.933238][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 186.132821][ T9805] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 186.884712][ T9846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 186.940459][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1044'. [ 187.034428][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 187.047447][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 187.325156][ T9878] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 187.423568][ T9883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.431296][ T9883] IPv6: NLM_F_CREATE should be set when creating new route [ 187.733416][ T9890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.772914][ T9890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.847562][ T9890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 187.980403][ T9905] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1056'. [ 188.113357][ T9890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.145700][ T9890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.181229][ T9890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 188.278500][ T9901] syzkaller1: entered promiscuous mode [ 188.301993][ T9901] syzkaller1: entered allmulticast mode [ 188.332606][ T9924] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1062'. [ 188.404597][ T9890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.445867][ T9890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.471993][ T9890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 188.602941][ T9890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.617888][ T9890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.631820][ T9890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 188.735952][ T9941] validate_nla: 124 callbacks suppressed [ 188.735974][ T9941] netlink: 'syz.2.1067': attribute type 2 has an invalid length. [ 188.800270][ T9941] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1067'. [ 189.007977][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.033696][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 189.055678][ T49] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.102239][ T9964] netlink: 'syz.3.1073': attribute type 12 has an invalid length. [ 189.124545][ T9964] netlink: 'syz.3.1073': attribute type 29 has an invalid length. [ 189.153755][ T1074] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.185635][ T1074] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 189.213043][ T1074] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.268661][ T1074] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.282709][ T1074] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 189.293103][ T1074] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.305380][ T9973] !€ÿ: renamed from bond_slave_0 (while UP) [ 189.336708][ T6341] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.345339][ T6341] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 189.362642][ T6341] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.399218][ T5870] Bluetooth: hci0: command tx timeout [ 189.868229][T10002] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.486513][T10031] veth0: entered promiscuous mode [ 190.492803][T10031] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 190.506365][T10031] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 190.526127][T10030] veth0: left promiscuous mode [ 190.912559][T10050] __nla_validate_parse: 3 callbacks suppressed [ 190.912580][T10050] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1090'. [ 190.978606][T10057] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 191.025793][T10057] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.524994][T10096] tipc: Enabling of bearer rejected, failed to enable media [ 191.647592][T10106] wg1 speed is unknown, defaulting to 1000 [ 192.216794][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 192.249324][T10135] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 192.320948][T10132] veth5: entered allmulticast mode [ 192.550573][T10148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1115'. [ 192.736737][T10156] team0: Device vti0 is of different type [ 193.009857][T10170] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1123'. [ 193.028460][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 193.051127][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1122'. [ 193.051893][T10172] netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 193.079446][T10168] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1122'. [ 193.271944][T10181] unknown channel width for channel at 909000KHz? [ 193.317436][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 193.327311][T10181] netlink: 'syz.1.1127': attribute type 29 has an invalid length. [ 193.349112][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 193.569144][T10198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1132'. [ 194.100927][T10234] netlink: 'syz.0.1140': attribute type 2 has an invalid length. [ 194.675487][T10256] tipc: Enabled bearer , priority 0 [ 194.686405][T10256] syzkaller0: entered promiscuous mode [ 194.706432][T10256] syzkaller0: entered allmulticast mode [ 194.735052][T10256] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 194.792957][T10256] tipc: Resetting bearer [ 194.857569][T10271] bond3: Unable to set down delay as MII monitoring is disabled [ 194.869188][T10271] bond3 (unregistering): Released all slaves [ 194.912448][T10254] tipc: Resetting bearer [ 194.945888][T10254] tipc: Disabling bearer [ 194.970308][T10274] syzkaller0: entered promiscuous mode [ 194.986184][T10274] syzkaller0: entered allmulticast mode [ 195.105935][T10285] tipc: Enabled bearer , priority 0 [ 195.205140][T10289] syzkaller0: entered promiscuous mode [ 195.215691][T10289] syzkaller0: entered allmulticast mode [ 195.347135][T10290] tipc: Resetting bearer [ 195.408458][T10311] netlink: 'syz.4.1163': attribute type 1 has an invalid length. [ 195.426089][T10290] tipc: Disabling bearer [ 195.516001][T10317] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 195.583190][T10317] veth1_macvtap: left promiscuous mode [ 195.621970][T10332] netlink: 'syz.0.1167': attribute type 10 has an invalid length. [ 196.059102][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.090482][T10352] bond0: (slave rose0): Enslaving as an active interface with an up link [ 196.148180][T10356] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 196.274419][T10362] __nla_validate_parse: 9 callbacks suppressed [ 196.274441][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1179'. [ 196.722789][T10381] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1183'. [ 196.866405][T10390] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1187'. [ 197.321318][T10416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1191'. [ 197.554571][T10427] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 197.781549][T10439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1197'. [ 198.164295][T10465] bond0: option ad_select: unable to set because the bond device is up [ 198.265626][T10470] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 198.306835][T10472] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 198.496991][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 198.536907][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 199.002547][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 199.040485][T10518] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 199.065204][T10518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.203828][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 199.214967][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 199.228062][T10527] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:20003 [ 199.571794][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.578169][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.601256][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.684858][T10650] netlink: 'syz.4.1250': attribute type 1 has an invalid length. [ 201.825315][T10658] __nla_validate_parse: 6 callbacks suppressed [ 201.825337][T10658] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1252'. [ 202.257289][T10677] netlink: 'syz.3.1258': attribute type 1 has an invalid length. [ 202.472845][T10690] bond2 (unregistering): Released all slaves [ 202.517509][T10677] ip6tnl3: entered promiscuous mode [ 202.526811][T10677] ip6tnl3: entered allmulticast mode [ 202.701822][T10697] sctp: [Deprecated]: syz.4.1263 (pid 10697) Use of int in max_burst socket option. [ 202.701822][T10697] Use struct sctp_assoc_value instead [ 202.836307][T10682] infiniband syz1: set down [ 202.841898][T10682] infiniband syz1: added bond_slave_0 [ 202.900666][T10682] RDS/IB: syz1: added [ 202.905625][T10682] smc: adding ib device syz1 with port count 1 [ 202.912251][T10682] smc: ib device syz1 port 1 has pnetid [ 203.357596][T10732] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 203.558263][T10732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.664700][T10737] bond3: (slave geneve2): making interface the new active one [ 203.688255][T10737] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 203.866561][T10755] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1274'. [ 204.120127][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 204.139284][T10766] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 204.146574][T10766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.698345][T10791] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1286'. [ 204.703143][T10792] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 204.727793][T10792] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 205.695973][T10815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1292'. [ 206.767314][T10844] netlink: 'syz.1.1301': attribute type 64 has an invalid length. [ 206.784327][T10844] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1301'. [ 206.802592][T10846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1302'. [ 206.868609][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 206.882714][T10851] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 206.947188][T10846] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1302'. [ 206.989636][T10854] tipc: Enabled bearer , priority 0 [ 206.996735][T10854] tipc: Enabling of bearer rejected, already enabled [ 207.029619][T10860] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 207.226178][T10854] tipc: Disabling bearer [ 207.521836][T10885] can: request_module (can-proto-5) failed. [ 207.854920][T10907] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1317'. [ 207.877424][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 208.060754][T10917] netlink: 'syz.4.1319': attribute type 21 has an invalid length. [ 208.165704][T10917] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1319'. [ 208.260342][T10919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.354065][T10926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1323'. [ 208.587635][T10932] syzkaller0: entered promiscuous mode [ 208.615564][T10937] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1326'. [ 208.618952][T10932] syzkaller0: entered allmulticast mode [ 208.688520][T10936] netlink: 'syz.0.1328': attribute type 1 has an invalid length. [ 208.921975][T10951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 208.976508][T10955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 209.004524][T10953] sctp: [Deprecated]: syz.1.1332 (pid 10953) Use of int in maxseg socket option. [ 209.004524][T10953] Use struct sctp_assoc_value instead [ 209.021329][T10953] nbd: must specify a device to reconfigure [ 209.135456][T10961] netlink: 'syz.3.1334': attribute type 5 has an invalid length. [ 209.231205][T10969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1337'. [ 209.347924][T10985] tap0: tun_chr_ioctl cmd 2148553947 [ 209.789975][T11013] Bluetooth: MGMT ver 1.23 [ 210.522035][T11047] netlink: 'syz.2.1358': attribute type 10 has an invalid length. [ 210.537269][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.081275][T11072] netlink: 'syz.0.1364': attribute type 4 has an invalid length. [ 211.082738][T11070] tipc: Enabled bearer , priority 0 [ 211.139838][T11066] tipc: Enabling of bearer rejected, already enabled [ 211.148458][T11077] netlink: 'syz.0.1364': attribute type 4 has an invalid length. [ 211.256143][T11078] syzkaller0: entered promiscuous mode [ 211.262212][T11078] syzkaller0: entered allmulticast mode [ 211.310502][T11078] tipc: Resetting bearer [ 211.347730][T11065] tipc: Resetting bearer [ 212.099081][ T981] tipc: Node number set to 625124687 [ 212.755779][T11065] tipc: Disabling bearer [ 213.107373][T11123] __nla_validate_parse: 16 callbacks suppressed [ 213.107397][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 213.143359][T11123] netlink: 'syz.3.1376': attribute type 5 has an invalid length. [ 213.173028][T11123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 213.231808][T11123] geneve2: entered promiscuous mode [ 213.246361][T11123] geneve2: entered allmulticast mode [ 213.263154][ T1074] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 213.271673][ T1074] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 213.414295][ T1074] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 213.439298][ T1074] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 213.776356][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1383'. [ 213.995142][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 214.045923][T11169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1385'. [ 214.164030][T11169] bridge0: port 1(vlan2) entered blocking state [ 214.185550][T11169] bridge0: port 1(vlan2) entered disabled state [ 214.205960][T11169] vlan2: entered allmulticast mode [ 214.221208][T11169] bridge0: entered allmulticast mode [ 214.241859][T11169] vlan2: left allmulticast mode [ 214.257150][T11169] bridge0: left allmulticast mode [ 214.386211][T11189] syzkaller0: entered promiscuous mode [ 214.427924][T11189] syzkaller0: entered allmulticast mode [ 214.472212][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 214.504721][T11194] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1391'. [ 214.518805][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1390'. [ 214.910725][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 214.943610][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 216.386480][T11291] netlink: 'syz.1.1415': attribute type 6 has an invalid length. [ 216.409754][T11291] netlink: 'syz.1.1415': attribute type 6 has an invalid length. [ 216.800231][T11302] netlink: 'syz.1.1418': attribute type 23 has an invalid length. [ 216.921485][T11307] tipc: Enabled bearer , priority 0 [ 216.940726][T11307] syzkaller0: entered promiscuous mode [ 216.946259][T11307] syzkaller0: entered allmulticast mode [ 216.973645][T11307] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.002814][T11307] tipc: Resetting bearer [ 217.033413][T11304] tipc: Resetting bearer [ 217.097538][T11304] tipc: Disabling bearer [ 217.184665][ T6325] tipc: Subscription rejected, illegal request [ 217.822016][T11352] macvtap1: entered promiscuous mode [ 217.827382][T11352] vlan0: entered promiscuous mode [ 217.845203][T11352] macvtap1: entered allmulticast mode [ 217.869683][T11352] vlan0: entered allmulticast mode [ 217.874954][T11352] veth0_vlan: entered allmulticast mode [ 217.888282][T11360] netlink: 'syz.4.1434': attribute type 12 has an invalid length. [ 217.968787][T11356] wg1 speed is unknown, defaulting to 1000 [ 218.311904][T11380] __nla_validate_parse: 15 callbacks suppressed [ 218.311924][T11380] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1438'. [ 218.657943][T11398] netlink: 'syz.2.1441': attribute type 7 has an invalid length. [ 218.703180][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 218.742085][T11400] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 218.864576][T11407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.884990][T11400] netlink: 'syz.1.1444': attribute type 25 has an invalid length. [ 218.895430][T11397] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1443'. [ 219.114803][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 219.173735][T11425] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 219.498220][T11445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.730534][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 219.845519][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 219.866026][T11466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.093189][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 220.171487][T11482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 220.217672][T11487] netlink: 'syz.0.1465': attribute type 10 has an invalid length. [ 220.589194][T11510] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1469'. [ 220.623207][T11510] netlink: 'syz.0.1469': attribute type 1 has an invalid length. [ 220.708062][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1473'. [ 220.759112][ T5870] Bluetooth: hci0: command tx timeout [ 220.788519][T11520] veth3: entered promiscuous mode [ 220.905177][T11532] netlink: 'syz.1.1476': attribute type 2 has an invalid length. [ 220.925018][T11532] netlink: 'syz.1.1476': attribute type 11 has an invalid length. [ 220.997274][T11536] netlink: 'syz.0.1477': attribute type 4 has an invalid length. [ 221.163965][T11546] team0: entered allmulticast mode [ 221.173900][T11546] team_slave_0: entered allmulticast mode [ 221.180430][T11546] team_slave_1: entered allmulticast mode [ 221.774345][T11574] sctp: [Deprecated]: syz.2.1487 (pid 11574) Use of int in max_burst socket option deprecated. [ 221.774345][T11574] Use struct sctp_assoc_value instead [ 221.907439][T11581] netlink: 'syz.4.1489': attribute type 2 has an invalid length. [ 222.107544][T11588] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 222.175243][T11588] bond4 (unregistering): Released all slaves [ 223.046269][T11654] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20001 [ 223.318459][T11677] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 223.725866][T11695] __nla_validate_parse: 10 callbacks suppressed [ 223.725889][T11695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1520'. [ 223.760418][T11695] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1520'. [ 223.926715][T11700] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 224.024362][T11701] bridge_slave_0: left allmulticast mode [ 224.051634][T11701] bridge_slave_0: left promiscuous mode [ 224.059483][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.101900][T11701] bridge_slave_1: left allmulticast mode [ 224.107614][T11701] bridge_slave_1: left promiscuous mode [ 224.126073][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.194652][T11701] bond0: (slave bond_slave_0): Releasing backup interface [ 224.275540][T11701] bond0: (slave bond_slave_1): Releasing backup interface [ 224.435901][T11701] team_slave_0: left allmulticast mode [ 224.443918][T11701] team_slave_0: left promiscuous mode [ 224.460148][T11701] team0: Port device team_slave_0 removed [ 224.467857][T11701] team_slave_1: left allmulticast mode [ 224.476488][T11701] team_slave_1: left promiscuous mode [ 224.502129][T11701] team0: Port device team_slave_1 removed [ 224.515664][T11701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.525195][T11701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.538692][T11701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.546810][T11701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.568057][T11701] bond0: (slave macvlan2): Releasing backup interface [ 224.585946][ T978] wg1 speed is unknown, defaulting to 1000 [ 224.745568][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1527'. [ 224.754722][T11727] macsec0: entered promiscuous mode [ 224.906800][T11733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1529'. [ 225.110844][T11744] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1536'. [ 225.619181][T11775] netlink: 'syz.2.1544': attribute type 16 has an invalid length. [ 225.630695][T11775] netlink: 'syz.2.1544': attribute type 17 has an invalid length. [ 225.633302][T11777] ksmbd: Unknown IPC event: 3, ignore. [ 225.666230][T11775] wg1: left allmulticast mode [ 225.701852][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 225.796330][T11775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.815978][T11775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.850931][T11775] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 225.950017][ T5955] syz1: Port: 1 Link ACTIVE [ 226.026452][T11789] tipc: Enabled bearer , priority 0 [ 226.050013][T11789] openvswitch: netlink: Unknown key attributes 2 [ 226.184833][T11797] syzkaller0: entered promiscuous mode [ 226.212888][T11797] syzkaller0: entered allmulticast mode [ 226.251944][T11789] tipc: Resetting bearer [ 226.291690][T11788] tipc: Resetting bearer [ 226.359477][T11788] tipc: Disabling bearer [ 226.541003][T11813] veth0: entered promiscuous mode [ 226.633824][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 226.770695][T11836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1559'. [ 227.009709][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1560'. [ 227.200892][T11856] netem: incorrect ge model size [ 227.216134][T11856] netem: change failed [ 227.846811][T11893] rdma_rxe: rxe_newlink: failed to add bond0 [ 227.880937][T11893] netlink: 'syz.3.1573': attribute type 13 has an invalid length. [ 228.112393][T11893] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.731564][T11928] batadv0: entered promiscuous mode [ 228.743824][T11928] bond0: entered promiscuous mode [ 228.765418][T11928] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 228.790512][T11928] hsr1: entered allmulticast mode [ 228.795616][T11928] batadv0: entered allmulticast mode [ 228.821782][T11928] bond0: entered allmulticast mode [ 228.827687][T11928] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 228.868792][T11932] netlink: 'syz.2.1585': attribute type 4 has an invalid length. [ 228.899082][T11933] netlink: 'syz.2.1585': attribute type 4 has an invalid length. [ 229.180926][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 229.505154][T11958] netlink: 'syz.1.1593': attribute type 1 has an invalid length. [ 229.547547][T11962] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 229.627889][T11962] veth1: entered promiscuous mode [ 229.647373][T11962] bond2: (slave veth1): Enslaving as a backup interface with a down link [ 229.749343][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 230.065748][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'. [ 230.127318][T11991] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.173352][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1604'. [ 230.555217][T12029] netlink: 'syz.2.1611': attribute type 21 has an invalid length. [ 230.701664][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'. [ 231.039017][T12029] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 231.102777][T12029] bond6 (unregistering): Released all slaves [ 231.230970][T12040] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 231.377644][T12053] netlink: 'syz.1.1617': attribute type 16 has an invalid length. [ 231.404191][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 231.554538][T12065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1624'. [ 231.658034][T12068] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 231.668721][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 231.678955][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 231.720076][T12068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.753137][T12068] vlan2: entered promiscuous mode [ 231.758358][T12068] bond4: entered promiscuous mode [ 231.763999][T12068] vlan2: entered allmulticast mode [ 231.769465][T12068] bond4: entered allmulticast mode [ 231.783219][T12075] netlink: 'syz.1.1627': attribute type 5 has an invalid length. [ 231.805463][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 231.851007][T12068] bond4: (slave gretap1): making interface the new active one [ 231.864665][T12068] gretap1: entered promiscuous mode [ 231.870375][T12068] gretap1: entered allmulticast mode [ 231.877867][T12068] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 231.888616][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.907699][T12081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.924537][T12081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.935556][T12081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.954767][T12145] tipc: Enabled bearer , priority 0 [ 232.983822][T12137] wg1 speed is unknown, defaulting to 1000 [ 232.997262][T12139] syzkaller0: entered promiscuous mode [ 233.019018][T12139] syzkaller0: entered allmulticast mode [ 233.136078][T12139] tipc: Resetting bearer [ 233.181926][T12138] tipc: Resetting bearer [ 233.226544][T12138] tipc: Disabling bearer [ 233.293647][ T30] audit: type=1800 audit(1759410778.511:4): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1647" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1673 res=0 errno=0 [ 234.277101][T12200] netlink: 'syz.2.1658': attribute type 10 has an invalid length. [ 234.342507][T12200] veth1_macvtap: left promiscuous mode [ 234.365842][T12200] team0: Device veth1_macvtap failed to register rx_handler [ 234.590392][T12213] __nla_validate_parse: 6 callbacks suppressed [ 234.590412][T12213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1662'. [ 237.808177][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 237.824607][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 237.835309][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 237.855425][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1667'. [ 237.888517][T12230] netlink: 'syz.4.1667': attribute type 4 has an invalid length. [ 238.163729][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1671'. [ 238.240146][T12245] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1670'. [ 238.319179][T12250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1673'. [ 238.344943][T12251] bridge_slave_0: left allmulticast mode [ 238.364404][T12251] bridge_slave_0: left promiscuous mode [ 238.379191][T12251] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.424892][T12251] bond0: (slave bridge_slave_1): Releasing backup interface [ 238.482908][T12251] bond0: (slave bond_slave_0): Releasing backup interface [ 238.503369][T12251] bond0: (slave bond_slave_1): Releasing backup interface [ 238.520534][T12251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.527973][T12251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.547481][T12251] bond3: (slave geneve2): Releasing active interface [ 238.548613][T12255] netlink: 'syz.2.1673': attribute type 4 has an invalid length. [ 238.581623][T12251] bond4: (slave gretap1): Releasing active interface [ 238.588453][T12251] gretap1: left promiscuous mode [ 238.594167][T12251] gretap1: left allmulticast mode [ 238.613327][T12250] ip6gretap0: entered promiscuous mode [ 239.384825][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1689'. [ 239.402192][T12312] veth0: entered promiscuous mode [ 239.419375][T12311] veth0: left promiscuous mode [ 239.530891][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 239.633196][T12327] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 239.641210][T12327] netlink: 'syz.0.1692': attribute type 8 has an invalid length. [ 239.652307][T12327] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1692'. [ 239.727673][T12333] pimreg: entered allmulticast mode [ 240.052737][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 240.282017][T12367] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1705'. [ 240.292334][T12367] openvswitch: netlink: Flow key attr not present in new flow. [ 240.804273][T12400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1716'. [ 240.842956][T12400] netlink: 'syz.0.1716': attribute type 4 has an invalid length. [ 240.903739][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1719'. [ 241.565754][T12440] netlink: 'syz.0.1728': attribute type 11 has an invalid length. [ 241.786613][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 241.824499][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1732'. [ 241.862200][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 241.926601][T12460] netlink: 'syz.2.1735': attribute type 2 has an invalid length. [ 242.022317][T12464] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 242.421721][ T981] IPVS: starting estimator thread 0... [ 242.529589][T12491] IPVS: using max 24 ests per chain, 57600 per kthread [ 242.641238][T12503] IPv6: sit1: Disabled Multicast RS [ 242.662426][T12503] sit1: entered allmulticast mode [ 242.819407][T12517] netlink: 'syz.4.1755': attribute type 1 has an invalid length. [ 242.904835][T12517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.157595][T12534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1760'. [ 243.239053][T12541] netlink: 'syz.0.1761': attribute type 4 has an invalid length. [ 243.635353][T12565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1768'. [ 243.704995][T12565] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.807966][T12572] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 243.878578][T12579] netlink: 'syz.1.1770': attribute type 2 has an invalid length. [ 244.163704][T12597] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.182238][T12597] bridge3: entered promiscuous mode [ 244.187827][T12597] bridge3: entered allmulticast mode [ 244.408762][T12610] sctp: [Deprecated]: syz.1.1781 (pid 12610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.408762][T12610] Use struct sctp_sack_info instead [ 244.574090][T12615] syzkaller0: entered promiscuous mode [ 244.591892][T12615] syzkaller0: entered allmulticast mode [ 244.675323][T12629] __nla_validate_parse: 3 callbacks suppressed [ 244.675343][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 244.697796][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 244.742917][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 244.936198][T12641] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 244.969053][T12641] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1785'. [ 244.996212][T12641] netlink: 'syz.4.1785': attribute type 1 has an invalid length. [ 246.428367][T12628] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 246.441295][T12628] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 246.463646][T12629] bridge0: entered promiscuous mode [ 246.470864][T12629] macsec0: entered promiscuous mode [ 246.476449][T12629] macsec0: entered allmulticast mode [ 246.482763][T12629] bridge0: entered allmulticast mode [ 246.489104][T12629] bridge0: port 1(macsec0) entered blocking state [ 246.495916][T12629] bridge0: port 1(macsec0) entered disabled state [ 246.510032][T12629] bridge0: left allmulticast mode [ 246.518111][T12629] bridge0: left promiscuous mode [ 246.698060][T12662] geneve3: entered promiscuous mode [ 246.703721][T12662] geneve3: entered allmulticast mode [ 246.714383][ T6341] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.739502][ T6341] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.748394][ T6341] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 246.865910][T12675] netlink: 'syz.4.1795': attribute type 24 has an invalid length. [ 246.879949][T12662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.894923][T12662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.183148][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 247.186346][T12692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.207226][T12692] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1803'. [ 247.366478][T12701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1805'. [ 247.660552][T12716] netlink: 'syz.3.1810': attribute type 28 has an invalid length. [ 247.668426][T12716] netlink: 'syz.3.1810': attribute type 3 has an invalid length. [ 247.716916][T12716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1810'. [ 247.857431][T12730] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.948062][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1814'. [ 247.973457][T12735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.267793][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1820'. [ 248.301838][T12753] tipc: Enabled bearer , priority 0 [ 248.322219][T12752] tipc: Enabling of bearer rejected, already enabled [ 248.382811][T12752] tipc: Disabling bearer [ 249.387651][T12662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.398168][T12662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.413416][T12662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 249.514324][T12796] openvswitch: netlink: IPv6 tunnel dst address is zero [ 249.517499][T12662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.533730][T12797] netlink: 'syz.3.1829': attribute type 10 has an invalid length. [ 249.541904][T12662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.541946][T12662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 249.586215][T12797] team0: Device hsr_slave_0 failed to register rx_handler [ 249.662828][T12662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.686569][T12662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.703244][T12662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 249.767834][T12803] __nla_validate_parse: 5 callbacks suppressed [ 249.767856][T12803] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1835'. [ 249.872988][ T68] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.883893][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.896592][ T68] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.908316][ T68] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.939458][ T68] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.947965][ T68] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.990338][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.990528][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 249.998578][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.998612][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.031017][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1839'. [ 250.047777][T12812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 250.057375][ T68] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.069207][ T68] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 250.077569][ T68] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.194314][T12820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1840'. [ 250.229983][T12820] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.287527][T12823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 250.315631][T12823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 250.400294][T12822] tap0: tun_chr_ioctl cmd 1074025672 [ 250.414914][T12822] tap0: ignored: set checksum disabled [ 250.432740][T12832] tap0: tun_chr_ioctl cmd 1074025672 [ 250.443023][T12832] tap0: ignored: set checksum disabled [ 250.449354][T12837] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 250.470804][T12837] netlink: 'syz.1.1844': attribute type 2 has an invalid length. [ 251.134645][T12879] tipc: Enabled bearer , priority 0 [ 251.147837][T12879] syzkaller0: entered promiscuous mode [ 251.157450][T12879] syzkaller0: entered allmulticast mode [ 251.211829][T12879] tipc: Resetting bearer [ 251.235496][T12878] tipc: Resetting bearer [ 251.496181][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1861'. [ 251.587896][T12878] tipc: Disabling bearer [ 251.831009][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1863'. [ 251.936780][T12916] netlink: 'syz.1.1866': attribute type 24 has an invalid length. [ 251.945945][T12906] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1863'. [ 251.959370][T12908] wg1 speed is unknown, defaulting to 1000 [ 252.873651][T12953] syzkaller1: entered promiscuous mode [ 252.892359][T12953] syzkaller1: entered allmulticast mode [ 253.349946][T12983] netlink: 'syz.1.1884': attribute type 8 has an invalid length. [ 253.973205][T13013] netlink: 'syz.4.1892': attribute type 13 has an invalid length. [ 255.292067][T13006] netlink: 'syz.1.1889': attribute type 12 has an invalid length. [ 255.300367][T13006] netlink: 'syz.1.1889': attribute type 29 has an invalid length. [ 255.308221][T13006] __nla_validate_parse: 9 callbacks suppressed [ 255.308240][T13006] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1889'. [ 255.328321][T13006] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1889'. [ 255.446037][T13013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.553196][T13027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1895'. [ 255.621014][T13030] netlink: 'syz.4.1896': attribute type 1 has an invalid length. [ 255.638241][T13030] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1896'. [ 255.695306][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1899'. [ 255.901468][T13049] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 256.166252][T13066] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 256.178387][T13066] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1911'. [ 256.190323][T13066] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1911'. [ 256.203429][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 256.212774][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 256.291919][T13071] tipc: Enabling of bearer rejected, failed to enable media [ 256.374334][T13075] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 256.448690][T13082] syzkaller1: entered promiscuous mode [ 256.454537][T13082] syzkaller1: entered allmulticast mode [ 256.606799][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1919'. [ 256.631896][T13092] nftables ruleset with unbound set [ 256.782960][T13100] netlink: 'syz.2.1923': attribute type 11 has an invalid length. [ 257.240864][T13133] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 257.272778][T13136] openvswitch: netlink: Message has 5 unknown bytes. [ 257.299930][T13133] bridge_slave_1: entered promiscuous mode [ 257.318164][T13133] bridge_slave_1: entered allmulticast mode [ 257.336050][T13133] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 257.847472][T13161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.857883][T13162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.912413][T13164] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 258.295632][T13182] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 258.819095][T13209] sctp: [Deprecated]: syz.1.1956 (pid 13209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.819095][T13209] Use struct sctp_sack_info instead [ 258.880041][T13209] sctp: [Deprecated]: syz.1.1956 (pid 13209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.880041][T13209] Use struct sctp_sack_info instead [ 259.144590][T13223] veth0: entered promiscuous mode [ 259.333059][T13232] netlink: 'syz.3.1961': attribute type 2 has an invalid length. [ 259.391642][T13222] team0: Refused to change device type [ 259.472383][T13226] syz.1.1963 (13226) used greatest stack depth: 17864 bytes left [ 260.055763][T13283] netlink: 'syz.3.1979': attribute type 16 has an invalid length. [ 260.066374][T13283] netlink: 'syz.3.1979': attribute type 3 has an invalid length. [ 260.106388][T13281] openvswitch: netlink: Tunnel attr 13 has unexpected len 1 expected 16 [ 260.367355][T13298] __nla_validate_parse: 24 callbacks suppressed [ 260.367379][T13298] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1988'. [ 260.391738][T13298] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1988'. [ 260.463500][T13300] IPv6: sit2: Disabled Multicast RS [ 260.477249][T13300] sit2: entered allmulticast mode [ 260.526836][T13310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 260.542374][T13307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1990'. [ 260.604691][T13316] netlink: 'syz.2.1991': attribute type 2 has an invalid length. [ 260.897652][T13338] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 260.980673][T13343] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1999'. [ 261.006059][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.013702][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.073919][T13350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 261.123246][T13343] netlink: 'syz.3.1999': attribute type 4 has an invalid length. [ 261.757382][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2010'. [ 261.788690][T13388] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 261.829164][T13388] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 261.858737][T13388] gretap2: entered promiscuous mode [ 261.907646][T13388] gretap2: entered allmulticast mode [ 262.007128][T13406] netlink: 'syz.4.2014': attribute type 8 has an invalid length. [ 262.342773][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 262.503171][T13439] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 262.530299][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2024'. [ 262.544909][T13439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2022'. [ 263.295768][T13490] wg1 speed is unknown, defaulting to 1000 [ 263.429869][T13496] netlink: 'syz.3.2040': attribute type 83 has an invalid length. [ 263.609795][T13500] bond5: Removing last ns target with arp_interval on [ 263.958595][T13518] tipc: Enabled bearer , priority 0 [ 264.004985][T13518] syzkaller0: entered promiscuous mode [ 264.035812][T13518] syzkaller0: entered allmulticast mode [ 264.159756][T13518] tipc: Resetting bearer [ 264.209254][T13516] tipc: Resetting bearer [ 264.320148][T13516] tipc: Disabling bearer [ 264.647949][T13553] can: request_module (can-proto-0) failed. [ 265.084873][T13567] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.092799][T13567] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.198448][T13567] veth0_to_bond: left allmulticast mode [ 265.207827][T13567] veth0_to_team: left promiscuous mode [ 265.214595][T13567] veth0_to_team: left allmulticast mode [ 265.240603][T13567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.254763][T13567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.333461][T13567] macsec0: left promiscuous mode [ 265.350096][T13567] geneve2: left promiscuous mode [ 265.355084][T13567] geneve2: left allmulticast mode [ 265.365980][T13567] bond1: left promiscuous mode [ 265.370855][T13567] bridge3: left promiscuous mode [ 265.389669][T13567] ip6gre1: left allmulticast mode [ 265.409988][ T1106] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.446648][ T1106] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 265.490945][ T1106] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.533606][ T1106] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.562622][ T1106] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 265.587187][ T1106] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.588688][T13589] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 265.615295][ T1106] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.627795][T13589] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 265.640312][ T1106] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 265.659741][T13589] __nla_validate_parse: 5 callbacks suppressed [ 265.659763][T13589] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2065'. [ 265.672563][ T1106] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.689825][T13602] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.2067'. [ 265.699952][T13597] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 265.706855][ T1106] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.707725][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 265.736593][ T1106] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 265.778119][ T1106] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 265.874228][T13591] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 265.882287][T13591] netlink: 'syz.0.2065': attribute type 11 has an invalid length. [ 265.890988][T13591] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2065'. [ 265.981055][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 266.154908][T13627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.165843][T13627] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2077'. [ 266.235610][T13633] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2077'. [ 266.369634][T13639] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 266.413119][T13639] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 266.726191][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 266.768129][T13660] delete_channel: no stack [ 266.774367][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2088'. [ 267.273335][T13689] netlink: 'syz.2.2096': attribute type 1 has an invalid length. [ 267.331350][T13694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2097'. [ 267.957669][T13714] wg2: left promiscuous mode [ 267.963618][T13714] wg2: left allmulticast mode [ 268.494711][T13714] bond1: left promiscuous mode [ 268.562541][T13714] vlan0: left allmulticast mode [ 268.567533][T13714] veth0_vlan: left allmulticast mode [ 268.577463][T13714] vlan0: left promiscuous mode [ 268.584713][T13714] macvtap1: left promiscuous mode [ 268.590161][T13714] macvtap1: left allmulticast mode [ 268.605963][T13714] vlan2: left promiscuous mode [ 268.611227][T13714] bond4: left promiscuous mode [ 268.616469][T13714] vlan2: left allmulticast mode [ 268.621642][T13714] bond4: left allmulticast mode [ 268.644332][T13714] geneve3: left promiscuous mode [ 268.651450][T13714] geneve3: left allmulticast mode [ 268.665728][T13714] gretap2: left promiscuous mode [ 268.672892][T13714] gretap2: left allmulticast mode [ 268.686635][T13729] veth0_macvtap: left promiscuous mode [ 268.748681][ T6343] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.767392][ T6343] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.802478][ T6343] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.842436][ T6343] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.879189][ T6343] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.887725][ T6343] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.923656][ T6343] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.950596][ T6343] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.963157][ T6343] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 268.973882][ T6343] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.984428][ T6343] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 268.996966][ T6343] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 269.048066][T13773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.106020][T13777] netlink: 'syz.1.2121': attribute type 1 has an invalid length. [ 269.607075][T13808] IPVS: Unknown mcast interface: vcan0 [ 269.767742][T13820] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 269.993452][T13824] delete_channel: no stack [ 270.006323][T13824] delete_channel: no stack [ 270.535180][T13845] syzkaller0: entered promiscuous mode [ 270.549191][T13845] syzkaller0: entered allmulticast mode [ 270.563424][T13844] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.623602][T13845] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 270.669082][T13858] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 270.769745][T13845] __nla_validate_parse: 6 callbacks suppressed [ 270.769768][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'. [ 271.357615][T13882] sctp: [Deprecated]: syz.0.2144 (pid 13882) Use of int in maxseg socket option. [ 271.357615][T13882] Use struct sctp_assoc_value instead [ 271.391683][T13885] netlink: 'syz.4.2145': attribute type 10 has an invalid length. [ 271.456268][T13885] bridge_slave_1: left allmulticast mode [ 271.473395][T13881] openvswitch: netlink: Message has 4 unknown bytes. [ 271.482440][T13885] bridge_slave_1: left promiscuous mode [ 271.509393][T13885] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.655382][T13893] openvswitch: netlink: Unknown key attributes 2 [ 271.768351][T13899] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2148'. [ 271.940414][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 272.293438][T13920] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 272.325717][T13920] bond6 (unregistering): Released all slaves [ 272.407361][T13925] macvtap1: entered promiscuous mode [ 272.413112][T13925] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 272.429368][T13925] macvtap1: entered allmulticast mode [ 272.440588][T13925] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 272.458768][T13926] macvtap2: entered promiscuous mode [ 272.464306][T13926] macvtap2: entered allmulticast mode [ 272.719522][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 272.736534][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2165'. [ 272.934433][T13963] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 273.097554][T13957] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 273.385629][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2172'. [ 273.677981][T13998] netlink: 'syz.2.2177': attribute type 10 has an invalid length. [ 273.712763][T13998] veth0_virt_wifi: entered allmulticast mode [ 273.752221][T13998] veth0_virt_wifi: entered promiscuous mode [ 273.789624][T13998] team0: Port device veth0_virt_wifi added [ 273.925595][T14021] bond6: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 273.948288][T14021] bond6 (unregistering): Released all slaves [ 274.419174][T14046] netlink: 'syz.2.2193': attribute type 12 has an invalid length. [ 274.604380][T14060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2198'. [ 274.672222][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 274.788257][T14071] sctp: [Deprecated]: syz.3.2200 (pid 14071) Use of int in maxseg socket option. [ 274.788257][T14071] Use struct sctp_assoc_value instead [ 274.995224][T14084] netlink: 'syz.2.2203': attribute type 4 has an invalid length. [ 275.039153][T14085] bond0: Device is already in use. [ 275.126184][T14090] netlink: 'syz.2.2206': attribute type 1 has an invalid length. [ 275.241335][T14090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.362951][T14101] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.383836][T14101] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 275.413596][T14112] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 275.422493][T14101] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 275.528458][T14090] veth1: entered promiscuous mode [ 275.556674][T14090] bond6: (slave veth1): Enslaving as an active interface with a down link [ 275.584779][T14106] vlan2: entered allmulticast mode [ 275.590402][T14106] bond6: entered allmulticast mode [ 275.647151][T14121] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2213'. [ 275.669396][T14121] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1401593127/1401593129 [ 275.765230][T14112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.785633][T14126] netlink: 'syz.0.2214': attribute type 12 has an invalid length. [ 275.794701][T14115] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 275.833140][T14123] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2214'. [ 275.902815][T14119] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2213'. [ 275.911724][T14134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 275.922208][T14131] syzkaller0: entered promiscuous mode [ 275.927712][T14131] syzkaller0: entered allmulticast mode [ 275.933593][T14128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 275.955032][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 276.006836][T14119] bond4 (unregistering): Released all slaves [ 276.318985][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 276.376310][T14147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.421947][T14156] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.2223'. [ 276.532255][T14158] netlink: 'syz.3.2224': attribute type 3 has an invalid length. [ 276.577313][T14162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2225'. [ 276.611758][T14165] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2224'. [ 276.652159][T14165] 8021q: VLANs not supported on ip6_vti0 [ 277.064993][T14186] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2231'. [ 277.164524][T14192] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 277.179585][T14194] netlink: 'syz.2.2235': attribute type 1 has an invalid length. [ 277.193656][T14192] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 277.239492][T14194] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.417711][T14209] netlink: 'syz.3.2241': attribute type 83 has an invalid length. [ 277.452451][T14212] netlink: 'syz.3.2241': attribute type 83 has an invalid length. [ 278.087562][T14265] openvswitch: netlink: Actions may not be safe on all matching packets [ 278.138021][T14265] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 278.233472][T14265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.292982][T14276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.302039][T14276] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 278.314730][T14276] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 278.369817][T14265] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.669609][T14298] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 279.131287][T14324] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 279.483844][T14353] netlink: 'syz.0.2277': attribute type 4 has an invalid length. [ 279.803584][T14373] netlink: 'syz.0.2283': attribute type 1 has an invalid length. [ 279.817090][T14376] veth0_to_bond: mtu less than device minimum [ 279.932589][T14373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 279.955252][T14375] bond6: (slave gretap4): making interface the new active one [ 279.980866][T14375] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 280.062421][T14390] openvswitch: netlink: Flow key attribute not present in set flow. [ 280.099469][T14390] tipc: Failed to remove unknown binding: 66,1,1/2478529250:3835213977/3835213979 [ 280.134482][T14390] tipc: Failed to remove unknown binding: 66,1,1/2478529250:3835213977/3835213979 [ 280.226644][T14401] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 280.852291][T14435] tipc: Enabled bearer , priority 0 [ 280.867503][T14438] vlan2: entered allmulticast mode [ 280.873155][T14438] hsr0: entered allmulticast mode [ 280.878231][T14438] hsr_slave_0: entered allmulticast mode [ 280.884411][T14438] hsr_slave_1: entered allmulticast mode [ 280.896147][T14435] syzkaller0: entered promiscuous mode [ 280.902542][T14435] syzkaller0: entered allmulticast mode [ 280.912616][T14439] wg1: entered promiscuous mode [ 280.917555][T14439] wg1: entered allmulticast mode [ 280.927228][T14435] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 280.983431][T14433] tipc: Resetting bearer [ 281.025052][T14433] tipc: Disabling bearer [ 281.037032][T14443] __nla_validate_parse: 26 callbacks suppressed [ 281.037049][T14443] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2307'. [ 281.243679][T14450] nbd: nbd2 already in use [ 281.254701][T14450] block nbd2: NBD_DISCONNECT [ 281.260927][T14450] block nbd2: Send disconnect failed -32 [ 281.268230][T14450] block nbd2: shutting down sockets [ 281.425818][T14467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 281.533481][T14471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 281.536519][T14473] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2315'. [ 281.540494][T14471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 281.634356][T14473] validate_nla: 1 callbacks suppressed [ 281.634377][T14473] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 281.714431][T14482] netlink: 'syz.0.2317': attribute type 6 has an invalid length. [ 281.736667][T14482] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2317'. [ 281.760680][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 281.894187][T14481] bond4: (slave bridge7): making interface the new active one [ 281.917267][T14481] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 282.192354][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2322'. [ 282.844754][T14547] IPv6: Can't replace route, no match found [ 282.882881][T14547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2333'. [ 282.996387][T14550] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 283.013295][T14550] bond4 (unregistering): Released all slaves [ 283.040306][T14557] netlink: 'syz.2.2334': attribute type 16 has an invalid length. [ 283.060120][T14557] netlink: 'syz.2.2334': attribute type 17 has an invalid length. [ 283.170186][T14557] ip6gretap0: left promiscuous mode [ 283.225065][T14557] veth0_virt_wifi: left allmulticast mode [ 283.245121][T14557] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 283.494413][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 283.514131][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 283.540023][T14573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2343'. [ 283.737477][T14592] tipc: Enabled bearer , priority 0 [ 283.760985][T14592] syzkaller0: entered promiscuous mode [ 283.766520][T14592] syzkaller0: entered allmulticast mode [ 283.886989][T14601] tipc: Resetting bearer [ 283.927132][T14585] tipc: Resetting bearer [ 283.957905][T14585] tipc: Disabling bearer [ 284.421357][T14616] netlink: 'syz.4.2356': attribute type 13 has an invalid length. [ 284.561449][T14616] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.587849][T14616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.639975][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.860803][T14637] netlink: 'syz.0.2362': attribute type 29 has an invalid length. [ 284.905755][T14637] netlink: 'syz.0.2362': attribute type 29 has an invalid length. [ 284.934480][ T68] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 284.946129][T14637] unsupported nla_type 58 [ 284.959836][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 285.199667][T14657] netlink: 'syz.2.2369': attribute type 1 has an invalid length. [ 285.222041][T14657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.893818][T14702] netlink: 'syz.4.2384': attribute type 10 has an invalid length. [ 285.932193][T14702] veth0_virt_wifi: entered allmulticast mode [ 285.942473][T14702] team0: Port device veth0_virt_wifi added [ 285.992720][ T6341] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.016718][ T6341] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.090591][T14708] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 286.104976][T14708] bond7 (unregistering): Released all slaves [ 286.165256][T14713] veth1: entered allmulticast mode [ 286.447955][T14739] tipc: Failed to remove unknown binding: 66,1,1/0:3451441174/3451441176 [ 286.610439][ T5919] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 286.798223][T14757] __nla_validate_parse: 8 callbacks suppressed [ 286.798247][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.844632][T14757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.877046][T14769] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.890039][T14769] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.900420][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2400'. [ 286.959355][T14772] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 286.970734][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2404'. [ 286.980280][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2404'. [ 286.986912][T14776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2405'. [ 286.992370][T14772] bond5 (unregistering): Released all slaves [ 287.028675][T14776] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 287.148509][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 287.164767][T14781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 287.261194][T14790] C: renamed from team_slave_0 [ 287.274683][T14790] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 287.286741][T14790] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 287.615892][T14804] netlink: 'syz.3.2413': attribute type 20 has an invalid length. [ 287.636260][T14804] netlink: 'syz.3.2413': attribute type 20 has an invalid length. [ 287.804656][T14813] tipc: Enabled bearer , priority 0 [ 287.873034][T14819] netlink: 'syz.2.2417': attribute type 2 has an invalid length. [ 287.928521][T14813] syzkaller0: entered promiscuous mode [ 287.955604][T14813] syzkaller0: entered allmulticast mode [ 287.980689][T14813] tipc: Resetting bearer [ 288.050061][T14810] tipc: Resetting bearer [ 288.901834][T13741] tipc: Node number set to 3380533436 [ 289.647633][T14810] tipc: Disabling bearer [ 290.199109][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.402372][T14894] tun0: tun_chr_ioctl cmd 1074025675 [ 290.417986][T14894] tun0: persist disabled [ 290.437955][T14894] netlink: 'syz.3.2437': attribute type 1 has an invalid length. [ 290.665708][T14906] netlink: 'syz.4.2440': attribute type 6 has an invalid length. [ 290.701730][T14906] netlink: 'syz.4.2440': attribute type 6 has an invalid length. [ 291.632742][T14966] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 291.919039][T14988] __nla_validate_parse: 17 callbacks suppressed [ 291.919063][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2463'. [ 292.075524][T15006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 292.578035][T15035] veth0_to_bridge: entered promiscuous mode [ 292.587970][T15035] netlink: 'syz.2.2474': attribute type 4 has an invalid length. [ 292.600138][T15029] veth0_to_bridge: left promiscuous mode [ 292.735841][T15040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2478'. [ 292.737586][T15043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2477'. [ 293.012945][T15066] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2480'. [ 293.037483][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2485'. [ 293.446953][T15095] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2492'. [ 293.680126][T15110] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 294.071321][T15140] gtp0: entered promiscuous mode [ 294.076335][T15140] gtp0: entered allmulticast mode [ 294.101661][T15132] veth0: entered promiscuous mode [ 294.119532][T15129] veth0: left promiscuous mode [ 294.210331][T15144] netlink: 'syz.3.2505': attribute type 12 has an invalid length. [ 294.289355][T15148] netlink: 'syz.4.2506': attribute type 1 has an invalid length. [ 294.352502][T15148] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2506'. [ 294.376100][T15160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2509'. [ 294.383412][T15161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2509'. [ 294.475172][T15160] bond8 (unregistering): Released all slaves [ 294.587785][T15161] bond8 (unregistering): Released all slaves [ 295.174661][T15206] sctp: [Deprecated]: syz.0.2521 (pid 15206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.174661][T15206] Use struct sctp_sack_info instead [ 295.775094][T15234] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 297.108678][T15234] 8021q: adding VLAN 0 to HW filter on device bond4 [ 297.145949][T15235] bond4: (slave geneve2): making interface the new active one [ 297.201774][T15235] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 297.339948][ T6343] [ 297.342328][ T6343] ============================================ [ 297.348498][ T6343] WARNING: possible recursive locking detected [ 297.354676][ T6343] syzkaller #0 Not tainted [ 297.359117][ T6343] -------------------------------------------- [ 297.365285][ T6343] kworker/u8:26/6343 is trying to acquire lock: [ 297.371547][ T6343] ffffe8ffffd673b8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 297.380869][ T6343] [ 297.380869][ T6343] but task is already holding lock: [ 297.388858][ T6343] ffffe8ffffd7cde8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 297.398311][ T6343] [ 297.398311][ T6343] other info that might help us debug this: [ 297.406390][ T6343] Possible unsafe locking scenario: [ 297.406390][ T6343] [ 297.413844][ T6343] CPU0 [ 297.417138][ T6343] ---- [ 297.420414][ T6343] lock(&pd_list->lock); [ 297.424752][ T6343] lock(&pd_list->lock); [ 297.429087][ T6343] [ 297.429087][ T6343] *** DEADLOCK *** [ 297.429087][ T6343] [ 297.437231][ T6343] May be due to missing lock nesting notation [ 297.437231][ T6343] [ 297.445572][ T6343] 3 locks held by kworker/u8:26/6343: [ 297.450943][ T6343] #0: ffff8881472ed148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 297.463134][ T6343] #1: ffffc9000de57bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 297.474972][ T6343] #2: ffffe8ffffd7cde8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 297.484647][ T6343] [ 297.484647][ T6343] stack backtrace: [ 297.490543][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 297.490565][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.490578][ T6343] Workqueue: pencrypt_parallel padata_parallel_worker [ 297.490615][ T6343] Call Trace: [ 297.490623][ T6343] [ 297.490632][ T6343] dump_stack_lvl+0x189/0x250 [ 297.490655][ T6343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.490675][ T6343] ? __pfx__printk+0x10/0x10 [ 297.490706][ T6343] ? print_lock_name+0xde/0x100 [ 297.490731][ T6343] print_deadlock_bug+0x28b/0x2a0 [ 297.490751][ T6343] validate_chain+0x1a3f/0x2140 [ 297.490773][ T6343] ? __queue_work+0x102/0xfb0 [ 297.490792][ T6343] ? __queue_work+0xc56/0xfb0 [ 297.490811][ T6343] __lock_acquire+0xab9/0xd20 [ 297.490839][ T6343] ? padata_do_serial+0x73e/0xb80 [ 297.490860][ T6343] lock_acquire+0x120/0x360 [ 297.490884][ T6343] ? padata_do_serial+0x73e/0xb80 [ 297.490908][ T6343] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.490932][ T6343] _raw_spin_lock+0x2e/0x40 [ 297.490958][ T6343] ? padata_do_serial+0x73e/0xb80 [ 297.490980][ T6343] padata_do_serial+0x73e/0xb80 [ 297.491008][ T6343] ? padata_parallel_worker+0x44/0x1d0 [ 297.491030][ T6343] padata_parallel_worker+0x75/0x1d0 [ 297.491053][ T6343] ? process_scheduled_works+0x9ef/0x17b0 [ 297.491070][ T6343] process_scheduled_works+0xae1/0x17b0 [ 297.491098][ T6343] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.491122][ T6343] worker_thread+0x8a0/0xda0 [ 297.491151][ T6343] kthread+0x70e/0x8a0 [ 297.491173][ T6343] ? __pfx_worker_thread+0x10/0x10 [ 297.491189][ T6343] ? __pfx_kthread+0x10/0x10 [ 297.491210][ T6343] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.491225][ T6343] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.491243][ T6343] ? __pfx_kthread+0x10/0x10 [ 297.491263][ T6343] ret_from_fork+0x439/0x7d0 [ 297.491282][ T6343] ? __pfx_ret_from_fork+0x10/0x10 [ 297.491301][ T6343] ? __switch_to_asm+0x39/0x70 [ 297.491323][ T6343] ? __switch_to_asm+0x33/0x70 [ 297.491344][ T6343] ? __pfx_kthread+0x10/0x10 [ 297.491365][ T6343] ret_from_fork_asm+0x1a/0x30 [ 297.491394][ T6343] [ 297.711247][T15264] __nla_validate_parse: 2 callbacks suppressed [ 297.711268][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'. [ 297.742264][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2536'. [ 297.779161][T15265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2536'. [ 297.985899][T15262] caif:caif_disconnect_client(): nothing to disconnect [ 299.399073][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!