last executing test programs: 7.32040807s ago: executing program 4 (id=9820): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000200)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@private2, 0x40, r6}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4, 0x9f9) bind$inet6(r7, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) write$tun(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140200100000000000000000000000000012001000000000000000000000000000220e620e60030000000112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677"], 0x64) recvfrom$inet6(r7, &(0x7f0000000800)=""/100, 0x64, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04c8b7f900621856b631cd6a17ff000a1fa3d86a743f6d504d12c2a137335eb3f5503688972d18193f240a5a77ee8baad47466e95c93e6922cab45895c057141d3c4b17f515eae9599eb72ab2b981a9415801f"], 0x26}}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0xfe}, {}]}) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'veth1_to_hsr\x00', {0x2, 0x4e23, @broadcast}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6.675475911s ago: executing program 1 (id=9831): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2804d6d036a874a35892be9fe191f4ecde53b95b881f3b1cfc5ff94dd177d81fbc53574ee01db2f59421964c38593f2545ec4c5939fd747e17eb780593ec99671851", @ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="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", @ANYRESHEX=r0], 0x50) 6.518336464s ago: executing program 1 (id=9834): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99ecbddbfee7f7abeba22c29a9cb001001079a87ed58d2cbaf30b8fc3b5fd11e6ca750a6dc5dba2cd1d9fed1fb63bafef7d7bdd5bad81e40379623de9000000000054395605e46e00ded1acb26f8fa9c2702a8aac94fcbbdd2fbbba184bc337d5cb0c04a788fd76b402d5229125c274b171290fdfb32d00504a2a4f797a0103b19a04911e2ab1f208858be1873ee684e45ce2dd5de070f1aabdaa2de7edcbd27f403caffe57995b4e2d914a3c5b9bcf7ba242d1ed391d564b18b3de9c1db2b9232c5e"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000900)={r1, &(0x7f0000000800)='dccp\x00', 0x90001, &(0x7f0000000840)={@align=0x6b5c, {0x7a, 0xfffe, 0x200, 0xc}}, 0x0, &(0x7f0000000880)={@_ha_fsid}, &(0x7f00000008c0)=0x10000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x7, &(0x7f0000000940)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r7, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x798, 0x478, 0x270, 0x478, 0x478, 0x0, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@empty, 0x6, 0x8, 0x6}}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0, @mcast2, @private0, @empty, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@mcast1, 0x23, 0x29, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7b, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a80)=@deltaction={0xec, 0x31, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0xec}}, 0x0) 5.971961732s ago: executing program 3 (id=9839): getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x2cb}, 0x0) r0 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e3, &(0x7f0000000000)={r0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000950000000000000000000000000000000000000074dd8279e08e06251e81e95622ef"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc) getpeername$packet(r1, &(0x7f0000000300), &(0x7f0000000340)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x21, 0x7, 0x7, 0x2, 0x40000, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000b2cd2490082b000200000049dc83d0", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000100"/28], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000940)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x104, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xafdd}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mmap(&(0x7f0000fa5000/0x2000)=nil, 0x2000, 0x1000008, 0x28011, r5, 0xcafd000) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x50000, 0x57, 0x2, 0x4e00, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r9, 0x0) mmap(&(0x7f0000fa5000/0x1000)=nil, 0x1000, 0x5, 0x13, r9, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x8, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r10) 5.829593423s ago: executing program 1 (id=9841): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200, 0x45}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8800) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x200, 0x45}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x8800) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) (async) 5.775283021s ago: executing program 4 (id=9842): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0xfffffffffffffec2) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20004000) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0xfffc, @any, 0x4}, 0xe) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={0x0, 0xb6bc, 0x4}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000540)={r6, 0x5, 0x401}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000440)={r7, r8/1000+60000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x465c13919b7775a7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) recvfrom$inet(r2, &(0x7f0000000600)=""/178, 0xb2, 0x2000, &(0x7f00000006c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002dbd7000ffdbdf255300000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x44) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xc0, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4f76, 0x7}}}}, [@NL80211_ATTR_VENDOR_DATA={0x8e, 0xc5, "a6a5debccfd72329590d93712a9c5c1a11c9f1014ae01ecc40a307ce4cf8e2dd2c41b764e54de07f9f01415da1f2cfb8543208d76cbc201a3a017b15b56cd32d5352b2a42fe1f54b5162b93b9218fcacdf1b98c6e029387197540792ebb9ca3e1b26705e8e646c2e80a27d623daaddc2f56f6e19bbd606c3e2a893cd2c21219fd9ab73e8f4b5f2c9fc6b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0xc0}}, 0x0) 5.258381898s ago: executing program 4 (id=9845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000100), 0xe) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @local, 0x3b4d}}, 0x24) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bind$bt_l2cap(r5, &(0x7f0000000400)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) listen(r5, 0x0) (async) listen(r2, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 5.257901075s ago: executing program 1 (id=9846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x259fdbfd, {0x0, 0x0, 0x0, r3, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000180)={0x27}, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x14}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xa6) 5.255408713s ago: executing program 3 (id=9848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'team0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x66) 5.250282803s ago: executing program 2 (id=9851): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="08000900000000001400028005000b0005000000050009000100"/44], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a0001000000000000000001000000000000000002000000"], 0x1c}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x401) listen(r2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$x25(r0, &(0x7f0000000240), 0x12) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fddbdf250400000005000500000000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="f56e9c28ce46d15b90dd3593f91e0500050006000001"], 0x30}, 0x1, 0x0, 0x0, 0x240000c4}, 0x40b4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$netlink(0x10, 0x3, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x2) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r6], 0x7c}}, 0x0) 5.249886166s ago: executing program 0 (id=9852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x64010101}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001031400e803140008004500005c000000004084b019640101026401010104d2270f00000000000000000100003c000030390001a000000a000a000000010006000c"], 0x6a) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0x0, 0x9}}}}}, 0x0) 5.222588672s ago: executing program 2 (id=9853): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 5.136949804s ago: executing program 2 (id=9854): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = syz_open_procfs$namespace(r5, &(0x7f0000001780)='ns/ipc\x00') r9 = getpid() sendmmsg$unix(r4, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r9, r6}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={r2, r3, r7}, 0xc) 4.989808142s ago: executing program 2 (id=9855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70018000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 4.981274994s ago: executing program 2 (id=9856): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x58c50}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) write(r1, &(0x7f0000000140)="00008847d100582a", 0x8) 4.921223563s ago: executing program 1 (id=9857): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000f185dd606410a600080000fc020000000000000000000000000000ff02000000000000000000000000000129"], 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$netlink(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x3, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x2004c085) (async) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000d380)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) (async) socket$inet(0x2, 0x1, 0x6e00000) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="270086dd06000a00"], 0x340a) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0x6f, 0x1}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x27, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 4.836955298s ago: executing program 4 (id=9858): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x0, 0x0, @multicast1}}}}}, 0x0) socket$inet(0x10, 0x3, 0x0) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) mmap(&(0x7f00002d5000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r5, 0x3ffb8000) (async) mmap(&(0x7f00002d5000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r5, 0x3ffb8000) 4.509135932s ago: executing program 0 (id=9859): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c20402"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000140)={'veth1_macvtap\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r6 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x42}, 0x28) 706.227081ms ago: executing program 4 (id=9860): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0}}], 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x9}, 0x8) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000280)={@multicast1, @multicast2, @multicast1}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x1505, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff0f000000000000000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="20a00400858d0000580012800e00010069703665727370616e000000440002800500160002000000060018000100000014000700fc0200000000000000000000000000000400120005001600010000000600020007000000060010004e210000"], 0x78}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) 695.435792ms ago: executing program 0 (id=9861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 612.771711ms ago: executing program 3 (id=9862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) 26.560165ms ago: executing program 0 (id=9863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34004000200025a729bd7000fddbdf250a0000cdea000000120000000800060000000000080018004e1f4e220500150001000000"], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34004000200025a729bd7000fddbdf250a0000cdea000000120000000800060000000000080018004e1f4e220500150001000000"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffd) 23.89033ms ago: executing program 3 (id=9864): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000001600)) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) 23.246622ms ago: executing program 0 (id=9865): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) listen(r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x11, r9, 0x4000) setsockopt$sock_attach_bpf(r8, 0x1, 0x54, &(0x7f0000000080), 0x4) listen(r7, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 22.760439ms ago: executing program 3 (id=9866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70020000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 22.143163ms ago: executing program 4 (id=9867): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x9}], 0x3c) 2.190426ms ago: executing program 0 (id=9868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast1, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "cad7f33e9953a658", "f4982122445d8a85d8b3cd8b476b828a16fa0333d78a85f9e5f8183adf90c075", "030500", "b7e166d132bc162c"}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="90092dbd5000fbdbdf253c16000008000a010100008008000b0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="e673b46aef25e1d05d1223b4fb56ed83c2eeb2b2f8a0dfade9048b32d7aa1a0a0759a27027dca8235377e2f1cd80f95cd34ce3715f1d359f6ade67a17c915e37620de5caa1a17f3a3a77cf49d3c7c6d233750057687e6bcd9a7d8eb3ab46178411941670c093d4b658da8326c65ce58e0bf24d5a543fcf1e45cf7ce14953a28b870017229348e28b19e36f28b16f2cb1b346b291a115554601283bf539839b6ed36d491db6c59e32bd778ae27eb1f310a2fc000000000000"], 0x28}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc010}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000300)='.', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 1.250322ms ago: executing program 3 (id=9869): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) close(r0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'macvtap0\x00', 0x600}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r0, 0x10, 0x0, 0x10000, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r0, 0x7, 0x0, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) 478.449µs ago: executing program 2 (id=9870): socketpair(0x0, 0x2, 0x7f, &(0x7f0000000100)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xfd3ee000) r2 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000b40)={0x154, r1, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8000, 0x17}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="380d39146c78"}, @NL80211_ATTR_KEYS={0x100, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b112de42c9497d28a89c5d89e1"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "94aa38b99d"}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0xfffffffffffffe7c}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c23666a5142ac2b632c27b469e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, '0Y:C$'}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f5ce150fbea71d020609a8ca0a"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1d04e05731"}, @NL80211_KEY_DEFAULT={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d3fc706f898f62648edb9e2014"}]}]}, @NL80211_ATTR_DISABLE_HT, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x58f3}]]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x8008) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x3, 0x3) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000800) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900011073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000001a0f000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000008000000000000a00000ab1890000020a010200000000000081385097c5000003000058791088770f5b1aea5378fe67d4b60b00000000000ac66617050aaf6f80d149f5cc74efed37e51a802123705f7e20d2a100000000000000000000000000000087bdbf95c20814887b679dcfbbc6c9592dfc9ef25c7541c60861f316"], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 0s ago: executing program 1 (id=9871): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xffffffff) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) close(r1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008006e822d8300008000e8bd450000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000033ede5f2000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9100000000000b5090100000000009500000000000000b509000002000000639a04fe00000000b509000000000000c39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=9877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$inet(0x2, 0x803, 0x6) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="12000000080000000800000008000000000000000b1a39f4b42b698d37673992399e2208ffa2939b8722020538d8411150d1b1ff1c4c9a57a211a64ef98c3849f8be6f1e3a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendto$inet(r6, &(0x7f0000000080)="b9", 0x1, 0x48811, 0x0, 0xfffffd1e) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000002c0)='\x00', 0x1, 0x805, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x4}, 0x50) (async) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203", @ANYRES8=0x0, @ANYRES32=r3, @ANYRES32=r3], 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000060151ecb5cf22c0711f9e934c16a64ac008fde9deb9a7f26dae505d20c771c98d26f8d4518417b785e06d627ac24593b705992e95beb8332c617df25cde2cd002822631b0a5c5"], 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c00000010001fff00000065603ce83b2590d500", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00", @ANYRES32=r9, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x40, 0x80, 0x10001, 0x5efc, {{0x1c, 0x4, 0x0, 0x2b, 0x70, 0x64, 0x0, 0xe2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x38, 0x3, 0x5, [{@local, 0x2}]}, @noop, @ssrr={0x89, 0x7, 0xa0, [@remote]}, @generic={0x83, 0x10, "7e16b1df78ff874a66d629d9eee8"}, @ssrr={0x89, 0xb, 0x92, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0x12, "68dac657459d6d2f45cc0b44de8a455e"}, @ssrr={0x89, 0x17, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @broadcast]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000002180)=ANY=[@ANYBLOB="60060000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000ffdbdf250c0000004c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="24000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002007663616e30000000000000000000000014000200776c616e3000000000000000000000001c0001800800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x660}, 0x1, 0x0, 0x0, 0x4}, 0x80) kernel console output (not intermixed with test programs): yz.1.8570': attribute type 1 has an invalid length. [ 1124.471797][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1124.490813][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8570'. [ 1124.551264][ T5499] bond11: entered promiscuous mode [ 1124.557379][ T5499] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1124.651927][ T5514] nft_compat: unsupported protocol 0 [ 1124.712387][ T5516] syz.1.8573: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1124.772446][ T5516] CPU: 1 UID: 0 PID: 5516 Comm: syz.1.8573 Not tainted syzkaller #0 PREEMPT(full) [ 1124.772478][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1124.772491][ T5516] Call Trace: [ 1124.772501][ T5516] [ 1124.772512][ T5516] dump_stack_lvl+0xe8/0x150 [ 1124.772556][ T5516] warn_alloc+0x24c/0x270 [ 1124.772591][ T5516] ? stack_depot_save_flags+0x33/0x800 [ 1124.772659][ T5516] ? __pfx_warn_alloc+0x10/0x10 [ 1124.772689][ T5516] ? kasan_save_track+0x3e/0x80 [ 1124.772715][ T5516] ? __kasan_kmalloc+0x93/0xb0 [ 1124.772746][ T5516] ? xsk_setsockopt+0x52a/0x960 [ 1124.772843][ T5516] ? do_sock_setsockopt+0x17c/0x1b0 [ 1124.772868][ T5516] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1124.772890][ T5516] ? do_syscall_64+0x174/0x580 [ 1124.772918][ T5516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.772954][ T5516] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1124.773017][ T5516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1124.773059][ T5516] ? __kasan_kmalloc+0x93/0xb0 [ 1124.773091][ T5516] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1124.773121][ T5516] ? __kmalloc_cache_noprof+0x150/0x660 [ 1124.773152][ T5516] vmalloc_user_noprof+0xad/0xe0 [ 1124.773197][ T5516] ? xskq_create+0xbf/0x170 [ 1124.773220][ T5516] xskq_create+0xbf/0x170 [ 1124.773246][ T5516] xsk_init_queue+0x8a/0xe0 [ 1124.773272][ T5516] xsk_setsockopt+0x52a/0x960 [ 1124.773291][ T5516] ? __fget_files+0x2a/0x420 [ 1124.773324][ T5516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1124.773423][ T5516] ? __pfx_aa_sk_perm+0x10/0x10 [ 1124.773475][ T5516] ? aa_sock_opt_perm+0xff/0x1a0 [ 1124.773566][ T5516] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1124.773607][ T5516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1124.773651][ T5516] do_sock_setsockopt+0x17c/0x1b0 [ 1124.773678][ T5516] __x64_sys_setsockopt+0x13d/0x1b0 [ 1124.773703][ T5516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.773725][ T5516] do_syscall_64+0x174/0x580 [ 1124.773775][ T5516] ? trace_irq_disable+0x3b/0x140 [ 1124.773830][ T5516] ? clear_bhb_loop+0x40/0x90 [ 1124.773857][ T5516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.773880][ T5516] RIP: 0033:0x7f614af9e019 [ 1124.773904][ T5516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.773924][ T5516] RSP: 002b:00007f614beb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1124.773950][ T5516] RAX: ffffffffffffffda RBX: 00007f614b225fa0 RCX: 00007f614af9e019 [ 1124.773967][ T5516] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1124.773981][ T5516] RBP: 00007f614b03500c R08: 0000000000000004 R09: 0000000000000000 [ 1124.774005][ T5516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.774019][ T5516] R13: 00007f614b226038 R14: 00007f614b225fa0 R15: 00007ffd33731128 [ 1124.774056][ T5516] [ 1124.774176][ T5516] Mem-Info: [ 1125.031911][ T5522] netlink: 'syz.1.8573': attribute type 17 has an invalid length. [ 1125.039211][ T5516] active_anon:5995 inactive_anon:0 isolated_anon:0 [ 1125.039211][ T5516] active_file:16 inactive_file:43957 isolated_file:0 [ 1125.039211][ T5516] unevictable:768 dirty:33 writeback:0 [ 1125.039211][ T5516] slab_reclaimable:12698 slab_unreclaimable:135917 [ 1125.039211][ T5516] mapped:30767 shmem:1294 pagetables:5868 [ 1125.039211][ T5516] sec_pagetables:0 bounce:0 [ 1125.039211][ T5516] kernel_misc_reclaimable:0 [ 1125.039211][ T5516] free:1272115 free_pcp:10540 free_cma:0 [ 1125.086475][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1125.160549][ T5521] netlink: 'syz.4.8575': attribute type 7 has an invalid length. [ 1125.163169][ T5516] Node 0 active_anon:24180kB inactive_anon:0kB active_file:64kB inactive_file:175624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127068kB dirty:132kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18996kB pagetables:23328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1125.206612][ T5522] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1125.232321][ T5516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1125.265171][ T5516] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.295154][ T5516] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1125.301809][ T5516] Node 0 DMA32 free:1130464kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24148kB inactive_anon:0kB active_file:64kB inactive_file:175624kB unevictable:1536kB writepending:136kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:42208kB local_pcp:20860kB free_cma:0kB [ 1125.346308][ T5516] lowmem_reserve[]: 0 0 0 0 0 [ 1125.358219][ T5516] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.390864][ T5516] lowmem_reserve[]: 0 0 0 0 0 [ 1125.395703][ T5516] Node 1 Normal free:3942888kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1125.465296][ T5516] lowmem_reserve[]: 0 0 0 0 0 [ 1125.470567][ T5516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1125.483998][ T5516] Node 0 DMA32: 3137*4kB (UME) 1906*8kB (UME) 1043*16kB (UM) 145*32kB (UME) 951*64kB (UM) 810*128kB (UME) 675*256kB (UME) 526*512kB (UM) 309*1024kB (U) 34*2048kB (UM) 22*4096kB (UM) = 1131940kB [ 1125.512763][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8578'. [ 1125.533544][ T5516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1125.555587][ T5516] Node 1 Normal: 0*4kB 3*8kB (UM) 5*16kB (UM) 2*32kB (UM) 9*64kB (UM) 8*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942888kB [ 1125.590529][ T5516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.602420][ T5516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1125.612570][ T5516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1125.643234][ T5516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1125.653859][ T5516] 45263 total pagecache pages [ 1125.663997][ T5516] 0 pages in swap cache [ 1125.670013][ T5516] Free swap = 124996kB [ 1125.674535][ T5516] Total swap = 124996kB [ 1125.679629][ T5516] 2097051 pages RAM [ 1125.683755][ T5516] 0 pages HighMem/MovableOnly [ 1125.689129][ T5516] 428238 pages reserved [ 1125.750082][ T5516] 0 pages cma reserved [ 1126.030192][ T5570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8588'. [ 1126.422166][ T5589] sctp: [Deprecated]: syz.1.8594 (pid 5589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.422166][ T5589] Use struct sctp_sack_info instead [ 1126.482130][ T5595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8596'. [ 1126.619885][ T5599] netlink: 'syz.4.8597': attribute type 1 has an invalid length. [ 1126.689928][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8599'. [ 1126.710861][ T5599] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1126.746070][ T5599] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1126.771180][ T5608] lo speed is unknown, defaulting to 1000 [ 1126.782858][ T5608] lo speed is unknown, defaulting to 1000 [ 1126.977703][ T5599] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1127.004655][ T5599] bond10: (slave bond11): Enslaving as an active interface with a down link [ 1127.650299][ T5658] Cannot find set identified by id 65534 to match [ 1127.828665][ T5660] 0: reclassify loop, rule prio 0, protocol 03 [ 1128.003822][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.012768][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.021607][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.030580][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.040232][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.050435][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.080322][ T5677] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1128.139986][ T5681] netlink: 'syz.2.8619': attribute type 2 has an invalid length. [ 1128.197775][ T5681] : entered promiscuous mode [ 1128.234332][ T5681] netlink: 'syz.2.8619': attribute type 2 has an invalid length. [ 1128.373501][ T5700] __nla_validate_parse: 5 callbacks suppressed [ 1128.373522][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1128.389601][ T5700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8625'. [ 1128.907080][ T5723] vlan0: entered promiscuous mode [ 1128.934915][ T5723] veth1_virt_wifi: entered promiscuous mode [ 1128.961495][ T5723] vlan0: left allmulticast mode [ 1128.981172][ T5723] veth1_virt_wifi: left allmulticast mode [ 1129.721487][ T5766] netlink: 'syz.4.8639': attribute type 10 has an invalid length. [ 1129.740500][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1129.752366][ T5759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8638'. [ 1129.783493][ T5766] team0: Device veth0_macvtap failed to register rx_handler [ 1129.891946][ T5772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8640'. [ 1130.125899][ T5783] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 1130.148991][ T29] audit: type=1804 audit(1785552633.122:17): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8642" name="/newroot/393/cgroup.controllers" dev="tmpfs" ino=2040 res=1 errno=0 [ 1130.199166][ T29] audit: type=1800 audit(1785552633.122:18): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8642" name="cgroup.controllers" dev="tmpfs" ino=2040 res=0 errno=0 [ 1130.312956][ T5786] x_tables: unsorted underflow at hook 1 [ 1130.671454][ T5810] netlink: 'syz.0.8648': attribute type 8 has an invalid length. [ 1130.708401][ T5804] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8649'. [ 1131.058520][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8654'. [ 1131.719150][ T5848] xt_hashlimit: overflow, try lower: 3/0 [ 1131.761384][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8659'. [ 1131.776986][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8662'. [ 1131.793115][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8662'. [ 1131.814294][ T5852] netlink: 'syz.0.8661': attribute type 1 has an invalid length. [ 1132.098357][ T5857] bond11: (slave gretap2): making interface the new active one [ 1132.124629][ T5857] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 1132.187267][ T5869] sock: sock_set_timeout: `syz.4.8665' (pid 5869) tries to set negative timeout [ 1132.378186][ T5882] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1132.692257][ T5897] ip6tnl0: Caught tx_queue_len zero misconfig [ 1132.905091][ T5910] bridge_slave_1: left allmulticast mode [ 1132.924919][ T5910] bridge_slave_1: left promiscuous mode [ 1132.931951][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.949414][ T5910] bridge_slave_0: left allmulticast mode [ 1132.955201][ T5910] bridge_slave_0: left promiscuous mode [ 1132.980706][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.154284][ T5922] x_tables: duplicate underflow at hook 3 [ 1133.345585][ T5925] syzkaller0: entered promiscuous mode [ 1133.351216][ T5925] syzkaller0: entered allmulticast mode [ 1133.684855][ T5951] __nla_validate_parse: 4 callbacks suppressed [ 1133.684876][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8688'. [ 1133.724958][ T5952] netlink: 'syz.0.8689': attribute type 21 has an invalid length. [ 1133.739466][ T5952] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8689'. [ 1133.979494][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8694'. [ 1134.023564][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8694'. [ 1134.037264][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8694'. [ 1134.046287][ T5962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8694'. [ 1134.269692][ T5978] bond0: entered allmulticast mode [ 1134.346232][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8702'. [ 1134.355251][ T5984] netlink: 'syz.1.8702': attribute type 1 has an invalid length. [ 1134.363371][ T5984] netlink: 'syz.1.8702': attribute type 2 has an invalid length. [ 1134.372554][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8702'. [ 1134.432977][ T5988] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8704'. [ 1134.622517][ T5997] ip_tables: iptables: counters copy to user failed while replacing table [ 1135.019911][ T6021] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8713'. [ 1135.156965][ T6021] ip6erspan0: entered promiscuous mode [ 1135.191286][ T6029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1135.460881][ T6042] gretap0: entered promiscuous mode [ 1135.532636][ T6042] 0ªî{X¹¦: renamed from gretap0 [ 1135.566526][ T6042] 0ªî{X¹¦: left promiscuous mode [ 1135.582768][ T6042] 0ªî{X¹¦: entered allmulticast mode [ 1135.606283][ T6042] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1136.336198][ T6100] Unsupported ieee802154 address type: 0 [ 1136.655917][ T6114] netlink: 'syz.3.8738': attribute type 1 has an invalid length. [ 1136.728579][ T6115] netlink: 'syz.3.8738': attribute type 1 has an invalid length. [ 1136.748673][ T6120] netlink: 'syz.3.8738': attribute type 1 has an invalid length. [ 1136.852378][ T6089] bridge_slave_1: left allmulticast mode [ 1136.858098][ T6089] bridge_slave_1: left promiscuous mode [ 1136.863955][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.946092][ T6089] pim6reg: left allmulticast mode [ 1136.951508][ T6089] pim6reg527: left allmulticast mode [ 1136.956984][ T6089] dvmrp0: left allmulticast mode [ 1137.084555][ T6143] Unknown options in mask 4 [ 1137.822091][ T6089] bond9 (unregistering): (slave gretap3): Releasing active interface [ 1137.850004][ T6089] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1137.911223][ T6089] bond0 (unregistering): (slave bridge4): Releasing backup interface [ 1137.938127][ T6089] bond2 (unregistering): Released all slaves [ 1137.952775][ T6089] bond3 (unregistering): Released all slaves [ 1137.967457][ T6089] bond4 (unregistering): Released all slaves [ 1137.982112][ T6089] bond5 (unregistering): Released all slaves [ 1137.996094][ T6089] bond6 (unregistering): Released all slaves [ 1138.014120][ T6089] bond7 (unregistering): Released all slaves [ 1138.035105][ T6089] bond8 (unregistering): Released all slaves [ 1138.051162][ T6089] bond9 (unregistering): Released all slaves [ 1138.065470][ T6089] bond10 (unregistering): Released all slaves [ 1138.082022][ T6089] bond11 (unregistering): Released all slaves [ 1138.106792][ T6089] bond0 (unregistering): Released all slaves [ 1138.144956][ T6089] bond1 (unregistering): Released all slaves [ 1138.159510][ T6089] bond12 (unregistering): Released all slaves [ 1138.173931][ T6089] D (unregistering): Released all slaves [ 1138.191438][ T6089] bond13 (unregistering): Released all slaves [ 1138.284974][ T6165] netlink: 'syz.2.8746': attribute type 1 has an invalid length. [ 1138.303076][ T6165] workqueue: Failed to create a rescuer kthread for wq "phy4": -EINTR [ 1138.306112][ T6161] netlink: 'syz.2.8746': attribute type 29 has an invalid length. [ 1138.939650][ T6189] syzkaller0: entered promiscuous mode [ 1138.965415][ T6189] syzkaller0: entered allmulticast mode [ 1139.007141][ T6192] __nla_validate_parse: 10 callbacks suppressed [ 1139.007162][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1139.132466][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8752'. [ 1139.235753][ T6089] tipc: Left network mode [ 1139.298677][ T6200] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8754'. [ 1139.307972][ T6200] nbd: illegal input index 65508 [ 1139.442694][ T6200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8754'. [ 1139.650932][ T6187] netlink: 'syz.0.8750': attribute type 32 has an invalid length. [ 1139.710895][ T6187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8750'. [ 1139.920461][ T6212] team0 (unregistering): Port device team_slave_0 removed [ 1139.949236][ T6212] team0 (unregistering): Port device team_slave_1 removed [ 1140.129216][ T6235] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 1140.516631][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8764'. [ 1140.531161][ T6250] sctp: [Deprecated]: syz.4.8763 (pid 6250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1140.531161][ T6250] Use struct sctp_sack_info instead [ 1140.588814][ T6258] batadv_slave_0: entered promiscuous mode [ 1140.597659][ T6254] ip6erspan1: entered promiscuous mode [ 1140.603972][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8765'. [ 1140.636761][ T6258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.784730][ T6258] batadv_slave_0 (unregistering): left allmulticast mode [ 1140.793285][ T6258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.804740][ T6252] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1140.813492][ T6252] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1140.861972][ T6248] macsec1: entered promiscuous mode [ 1140.867332][ T6248] bridge0: entered promiscuous mode [ 1140.978618][ T6248] macsec1: entered allmulticast mode [ 1140.983976][ T6248] bridge0: entered allmulticast mode [ 1141.013426][ T6248] bridge0: port 1(macsec1) entered blocking state [ 1141.020263][ T6248] bridge0: port 1(macsec1) entered disabled state [ 1141.033259][ T6248] bridge0: left allmulticast mode [ 1141.038349][ T6248] bridge0: left promiscuous mode [ 1141.078498][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8766'. [ 1141.745901][ T6290] netlink: 'syz.1.8770': attribute type 25 has an invalid length. [ 1141.786010][ T6089] hsr_slave_0: left promiscuous mode [ 1141.816530][ T6089] hsr_slave_1: left promiscuous mode [ 1141.836778][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.032888][ T6307] netlink: 'syz.0.8776': attribute type 39 has an invalid length. [ 1142.563893][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 1142.604692][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 1142.946377][ T6342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8781'. [ 1143.721409][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1144.072199][ T6394] x_tables: duplicate underflow at hook 2 [ 1144.176670][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.215124][ T6382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.426740][ T6407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8793'. [ 1144.842730][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8793'. [ 1144.853659][T29425] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.862761][T29425] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.873317][T29425] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.888429][T29425] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.901033][ T6089] IPVS: stop unused estimator thread 0... [ 1144.911669][T29425] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.921377][T29425] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.930343][T29425] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1145.001265][T29425] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.414904][ T6438] syzkaller1: entered promiscuous mode [ 1145.419520][ T6443] ip6t_rpfilter: unknown options [ 1145.442579][ T6438] syzkaller1: entered allmulticast mode [ 1145.479975][ T6447] netlink: 'syz.1.8804': attribute type 1 has an invalid length. [ 1145.501927][ T6447] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8804'. [ 1145.518017][ T6447] netlink: 'syz.1.8804': attribute type 1 has an invalid length. [ 1145.654755][ T6456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1145.691508][ T6456] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1145.726259][ T6456] gretap3: entered promiscuous mode [ 1145.731550][ T6456] gretap3: entered allmulticast mode [ 1145.761777][ T6461] netlink: 'syz.2.8808': attribute type 32 has an invalid length. [ 1145.769762][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8808'. [ 1145.804430][ T6461] bond0: option coupled_control: invalid value (8) [ 1145.814035][ T6461] bond0 (unregistering): Released all slaves [ 1146.717689][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1146.754809][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8815'. [ 1147.111083][ T6534] ip6gre1: entered allmulticast mode [ 1147.171750][T29422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1147.855238][ T6570] openvswitch: netlink: Missing valid actions attribute. [ 1147.867883][ T6570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.992607][ T6576] syzkaller1: entered promiscuous mode [ 1148.004557][ T6576] syzkaller1: entered allmulticast mode [ 1148.098662][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1148.233680][ T6591] netlink: 'syz.2.8834': attribute type 21 has an invalid length. [ 1148.319115][ T6591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8834'. [ 1148.325219][ T6596] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8836'. [ 1148.505536][ T6604] netlink: 'syz.4.8838': attribute type 83 has an invalid length. [ 1148.637369][ T6604] netlink: 'syz.4.8838': attribute type 3 has an invalid length. [ 1148.671656][ T6616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8841'. [ 1149.442236][ T6643] __nla_validate_parse: 2 callbacks suppressed [ 1149.442259][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1149.459784][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1149.469422][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8847'. [ 1149.894562][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.964293][ T6666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1150.013044][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8856'. [ 1150.069355][ T6666] macvlan2: entered promiscuous mode [ 1150.074818][ T6666] macvlan2: entered allmulticast mode [ 1150.364509][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8863'. [ 1150.679279][ T6712] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1150.691545][ T6712] 0ªî{X¹¦: entered promiscuous mode [ 1150.697889][ T6712] 0ªî{X¹¦: left allmulticast mode [ 1150.723110][ T6712] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8872'. [ 1150.732225][ T6712] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 1150.756800][ T6712] 1ªî{X¹¦: left promiscuous mode [ 1150.762860][ T6712] 1ªî{X¹¦: entered allmulticast mode [ 1150.812175][ T6712] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1150.898382][ T6723] mac80211_hwsim hwsim68 wlan1: Caught tx_queue_len zero misconfig [ 1151.076787][ T6725] syzkaller0: entered promiscuous mode [ 1151.083605][ T6725] syzkaller0: entered allmulticast mode [ 1151.219204][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1151.344782][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1151.355533][ T6749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8880'. [ 1152.203561][ T6786] lo: left allmulticast mode [ 1152.233871][ T6786] tunl0: left allmulticast mode [ 1152.243825][ T6786] gre0: left allmulticast mode [ 1152.256006][ T6786] gretap0: left allmulticast mode [ 1152.262010][ T6789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8894'. [ 1152.272889][ T6786] erspan0: left allmulticast mode [ 1152.278777][ T6786] ip_vti0: left allmulticast mode [ 1152.292564][ T6786] ip6_vti0: left allmulticast mode [ 1152.304278][ T6786] sit0: left allmulticast mode [ 1152.310245][ T6786] ip6tnl0: left allmulticast mode [ 1152.315675][ T6786] ip6gre0: left allmulticast mode [ 1152.336705][ T6786] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1152.684022][ T6805] openvswitch: netlink: Message has 24 unknown bytes. [ 1152.876430][ T6813] netlink: 'syz.0.8904': attribute type 21 has an invalid length. [ 1152.898485][ T6813] IPv6: NLM_F_CREATE should be specified when creating new route [ 1152.901068][ T6814] syzkaller0: entered promiscuous mode [ 1152.929068][ T6813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.937289][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 1152.943108][ T6814] syzkaller0: entered allmulticast mode [ 1152.945392][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 1152.959242][ T6813] IPv6: NLM_F_CREATE should be set when creating new route [ 1153.064433][ T6822] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1154.645174][ T6912] netlink: 'syz.1.8926': attribute type 21 has an invalid length. [ 1154.653199][ T6912] __nla_validate_parse: 5 callbacks suppressed [ 1154.653219][ T6912] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1154.733159][ T6911] netlink: 'syz.1.8926': attribute type 21 has an invalid length. [ 1154.743024][ T6911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1154.790101][ T6915] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1154.976022][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1154.985137][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1155.054239][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1155.077247][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1155.190275][ T6944] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1155.495944][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8939'. [ 1156.032194][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1156.059631][ T6987] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8950'. [ 1156.089183][ T6987] netlink: 'syz.1.8950': attribute type 5 has an invalid length. [ 1156.108482][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8949'. [ 1156.148898][ T6996] netlink: zone id is out of range [ 1156.164607][ T6996] netlink: zone id is out of range [ 1156.174722][ T6996] netlink: zone id is out of range [ 1156.187404][ T6996] netlink: zone id is out of range [ 1156.226368][ T6996] netlink: set zone limit has 4 unknown bytes [ 1156.466143][ T7008] x_tables: unsorted underflow at hook 3 [ 1156.769000][ T7016] syzkaller1: entered promiscuous mode [ 1156.784804][ T7016] syzkaller1: entered allmulticast mode [ 1156.819356][ T7013] netlink: 'syz.3.8957': attribute type 11 has an invalid length. [ 1156.899959][ T7018] openvswitch: netlink: Key 6 has unexpected len 416 expected 2 [ 1156.917702][ T7019] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1157.064097][ T7027] syzkaller1: entered promiscuous mode [ 1157.069722][ T7027] syzkaller1: entered allmulticast mode [ 1157.698173][ T7052] netlink: 'syz.2.8970': attribute type 5 has an invalid length. [ 1157.783732][ T7077] netlink: 'syz.4.8973': attribute type 1 has an invalid length. [ 1157.896458][ T7077] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1158.168445][ T7084] netlink: 'syz.3.8976': attribute type 7 has an invalid length. [ 1158.178424][ T7084] netlink: 'syz.3.8976': attribute type 8 has an invalid length. [ 1158.424899][T16837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1158.445784][T16837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1158.458808][T16837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1158.467331][T16837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1158.475601][T16837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1158.500859][ T7090] netlink: 'syz.2.8979': attribute type 4 has an invalid length. [ 1158.650966][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1158.666958][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1158.675276][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1158.683881][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1158.691988][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1159.134573][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.366181][ T7121] can: request_module (can-proto-4) failed. [ 1159.773415][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1159.829388][ T7091] lo speed is unknown, defaulting to 1000 [ 1159.848840][ T7161] netlink: 'syz.4.8996': attribute type 1 has an invalid length. [ 1159.929619][ T7163] SET target dimension over the limit! [ 1159.937061][ T7156] syzkaller0: entered promiscuous mode [ 1159.942918][ T7091] lo speed is unknown, defaulting to 1000 [ 1159.943874][ T7156] syzkaller0: entered allmulticast mode [ 1159.972842][ T7167] mac80211_hwsim hwsim61 ÿ: renamed from wlan1 [ 1160.010090][ T7163] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1160.156682][ T7161] bond13: (slave gretap3): making interface the new active one [ 1160.186100][ T7182] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1160.194230][ T7161] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 1160.234916][ T7182] __nla_validate_parse: 9 callbacks suppressed [ 1160.234937][ T7182] netlink: 388 bytes leftover after parsing attributes in process `syz.0.9001'. [ 1160.485465][ T7192] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1160.649707][ T7192] x_tables: duplicate underflow at hook 1 [ 1160.709080][T16837] Bluetooth: hci3: command tx timeout [ 1160.831175][ T4345] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1160.855414][ T4345] bond0: (slave netdevsim1): Releasing backup interface [ 1160.957468][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9007'. [ 1161.022914][ T7210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.388937][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.396373][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.410569][ T7091] bridge_slave_0: entered allmulticast mode [ 1161.419103][ T7091] bridge_slave_0: entered promiscuous mode [ 1161.431406][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.442174][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.450108][ T7091] bridge_slave_1: entered allmulticast mode [ 1161.460230][ T7091] bridge_slave_1: entered promiscuous mode [ 1161.476136][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9013'. [ 1161.507288][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.586705][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.739546][ T7091] team0: Port device team_slave_0 added [ 1161.775249][ T7246] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.9018'. [ 1161.791086][ T7091] team0: Port device team_slave_1 added [ 1161.796786][ T7246] openvswitch: netlink: Message has 512 unknown bytes. [ 1161.832895][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.870380][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.925787][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.973843][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.981365][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.007919][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.177355][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1162.189471][ T7262] netlink: 'syz.3.9023': attribute type 10 has an invalid length. [ 1162.199244][ T7262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1162.236392][ T7262] geneve2: entered promiscuous mode [ 1162.314387][ T7262] geneve2: entered allmulticast mode [ 1162.458649][ T4345] bridge_slave_1: left allmulticast mode [ 1162.475218][ T4345] bridge_slave_1: left promiscuous mode [ 1162.481250][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.535832][ T7279] netlink: 'syz.3.9027': attribute type 11 has an invalid length. [ 1162.559895][ T7279] netlink: 'syz.3.9027': attribute type 4 has an invalid length. [ 1162.567985][ T7279] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9027'. [ 1162.629659][ T4345] dvmrp8: left allmulticast mode [ 1162.816343][T16837] Bluetooth: hci3: command tx timeout [ 1163.108661][ T4345] tipc: Disabling bearer [ 1163.550863][ T4345] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1163.559095][ T4345] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 32:47:6e:8b:2e:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1163.579177][ T4345] bond2 (unregistering): (slave bridge2): making interface the new active one [ 1163.597305][ T4345] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1163.730930][ T7288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.806585][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.902430][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.947249][ T4345] bond0 (unregistering): Released all slaves [ 1163.983894][ T4345] bond1 (unregistering): Released all slaves [ 1164.006587][ T4345] bond2 (unregistering): Released all slaves [ 1164.042161][ T4345] bond3 (unregistering): Released all slaves [ 1164.065026][ T4345] bond4 (unregistering): (slave veth3): Releasing active interface [ 1164.074605][ T4345] batadv1: entered promiscuous mode [ 1164.093051][ T4345] bond4 (unregistering): (slave batadv1): Releasing active interface [ 1164.110289][ T4345] bond4 (unregistering): Released all slaves [ 1164.146006][ T4345] bond5 (unregistering): Released all slaves [ 1164.173084][ T4345] bond6 (unregistering): (slave veth7): Releasing active interface [ 1164.183977][ T4345] bond6 (unregistering): Released all slaves [ 1164.210473][ T4345] bond7 (unregistering): Released all slaves [ 1164.237507][ T4345] bond8 (unregistering): Released all slaves [ 1164.267282][ T4345] bond9 (unregistering): Released all slaves [ 1164.294450][ T4345] bond10 (unregistering): Released all slaves [ 1164.319077][ T4345] bond11 (unregistering): Released all slaves [ 1164.361577][ T7091] hsr_slave_0: entered promiscuous mode [ 1164.374513][ T7091] hsr_slave_1: entered promiscuous mode [ 1164.381445][ T7091] debugfs: 'hsr0' already exists in 'hsr' [ 1164.387277][ T7091] Cannot create hsr debugfs directory [ 1164.413759][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1164.590900][ T7328] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1164.814051][ T4345] tipc: Left network mode [ 1164.910035][T16837] Bluetooth: hci3: command tx timeout [ 1166.275478][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1166.422994][ T7381] bond0: entered promiscuous mode [ 1166.450072][ T7381] bond_slave_0: entered promiscuous mode [ 1166.508223][ T7381] bond_slave_1: entered promiscuous mode [ 1166.549982][ T7381] batadv0: entered promiscuous mode [ 1166.579678][ T7381] debugfs: 'hsr0' already exists in 'hsr' [ 1166.613131][ T7381] Cannot create hsr debugfs directory [ 1166.652829][ T7381] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1166.733425][ T7381] bond0: left promiscuous mode [ 1166.758419][ T7381] bond_slave_0: left promiscuous mode [ 1166.778204][ T7381] bond_slave_1: left promiscuous mode [ 1166.797957][ T7381] batadv0: left promiscuous mode [ 1166.968000][T16837] Bluetooth: hci3: command tx timeout [ 1167.434666][ T7432] xt_hl: Unknown Hop Limit match mode: 206 [ 1167.732165][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9057'. [ 1167.838647][ T7445] ipvlan2: entered allmulticast mode [ 1167.846442][ T7445] syz_tun: entered allmulticast mode [ 1168.126798][ T7448] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9058'. [ 1168.160634][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9058'. [ 1168.173331][ T7466] veth1_to_bond: entered allmulticast mode [ 1168.181814][ T7466] veth1_to_bond: entered promiscuous mode [ 1168.268072][ T7464] veth1_to_bond: left promiscuous mode [ 1168.294316][ T7464] veth1_to_bond: left allmulticast mode [ 1168.562929][ T4345] batman_adv: batadv0: Removing interface: wlan0 [ 1168.600564][ T7091] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1168.626392][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1168.635956][ T7091] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1168.698919][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1168.716881][ T7091] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1168.729191][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1168.764955][ T7490] team0: left promiscuous mode [ 1168.794568][ T7490] team_slave_0: left promiscuous mode [ 1168.817075][ T7490] team_slave_1: left promiscuous mode [ 1168.852189][ T7490] bridge0: port 3(team0) entered disabled state [ 1168.934694][ T7490] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1168.988310][ T7091] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1169.017023][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1169.028455][ T7497] team0: No ports can be present during mode change [ 1169.477043][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.593961][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.607273][T29415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.614493][T29415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.738719][ T7091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1169.807745][ T7091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1169.866376][T29415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.873666][T29415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.887970][ T5639] Bluetooth: hci3: command 0x0405 tx timeout [ 1170.154763][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1170.163864][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9077'. [ 1170.395233][ T7566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1170.452837][ T7544] block nbd7: server does not support multiple connections per device. [ 1170.463237][ T7544] block nbd7: shutting down sockets [ 1170.580602][ T4345] hsr_slave_0: left promiscuous mode [ 1170.622335][ T4345] hsr_slave_1: left promiscuous mode [ 1170.628745][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1170.659913][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1170.686747][ T4345] batman_adv: batadv0: Removing interface: ipvlan2 [ 1172.047212][ T7547] tipc: Enabling of bearer <|th:lo> rejected, media not registered [ 1172.252289][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.479337][ T7091] veth0_vlan: entered promiscuous mode [ 1172.566754][ T7091] veth1_vlan: entered promiscuous mode [ 1172.950958][ T7091] veth0_macvtap: entered promiscuous mode [ 1172.997452][ T7091] veth1_macvtap: entered promiscuous mode [ 1173.075607][ T7639] openvswitch: netlink: Multiple metadata blocks provided [ 1173.124828][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.163683][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.190718][ T7648] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1173.213790][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1173.239486][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9093'. [ 1173.255668][T29413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.296746][T29413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.393895][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9096'. [ 1173.408810][ T4345] IPVS: stop unused estimator thread 0... [ 1173.421260][T29425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.535758][T29415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.543722][T29415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.584019][T29424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.586465][ T7664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1173.630885][ T7664] netlink: 'syz.2.9098': attribute type 29 has an invalid length. [ 1173.632088][T29415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.657076][T29415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.891034][ T7673] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1173.970998][ T7674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1174.297377][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.303265][ T7690] xt_ipcomp: unknown flags 1D [ 1174.319469][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.331526][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.384299][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.393930][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1175.076973][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9115'. [ 1175.735781][T29415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.750132][T29415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.762803][T29415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1175.776880][T29415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1175.843566][ T7750] netlink: 'syz.3.9122': attribute type 29 has an invalid length. [ 1175.882460][ T7689] lo speed is unknown, defaulting to 1000 [ 1175.901412][ T7689] lo speed is unknown, defaulting to 1000 [ 1175.969963][ T7761] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1176.057285][T29415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.067674][T29415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.078061][T29415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1176.088893][T29415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1176.150769][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1176.437067][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1176.547095][T16837] Bluetooth: hci0: command tx timeout [ 1176.644472][T29415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1176.690151][T29415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.703410][T29415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1176.714233][T29415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1176.816125][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.823686][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.831760][ T7689] bridge_slave_0: entered allmulticast mode [ 1176.840043][ T7689] bridge_slave_0: entered promiscuous mode [ 1176.851558][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.859478][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.867424][ T7689] bridge_slave_1: entered allmulticast mode [ 1176.897740][ T7689] bridge_slave_1: entered promiscuous mode [ 1176.951984][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.002845][T29415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1177.013271][T29415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.023557][T29415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1177.033747][T29415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1177.053229][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.152477][ T7689] team0: Port device team_slave_0 added [ 1177.162245][ T7689] team0: Port device team_slave_1 added [ 1177.277041][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.284547][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.342101][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.359496][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9139'. [ 1177.392290][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.399306][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.466038][ T7819] vxcan0: tx address claim with different name [ 1177.473114][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.790105][ T7689] hsr_slave_0: entered promiscuous mode [ 1177.797390][ T7689] hsr_slave_1: entered promiscuous mode [ 1177.805565][ T7689] debugfs: 'hsr0' already exists in 'hsr' [ 1177.835914][ T7689] Cannot create hsr debugfs directory [ 1177.912888][ T7835] tipc: Started in network mode [ 1177.918091][ T7835] tipc: Node identity 0600000000000000000000000000008, cluster identity 4711 [ 1178.248340][ T7858] xt_ecn: cannot match TCP bits for non-tcp packets [ 1178.267603][ T7855] Cannot find set identified by id 65534 to match [ 1178.309280][T29415] bridge_slave_1: left promiscuous mode [ 1178.335357][T29415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.370437][T29415] bridge_slave_0: left allmulticast mode [ 1178.388186][T29415] bridge_slave_0: left promiscuous mode [ 1178.394551][T29415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.599937][T16837] Bluetooth: hci0: command tx timeout [ 1178.608631][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1179.501491][T29415] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1179.559459][ T7904] netlink: 'syz.1.9159': attribute type 1 has an invalid length. [ 1179.571857][T29415] bond9 (unregistering): (slave geneve4): Releasing active interface [ 1179.639798][T29415] bond5 (unregistering): (slave bridge4): Releasing active interface [ 1179.677566][T29415] bond7 (unregistering): (slave bridge5): Releasing active interface [ 1179.722464][T29415] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.737131][T29415] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.750367][T29415] .` (unregistering): Released all slaves [ 1179.774059][T29415] bond1 (unregistering): Released all slaves [ 1179.799360][T29415] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1179.818169][T29415] bond2 (unregistering): Released all slaves [ 1179.842167][T29415] bond3 (unregistering): (slave veth3): Releasing active interface [ 1179.851785][T29415] batadv2: entered promiscuous mode [ 1179.862789][T29415] bond3 (unregistering): (slave batadv2): Releasing active interface [ 1179.880630][T29415] bond3 (unregistering): (slave veth5): Releasing active interface [ 1179.893300][T29415] bond3 (unregistering): Released all slaves [ 1179.914910][T29415] bond4 (unregistering): (slave lo): Releasing backup interface [ 1179.934764][T29415] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1179.949738][T29415] bond4 (unregistering): Released all slaves [ 1179.971010][T29415] bond5 (unregistering): Released all slaves [ 1179.993488][T29415] bond6 (unregistering): Released all slaves [ 1180.018975][T29415] bond7 (unregistering): Released all slaves [ 1180.047050][T29415] bond8 (unregistering): Released all slaves [ 1180.077575][T29415] bond9 (unregistering): Released all slaves [ 1180.102482][T29415] bond10 (unregistering): Released all slaves [ 1180.277820][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1180.304540][ T4586] lo speed is unknown, defaulting to 1000 [ 1180.315662][ T4586] syz2: Port: 1 Link DOWN [ 1180.539829][ T7923] netlink: 'syz.3.9163': attribute type 3 has an invalid length. [ 1180.547361][T29415] : left promiscuous mode [ 1180.638695][T16837] Bluetooth: hci0: command tx timeout [ 1181.163935][ T7937] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1181.200090][ T7937] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1181.245058][ T7925] macvlan2: entered promiscuous mode [ 1181.250511][ T7925] macvlan2: entered allmulticast mode [ 1181.930574][ T7969] netlink: 220 bytes leftover after parsing attributes in process `syz.1.9174'. [ 1182.212360][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9177'. [ 1182.221469][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9177'. [ 1182.398026][T29415] hsr_slave_0: left promiscuous mode [ 1182.454909][T29415] hsr_slave_1: left promiscuous mode [ 1182.475816][T29415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1182.520754][T29415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1182.581986][T29415] veth1_macvtap: left promiscuous mode [ 1182.594182][T29415] veth0_macvtap: left promiscuous mode [ 1182.606916][T29415] veth1_vlan: left promiscuous mode [ 1182.751449][T16837] Bluetooth: hci0: command tx timeout [ 1182.752689][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1182.765820][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1183.360246][ T7993] 8021q: VLANs not supported on sit0 [ 1183.368010][ T1580] smbdirect: ib_dev[syz2] removed [ 1183.796575][ T7689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1183.896722][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1184.047726][ T7689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1184.090021][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1184.099867][ T7689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1184.158957][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1184.167942][ T7689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1184.224346][ T7689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1184.268843][ T8044] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1184.302156][ T8044] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1184.365048][ T8055] xt_hashlimit: size too large, truncated to 1048576 [ 1184.538015][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.660755][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.665545][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9195'. [ 1184.695506][T29425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.702810][T29425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.820004][T29425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.827348][T29425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.177337][T29415] IPVS: stop unused estimator thread 0... [ 1185.327188][ T8089] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 1185.464706][ T8097] netlink: 'syz.4.9201': attribute type 12 has an invalid length. [ 1185.563909][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9202'. [ 1185.870973][ T8110] ip6gre1: entered allmulticast mode [ 1186.395644][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.474083][ T8143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.483100][ T8143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.543580][ T8143] batman_adv: batadv0: Interface deactivated: bridge2 [ 1186.550091][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1186.550506][ T8143] batman_adv: batadv0: Removing interface: bridge2 [ 1186.571217][ T8149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9212'. [ 1186.660555][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1186.683794][ T8152] netlink: 'syz.4.9213': attribute type 7 has an invalid length. [ 1186.706122][ T8152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1186.846023][ T7689] veth0_vlan: entered promiscuous mode [ 1186.888666][ T7689] veth1_vlan: entered promiscuous mode [ 1186.954488][ T7689] veth0_macvtap: entered promiscuous mode [ 1186.980040][ T7689] veth1_macvtap: entered promiscuous mode [ 1187.028603][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1187.103821][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1187.510117][T29410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.524975][T29424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.535695][T29424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.648513][T29422] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.661533][T29422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.696590][T29422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.736340][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1187.786759][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9220'. [ 1187.797155][T29424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1187.812632][T29424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.028017][ T8209] netlink: 'syz.2.9104': attribute type 1 has an invalid length. [ 1188.057353][ T8189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.071860][ T8182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.091603][ T8203] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9223'. [ 1188.116868][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9226'. [ 1188.631725][ T5639] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1188.655244][ T5639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1188.670029][ T5639] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1188.681625][ T5639] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1188.690850][ T5639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1188.847088][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1189.696621][ T8259] netlink: 'syz.2.9238': attribute type 2 has an invalid length. [ 1189.803845][ T8237] lo speed is unknown, defaulting to 1000 [ 1189.878424][ T8288] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1190.322953][T29424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.356488][T29424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.479498][ T8303] __nla_validate_parse: 5 callbacks suppressed [ 1190.479521][ T8303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1190.502549][ T8314] netlink: 'syz.3.9254': attribute type 2 has an invalid length. [ 1190.527845][ T8314] netlink: 'syz.3.9254': attribute type 2 has an invalid length. [ 1190.540292][ T8303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1190.570890][ T8317] vlan0: left promiscuous mode [ 1190.575729][ T8317] veth0_vlan: left promiscuous mode [ 1190.581789][ T8317] veth0_vlan: entered promiscuous mode [ 1190.619220][ T8317] team0: Port device vlan0 added [ 1190.763911][ T8321] syzkaller0: entered promiscuous mode [ 1190.769437][ T8321] syzkaller0: entered allmulticast mode [ 1190.819551][ T5639] Bluetooth: hci5: command tx timeout [ 1191.887541][ T8338] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9259'. [ 1192.878509][ T5639] Bluetooth: hci5: command tx timeout [ 1194.942668][T29424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1194.954692][T29424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.979242][ T5639] Bluetooth: hci5: command tx timeout [ 1195.037601][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.045719][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.053271][ T8237] bridge_slave_0: entered allmulticast mode [ 1195.060545][ T8237] bridge_slave_0: entered promiscuous mode [ 1195.068854][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.076264][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.096829][ T8237] bridge_slave_1: entered allmulticast mode [ 1195.105710][ T8237] bridge_slave_1: entered promiscuous mode [ 1195.154553][ T8348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.157973][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.178837][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.260811][ T8237] team0: Port device team_slave_0 added [ 1195.282859][ T8237] team0: Port device team_slave_1 added [ 1195.423658][T29424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1195.455917][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9264'. [ 1195.471466][T29424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.675559][ T8351] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1195.699642][ T8351] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1195.737769][ T8351] bond1 (unregistering): Released all slaves [ 1195.824571][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.832627][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.881288][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.038579][T29424] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1196.106283][T29424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1196.116701][T29424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.132265][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.139445][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.165496][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.186303][ T8383] netlink: 'syz.4.9269': attribute type 1 has an invalid length. [ 1196.223477][ T8383] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1196.279325][ T8237] hsr_slave_0: entered promiscuous mode [ 1196.339112][ T8237] hsr_slave_1: entered promiscuous mode [ 1196.346238][ T8237] debugfs: 'hsr0' already exists in 'hsr' [ 1196.352022][ T8237] Cannot create hsr debugfs directory [ 1196.426684][ T8395] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1196.612618][ T8401] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 1196.632702][ T8401] bond1 (unregistering): Released all slaves [ 1196.717784][ T8405] netlink: 596 bytes leftover after parsing attributes in process `syz.3.9276'. [ 1197.031900][T29424] bridge_slave_1: left promiscuous mode [ 1197.040814][T29424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.048521][ T8416] sock: sock_set_timeout: `syz.1.9277' (pid 8416) tries to set negative timeout [ 1197.068948][ T5639] Bluetooth: hci5: command tx timeout [ 1197.095754][T29424] ¾x9ÿ: left allmulticast mode [ 1197.108188][T29424] ¾x9ÿ: left promiscuous mode [ 1197.118205][T29424] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1197.150074][ T8422] nbd: must specify an index to disconnect [ 1197.152730][T29424] dvmrp8: left allmulticast mode [ 1197.437486][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1197.535618][T29424] bond11 (unregistering): (slave gretap2): Releasing active interface [ 1197.668721][T29424] bond1 (unregistering): Released all slaves [ 1197.690984][T29424] bond2 (unregistering): Released all slaves [ 1197.712025][T29424] bond3 (unregistering): Released all slaves [ 1197.775396][T29424] bond4 (unregistering): Released all slaves [ 1197.796508][T29424] bond5 (unregistering): Released all slaves [ 1197.817561][T29424] bond6 (unregistering): Released all slaves [ 1197.839060][T29424] bond7 (unregistering): Released all slaves [ 1197.886115][T29424] bond8 (unregistering): Released all slaves [ 1197.902134][T29424] bond9 (unregistering): Released all slaves [ 1197.917479][T29424] bond10 (unregistering): Released all slaves [ 1197.932116][T29424] bond0 (unregistering): Released all slaves [ 1197.946910][T29424] bond11 (unregistering): Released all slaves [ 1197.976545][T29424] bond12 (unregistering): Released all slaves [ 1198.095910][ T8434] team0: Port device vlan0 added [ 1198.311174][ T8456] xt_hashlimit: size too large, truncated to 1048576 [ 1198.333311][ T8455] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.9283'. [ 1198.348989][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1198.358685][T29424] tipc: Left network mode [ 1198.378554][ T8454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9284'. [ 1198.397227][ T8455] 0ªX¹¦Dö»: renamed from gretap0 [ 1198.476227][ T8455] 0ªX¹¦Dö»: entered allmulticast mode [ 1198.598793][T29424] IPVS: stopping backup sync thread 31218 ... [ 1199.177270][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1199.370368][ T8486] hsr_slave_1 (unregistering): left promiscuous mode [ 1199.481471][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1199.798467][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1200.707628][ T8540] geneve2: entered promiscuous mode [ 1200.784363][T29424] batadv0: left promiscuous mode [ 1200.795724][T29424] hsr_slave_0: left promiscuous mode [ 1200.803411][T29424] hsr_slave_1: left promiscuous mode [ 1200.821375][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1200.832975][T29424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1200.841958][T29424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.874563][T29424] veth0_macvtap: left promiscuous mode [ 1201.405811][ T8575] netlink: 'syz.2.9307': attribute type 1 has an invalid length. [ 1201.446153][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1201.519281][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9307'. [ 1201.907306][T29424] team_slave_1 (unregistering): left allmulticast mode [ 1201.915841][T29424] team0 (unregistering): Port device team_slave_1 removed [ 1201.961949][T29424] team_slave_0 (unregistering): left allmulticast mode [ 1201.971867][T29424] team0 (unregistering): Port device team_slave_0 removed [ 1202.247708][ T8557] 8021q: VLANs not supported on gre0 [ 1202.316391][ T8574] pimreg: entered allmulticast mode [ 1205.102466][ T8638] nbd: must specify at least one socket [ 1207.559341][T29424] IPVS: stop unused estimator thread 0... [ 1207.726899][ T8237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1207.985494][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1208.011120][ T8237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1208.052840][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.087446][ T8237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1208.135754][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.157586][ T8237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1208.205629][ T8237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1208.318929][ T8683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9331'. [ 1208.346403][ T8683] macvlan0: entered promiscuous mode [ 1208.637732][ T8694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1208.822468][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.936178][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.991666][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.998968][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.050276][ T1580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.057648][ T1580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.230678][ T8704] openvswitch: netlink: Multiple metadata blocks provided [ 1209.420500][ T8709] v: renamed from veth0_vlan (while UP) [ 1209.446346][ T8711] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9338'. [ 1209.708953][ T8720] netlink: 'syz.4.9341': attribute type 3 has an invalid length. [ 1209.734927][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9340'. [ 1210.047652][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9345'. [ 1210.100992][ T8734] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1210.475365][ T8743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9349'. [ 1210.479236][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9351'. [ 1210.610931][ T8758] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1210.621957][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1210.631729][ T8758] bond1 (unregistering): Released all slaves [ 1210.716237][ T8762] syz.3.9352: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1210.758754][ T8762] CPU: 1 UID: 0 PID: 8762 Comm: syz.3.9352 Not tainted syzkaller #0 PREEMPT(full) [ 1210.758790][ T8762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1210.758802][ T8762] Call Trace: [ 1210.758811][ T8762] [ 1210.758820][ T8762] dump_stack_lvl+0xe8/0x150 [ 1210.758865][ T8762] warn_alloc+0x24c/0x270 [ 1210.758897][ T8762] ? stack_depot_save_flags+0x33/0x800 [ 1210.758932][ T8762] ? __pfx_warn_alloc+0x10/0x10 [ 1210.758963][ T8762] ? kasan_save_track+0x3e/0x80 [ 1210.758989][ T8762] ? __kasan_kmalloc+0x93/0xb0 [ 1210.759021][ T8762] ? xsk_setsockopt+0x52a/0x960 [ 1210.759045][ T8762] ? do_sock_setsockopt+0x17c/0x1b0 [ 1210.759069][ T8762] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1210.759090][ T8762] ? do_syscall_64+0x174/0x580 [ 1210.759118][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.759152][ T8762] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1210.759214][ T8762] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1210.759247][ T8762] ? __kasan_kmalloc+0x93/0xb0 [ 1210.759276][ T8762] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1210.759305][ T8762] ? __kmalloc_cache_noprof+0x150/0x660 [ 1210.759336][ T8762] vmalloc_user_noprof+0xad/0xe0 [ 1210.759364][ T8762] ? xskq_create+0xbf/0x170 [ 1210.759390][ T8762] xskq_create+0xbf/0x170 [ 1210.759434][ T8762] xsk_init_queue+0x8a/0xe0 [ 1210.759470][ T8762] xsk_setsockopt+0x52a/0x960 [ 1210.759492][ T8762] ? __fget_files+0x2a/0x420 [ 1210.759524][ T8762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1210.759546][ T8762] ? __pfx_aa_sk_perm+0x10/0x10 [ 1210.759584][ T8762] ? aa_sock_opt_perm+0xff/0x1a0 [ 1210.759610][ T8762] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1210.759637][ T8762] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1210.759658][ T8762] do_sock_setsockopt+0x17c/0x1b0 [ 1210.759686][ T8762] __x64_sys_setsockopt+0x13d/0x1b0 [ 1210.759709][ T8762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.759733][ T8762] do_syscall_64+0x174/0x580 [ 1210.759757][ T8762] ? clear_bhb_loop+0x40/0x90 [ 1210.759781][ T8762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.759803][ T8762] RIP: 0033:0x7fac3f59e019 [ 1210.759825][ T8762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1210.759843][ T8762] RSP: 002b:00007fac3d7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1210.759865][ T8762] RAX: ffffffffffffffda RBX: 00007fac3f826090 RCX: 00007fac3f59e019 [ 1210.759879][ T8762] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1210.759892][ T8762] RBP: 00007fac3f63500c R08: 0000000000000004 R09: 0000000000000000 [ 1210.759904][ T8762] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1210.759917][ T8762] R13: 00007fac3f826128 R14: 00007fac3f826090 R15: 00007fffd73d73c8 [ 1210.759953][ T8762] [ 1210.760109][ T8762] Mem-Info: [ 1211.068479][ T8762] active_anon:5968 inactive_anon:0 isolated_anon:0 [ 1211.068479][ T8762] active_file:16 inactive_file:43994 isolated_file:0 [ 1211.068479][ T8762] unevictable:768 dirty:63 writeback:0 [ 1211.068479][ T8762] slab_reclaimable:13100 slab_unreclaimable:124131 [ 1211.068479][ T8762] mapped:30736 shmem:1292 pagetables:5952 [ 1211.068479][ T8762] sec_pagetables:0 bounce:0 [ 1211.068479][ T8762] kernel_misc_reclaimable:0 [ 1211.068479][ T8762] free:1284989 free_pcp:10320 free_cma:0 [ 1211.142870][ T8762] Node 0 active_anon:23972kB inactive_anon:0kB active_file:64kB inactive_file:175772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123044kB dirty:252kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17244kB pagetables:23664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1211.216070][ T8762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1211.267907][ T8762] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.298402][ T8762] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 1211.304777][ T8762] Node 0 DMA32 free:1181708kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23736kB inactive_anon:0kB active_file:64kB inactive_file:175772kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:41560kB local_pcp:21104kB free_cma:0kB [ 1211.339459][ T8762] lowmem_reserve[]: 0 0 0 0 0 [ 1211.344516][ T8762] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.395080][ T8762] lowmem_reserve[]: 0 0 0 0 0 [ 1211.399925][ T8762] Node 1 Normal free:3942888kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1211.432602][ T8762] lowmem_reserve[]: 0 0 0 0 0 [ 1211.437529][ T8762] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1211.451388][ T8762] Node 0 DMA32: 1254*4kB (UME) 1002*8kB (UME) 1189*16kB (UM) 1537*32kB (UME) 1006*64kB (UM) 820*128kB (UME) 683*256kB (UME) 529*512kB (UM) 312*1024kB (U) 39*2048kB (UME) 21*4096kB (UM) = 1181656kB [ 1211.471565][ T8762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1211.480466][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1211.483290][ T8762] Node 1 Normal: 0*4kB 3*8kB (UM) 5*16kB (UM) 2*32kB (UM) 9*64kB (UM) 8*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942888kB [ 1211.527533][ T8762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.538657][ T8762] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1211.548289][ T8762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1211.563325][ T8762] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1211.572030][ T8237] veth0_vlan: entered promiscuous mode [ 1211.578349][ T8762] 45298 total pagecache pages [ 1211.583699][ T8762] 0 pages in swap cache [ 1211.587983][ T8762] Free swap = 124996kB [ 1211.592183][ T8762] Total swap = 124996kB [ 1211.596359][ T8762] 2097051 pages RAM [ 1211.627826][ T8762] 0 pages HighMem/MovableOnly [ 1211.632668][ T8762] 428238 pages reserved [ 1211.636958][ T8762] 0 pages cma reserved [ 1211.665836][ T8237] veth1_vlan: entered promiscuous mode [ 1211.760509][ T8237] veth0_macvtap: entered promiscuous mode [ 1211.797932][ T8237] veth1_macvtap: entered promiscuous mode [ 1211.874872][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1211.913440][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1212.087066][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9362'. [ 1212.247417][T29423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.256029][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9366'. [ 1212.276765][T29423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.339626][T29424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.347889][T29424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.393052][T29424] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.407727][T29425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.428291][T29425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.496269][T29423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.640035][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9229'. [ 1213.161784][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1213.183171][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1213.195019][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1213.204331][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1213.221125][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1214.008874][ T8843] lo speed is unknown, defaulting to 1000 [ 1214.121861][ T7441] IPVS: starting estimator thread 0... [ 1214.251413][ T8880] IPVS: using max 49 ests per chain, 117600 per kthread [ 1214.289793][ T8887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1214.410038][ T5639] block nbd7: Receive control failed (result -32) [ 1214.419304][T16837] block nbd7: Receive control failed (result -32) [ 1214.701432][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.709468][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.716987][ T8843] bridge_slave_0: entered allmulticast mode [ 1214.726299][ T8843] bridge_slave_0: entered promiscuous mode [ 1214.733838][ T8906] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 1214.736183][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.741470][ T8914] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 1214.750757][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.764324][ T8843] bridge_slave_1: entered allmulticast mode [ 1214.774769][ T8843] bridge_slave_1: entered promiscuous mode [ 1214.826783][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.857123][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.923350][ T8843] team0: Port device team_slave_0 added [ 1214.949758][ T8843] team0: Port device team_slave_1 added [ 1214.995973][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.003480][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.040662][ T8925] netlink: 'syz.0.9395': attribute type 3 has an invalid length. [ 1215.045702][ T8927] netlink: 'syz.0.9395': attribute type 3 has an invalid length. [ 1215.104482][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.117659][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.160758][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.188352][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.203093][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9397'. [ 1215.214246][ T8934] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1215.319776][T16837] Bluetooth: hci1: command tx timeout [ 1215.334518][ T8843] hsr_slave_0: entered promiscuous mode [ 1215.343856][ T8843] hsr_slave_1: entered promiscuous mode [ 1215.354585][ T8843] debugfs: 'hsr0' already exists in 'hsr' [ 1215.387825][ T8843] Cannot create hsr debugfs directory [ 1215.419976][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.429787][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.460141][ T8945] netlink: 'syz.4.9401': attribute type 1 has an invalid length. [ 1215.610458][ T8945] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1215.618468][ T8952] netlink: 'syz.1.9403': attribute type 11 has an invalid length. [ 1215.632263][ T8952] netlink: 4320 bytes leftover after parsing attributes in process `syz.1.9403'. [ 1215.672316][ T8957] bond14: (slave gretap0): making interface the new active one [ 1215.696448][ T8957] bond14: (slave gretap0): Enslaving as an active interface with an up link [ 1215.948301][ T8971] macvtap0: entered promiscuous mode [ 1215.953757][ T8971] macvtap0: entered allmulticast mode [ 1215.959746][ T8971] veth1_to_bridge: entered promiscuous mode [ 1215.965775][ T8971] veth1_to_bridge: entered allmulticast mode [ 1215.973915][ T8971] team0: Device macvtap0 failed to register rx_handler [ 1215.982050][ T8971] veth1_to_bridge: left allmulticast mode [ 1215.988199][ T8971] veth1_to_bridge: left promiscuous mode [ 1216.115502][ T8986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9413'. [ 1216.150653][ T8843] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1216.160780][ T8843] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.570604][ T8843] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1216.596462][ T8843] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.699621][ T9003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.980757][ T8843] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1216.995565][ T8843] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.057154][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9422'. [ 1217.361532][T16837] Bluetooth: hci1: command tx timeout [ 1217.396192][ T9033] ip6t_REJECT: ECHOREPLY is not supported [ 1217.402862][ T9033] netlink: 'syz.0.9425': attribute type 9 has an invalid length. [ 1217.529953][ T8843] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1217.540092][ T8843] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.586388][ T9040] netlink: 'syz.1.9427': attribute type 1 has an invalid length. [ 1217.860113][ T9058] xt_ipcomp: unknown flags 1D [ 1218.317010][ T9069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9434'. [ 1218.405688][ T9076] netlink: 'syz.2.9435': attribute type 23 has an invalid length. [ 1218.506097][ T8843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1218.520369][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.534498][ T8843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1218.565227][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.585439][ T8843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1218.604037][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.615499][ T8843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1218.636918][ T8843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.677087][ T9078] syzkaller1: entered promiscuous mode [ 1218.690783][ T9078] syzkaller1: entered allmulticast mode [ 1218.697239][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9437'. [ 1218.860865][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.886430][ T8843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.900629][T29425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.907944][T29425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.955645][T29422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.962928][T29422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.399854][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9443'. [ 1219.410478][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9440'. [ 1219.490975][T16837] Bluetooth: hci1: command tx timeout [ 1219.955527][ T9123] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9444'. [ 1219.964920][ T9123] netlink: 196 bytes leftover after parsing attributes in process `syz.4.9444'. [ 1219.974227][ T9123] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9444'. [ 1220.452218][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1220.493218][ T9148] netlink: 'syz.0.9448': attribute type 4 has an invalid length. [ 1220.550111][ T9151] syz_tun: refused to change device tx_queue_len [ 1220.557985][ T9144] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9447'. [ 1220.558013][ T9148] netlink: 'syz.0.9448': attribute type 4 has an invalid length. [ 1220.597263][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.776879][ T9159] veth0_to_bond: entered allmulticast mode [ 1220.804396][ T8843] veth0_vlan: entered promiscuous mode [ 1220.821046][ T8843] veth1_vlan: entered promiscuous mode [ 1220.862252][ T8843] veth0_macvtap: entered promiscuous mode [ 1220.875737][ T8843] veth1_macvtap: entered promiscuous mode [ 1220.910301][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.926039][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.035486][T29423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.044715][T29423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.157328][ T9174] syz.4.9456: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1221.173103][ T4345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.175180][T29415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.183564][ T9174] CPU: 0 UID: 0 PID: 9174 Comm: syz.4.9456 Not tainted syzkaller #0 PREEMPT(full) [ 1221.183591][ T9174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1221.183604][ T9174] Call Trace: [ 1221.183612][ T9174] [ 1221.183621][ T9174] dump_stack_lvl+0xe8/0x150 [ 1221.183658][ T9174] warn_alloc+0x24c/0x270 [ 1221.183687][ T9174] ? stack_depot_save_flags+0x33/0x800 [ 1221.183717][ T9174] ? __pfx_warn_alloc+0x10/0x10 [ 1221.183744][ T9174] ? kasan_save_track+0x3e/0x80 [ 1221.183768][ T9174] ? __kasan_kmalloc+0x93/0xb0 [ 1221.183797][ T9174] ? xsk_setsockopt+0x52a/0x960 [ 1221.183817][ T9174] ? do_sock_setsockopt+0x17c/0x1b0 [ 1221.183847][ T9174] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1221.183867][ T9174] ? do_syscall_64+0x174/0x580 [ 1221.183889][ T9174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.183922][ T9174] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1221.183980][ T9174] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1221.184012][ T9174] ? __kasan_kmalloc+0x93/0xb0 [ 1221.184040][ T9174] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1221.184066][ T9174] ? __kmalloc_cache_noprof+0x150/0x660 [ 1221.184095][ T9174] vmalloc_user_noprof+0xad/0xe0 [ 1221.184121][ T9174] ? xskq_create+0xbf/0x170 [ 1221.184144][ T9174] xskq_create+0xbf/0x170 [ 1221.184170][ T9174] xsk_init_queue+0x8a/0xe0 [ 1221.184195][ T9174] xsk_setsockopt+0x52a/0x960 [ 1221.184215][ T9174] ? __fget_files+0x2a/0x420 [ 1221.184243][ T9174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1221.184264][ T9174] ? __pfx_aa_sk_perm+0x10/0x10 [ 1221.184290][ T9174] ? aa_sock_opt_perm+0xff/0x1a0 [ 1221.184317][ T9174] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1221.184338][ T9174] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1221.184361][ T9174] do_sock_setsockopt+0x17c/0x1b0 [ 1221.184388][ T9174] __x64_sys_setsockopt+0x13d/0x1b0 [ 1221.184414][ T9174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.184454][ T9174] do_syscall_64+0x174/0x580 [ 1221.184487][ T9174] ? trace_irq_disable+0x3b/0x140 [ 1221.184515][ T9174] ? clear_bhb_loop+0x40/0x90 [ 1221.184541][ T9174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.184561][ T9174] RIP: 0033:0x7f63a419e019 [ 1221.184582][ T9174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.184598][ T9174] RSP: 002b:00007f63a50e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1221.184620][ T9174] RAX: ffffffffffffffda RBX: 00007f63a4426090 RCX: 00007f63a419e019 [ 1221.184634][ T9174] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1221.184647][ T9174] RBP: 00007f63a423500c R08: 0000000000000004 R09: 0000000000000000 [ 1221.184660][ T9174] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.184672][ T9174] R13: 00007f63a4426128 R14: 00007f63a4426090 R15: 00007fff02cd00f8 [ 1221.184707][ T9174] [ 1221.184716][ T9174] Mem-Info: [ 1221.184728][ T9174] active_anon:5927 inactive_anon:0 isolated_anon:0 [ 1221.184728][ T9174] active_file:16 inactive_file:44000 isolated_file:0 [ 1221.184728][ T9174] unevictable:768 dirty:26 writeback:0 [ 1221.184728][ T9174] slab_reclaimable:13164 slab_unreclaimable:125905 [ 1221.184728][ T9174] mapped:29792 shmem:1293 pagetables:5813 [ 1221.184728][ T9174] sec_pagetables:0 bounce:0 [ 1221.184728][ T9174] kernel_misc_reclaimable:0 [ 1221.184728][ T9174] free:1284853 free_pcp:8665 free_cma:0 [ 1221.184781][ T9174] Node 0 active_anon:23708kB inactive_anon:0kB active_file:64kB inactive_file:175796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119168kB dirty:100kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17472kB pagetables:23108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1221.184844][ T9174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1221.184914][ T9174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1221.184974][ T9174] lowmem_reserve[]: [ 1221.509923][T16837] Bluetooth: hci1: command tx timeout [ 1221.532898][ T9174] 0 2488 2489 2489 2489 [ 1221.644862][ T9174] Node 0 DMA32 free:1181228kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23784kB inactive_anon:0kB active_file:64kB inactive_file:175796kB unevictable:1536kB writepending:120kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:34796kB local_pcp:14792kB free_cma:0kB [ 1221.696526][ T9174] lowmem_reserve[]: 0 0 0 0 0 [ 1221.703337][ T9174] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1221.733699][ T9174] lowmem_reserve[]: 0 0 0 0 0 [ 1221.738620][ T9174] Node 1 Normal free:3942888kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1221.772560][ T9174] lowmem_reserve[]: 0 0 0 0 0 [ 1221.777376][ T9174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1221.790574][ T9174] Node 0 DMA32: 1431*4kB (UME) 846*8kB (UME) 1206*16kB (UM) 1576*32kB (UME) 1000*64kB (UM) 816*128kB (UME) 683*256kB (UME) 528*512kB (UM) 312*1024kB (U) 39*2048kB (UME) 21*4096kB (UM) = 1181228kB [ 1221.817968][ T9174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1221.831223][ T9174] Node 1 Normal: 0*4kB 3*8kB (UM) 5*16kB (UM) 2*32kB (UM) 9*64kB (UM) 8*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (UM) = 3942888kB [ 1221.848785][ T9174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.859095][ T9174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1221.868819][ T9174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1221.879622][ T9174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1221.889508][ T9174] 45305 total pagecache pages [ 1221.894246][ T9174] 0 pages in swap cache [ 1221.898730][ T9174] Free swap = 124996kB [ 1221.902958][ T9174] Total swap = 124996kB [ 1221.910661][ T9174] 2097051 pages RAM [ 1221.914587][ T9174] 0 pages HighMem/MovableOnly [ 1221.923896][ T9174] 428238 pages reserved [ 1221.929293][ T9174] 0 pages cma reserved [ 1223.642283][ T9154] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1223.834005][T29423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.870000][T29423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.048760][T29413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.068939][T29413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.242835][ T9195] x_tables: duplicate underflow at hook 2 [ 1224.380981][ T9202] netlink: 'syz.0.9464': attribute type 10 has an invalid length. [ 1224.477667][ T9202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.487522][ T9202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1224.609026][ T9203] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 1225.290130][ T9246] IPv6: NLM_F_CREATE should be specified when creating new route [ 1225.345172][ T9253] lo: entered promiscuous mode [ 1225.363205][ T9253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1225.601434][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1225.601544][ T9251] x_tables: unsorted underflow at hook 2 [ 1225.610791][ T9276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1225.668752][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9480'. [ 1225.730703][ T9281] netlink: 'syz.1.9485': attribute type 2 has an invalid length. [ 1225.779459][ T9281] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1225.814091][ T9281] bond2 (unregistering): Released all slaves [ 1226.505201][ T9301] veth0_macvtap: entered allmulticast mode [ 1226.514642][ T9301] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1228.387513][ T9258] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1228.852212][ T9324] 8021q: VLANs not supported on gre0 [ 1228.962600][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9502'. [ 1228.974089][ T9333] netlink: 'syz.0.9500': attribute type 5 has an invalid length. [ 1229.000622][ T9333] netlink: 'syz.0.9500': attribute type 5 has an invalid length. [ 1229.016901][ T9336] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1229.031924][ T9333] netlink: 'syz.0.9500': attribute type 5 has an invalid length. [ 1229.040298][ T9333] netlink: 'syz.0.9500': attribute type 5 has an invalid length. [ 1230.149561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1231.817491][ T9323] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1232.155748][ T9381] syzkaller0: entered promiscuous mode [ 1232.169304][ T9388] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9510'. [ 1232.190129][ T9381] syzkaller0: entered allmulticast mode [ 1232.530171][ T9397] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9516'. [ 1232.557146][ T9397] 0·: renamed from hsr0 (while UP) [ 1232.590280][ T9397] 0·: entered allmulticast mode [ 1232.601404][ T9397] hsr_slave_0: entered allmulticast mode [ 1232.620881][ T9397] hsr_slave_1: entered allmulticast mode [ 1232.642337][ T9397] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1232.840989][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9518'. [ 1232.854074][ T9396] netlink: 'syz.3.9516': attribute type 4 has an invalid length. [ 1232.869254][ T9400] netlink: 'syz.3.9516': attribute type 4 has an invalid length. [ 1233.308698][ T9426] Cannot find set identified by id 65534 to match [ 1233.474093][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.484487][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.492358][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.499758][ T9432] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1233.514303][ T9432] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1233.532116][ T9432] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1233.544012][ T9435] openvswitch: netlink: Message has 8 unknown bytes. [ 1233.568195][ T9437] openvswitch: netlink: Message has 8 unknown bytes. [ 1233.574256][ T9432] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1233.631250][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.651751][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.659748][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.667783][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.682199][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.690220][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.744637][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.753657][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.841810][ T9446] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1233.842600][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1233.864277][ T9446] bond1 (unregistering): Released all slaves [ 1233.868024][ T9450] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1233.882809][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9531'. [ 1233.893231][ T9432] lo speed is unknown, defaulting to 1000 [ 1233.901133][ T9432] lo speed is unknown, defaulting to 1000 [ 1234.527379][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9538'. [ 1234.793374][T29413] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1234.838966][T29413] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1235.594915][ T9489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1235.869663][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9547'. [ 1236.558315][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1236.582011][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9554'. [ 1236.645190][ T9567] syzkaller0: entered promiscuous mode [ 1236.662579][ T9567] syzkaller0: entered allmulticast mode [ 1237.421237][ T9609] __nla_validate_parse: 3 callbacks suppressed [ 1237.421259][ T9609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9572'. [ 1237.586898][ T9614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9574'. [ 1237.623522][ T9612] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1237.652451][ T9612] gretap1: entered promiscuous mode [ 1237.666981][ T9612] gretap1: entered allmulticast mode [ 1237.731311][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1237.747427][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1237.760163][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1237.773930][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1237.813533][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1238.001592][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9578'. [ 1238.056014][ T9632] netlink: 'syz.3.9579': attribute type 10 has an invalid length. [ 1238.185227][ T9632] team0: Port device dummy0 added [ 1238.762281][ T9660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9587'. [ 1238.813003][ T9661] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1238.846724][ T9620] lo speed is unknown, defaulting to 1000 [ 1238.879624][ T9620] lo speed is unknown, defaulting to 1000 [ 1238.904706][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9589'. [ 1239.187842][ T9680] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9593'. [ 1239.536811][ T9690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.544705][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.628822][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1239.641130][ T9690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1239.987650][ T9625] Bluetooth: hci4: command tx timeout [ 1240.162394][ T9728] netlink: 'syz.3.9604': attribute type 2 has an invalid length. [ 1240.164896][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.178506][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.185927][ T9620] bridge_slave_0: entered allmulticast mode [ 1240.254086][ T9620] bridge_slave_0: entered promiscuous mode [ 1240.263470][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.270848][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.278336][ T9620] bridge_slave_1: entered allmulticast mode [ 1240.286637][ T9620] bridge_slave_1: entered promiscuous mode [ 1240.363642][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.378949][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.474966][ T9620] team0: Port device team_slave_0 added [ 1240.484374][ T9620] team0: Port device team_slave_1 added [ 1240.543343][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.552439][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.578461][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.591627][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.598793][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.648704][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9610'. [ 1240.661357][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.741979][ T9747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9612'. [ 1240.802908][ T9620] hsr_slave_0: entered promiscuous mode [ 1240.815983][ T9620] hsr_slave_1: entered promiscuous mode [ 1240.822754][ T9620] debugfs: 'hsr0' already exists in 'hsr' [ 1240.828545][ T9620] Cannot create hsr debugfs directory [ 1240.893217][ T9751] netlink: 'syz.3.9612': attribute type 2 has an invalid length. [ 1240.947216][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9612'. [ 1241.220260][ T9758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9615'. [ 1241.309657][ T4345] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.329727][ T4345] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.339637][ T4345] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.349738][ T4345] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.812478][ T9784] netlink: 'syz.0.9619': attribute type 21 has an invalid length. [ 1241.988760][ T9625] Bluetooth: hci4: command tx timeout [ 1242.546081][ T9620] tipc: Disabling bearer [ 1242.651196][ T9813] Bluetooth: MGMT ver 1.23 [ 1242.801249][ T29] audit: type=1800 audit(1785552745.772:19): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9627" name="memory.events" dev="tmpfs" ino=674 res=0 errno=0 [ 1242.829694][ T29] audit: type=1804 audit(1785552745.772:20): pid=9817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9627" name="/newroot/128/memory.events" dev="tmpfs" ino=674 res=1 errno=0 [ 1243.080775][ T9620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1243.174402][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.184571][ T9620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1243.207878][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.242175][ T9620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1243.255313][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.318334][ T9620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1243.422664][ T9620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1243.436333][ T9845] netlink: 'syz.1.9636': attribute type 1 has an invalid length. [ 1243.696668][ T9845] bond2: entered promiscuous mode [ 1243.702453][ T9845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1243.745225][ T9858] macvtap1: entered allmulticast mode [ 1243.868625][ T9845] bond2: (slave bridge2): making interface the new active one [ 1243.881741][ T9845] bridge2: entered promiscuous mode [ 1243.912603][ T9845] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1244.112776][ T9625] Bluetooth: hci4: command tx timeout [ 1246.159007][ T9625] Bluetooth: hci4: command tx timeout [ 1248.093191][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.101030][ T9886] __nla_validate_parse: 1 callbacks suppressed [ 1248.101052][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9642'. [ 1248.203505][ T9620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.235401][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.242833][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.276356][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.283909][ T4345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.331478][ T9897] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1249.010790][ T9930] netlink: 'syz.3.9652': attribute type 10 has an invalid length. [ 1249.238584][ T9940] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9656'. [ 1249.321258][ T9945] netlink: 'syz.1.9655': attribute type 178 has an invalid length. [ 1249.439822][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.844312][ T9968] netlink: 71 bytes leftover after parsing attributes in process `syz.3.9660'. [ 1249.946403][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9663'. [ 1249.967720][ T9967] ip_vti0: entered promiscuous mode [ 1249.995840][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9661'. [ 1250.119788][ T9620] veth0_vlan: entered promiscuous mode [ 1250.144878][ T9620] veth1_vlan: entered promiscuous mode [ 1250.231239][ T9620] veth0_macvtap: entered promiscuous mode [ 1250.264503][ T9620] veth1_macvtap: entered promiscuous mode [ 1250.278591][ T9992] netlink: 'syz.2.9662': attribute type 64 has an invalid length. [ 1250.323967][ T9992] netlink: 'syz.2.9662': attribute type 64 has an invalid length. [ 1250.409402][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.449316][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.586335][ T1580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.637030][ T1580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.761265][T29415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.769544][T29415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.874778][T29422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.888346][T29422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.910286][T29413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.935519][T29413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.044019][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9571'. [ 1251.187550][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1251.189309][ T29] audit: type=1800 audit(1785552754.122:21): pid=10018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9672" name=C001 dev="tmpfs" ino=753 res=0 errno=0 [ 1251.202903][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1251.230041][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9674'. [ 1251.230781][T10020] xt_socket: unknown flags 0xe4 [ 1251.550793][T10044] netlink: 'syz.3.9679': attribute type 1 has an invalid length. [ 1251.593049][T10044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1251.607513][T10044] netlink: 'syz.3.9679': attribute type 1 has an invalid length. [ 1251.652367][T10049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9680'. [ 1251.691507][T10051] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1252.177236][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.186205][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.196427][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.205531][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.232562][T10068] bond0: (slave batadv0): Releasing backup interface [ 1252.543939][T10075] sctp: [Deprecated]: syz.1.9687 (pid 10075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1252.543939][T10075] Use struct sctp_sack_info instead [ 1253.014007][T10090] netlink: 'syz.0.9692': attribute type 1 has an invalid length. [ 1253.072736][T10090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1253.501655][T10096] tipc: Enabled bearer , priority 0 [ 1253.608997][T10095] tipc: Disabling bearer [ 1253.935947][T10108] netlink: 'syz.0.9698': attribute type 21 has an invalid length. [ 1253.968113][T10108] __nla_validate_parse: 7 callbacks suppressed [ 1253.968136][T10108] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9698'. [ 1254.047308][T10108] netlink: 'syz.0.9698': attribute type 5 has an invalid length. [ 1254.088391][T10108] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9698'. [ 1254.100295][T10116] Bluetooth: MGMT ver 1.23 [ 1255.146117][T10148] netlink: 'syz.4.9708': attribute type 3 has an invalid length. [ 1255.221959][T10152] netlink: 296 bytes leftover after parsing attributes in process `syz.0.9710'. [ 1256.402457][T10189] ipt_REJECT: ECHOREPLY no longer supported. [ 1256.453830][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1256.729902][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9724'. [ 1257.033722][T10214] syzkaller0: entered promiscuous mode [ 1257.059650][T10214] syzkaller0: entered allmulticast mode [ 1257.269916][T10224] syzkaller0: entered promiscuous mode [ 1257.275453][T10224] syzkaller0: entered allmulticast mode [ 1257.382349][T10219] syzkaller0: entered promiscuous mode [ 1257.388283][T10219] syzkaller0: entered allmulticast mode [ 1257.608156][T10239] Cannot find set identified by id 65534 to match [ 1257.810817][T10249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1261.789000][T10264] netlink: 'syz.4.9741': attribute type 30 has an invalid length. [ 1261.864352][T10268] netlink: 'syz.1.9742': attribute type 1 has an invalid length. [ 1261.882759][T10269] netlink: 'syz.1.9742': attribute type 1 has an invalid length. [ 1262.033724][T10282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9747'. [ 1262.132193][T10282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1262.270619][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9748'. [ 1262.465816][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9746'. [ 1262.516731][T10296] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.9746'. [ 1262.556473][T10290] syzkaller0: entered promiscuous mode [ 1262.566265][T10290] syzkaller0: entered allmulticast mode [ 1262.621915][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9752'. [ 1262.654300][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1262.703610][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1262.745226][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 1262.753720][T10303] xt_hashlimit: max too large, truncated to 1048576 [ 1262.770539][T10303] xt_hashlimit: overflow, rate too high: 0 [ 1262.806079][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9751'. [ 1262.890455][T10310] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9754'. [ 1262.913950][T10310] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9754'. [ 1262.941363][T10310] syzkaller0: entered promiscuous mode [ 1262.952675][T10310] syzkaller0: entered allmulticast mode [ 1263.606597][T10339] netlink: 'syz.4.9763': attribute type 16 has an invalid length. [ 1263.886582][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1263.905008][T10332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.045345][T10342] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1264.115122][T29413] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.150487][T10370] netlink: 'syz.4.9772': attribute type 2 has an invalid length. [ 1264.216778][T29417] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.233375][T29417] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.361798][T10377] ip6gre2: entered promiscuous mode [ 1264.372697][T10377] ip6gre2: entered allmulticast mode [ 1264.431253][ T6087] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.300496][T10423] netlink: 'syz.3.9789': attribute type 16 has an invalid length. [ 1265.308746][T10423] netlink: 'syz.3.9789': attribute type 17 has an invalid length. [ 1265.417911][T10423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1265.428670][T10423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.447337][T10423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.565455][T10423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.576746][T10423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.593681][T10423] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1265.610066][T10423] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1265.622474][T10423] 0·: left allmulticast mode [ 1265.627680][T10423] hsr_slave_0: left allmulticast mode [ 1265.634321][T10423] hsr_slave_1: left allmulticast mode [ 1265.647159][T10423] veth1_vlan: left promiscuous mode [ 1265.654886][T10423] veth0_vlan: left promiscuous mode [ 1265.662538][T10423] veth0_vlan: entered promiscuous mode [ 1265.671333][T10423] veth1_vlan: entered promiscuous mode [ 1265.683936][T10423] veth1_macvtap: left promiscuous mode [ 1265.691220][T10423] veth0_macvtap: left promiscuous mode [ 1265.698635][T10423] veth0_macvtap: entered promiscuous mode [ 1265.738189][T10423] veth1_macvtap: entered promiscuous mode [ 1265.750797][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1265.759110][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1265.767342][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1265.776684][T10423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1265.786342][T10423] gretap1: left promiscuous mode [ 1265.791739][T10423] gretap1: left allmulticast mode [ 1265.799103][T10423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1265.828736][T10425] bond1: entered promiscuous mode [ 1265.840556][T10425] bond1: entered allmulticast mode [ 1265.849563][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.856741][ T6083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.866596][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.873771][ T6083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1265.962609][T10435] bond4: entered promiscuous mode [ 1265.967908][T10435] bond4: entered allmulticast mode [ 1265.981130][T10435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1266.052877][T29417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.063937][T29417] bond2: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 1266.080940][T29417] bond2: (slave veth0_to_bond): making interface the new active one [ 1266.096199][T29417] bond2: active interface up! [ 1266.167308][T29425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.205717][T10451] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1266.221089][ T6087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.222330][T10456] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1266.239865][ T6087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.529392][T10484] netlink: 'syz.4.9803': attribute type 4 has an invalid length. [ 1266.555223][T10484] netlink: 'syz.4.9803': attribute type 4 has an invalid length. [ 1267.224407][T10523] netlink: 'syz.2.9817': attribute type 1 has an invalid length. [ 1267.228724][T10516] batadv_slave_1: entered promiscuous mode [ 1267.419778][T10523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1267.442193][T10516] sit0: entered promiscuous mode [ 1267.522169][T10516] __nla_validate_parse: 20 callbacks suppressed [ 1267.522193][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9814'. [ 1267.633474][T10530] bond2: (slave geneve2): making interface the new active one [ 1267.663620][T10530] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1267.711936][T10514] batadv_slave_1: left promiscuous mode [ 1267.829850][T29425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.845447][T29425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.924367][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9820'. [ 1268.036867][ T6083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.052089][T29422] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.126781][T10563] netlink: 'syz.1.9825': attribute type 21 has an invalid length. [ 1268.149978][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1268.227673][T10563] netlink: 304 bytes leftover after parsing attributes in process `syz.1.9825'. [ 1268.263755][T10563] team0: Cannot enslave team device to itself [ 1268.415421][T10571] openvswitch: netlink: Actions may not be safe on all matching packets [ 1268.493908][T10579] ªªªªª»: renamed from dummy0 (while UP) [ 1268.614604][T10581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.623201][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.636763][T10581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.677417][T10586] SET target dimension over the limit! [ 1268.740442][T10581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1268.754560][T10581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1268.770089][T10581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1268.783874][T10581] veth1_vlan: left promiscuous mode [ 1268.792834][T10581] veth0_vlan: left promiscuous mode [ 1268.800300][T10581] veth0_vlan: entered promiscuous mode [ 1268.812294][T10581] veth1_vlan: entered promiscuous mode [ 1268.837245][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1268.854367][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1268.864872][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1268.873412][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1268.889709][T10581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.007537][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.014829][ T6087] bridge0: port 1(bridge_slave_0) entered listening state [ 1269.031802][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9836'. [ 1269.043712][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.051003][ T6087] bridge0: port 2(bridge_slave_1) entered listening state [ 1269.058185][T10599] netlink: 'syz.0.9836': attribute type 4 has an invalid length. [ 1269.097321][T10598] IPv6: NLM_F_CREATE should be specified when creating new route [ 1269.105530][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9837'. [ 1269.191965][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9839'. [ 1269.314779][T10612] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1269.326420][T10611] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1269.362308][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1269.372032][ T7441] lo speed is unknown, defaulting to 1000 [ 1269.378078][ T7441] syz2: Port: 1 Link DOWN [ 1269.381203][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9839'. [ 1274.448969][T10686] netlink: 'syz.4.9860': attribute type 1 has an invalid length. [ 1274.537968][T10686] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1274.673831][T10703] bond0: entered promiscuous mode [ 1274.679306][T10703] bond_slave_0: entered promiscuous mode [ 1274.685823][T10703] bond_slave_1: entered promiscuous mode [ 1274.694009][T10703] batadv0: entered promiscuous mode [ 1274.701155][T10703] debugfs: 'hsr1' already exists in 'hsr' [ 1274.734920][T10703] Cannot create hsr debugfs directory [ 1274.741589][T10703] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1274.769732][T10703] bond0: left promiscuous mode [ 1274.773023][T10706] __nla_validate_parse: 1 callbacks suppressed [ 1274.773041][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1274.774647][T10703] bond_slave_0: left promiscuous mode [ 1274.774889][T10703] bond_slave_1: left promiscuous mode [ 1274.828546][T10703] batadv0: left promiscuous mode [ 1275.092557][T10724] x_tables: duplicate entry at hook 1 [ 1275.338348][T10733] [ 1275.341084][T10733] ============================= [ 1275.346045][T10733] WARNING: suspicious RCU usage [ 1275.350922][T10733] syzkaller #0 Not tainted [ 1275.355371][T10733] ----------------------------- [ 1275.360338][T10733] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1275.383176][T10733] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1275.383176][T10733] other info that might help us debug this: [ 1275.383176][T10733] [ 1275.395011][T10733] [ 1275.395011][T10733] rcu_scheduler_active = 2, debug_locks = 1 [ 1275.403124][T10733] 1 lock held by syz.4.9877/10733: [ 1275.408272][T10733] #0: ffffffff8eb59e58 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: __bpf_prog_test_run_raw_tp+0x1ba/0xa20 [ 1275.420194][T10733] [ 1275.420194][T10733] stack backtrace: [ 1275.426300][T10733] CPU: 1 UID: 0 PID: 10733 Comm: syz.4.9877 Not tainted syzkaller #0 PREEMPT(full) [ 1275.426328][T10733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1275.426341][T10733] Call Trace: [ 1275.426350][T10733] [ 1275.426359][T10733] dump_stack_lvl+0xe8/0x150 [ 1275.426400][T10733] lockdep_rcu_suspicious+0x13f/0x1d0 [ 1275.426440][T10733] get_callchain_entry+0x2b6/0x3c0 [ 1275.426479][T10733] get_perf_callchain+0xd5/0x880 [ 1275.426514][T10733] ? finish_task_switch+0x412/0xc60 [ 1275.426573][T10733] ? __pfx_get_perf_callchain+0x10/0x10 [ 1275.426613][T10733] ? __lock_acquire+0x683/0x2cf0 [ 1275.426645][T10733] __bpf_get_stack+0x3e9/0xa70 [ 1275.426688][T10733] ? __pfx___bpf_get_stack+0x10/0x10 [ 1275.426725][T10733] ? __bpf_prog_test_run_raw_tp+0x1ba/0xa20 [ 1275.426755][T10733] bpf_get_stack+0x33/0x50 [ 1275.426784][T10733] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 1275.426806][T10733] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1275.426842][T10733] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 1275.426866][T10733] __bpf_prog_test_run_raw_tp+0x329/0xa20 [ 1275.426903][T10733] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 1275.426940][T10733] bpf_prog_test_run_raw_tp+0x562/0x7e0 [ 1275.426974][T10733] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1275.427001][T10733] ? __fget_files+0x2a/0x420 [ 1275.427040][T10733] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1275.427066][T10733] bpf_prog_test_run+0x2c5/0x340 [ 1275.427100][T10733] __sys_bpf+0xa22/0xd90 [ 1275.427147][T10733] ? do_raw_spin_lock+0xa0/0x2f0 [ 1275.427173][T10733] ? __pfx___sys_bpf+0x10/0x10 [ 1275.427205][T10733] ? do_futex+0x3e7/0x4e0 [ 1275.427260][T10733] ? rcu_is_watching+0x15/0xb0 [ 1275.427305][T10733] __x64_sys_bpf+0xba/0xd0 [ 1275.427332][T10733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.427357][T10733] do_syscall_64+0x174/0x580 [ 1275.427385][T10733] ? trace_irq_disable+0x3b/0x140 [ 1275.427413][T10733] ? clear_bhb_loop+0x40/0x90 [ 1275.427439][T10733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.427461][T10733] RIP: 0033:0x7fd7ac99e019 [ 1275.427481][T10733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.427498][T10733] RSP: 002b:00007fd7ad941028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1275.427522][T10733] RAX: ffffffffffffffda RBX: 00007fd7acc25fa0 RCX: 00007fd7ac99e019 [ 1275.427538][T10733] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1275.427552][T10733] RBP: 00007fd7aca3500c R08: 0000000000000000 R09: 0000000000000000 [ 1275.427565][T10733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.427578][T10733] R13: 00007fd7acc26038 R14: 00007fd7acc25fa0 R15: 00007ffc69181348 [ 1275.427612][T10733] [ 1275.461466][T10739] netlink: 'syz.2.9878': attribute type 7 has an invalid length. [ 1276.746009][T29417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.096456][T29417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.412354][T29417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.489837][T29417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.727796][T29417] bridge_slave_1: left allmulticast mode [ 1277.736110][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.752817][T29417] bridge_slave_0: left allmulticast mode [ 1277.759572][T29417] bridge_slave_0: left promiscuous mode [ 1277.767115][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.087200][T29417] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1278.095436][T29417] bridge2 (unregistering): left promiscuous mode [ 1278.114202][T29417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.126763][T29417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.138577][T29417] bond0 (unregistering): Released all slaves [ 1278.155066][T29417] bond1 (unregistering): Released all slaves [ 1278.189322][T29417] bond2 (unregistering): Released all slaves [ 1278.224263][T29417] bond3 (unregistering): Released all slaves [ 1278.248253][T29417] bond4 (unregistering): Released all slaves [ 1278.358972][T29417] tipc: Left network mode [ 1278.990673][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1279.322089][T29417] hsr_slave_0: left promiscuous mode [ 1279.331963][T29417] hsr_slave_1: left promiscuous mode [ 1279.341640][T29417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1279.351414][T29417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1279.362566][T29417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1279.370807][T29417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1279.389852][T29417] veth1_macvtap: left promiscuous mode [ 1279.395444][T29417] veth0_macvtap: left promiscuous mode [ 1279.401955][T29417] veth1_vlan: left promiscuous mode [ 1279.693393][T29417] team0 (unregistering): Port device vlan0 removed [ 1279.852154][T29417] team0 (unregistering): Port device team_slave_1 removed [ 1279.882640][T29417] team0 (unregistering): Port device team_slave_0 removed [ 1280.246206][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1280.745776][T29417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.890160][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1281.028840][T29417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.115442][T29417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.322750][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1281.476714][T29417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.789498][T29417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.025494][T29417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.148036][T29417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.285669][T29417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.309489][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1282.700524][T29417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.834683][T29417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.993732][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1283.090003][T29417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.266790][T29417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.663500][T29417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.706123][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1283.836184][T29417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.098118][T29417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.233214][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1284.270518][T29417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.553697][T29417] bridge_slave_1: left allmulticast mode [ 1284.559506][T29417] bridge_slave_1: left promiscuous mode [ 1284.565418][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.580733][T29417] bridge_slave_0: left allmulticast mode [ 1284.586540][T29417] bridge_slave_0: left promiscuous mode [ 1284.596415][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.618327][T29417] bridge_slave_1: left promiscuous mode [ 1284.624538][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.667911][T29417] bridge_slave_0: left allmulticast mode [ 1284.673634][T29417] bridge_slave_0: left promiscuous mode [ 1284.679452][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.706323][T29417] bridge_slave_1: left allmulticast mode [ 1284.712132][T29417] bridge_slave_1: left promiscuous mode [ 1284.718048][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.728588][T29417] bridge_slave_0: left allmulticast mode [ 1284.734294][T29417] bridge_slave_0: left promiscuous mode [ 1284.740170][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.778463][T29417] bridge_slave_1: left allmulticast mode [ 1284.784359][T29417] bridge_slave_1: left promiscuous mode [ 1284.790180][T29417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.801663][T29417] bridge_slave_0: left allmulticast mode [ 1284.807465][T29417] bridge_slave_0: left promiscuous mode [ 1284.813362][T29417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.219669][T29417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.232893][T29417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.244441][T29417] bond0 (unregistering): Released all slaves [ 1285.263318][T29417] bond1 (unregistering): Released all slaves [ 1285.284889][T29417] bond2 (unregistering): Released all slaves