last executing test programs: 16.43366863s ago: executing program 3 (id=3133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_USERDATA={0x7c, 0xd, 0x1, 0x0, "243459698224936fb7b41ac984fd0fd6561f376632db4327aced9c42bdbe5e18c5fd655312885199954c61c707dd05e47a47de7c08e26891be6a33adeff687c59d3d225d7b6d16494899175e97361515ca222f9d053871c9c9d4a43f26773f3cdca29a483dc25a559ae297f6cc9d84af269fa52c8abf97fa"}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x104}}, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="4fa1f49ff8a930286f7a2043220c00340905aa398464cf67c5e786558ea0a2ec2ac69b5e4bd9e78ccf0abcb03a1b826ebbf50f6ebce9e8f8bfe63e5354bff39a239e1f67ad8f0b", 0x47) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r2 = socket$kcm(0x2, 0xa, 0x2) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000640)={0x10, 0x80000001, 0x7f25177a, 0x3, 0x1, 0xdb33, 0x4, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x2, 0x5, 0x100000001, 0x51, 0x5, 0x1}, &(0x7f00000006c0)={0x5, 0x2, 0x10001, 0x8000000000000001, 0x2, 0x5, 0x9, 0x40}, &(0x7f0000000740)={r3, r4+10000000}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x7]}, 0x8}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@private0, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000940)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000600)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa4, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffc}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000000}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000021}, 0x4040005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0xfdaf) syz_emit_ethernet(0xa9, &(0x7f0000000980)=ANY=[@ANYBLOB="0180c2000003ffffffffffff8100060008050010f3fbd8c5208daae1d487bc38c5d7822914ed0c8f39c65e0554a7d428fb78886947700c1b10b6e58d0057cbe9e084c0dbac2606e5897ad8a20ddb76ebe828cb5d9ea726a97d4352795dcbea8e5f9ff48e60060f4ae5d25e104e2bf7993bafc1f9e436d1ef8f660b4963ae29c1d96bdc359f27aa68cbed52262ae69b6373a1ec98d09d72670fcb038276fc813eaaa500ec15bf829ce9aa321620fe5c4e1914143366f5d3e464eec4f3f8d725868bc023e6270999b7b6aa5f46dbb62dd92959aede04a56e3cb9b2daf23cccb4039838351aa27e02623ef572d0d2efadbc641365a2f2b55b2b0559badb3edddb92749fe3a1629867879586"], &(0x7f0000000200)={0x1, 0x2, [0x495, 0xe2c, 0xbc4, 0xe44]}) setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) 15.981176885s ago: executing program 3 (id=3138): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 15.805681913s ago: executing program 3 (id=3140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xe, &(0x7f0000000440)=0x100, 0x4) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd145a80806a5c018}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x10) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) (async) r7 = socket$inet(0x2, 0x6, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000080)={@empty, r8}, 0x14) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r10, 0x0, 0x4, 0x0, 0x0) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0xfff, 0x0, 0x0, 0x9, 0x0, 0x1}}, {0x6, 0x2, [0x49bf]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.6299638s ago: executing program 3 (id=3142): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000070000006916300000000000bf07000000000000260507000fff0720670600001f000000470600000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 15.405257617s ago: executing program 3 (id=3144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8001, 0xd7e0, 0x64, 0xfff}}}}]}, 0x4c}}, 0x4008000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x8902, &(0x7f0000000080)={@loopback={0x8000000000}, @loopback, @empty}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x27, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @ringbuf_query, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0x16, &(0x7f0000000140)=""/22, 0x41000, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x4, 0x571, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x4, 0x3, 0x4}, {0x5, 0x2, 0x5, 0x2}, {0x4, 0x3, 0x10, 0xb}, {0x5, 0x5, 0x6, 0xb}], 0x10, 0x80000001}, 0x94) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="900000001000000525bd7000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="fdf06ece0085000008002800d1450000080028007403000014000300767863616e31000000000000000000002c002b8008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="000056480000000800c895", @ANYRES32=r6, @ANYBLOB="08000300000000001d00220009f39cdcbaea05020a42a1670b67419c3dbc3472eaeab091b2000000"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000800)={'veth1_virt_wifi\x00'}) 14.821134189s ago: executing program 3 (id=3150): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, &(0x7f00000000c0)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000011140102040000000000000008004a0001000000080003000100000008004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000003c0)) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xaf}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x71e2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x169}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040810}, 0x20000000) 4.006801426s ago: executing program 4 (id=3222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x6, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.777522942s ago: executing program 0 (id=3224): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) 3.581602983s ago: executing program 2 (id=3225): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a000900000000000000000002"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x94, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x331, "3f7aa1b31efb", @long="5e75b6c194a32257c19b8e726daf74a6"}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a000900000000000000000002"], 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x94, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x46, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @void, @val, @val={0x3, 0x1, 0xc}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa70a}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x331, "3f7aa1b31efb", @long="5e75b6c194a32257c19b8e726daf74a6"}}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) 3.580788787s ago: executing program 1 (id=3226): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="e47ddbc86a0f81b05f33c8b4ef303f6a1f88ef0b47f844bd6f07f664b4ac12915e457a6509363c6cd6582fc6d84da8700b82252f191615b516eeb33814896117a50f5b7c485adbc6b2208d9fc4a45d1fcdce60ac976132be690b5577d5c0d8bc559829ef554d3ff50c9186b5449a8fcb78fa3ce4fdb01615d53960603395b4061b4e17cc5fb08dc525add62616c9175a274d83279fe15e455992e3c89471d0d0b24bdce12e8045ee35e2e9a35ff59231d8"}, {&(0x7f0000000140)="e8f7f239b7be621d5aac07676308812e060282320ee8e99b4a9abd5c9e948f560297859162dd3ccad34d97d41ea3b91a54fe75173855fa21f863f0d56e6c4bc4e3362836ffba52a4a51f3bb9bcd17232fa8917b39f517bf0fa59fcf14afa035eb4b60d13efa37c51134b3dcb629d8430a6769060508174e2"}], 0x33}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4055}, 0x40090) sendto$packet(r3, &(0x7f0000000200)="05178100", 0x4, 0x4, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 3.47704573s ago: executing program 0 (id=3227): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e22, 0x3, 'ovf\x00', 0x18, 0x60000000, 0xd}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xb, 0x48001, 0x8}}, 0x44) 3.383900555s ago: executing program 0 (id=3228): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000003880)=[{{&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)="6ffdb00d19b3e852aee6ffc70188d5fe6d75037bbcd42608dfdc999baf695f2fbd30", 0x22}], 0x1}}, {{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x3, 0x3, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)="0c2cd7be07a619cdc0582db1724154307a71eec0309bca3e6439775eb26b9893dc7748b3266791f66df359d71cb774d0bcde05000d0b4a64e01656d2b16b9d24ea4262f8b0b1db0e031e14f6cd74c0ee0b627239a173f72d1b955a49840e66da7535fb5cb3025f5586c32ed9cf42775e69e137f484ccb7ff0baf9cb6968d81dab07e7f75eeaff6861944b12b2706d7bb0c", 0x91}, {&(0x7f0000000380)="13d7201b1b871a31011615322c37a4e919f4071b7052f6804f8800c4de6e565c6c0b8d5178defe947f336a77d64408ec323e2d1d1758953efb32dd4a1bd630669f3096b9249e8bfac434f848d99eb48ecf098471e58c22ae0da0a40f58621ffca9229831ae5a9e39acb4cf4a17e13bec8a09fd6c48ea598fe075d8210578e5ee2d413ab6a4f57252c4560050f9895cc07f0b0c35e9ed53a1865049bc0ed3d18b480bbb8433665aa169ea688bd3cc9f11b3ce1a1a3a1f5d03e2d4631096ea1477146c6bbdf82fc85972d5db1812590b8581e23f34c4dde287d037c082b1a11ad35e6b1dd9c8d9", 0xe6}, {&(0x7f0000000480)="37a4add0439ca311bdfb", 0xa}], 0x3, &(0x7f0000000500)=[{0x70, 0x102, 0x8000, "b621a8b8b95b1f13d250a586956d5629fd4e126f1fc9bf85bed4a33ea2210b75cef1ae43571d1a3aca857de500236d7bcc0e6f0ae7221a2a285693158ad66aa340eb3add46dc8bde17d1ea8d883c77c547803153a342f6ceaf7140673175"}, {0x20, 0x10e, 0x0, "d5e731c760cf09c2d581845c41"}, {0x1010, 0x3a, 0x8, "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"}, {0x1010, 0x117, 0x9, "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"}], 0x20b0}}, {{&(0x7f00000025c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002640)="64f1b5de356b0d52c1190ca7aa56ee91c9661e5ad3c9bf2823a6966442c2f9135bcf8ba657c6124e2748c4fb456aa9ed82c076dc3c5f1fda9c3c7b15fd2ae22a0b0c73d859656693750c9f4eb6493739", 0x50}, {&(0x7f00000026c0)="11d41b379a71a59348e7eba5f76c5cd203f441fe579ad1be344f1653b84b54771accee4d6a64c20540ddb953de2cfd115e28dca4af926bba69369fcdb8c5c2128a01643f6f3809a718da84b21908f46de599db7cf96188297ecce2bca4b4716928e4e065e2c79f81218708ea90596f147a33fcc66666a4d3648df54c94ca9076", 0x80}, {&(0x7f0000002740)="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", 0x1000}], 0x3, &(0x7f0000003780)=[{0xf0, 0x3a, 0xb3f, "8c7b58a50bde333acb23a40fecab509c3aacc38986638bd50033bd80f4cc32fdea5bead724f0e174ad13d0b1e140d247225bf8d51b4fde6913f60516dfbef63dfc6a028161dfc0dfe7d036bf9a6f44ef2a6121dc72d1add516208dd2737cb20e2218ddea8e95be9255af1edb92682931354ce6dd36aec6b4f79f0f7255e4a9d3cf479583e4595396b2a110a9f939b0af98d5c8507817fb93f131d60b6a77d780403c4e22e49945b18da9f37a77a2973dfa49d708535f5a2b5f305c839394745ebaf0b3f8978f142cb7374cccefc2507cec672f13f2d04262a2b56d11dc"}], 0xf0}}], 0x3, 0x800) (async) accept$inet(r3, 0x0, &(0x7f0000003940)) (async) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000003980)={0x3, 'rose0\x00', {0xfe}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003a00), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x40, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) r7 = socket(0xf, 0x2, 0x3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x60, 0x0, 0xe00, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x48) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c80), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003d80)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d40)={&(0x7f0000003cc0)={0x78, r8, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x64, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8801}, 0x81) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000003dc0)={0x3, 'veth0_to_team\x00', {0x7}, 0x9}) (async) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000003e00), &(0x7f0000003e40)=0x4) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x30, 0x1412, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}]}, 0x30}}, 0x48000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003fc0), r7) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004140)={&(0x7f0000004000)={0x11c, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}]}, @TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "a088f5cf10a874cc60f6afd8990233343ce629833c7305181f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "05290884b9694016db4203e8407e3e016615f19177eaf54e77d63d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9ce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x240}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000043c0)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004380)={&(0x7f0000004200)={0x170, r9, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x78ee}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x426}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x416}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private0, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}]}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000004400)={'veth1_to_hsr\x00', {0x2, 0x0, @remote}}) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000056c0)={0x6, 0x2d, &(0x7f0000004440)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5f0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xb6}], &(0x7f00000045c0)='GPL\x00', 0x56, 0x1000, &(0x7f0000004600)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000005640)={0x0, 0xe, 0x9, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000005680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x200}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000005780)={r5, r10}) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r7, 0x84, 0x74, &(0x7f00000057c0)=""/21, &(0x7f0000005800)=0x15) r11 = accept4$x25(r7, &(0x7f0000005840), &(0x7f0000005880)=0x12, 0x80000) ioctl$sock_SIOCSIFBR(r11, 0x8941, &(0x7f00000058c0)=@generic={0x1, 0xa8c7, 0x592}) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000005900)) (async) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000005bc0)={&(0x7f0000005940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005980)={0x1e4, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xee}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6627}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe3c}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x891}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6e8f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xe, 0x3, "34681e38d0fa7303bdb5"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5b2e5db4860331856adcfb6dae2c13cdd6d86d3bda"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "22961a12197838133c94fb8e89ec7f0b41d62f241f72d17201e488c0fa"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x942}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "1a42f458f9972a5be6e1692dcef118d3f010776973a0b002d2c485c927a84a249e4d8f0731786bfd02d33135b6d1fc154f88eb19a652166c6a29e9087dccc745309c"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdfbb}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 3.337830221s ago: executing program 1 (id=3229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x604106, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x6, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24080) r4 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) recvmmsg(r4, 0x0, 0x0, 0x40000100, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="0b1205005924000018001280090001006970697000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x10100, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88100000", @ANYRES16=r6, @ANYBLOB="050026bd7000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d00000000000000a60200fe000400000000000900000003720603030303030310001b8004000300050001001d00000008000c006400000008000d0000000000"], 0x88}}, 0x20000014) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {0xffff, 0xffff}, {0xa, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x43}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'pim6reg\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="493d60d1643b430200000000000000004b472a5b51d2a5ec65dff56401a1833b4f379c5a32e8338db59df13f6777d2dbe302147c966be6f80b9984c2ab8e8b3b96aef960c6b7f4c96304002b3180cb931bc9ad1e41fbfb13e35475fc019e37b7ed7ded884ec3", @ANYRES32=r7, @ANYBLOB="0c009900010000000f00000010009d000c0000006fff81c90500ffff6e0015013ce599f118753a451c46560484897ccc8322635c312907552a42d5e9f4e8165937a6b3dc68facf6942e8b3ce410c1a2ffab50b6fb97ee59476fefafddf935973fcddde21491851e7cb6e490321d89dbc6eab7f80b46987d9696dca83fcd24e8ac6907fb1335b69662bff000008004a0008ac0f0008004a000cac0f00040005010800350004000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4b68642b7c760ca2}, 0x4000850) socket$netlink(0x10, 0x3, 0x0) 3.278762456s ago: executing program 2 (id=3230): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xffffffff}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x140, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x110, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xf4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffe083}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6e6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffff800}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc62}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x11}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x140, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x110, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xf4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffe083}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xd9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6e6}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x10}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffff800}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc62}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x80}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x11}]}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 3.252904361s ago: executing program 4 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000e0ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffe, @local, 'batadv_slave_1\x00'}}, 0x1e) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xd, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX=r1, @ANYRESDEC=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x34}}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x74}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (rerun: 64) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x1adbc, 0x1004, 0x0, 0x7, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno', 0xa) (async) sendto$llc(r4, &(0x7f0000000100)="46b0188d15597b0f71b65f0e2ad8b30c996c0dff44bb27cffc50e990f2541e1a66d07d32d3aeb82eb5cd5850e32500f3c417372f1e7ecd502bf7470e3f429220203e52648e04249056c8e5f689d74245a2721711715f002d264c6479bbd1d70c55a569d06d51a093f616", 0x6a, 0x40, &(0x7f00000001c0)={0x1a, 0x304, 0x7, 0xaf, 0x7, 0xd, @remote}, 0x10) 2.965743907s ago: executing program 0 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000080)=@ipv4_delroute={0x2c, 0x1a, 0x800, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}, @RTA_FLOW={0x8, 0xb, 0xd0}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'veth0_to_team\x00', @broadcast}) 2.813349739s ago: executing program 2 (id=3233): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@generic={0x94, 0x2}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x10, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8000, @rand_addr=0x64010100, @loopback}}}}, 0x42) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xfffffffffffffeff, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xfffffffffffffd98}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) (async) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.634385065s ago: executing program 4 (id=3234): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x48}}, 0x88890) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) nanosleep(&(0x7f0000000200), 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0xfffffffffffff801) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a800400"], 0x30}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r8, 0x80000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) 2.301902906s ago: executing program 4 (id=3235): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110000000000030000002300000008000300", @ANYRES32=r1, @ANYBLOB="00000000000500380001000000807e91af587f6beb097413404a5cfe01004c542d00deff0000000000000000"], 0x34}}, 0x0) 2.283943926s ago: executing program 1 (id=3236): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="fc9866fba6769a20a6d5073688e8086194219e8948f4a06678e70e7d28c87581111862b528bc7706fd40f34bb8ffaa3e53437657f73733c224a37ad3e40b23b5c557", 0x42) (async) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="17", 0x1}, {&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795c3238d7219c2d3020933c9c39c6d0cbc957ec3f682cac392c2a627a0c386f59681fdfd5ea467e2db933c4ae7a5aafaa8c86de5dfdc5ed01a788fc636bf7a8062bebeff23", 0x84}], 0x2, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2}, 0x5}], 0x1, 0x0, 0x0) 2.199563342s ago: executing program 1 (id=3237): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 2.117700777s ago: executing program 4 (id=3238): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, [0x0, 0xfffffffffffffffc, 0x7f, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4]}, &(0x7f0000000000)=0x100) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x24, 0x3, 0x9, 0x60008, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x4, 0xc}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000300), 0x0}, 0x20) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)={0x19c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x42}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040001) (async) write$nci(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="42010102"], 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3395000008001500", @ANYRESOCT=r10, @ANYBLOB="080001"], 0x30}}, 0x0) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000080)="91cc4c0000930be26626c892b6bc4315", 0x10) r13 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r13, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) connect$inet(r13, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 1.976338156s ago: executing program 2 (id=3239): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="0300f998aaae5a98ca00008586dd78fbf0ffffffbc649752a57197fa78034b0b06000000000000004de48edc4e4ccf56a40c274c045b", 0x36, 0x4c802, &(0x7f0000000200)={0x11, 0x1a, r1, 0x1, 0xfe, 0x6, @random="582e6452ad7b"}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e000000003aefffffc90000e00300000000000400", @ANYRES32=0x1, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x1, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x90, 0x5}}) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=@canfd={{0x3, 0x1}, 0x22, 0x0, 0x0, 0x0, "fe7ac8d8de3d1acf5d3f440545d8f5243eef1b5f2d1113824f446ca3029d5d0f01bd3be26cded08c925521ef774c16ed2ca7d5f10e18fb91cb114337db370df2"}, 0x48}, 0x1, 0x0, 0x0, 0x38442f3e4eb79951}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={&(0x7f0000000380), 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{}, 0x7, 0x6, 0x0, 0x0, "b02bd17c0a83a1c7"}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x4048811) 1.91191952s ago: executing program 4 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x6, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.717770746s ago: executing program 0 (id=3241): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2f, 0x9, 0x0, 0x0, 0x40, 0x0, 0x401}}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x19}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2a4, r6, 0x223, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x2}, {0x7, 0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x8}, {0x7}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x7}, {0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x1, 0x1}, {0x6}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x2}, {0x2, 0x3}, {0x6, 0xa}, {0x7, 0x2}, {0x7, 0x5}, {0x4, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x3}, {0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x3, 0x2}, {0x0, 0x5}, {0x5, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x0, 0x24, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd07e, 0x0, 0xc, 0x7, 0x3ff, 0x1, 0x5, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x4, 0x27, 0x8af91be416a4ceea, 0x1, 0x24, 0x36, 0x30, 0x3a, 0x50, 0x2, 0x5, 0x5, 0x12, 0x6c, 0x48, 0x24, 0x13, 0x6, 0x48, 0xc, 0x6, 0x18, 0x30, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0xe0c6, 0x6, 0x6, 0x7ff, 0x1800, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x70, 0x4, 0x16, 0x11, 0x4, 0x9, 0x30, 0x3, 0x36, 0xb, 0x18, 0x1b, 0x5, 0x36, 0x60, 0x16, 0x1, 0x24, 0x5, 0x1b, 0x30, 0x6c, 0x30, 0x1, 0x5]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x5b, 0x3, 0x8, 0xa, 0x5, 0x4, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfeff, 0x4, 0x7f, 0x3, 0xc, 0x0, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x70f, 0x9, 0x797, 0xb, 0x0, 0x2, 0x9e]}}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d, 0x0, 0x4, 0x1000, 0x9, 0x96, 0x60, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x8, 0x4, 0x3, 0x2, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x2}, {0x7, 0xa}, {0x0, 0x7}, {0x1}, {0x1, 0xa}, {0x4, 0x7}, {0x6, 0xa}, {0x3, 0x4}, {0x2, 0x1}, {0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x1}, {0x3}, {0x5, 0x2}, {0x7, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x6, 0x9}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x2}, {0x2, 0x2}, {0x1, 0x7}, {0x5}, {0x4, 0x9}, {0x3, 0xd}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x6}, {0x6, 0x6}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x7}, {0x4, 0x5}, {0x5, 0x6}, {0x5, 0x2}, {0x1, 0x5}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x1}, {0x3, 0x9}, {0x3, 0x2}, {0x4, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x145, 0x4, 0x7ff, 0x8, 0x1, 0x6, 0x801]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x1}, {0x1, 0x7}, {0x5, 0x1}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x6}, {0x5, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x3}, {0x7}, {0x7}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x2, 0x6}, {0x4, 0x8}, {0x6, 0xa}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0x9}, {0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x63, 0x3, 0xfffe, 0xfffc, 0x8, 0x7]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0xc, 0x5, 0x24, 0x3, 0x48, 0xb, 0x9, 0x30, 0x1b, 0x1, 0x9, 0xb, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1f, 0xd, 0xfff3, 0x3ff, 0x9, 0x80, 0x3ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x16, 0x16, 0x1, 0x16, 0x5, 0x16, 0x1b, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x6, 0x4, 0x10, 0xd759, 0xa896, 0x7e0, 0x9]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x55f, 0x6, 0x8bb, 0xa719, 0xd, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0xb, 0x48, 0xb, 0x6]}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) (rerun: 64) 1.292733393s ago: executing program 1 (id=3242): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1.28861562s ago: executing program 2 (id=3243): r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004090) 1.093604675s ago: executing program 0 (id=3244): socket$kcm(0x29, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x4a, &(0x7f0000000000), 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x30, r3, 0x8e8bb22fc1e1814f, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8001, 0x5}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000815}, 0x840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x48, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_TXQLEN={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x61e, 0xfffffffc}}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 336.566042ms ago: executing program 1 (id=3245): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0bb, 0xc574450d1af1e71d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x6}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 0s ago: executing program 2 (id=3246): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): rse: 2 callbacks suppressed [ 269.525483][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'. [ 269.530637][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 269.727776][T11209] netlink: 'syz.2.1387': attribute type 4 has an invalid length. [ 269.945917][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'. [ 269.965977][T11217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 269.985597][T11217] netlink: 'syz.4.1389': attribute type 12 has an invalid length. [ 270.005553][T11217] netlink: 'syz.4.1389': attribute type 11 has an invalid length. [ 270.330476][T11226] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 270.481910][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 270.495156][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 270.502215][T11226] bond3: entered promiscuous mode [ 270.512070][T11226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.007649][T11252] netlink: 'syz.0.1399': attribute type 21 has an invalid length. [ 271.021603][T11252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 271.083627][T11254] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1400'. [ 271.208339][T11259] sctp: [Deprecated]: syz.4.1402 (pid 11259) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.208339][T11259] Use struct sctp_sack_info instead [ 271.332048][T11263] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 271.435601][T11265] bond0: entered promiscuous mode [ 271.452044][T11266] netlink: 'syz.0.1403': attribute type 1 has an invalid length. [ 271.804226][T11275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'. [ 272.087078][T11282] syz_tun: entered promiscuous mode [ 272.097856][T11282] batadv_slave_0: entered promiscuous mode [ 272.220268][T11294] syzkaller1: entered promiscuous mode [ 272.229465][T11294] syzkaller1: entered allmulticast mode [ 272.241440][T11294] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1414'. [ 272.316948][T11298] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 272.369195][T11300] IPv6: Can't replace route, no match found [ 273.412099][T11338] sctp: [Deprecated]: syz.4.1429 (pid 11338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.412099][T11338] Use struct sctp_sack_info instead [ 273.496681][T11338] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 273.555045][T11338] netlink: 'syz.4.1429': attribute type 2 has an invalid length. [ 273.588383][T11338] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 273.626676][T11338] netlink: 'syz.4.1429': attribute type 1 has an invalid length. [ 273.957851][T11357] gre0: entered promiscuous mode [ 274.208995][T11367] bridge2: entered promiscuous mode [ 274.233506][T11367] bridge2: entered allmulticast mode [ 274.300433][T11372] netlink: 'syz.3.1442': attribute type 3 has an invalid length. [ 274.544649][T11381] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 274.889515][T11398] __nla_validate_parse: 5 callbacks suppressed [ 274.889537][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'. [ 275.026976][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 275.070217][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1448'. [ 275.465024][T11420] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1453'. [ 275.674390][T11423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.139149][T11448] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1461'. [ 276.181616][T11448] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1461'. [ 276.208127][T11448] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1461'. [ 276.559586][ T5873] Bluetooth: hci0: command tx timeout [ 298.546523][T11459] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1462'. [ 298.556309][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1464'. [ 298.579984][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 298.637360][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 298.671244][T11460] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1466'. [ 298.950336][T11479] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 299.049397][T11485] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1471'. [ 299.098254][T11485] gretap0: entered promiscuous mode [ 299.389688][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 299.664414][T11509] netlink: 'syz.0.1480': attribute type 9 has an invalid length. [ 299.689363][T11509] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1480'. [ 299.794592][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a521c00: rx timeout, send abort [ 299.805333][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a521c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.912040][T11517] veth1_macvtap: left promiscuous mode [ 299.951543][T11517] macsec0: entered promiscuous mode [ 299.985409][T11521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1482'. [ 300.005155][T11517] macsec0: entered allmulticast mode [ 300.013064][T11521] netlink: 'syz.4.1482': attribute type 7 has an invalid length. [ 300.060210][T11521] netlink: 'syz.4.1482': attribute type 8 has an invalid length. [ 300.093113][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 300.107570][T11524] macsec0: left promiscuous mode [ 300.132946][T11524] macsec0: left allmulticast mode [ 301.048390][T11559] netlink: 'syz.1.1496': attribute type 12 has an invalid length. [ 301.082352][T11559] netlink: 'syz.1.1496': attribute type 11 has an invalid length. [ 301.330982][T11569] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 301.500472][T11578] netlink: 'syz.0.1502': attribute type 7 has an invalid length. [ 301.959931][T11599] netlink: 'syz.3.1508': attribute type 10 has an invalid length. [ 301.990306][T11599] team0: Device veth1_macvtap failed to register rx_handler [ 302.756227][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053f3f800: rx timeout, send abort [ 303.238456][T11631] tipc: Enabling of bearer rejected, failed to enable media [ 303.265711][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888053f3f800: abort rx timeout. Force session deactivation [ 303.560807][T11643] __nla_validate_parse: 8 callbacks suppressed [ 303.560828][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1521'. [ 303.646282][T11643] bridge_slave_1: left allmulticast mode [ 303.651981][T11643] bridge_slave_1: left promiscuous mode [ 303.712149][T11643] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.747575][T11643] bridge_slave_0: left allmulticast mode [ 303.756677][T11643] bridge_slave_0: left promiscuous mode [ 303.762574][T11643] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.993525][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 304.034854][T11654] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1523'. [ 304.410510][T11668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 304.413812][T11669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 304.507323][T11665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1526'. [ 305.070114][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 305.224283][T11690] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 305.274917][T11688] netlink: 'syz.1.1533': attribute type 64 has an invalid length. [ 305.300589][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 305.333761][T11690] netlink: 'syz.1.1533': attribute type 64 has an invalid length. [ 305.381446][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1533'. [ 305.431559][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 306.339144][T11720] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 306.349053][T11720] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 307.156419][T11752] IPVS: set_ctl: invalid protocol: 51 172.20.20.35:20001 [ 307.795003][T11774] delete_channel: no stack [ 308.563626][T11800] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 308.661856][T11800] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 309.353241][T11830] netlink: 'syz.1.1568': attribute type 7 has an invalid length. [ 309.883772][T11854] netlink: 'syz.1.1573': attribute type 1 has an invalid length. [ 309.936195][T11854] __nla_validate_parse: 6 callbacks suppressed [ 309.936232][T11854] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1573'. [ 309.976028][T11854] netlink: 'syz.1.1573': attribute type 1 has an invalid length. [ 310.096101][T11854] openvswitch: netlink: Unknown key attributes 2 [ 310.517488][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1580'. [ 311.000672][T11901] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1585'. [ 311.060824][T11901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1585'. [ 311.598014][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 311.664553][T11922] openvswitch: netlink: IP tunnel dst address not specified [ 311.696359][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1591'. [ 312.215873][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1597'. [ 312.246755][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1597'. [ 312.273871][T11950] openvswitch: netlink: Message has 4 unknown bytes. [ 312.353912][T11955] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 312.403121][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1600'. [ 312.641016][T11963] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 312.725113][T11963] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1602'. [ 312.779695][T11967] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 312.948280][T11978] tipc: Enabled bearer , priority 0 [ 312.977882][T11971] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 313.202474][T11977] tipc: Disabling bearer [ 313.253411][T11986] hsr_slave_0: left promiscuous mode [ 313.602465][T12008] netlink: 'syz.1.1615': attribute type 16 has an invalid length. [ 313.683102][T12008] netlink: 'syz.1.1615': attribute type 17 has an invalid length. [ 313.840458][T12008] gre0: left promiscuous mode [ 313.968777][T12008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 314.887128][T12070] tap0: tun_chr_ioctl cmd 1074025676 [ 314.943092][T12070] tap0: owner set to 0 [ 314.958117][T12071] tunl0: entered promiscuous mode [ 314.981222][T12071] netlink: 'syz.1.1637': attribute type 3 has an invalid length. [ 315.002485][T12071] __nla_validate_parse: 11 callbacks suppressed [ 315.002504][T12071] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1637'. [ 315.042006][T12079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1639'. [ 315.060323][T12077] netlink: 'syz.2.1638': attribute type 21 has an invalid length. [ 315.672680][T12109] C: renamed from lo (while UP) [ 315.687932][T12109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 315.818949][T12115] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 315.858334][T12115] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1652'. [ 316.081820][T12122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1655'. [ 316.306211][T12125] netlink: 'syz.4.1657': attribute type 3 has an invalid length. [ 316.359710][T12132] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 316.362333][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 316.384418][T12132] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1658'. [ 316.633267][T12137] lo: entered promiscuous mode [ 316.638875][T12137] netlink: 'syz.2.1660': attribute type 2 has an invalid length. [ 316.647721][T12137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.657471][T12147] openvswitch: netlink: Missing key (keys=40, expected=100) [ 316.726192][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1665'. [ 316.747397][T12153] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 316.761031][T12153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.488562][T12186] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1675'. [ 317.672450][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'. [ 318.014344][T12204] unsupported nla_type 12296 [ 318.207056][T12218] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 318.323019][T12221] netlink: 'syz.2.1690': attribute type 1 has an invalid length. [ 318.362968][T12221] netlink: 'syz.2.1690': attribute type 3 has an invalid length. [ 318.403185][T12221] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1690'. [ 319.049797][T12251] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 319.080787][T12251] bond0: (slave wlan1): Opening slave failed [ 319.443850][T12266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.769541][T12281] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 319.931492][T12283] bridge0: port 1(macsec0) entered blocking state [ 319.962012][T12283] bridge0: port 1(macsec0) entered disabled state [ 319.972722][T12283] macsec0: entered allmulticast mode [ 319.978187][T12283] veth1_macvtap: entered allmulticast mode [ 319.989299][T12283] macsec0: entered promiscuous mode [ 320.043813][T12292] __nla_validate_parse: 86 callbacks suppressed [ 320.043834][T12292] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1713'. [ 320.520409][T12314] openvswitch: netlink: Unknown key attributes 2 [ 320.562032][T12319] netlink: 'syz.2.1719': attribute type 12 has an invalid length. [ 320.581700][T12319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1719'. [ 320.810748][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ab2800: rx timeout, send abort [ 320.970776][T12337] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1727'. [ 321.069915][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'. [ 321.310937][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ab2c00: rx timeout, send abort [ 321.320340][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ab2800: abort rx timeout. Force session deactivation [ 321.330969][T12354] syzkaller1: entered promiscuous mode [ 321.331000][T12354] syzkaller1: entered allmulticast mode [ 321.363443][T12349] netlink: 'syz.1.1733': attribute type 2 has an invalid length. [ 321.392457][T12349] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1733'. [ 321.435848][T12349] netlink: 'syz.1.1733': attribute type 10 has an invalid length. [ 321.485094][T12349] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1733'. [ 321.708338][T12365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1739'. [ 321.820232][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059ab2c00: abort rx timeout. Force session deactivation [ 322.173212][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1744'. [ 322.232264][T12382] dvmrp0: entered allmulticast mode [ 322.592658][T12396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'. [ 322.622615][T12392] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1749'. [ 322.816920][T12402] netlink: 'syz.4.1753': attribute type 3 has an invalid length. [ 322.863949][T12402] netlink: 'syz.4.1753': attribute type 5 has an invalid length. [ 322.938309][T12402] geneve2: entered promiscuous mode [ 322.961113][T12402] geneve2: entered allmulticast mode [ 323.005584][ T6957] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 323.064405][ T6957] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 323.119964][T10141] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 323.185066][T10141] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 323.624722][T12438] netlink: 'syz.4.1761': attribute type 142 has an invalid length. [ 323.802298][T12450] bond0: (slave bond_slave_0): Releasing backup interface [ 323.839008][T12450] bond0: (slave bond_slave_1): Releasing backup interface [ 323.894946][T12450] team0: Port device team_slave_0 removed [ 323.913053][T12450] team0: Port device team_slave_1 removed [ 323.932216][T12450] team0: Port device geneve0 removed [ 323.941272][T12450] bond2: (slave gretap1): Releasing active interface [ 325.033684][T12502] : entered promiscuous mode [ 325.098853][T12502] tipc: Enabled bearer , priority 10 [ 325.230872][T12508] sctp: [Deprecated]: syz.2.1778 (pid 12508) Use of int in max_burst socket option. [ 325.230872][T12508] Use struct sctp_assoc_value instead [ 325.327852][T12505] __nla_validate_parse: 13 callbacks suppressed [ 325.327884][T12505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1777'. [ 325.601072][T12516] pim6reg: entered allmulticast mode [ 326.223251][ T9] tipc: Node number set to 2389903710 [ 326.329104][T12549] netlink: 'syz.3.1789': attribute type 7 has an invalid length. [ 326.572280][T12559] netlink: 'syz.2.1792': attribute type 27 has an invalid length. [ 326.585954][T12559] netlink: 'syz.2.1792': attribute type 4 has an invalid length. [ 326.645910][T12559] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1792'. [ 326.846720][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1793'. [ 326.952252][T12572] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1795'. [ 327.662025][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 327.842351][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 327.926465][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 328.011566][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 328.029829][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 328.030369][T12605] netlink: 'syz.4.1805': attribute type 1 has an invalid length. [ 328.073798][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1803'. [ 328.294462][T12605] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.541599][T12616] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 328.569802][T12616] netlink: 'syz.3.1807': attribute type 2 has an invalid length. [ 329.053289][T12640] 8021q: VLANs not supported on wg0 [ 330.319107][T12681] netlink: zone id is out of range [ 330.346218][T12681] netlink: zone id is out of range [ 330.373175][T12681] netlink: zone id is out of range [ 330.411751][T12681] netlink: zone id is out of range [ 330.432733][T12681] netlink: zone id is out of range [ 330.451771][T12681] netlink: get zone limit has 8 unknown bytes [ 330.896098][T12704] tipc: Failed to remove unknown binding: 66,1,1/3938193156:196946106/196946108 [ 330.980736][T12704] __nla_validate_parse: 32 callbacks suppressed [ 330.980771][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1833'. [ 331.181177][T12714] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.1838'. [ 331.213823][T12714] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 331.247384][T12710] tipc: Enabled bearer , priority 0 [ 331.282049][T12710] syzkaller0: entered promiscuous mode [ 331.290636][T12710] syzkaller0: entered allmulticast mode [ 331.375502][T12710] tipc: Resetting bearer [ 331.387776][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1837'. [ 331.415883][T12708] tipc: Resetting bearer [ 331.447249][T12708] tipc: Disabling bearer [ 331.661515][T12728] netlink: 'syz.4.1843': attribute type 21 has an invalid length. [ 331.972137][T12739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1846'. [ 332.054013][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 332.121389][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1847'. [ 332.185717][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1846'. [ 332.428900][T12742] xfrm1: entered promiscuous mode [ 332.452679][T12742] xfrm1: entered allmulticast mode [ 332.479686][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 332.951826][T12779] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 333.307499][T12792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.369107][T12792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.396600][T12799] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1859'. [ 333.624009][T12810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1863'. [ 333.668963][T12810] netlink: 'syz.3.1863': attribute type 1 has an invalid length. [ 333.708253][T12812] tipc: Enabled bearer , priority 0 [ 333.760010][T12812] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 333.847863][T12807] tipc: Disabling bearer [ 334.147042][T12828] netlink: 'syz.1.1870': attribute type 1 has an invalid length. [ 334.197096][T12828] netlink: 'syz.1.1870': attribute type 2 has an invalid length. [ 334.669768][T12857] netlink: 'syz.3.1874': attribute type 2 has an invalid length. [ 334.922151][T12861] netlink: 'syz.1.1878': attribute type 12 has an invalid length. [ 335.002959][T12865] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 335.029179][T12865] netlink: 'syz.0.1880': attribute type 2 has an invalid length. [ 335.057859][T12865] netlink: 'syz.0.1880': attribute type 3 has an invalid length. [ 335.164138][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 335.177719][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 335.205513][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 335.339559][T12878] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 335.478933][T12878] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.644683][T12881] veth9: entered promiscuous mode [ 335.672723][T12881] bond5: (slave veth9): Enslaving as an active interface with an up link [ 336.314108][T12922] __nla_validate_parse: 3 callbacks suppressed [ 336.314127][T12922] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1897'. [ 336.318735][ T5952] vxcan1 speed is unknown, defaulting to 1000 [ 336.333950][T12921] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1897'. [ 336.343930][T12869] infiniband syz2: set active [ 336.351500][T12869] infiniband syz2: added vxcan1 [ 336.374347][T12869] syz2: rxe_create_cq: returned err = -12 [ 336.380962][T12869] infiniband syz2: Couldn't create ib_mad CQ [ 336.413118][T12869] infiniband syz2: Couldn't open port 1 [ 336.452046][T12924] netlink: 8960 bytes leftover after parsing attributes in process `syz.0.1898'. [ 336.591379][T12869] RDS/IB: syz2: added [ 336.628237][T12869] smc: adding ib device syz2 with port count 1 [ 336.663071][T12869] smc: ib device syz2 port 1 has pnetid [ 336.673519][ T5952] vxcan1 speed is unknown, defaulting to 1000 [ 336.695682][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 336.759510][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 336.784901][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 336.875180][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 337.225100][T12958] tipc: Enabled bearer , priority 0 [ 337.468934][T12958] syzkaller0: entered promiscuous mode [ 337.475946][T12958] syzkaller0: entered allmulticast mode [ 337.486360][T12958] tipc: Resetting bearer [ 337.561832][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 337.570748][T12958] tipc: Resetting bearer [ 340.200138][T12958] tipc: Disabling bearer [ 340.229502][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 340.236148][T12988] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 340.300352][ T9] syz0: Port: 1 Link ACTIVE [ 340.681729][T13019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1927'. [ 340.776730][T13026] tipc: Failed to remove unknown binding: 66,1,1/2389903710:73803287/73803289 [ 340.796424][T13026] tipc: Failed to remove unknown binding: 66,1,1/2389903710:73803287/73803289 [ 340.992918][T13031] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1927'. [ 341.190310][T13019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.214594][T13019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.235170][T13019] bond0 (unregistering): Released all slaves [ 341.386560][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 341.807910][T13042] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 341.920125][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 341.987265][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 342.024296][T13049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 342.053093][T13049] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1935'. [ 342.119838][T13053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 342.176724][T12869] vxcan1 speed is unknown, defaulting to 1000 [ 342.233798][T13056] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1937'. [ 342.248291][T13056] openvswitch: netlink: Flow key attr not present in new flow. [ 342.259781][T13056] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1937'. [ 342.275023][T13056] openvswitch: netlink: Flow key attr not present in new flow. [ 342.654794][T13061] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 343.023907][T13081] validate_nla: 4 callbacks suppressed [ 343.023927][T13081] netlink: 'syz.0.1944': attribute type 10 has an invalid length. [ 343.144045][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.151889][T13081] bridge_slave_1: left allmulticast mode [ 343.163459][T13081] bridge_slave_1: left promiscuous mode [ 343.169489][T13081] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.663579][T13114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1952'. [ 344.058569][T13127] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 344.737488][T13152] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1965'. [ 345.001769][T13168] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1968'. [ 345.018871][T13168] syz_tun: entered allmulticast mode [ 345.134014][T13168] netlink: 'syz.0.1968': attribute type 7 has an invalid length. [ 345.190912][T13168] netlink: 'syz.0.1968': attribute type 8 has an invalid length. [ 345.431560][T13158] syz_tun: left allmulticast mode [ 346.096600][T13204] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 346.834098][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 346.842042][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 346.891879][T13204] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 346.937010][T13216] tipc: Enabling of bearer rejected, failed to enable media [ 347.065625][T13222] netlink: 'syz.0.1980': attribute type 6 has an invalid length. [ 347.207142][T13222] netlink: 'syz.0.1980': attribute type 6 has an invalid length. [ 347.272495][T13234] __nla_validate_parse: 8 callbacks suppressed [ 347.272529][T13234] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1982'. [ 347.326269][T13238] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 347.660610][T13241] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.675263][T13241] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 347.807203][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 347.869502][T13238] gretap2: entered promiscuous mode [ 347.895981][T13238] bond4: (slave gretap2): making interface the new active one [ 347.907888][T13238] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 348.020869][T13257] macvlan2: entered promiscuous mode [ 348.037439][T13257] macvlan2: entered allmulticast mode [ 348.046573][T13257] bond4: entered promiscuous mode [ 348.058496][T13257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 348.099729][T13257] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 348.130834][T13257] bond4: left promiscuous mode [ 348.182460][T13260] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 348.190441][T13260] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1987'. [ 348.456614][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 348.678809][T13290] netlink: 'syz.3.1994': attribute type 4 has an invalid length. [ 348.709483][T13284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1993'. [ 348.778850][T13279] delete_channel: no stack [ 348.970470][T13304] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1997'. [ 348.996847][T13305] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 349.022382][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 349.035639][T13304] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 349.046676][T13305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1998'. [ 349.066200][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 349.079755][T13305] netlink: 'syz.4.1998': attribute type 1 has an invalid length. [ 349.089142][T13304] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1997'. [ 350.626517][T13372] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 350.784697][T13383] netlink: 'syz.4.2019': attribute type 10 has an invalid length. [ 351.089889][T13400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.506704][T13408] syzkaller0: entered promiscuous mode [ 351.514014][T13408] syzkaller0: entered allmulticast mode [ 351.526574][T13412] tipc: Enabling of bearer rejected, failed to enable media [ 352.523267][T13462] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 354.215064][T13462] geneve1: entered promiscuous mode [ 354.220836][T13462] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 354.281332][T13469] __nla_validate_parse: 4 callbacks suppressed [ 354.281376][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2040'. [ 354.996127][T13505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2052'. [ 355.127050][T13513] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2055'. [ 355.212695][T13513] netlink: 'syz.2.2055': attribute type 21 has an invalid length. [ 355.231774][T13518] netlink: 'syz.4.2057': attribute type 64 has an invalid length. [ 355.250517][T13513] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.259415][T13518] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2057'. [ 355.292011][T13521] nbd: socks must be embedded in a SOCK_ITEM attr [ 355.655169][T13538] Bluetooth: MGMT ver 1.23 [ 356.059105][T13555] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2071'. [ 356.090125][T13555] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2071'. [ 356.134614][T13555] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2071'. [ 356.143050][T13551] nbd0: detected capacity change from 0 to 127 [ 356.154932][ T5873] block nbd0: Receive control failed (result -32) [ 356.163532][T11473] block nbd0: Send control failed (result -32) [ 356.177053][T11473] block nbd0: Request send failed, requeueing [ 356.206929][T11473] block nbd0: Dead connection, failed to find a fallback [ 356.215051][ T55] block nbd0: Dead connection, failed to find a fallback [ 356.222284][ T55] block nbd0: shutting down sockets [ 356.228092][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.240458][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.258708][T11473] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.269483][T11473] Buffer I/O error on dev nbd0, logical block 1, async page read [ 356.280506][T11473] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.291691][T11473] Buffer I/O error on dev nbd0, logical block 2, async page read [ 356.299798][T11473] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.309063][T11473] Buffer I/O error on dev nbd0, logical block 3, async page read [ 356.328097][T11473] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.347497][T11473] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.356508][T11473] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.366266][T11473] Buffer I/O error on dev nbd0, logical block 1, async page read [ 356.374503][T11473] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.393632][T11473] Buffer I/O error on dev nbd0, logical block 2, async page read [ 356.412507][T11473] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.449555][T11473] Buffer I/O error on dev nbd0, logical block 3, async page read [ 356.490957][T11473] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.528124][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2077'. [ 356.539834][T11473] Buffer I/O error on dev nbd0, logical block 0, async page read [ 356.590990][T11473] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.606053][T13575] netlink: 'syz.4.2079': attribute type 3 has an invalid length. [ 356.649794][T11473] Buffer I/O error on dev nbd0, logical block 1, async page read [ 356.702357][T11473] ldm_validate_partition_table(): Disk read failed. [ 356.761253][T11473] Dev nbd0: unable to read RDB block 0 [ 356.815224][T11473] nbd0: unable to read partition table [ 356.880708][T11473] ldm_validate_partition_table(): Disk read failed. [ 356.921021][T11473] Dev nbd0: unable to read RDB block 0 [ 356.988266][T11473] nbd0: unable to read partition table [ 357.704176][T13621] netlink: 'syz.2.2094': attribute type 1 has an invalid length. [ 357.758080][T13621] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2094'. [ 358.121483][T13642] netlink: 'syz.1.2102': attribute type 29 has an invalid length. [ 358.198206][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2103'. [ 358.213289][T13642] netlink: 'syz.1.2102': attribute type 33 has an invalid length. [ 358.861410][T13678] tipc: Enabled bearer , priority 0 [ 358.928437][T13678] syzkaller0: entered promiscuous mode [ 358.940770][T13678] syzkaller0: entered allmulticast mode [ 359.206193][T13681] tipc: Resetting bearer [ 359.262425][T13681] tipc: Disabling bearer [ 359.530750][T13717] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2119'. [ 359.562117][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 359.590061][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 359.604482][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 359.700918][T13721] bridge0: port 1(vlan2) entered blocking state [ 359.711134][T13721] bridge0: port 1(vlan2) entered disabled state [ 359.718608][T13721] vlan2: entered allmulticast mode [ 359.724511][T13721] bridge0: entered allmulticast mode [ 359.735547][T13721] vlan2: left allmulticast mode [ 359.741106][T13721] bridge0: left allmulticast mode [ 359.772846][T13725] netlink: 'syz.1.2121': attribute type 11 has an invalid length. [ 359.868903][T13720] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 359.913351][T13720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2121'. [ 359.966167][T13720] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 359.998254][T13720] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 360.036579][T13720] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 360.063910][T13739] veth1_to_bond: entered allmulticast mode [ 360.070928][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 360.258729][T13739] veth1_to_bond (unregistering): left allmulticast mode [ 360.299963][T13740] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 360.474118][T13754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.509371][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 360.597840][T13761] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2133'. [ 361.368236][T13785] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2137'. [ 361.907357][T13793] syzkaller1: entered promiscuous mode [ 361.923073][T13793] syzkaller1: entered allmulticast mode [ 362.027396][T13815] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 362.091514][T13817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.394788][T13827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2148'. [ 362.409233][T13827] tls_set_device_offload_rx: netdev not found [ 362.622471][T13837] netlink: zone id is out of range [ 362.634626][T13837] netlink: zone id is out of range [ 362.644432][T13837] netlink: zone id is out of range [ 362.652415][T13837] netlink: zone id is out of range [ 362.659593][T13837] netlink: zone id is out of range [ 362.670805][T13837] netlink: get zone limit has 8 unknown bytes [ 362.737480][T13761] vxcan1 speed is unknown, defaulting to 1000 [ 363.281815][T13860] sock: sock_timestamping_bind_phc: sock not bind to device [ 363.414981][T13863] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 363.544761][T13869] tipc: Enabled bearer , priority 0 [ 363.590132][T13869] syzkaller0: entered promiscuous mode [ 363.618048][T13869] syzkaller0: entered allmulticast mode [ 363.694595][T13869] tipc: Resetting bearer [ 363.733534][T13867] tipc: Resetting bearer [ 363.772738][T13867] tipc: Disabling bearer [ 364.050292][T13888] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 364.093072][T13888] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 364.414235][T13906] dvmrp1: entered allmulticast mode [ 364.984976][T13927] __nla_validate_parse: 3 callbacks suppressed [ 364.984999][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'. [ 365.620450][T13954] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2183'. [ 365.671894][T13954] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 365.683143][T13954] team0: Device ipvlan1 failed to register rx_handler [ 366.348438][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2193'. [ 366.395230][T13985] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2193'. [ 366.910494][T14007] netlink: 'syz.0.2200': attribute type 1 has an invalid length. [ 366.927804][T14007] netlink: 'syz.0.2200': attribute type 2 has an invalid length. [ 366.943087][T14005] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 366.950869][T14005] netlink: 'syz.4.2199': attribute type 2 has an invalid length. [ 366.989299][T14007] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.2200'. [ 367.088756][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 367.135368][T14007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2200'. [ 367.179058][T14007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2200'. [ 367.260580][T14024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 367.419564][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2206'. [ 368.149734][T14063] lo: left promiscuous mode [ 368.676035][T14087] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 369.094721][T14102] bond0: (slave bond_slave_0): Releasing backup interface [ 369.103127][T14106] netlink: 'syz.1.2234': attribute type 6 has an invalid length. [ 369.122080][T14102] bond_slave_0: left allmulticast mode [ 369.164636][T14102] bond0: (slave bond_slave_1): Releasing backup interface [ 369.194445][T14102] bond_slave_1: left allmulticast mode [ 369.214055][T14102] team0: Port device team_slave_0 removed [ 369.230935][T14102] team0: Port device team_slave_1 removed [ 369.252410][T14102] macsec0: left allmulticast mode [ 369.258568][T14102] veth1_macvtap: left allmulticast mode [ 369.269514][T14102] macsec0: left promiscuous mode [ 369.280994][T14102] bridge0: port 1(macsec0) entered disabled state [ 369.710818][T14133] netlink: 'syz.1.2242': attribute type 11 has an invalid length. [ 369.780142][T14137] netlink: 'syz.4.2243': attribute type 1 has an invalid length. [ 369.909272][T14137] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.997734][T14137] __nla_validate_parse: 5 callbacks suppressed [ 369.997753][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2243'. [ 370.068718][T14142] veth9: entered promiscuous mode [ 370.081040][T14142] bond6: (slave veth9): Enslaving as an active interface with an up link [ 370.091236][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2244'. [ 370.130038][T14157] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 370.140936][T14157] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 370.156409][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 370.162155][T14137] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2243'. [ 370.180349][T14137] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2243'. [ 370.189625][T14137] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2243'. [ 370.396874][T14164] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2249'. [ 370.444842][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2249'. [ 370.735602][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2254'. [ 370.766452][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2254'. [ 370.828538][T14164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.241516][T14194] tipc: Enabled bearer , priority 0 [ 371.259099][T14194] syzkaller0: entered promiscuous mode [ 371.278527][T14194] syzkaller0: entered allmulticast mode [ 371.370607][T14194] tipc: Resetting bearer [ 371.393920][T14192] tipc: Resetting bearer [ 371.431251][T14192] tipc: Disabling bearer [ 371.738570][T14220] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜zR' [ 371.784326][T14220] CPU: 1 UID: 0 PID: 14220 Comm: syz.1.2266 Not tainted syzkaller #0 PREEMPT(full) [ 371.784356][T14220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 371.784375][T14220] Call Trace: [ 371.784384][T14220] [ 371.784393][T14220] dump_stack_lvl+0x189/0x250 [ 371.784421][T14220] ? irqentry_exit+0x74/0x90 [ 371.784442][T14220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.784482][T14220] sysfs_warn_dup+0x8e/0xa0 [ 371.784504][T14220] sysfs_do_create_link_sd+0xc0/0x110 [ 371.784526][T14220] device_add_class_symlinks+0x1cf/0x240 [ 371.784554][T14220] device_add+0x475/0xb50 [ 371.784580][T14220] wiphy_register+0x1ba6/0x28d0 [ 371.784620][T14220] ? __pfx_wiphy_register+0x10/0x10 [ 371.784637][T14220] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 371.784667][T14220] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 371.784693][T14220] ieee80211_register_hw+0x3484/0x4100 [ 371.784734][T14220] ? ieee80211_register_hw+0x1421/0x4100 [ 371.784768][T14220] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 371.784795][T14220] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 371.784830][T14220] ? __hrtimer_setup+0x187/0x210 [ 371.784847][T14220] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 371.784869][T14220] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 371.784928][T14220] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 371.784952][T14220] ? trace_kmalloc+0x1f/0xd0 [ 371.784972][T14220] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 371.784994][T14220] ? kstrndup+0xbf/0x160 [ 371.785025][T14220] hwsim_new_radio_nl+0xea4/0x1b10 [ 371.785053][T14220] ? __pfx___nla_validate_parse+0x10/0x10 [ 371.785096][T14220] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.785137][T14220] ? __nla_parse+0x40/0x60 [ 371.785161][T14220] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 371.785196][T14220] genl_family_rcv_msg_doit+0x212/0x300 [ 371.785227][T14220] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 371.785263][T14220] ? bpf_lsm_capable+0x9/0x20 [ 371.785284][T14220] ? security_capable+0x7e/0x2e0 [ 371.785318][T14220] genl_rcv_msg+0x60e/0x790 [ 371.785348][T14220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.785370][T14220] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 371.785411][T14220] netlink_rcv_skb+0x208/0x470 [ 371.785428][T14220] ? __lock_acquire+0xab9/0xd20 [ 371.785452][T14220] ? __pfx_genl_rcv_msg+0x10/0x10 [ 371.785477][T14220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.785518][T14220] ? down_read+0x1ad/0x2e0 [ 371.785540][T14220] genl_rcv+0x28/0x40 [ 371.785559][T14220] netlink_unicast+0x82f/0x9e0 [ 371.785593][T14220] ? __pfx_netlink_unicast+0x10/0x10 [ 371.785621][T14220] ? netlink_sendmsg+0x642/0xb30 [ 371.785638][T14220] ? skb_put+0x11b/0x210 [ 371.785663][T14220] netlink_sendmsg+0x805/0xb30 [ 371.785694][T14220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.785717][T14220] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.785738][T14220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.785756][T14220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.785777][T14220] __sock_sendmsg+0x219/0x270 [ 371.785806][T14220] ____sys_sendmsg+0x505/0x830 [ 371.785835][T14220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.785867][T14220] ? import_iovec+0x74/0xa0 [ 371.785894][T14220] ___sys_sendmsg+0x21f/0x2a0 [ 371.785919][T14220] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.785985][T14220] ? __fget_files+0x2a/0x420 [ 371.786000][T14220] ? __fget_files+0x3a0/0x420 [ 371.786030][T14220] __x64_sys_sendmsg+0x19b/0x260 [ 371.786055][T14220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.786097][T14220] ? rcu_is_watching+0x15/0xb0 [ 371.786122][T14220] ? do_syscall_64+0xbe/0x3b0 [ 371.786147][T14220] do_syscall_64+0xfa/0x3b0 [ 371.786164][T14220] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.786182][T14220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.786200][T14220] ? clear_bhb_loop+0x60/0xb0 [ 371.786221][T14220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.786244][T14220] RIP: 0033:0x7fd55418eec9 [ 371.786263][T14220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.786280][T14220] RSP: 002b:00007fd5550e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.786304][T14220] RAX: ffffffffffffffda RBX: 00007fd5543e6090 RCX: 00007fd55418eec9 [ 371.786318][T14220] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 371.786331][T14220] RBP: 00007fd554211f91 R08: 0000000000000000 R09: 0000000000000000 [ 371.786342][T14220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.786353][T14220] R13: 00007fd5543e6128 R14: 00007fd5543e6090 R15: 00007ffd73adeb18 [ 371.786387][T14220] [ 372.318940][T14215] "syz.1.2266" (14215) uses obsolete ecb(arc4) skcipher [ 372.500683][T14239] lo: MTU too low for tipc bearer [ 372.538915][T14239] tipc: Enabling of bearer rejected, failed to enable media [ 372.804125][T14262] netlink: 'syz.1.2280': attribute type 21 has an invalid length. [ 372.815222][T14262] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.224877][T14270] syzkaller0: entered promiscuous mode [ 373.231932][T14270] syzkaller0: entered allmulticast mode [ 373.328223][T14291] nbd: couldn't find a device at index 1884447723 [ 376.756152][T14358] __nla_validate_parse: 7 callbacks suppressed [ 376.756171][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 376.980339][T14376] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 377.197847][T14391] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 377.300713][T14388] tipc: Enabled bearer , priority 0 [ 377.505165][T14396] bridge7: entered allmulticast mode [ 377.536342][T14397] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 377.545920][T14388] syzkaller0: entered promiscuous mode [ 377.551408][T14388] syzkaller0: entered allmulticast mode [ 377.568570][T14406] tipc: Resetting bearer [ 377.605510][T14387] tipc: Resetting bearer [ 377.647794][T14387] tipc: Disabling bearer [ 378.197762][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 378.463348][T14451] gre0: left promiscuous mode [ 378.629169][T14466] netlink: 'syz.3.2331': attribute type 10 has an invalid length. [ 378.671303][T14451] bond0: left allmulticast mode [ 379.010874][T14466] team0: Device hsr_slave_0 failed to register rx_handler [ 379.031485][T10140] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.051808][T10140] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.064207][T10140] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.073571][T10140] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.082509][T14451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.131489][T10140] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.152445][T10140] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.185060][T10140] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.213106][T10140] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.229590][T14451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.261236][T14477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2336'. [ 379.272180][T14477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 379.442963][T14486] netlink: 'syz.2.2338': attribute type 10 has an invalid length. [ 379.768721][T14496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2341'. [ 380.270224][T14486] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 380.389305][ T9] syz0: Port: 1 Link DOWN [ 380.408497][T10139] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.432076][T10139] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 380.451152][T10139] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.496619][T10139] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.528729][T10139] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 380.544209][T10139] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 380.573818][T14516] FAULT_INJECTION: forcing a failure. [ 380.573818][T14516] name failslab, interval 1, probability 0, space 0, times 1 [ 380.590028][T10139] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.609138][T14516] CPU: 0 UID: 0 PID: 14516 Comm: syz.0.2346 Not tainted syzkaller #0 PREEMPT(full) [ 380.609166][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.609176][T14516] Call Trace: [ 380.609183][T14516] [ 380.609191][T14516] dump_stack_lvl+0x189/0x250 [ 380.609216][T14516] ? __pfx____ratelimit+0x10/0x10 [ 380.609232][T14516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.609251][T14516] ? __pfx__printk+0x10/0x10 [ 380.609276][T14516] ? genl_rcv+0x28/0x40 [ 380.609296][T14516] ? ____sys_sendmsg+0x505/0x830 [ 380.609314][T14516] ? __x64_sys_sendmsg+0x19b/0x260 [ 380.609344][T14516] should_fail_ex+0x414/0x560 [ 380.609374][T14516] should_failslab+0xa8/0x100 [ 380.609398][T14516] kmem_cache_alloc_noprof+0x73/0x3c0 [ 380.609419][T14516] ? skb_clone+0x212/0x3a0 [ 380.609443][T14516] skb_clone+0x212/0x3a0 [ 380.609467][T14516] __netlink_deliver_tap+0x404/0x850 [ 380.609499][T14516] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.609519][T14516] netlink_deliver_tap+0x19c/0x1b0 [ 380.609539][T14516] netlink_sendskb+0x68/0x140 [ 380.609565][T14516] netlink_unicast+0x397/0x9e0 [ 380.609586][T14516] ? __asan_memcpy+0x40/0x70 [ 380.609613][T14516] ? __pfx_netlink_unicast+0x10/0x10 [ 380.609646][T14516] netlink_rcv_skb+0x28c/0x470 [ 380.609662][T14516] ? __lock_acquire+0xab9/0xd20 [ 380.609686][T14516] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.609708][T14516] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.609747][T14516] ? down_read+0x1ad/0x2e0 [ 380.609769][T14516] genl_rcv+0x28/0x40 [ 380.609788][T14516] netlink_unicast+0x82f/0x9e0 [ 380.609819][T14516] ? __pfx_netlink_unicast+0x10/0x10 [ 380.609845][T14516] ? netlink_sendmsg+0x642/0xb30 [ 380.609860][T14516] ? skb_put+0x11b/0x210 [ 380.609892][T14516] netlink_sendmsg+0x805/0xb30 [ 380.609920][T14516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.609941][T14516] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.609960][T14516] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.609979][T14516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.609998][T14516] __sock_sendmsg+0x219/0x270 [ 380.610024][T14516] ____sys_sendmsg+0x505/0x830 [ 380.610050][T14516] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.610079][T14516] ? import_iovec+0x74/0xa0 [ 380.610105][T14516] ___sys_sendmsg+0x21f/0x2a0 [ 380.610127][T14516] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.610187][T14516] ? __fget_files+0x2a/0x420 [ 380.610202][T14516] ? __fget_files+0x3a0/0x420 [ 380.610229][T14516] __x64_sys_sendmsg+0x19b/0x260 [ 380.610252][T14516] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.610288][T14516] ? __pfx_ksys_write+0x10/0x10 [ 380.610306][T14516] ? rcu_is_watching+0x15/0xb0 [ 380.610329][T14516] ? do_syscall_64+0xbe/0x3b0 [ 380.610352][T14516] do_syscall_64+0xfa/0x3b0 [ 380.610368][T14516] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.610386][T14516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.610403][T14516] ? clear_bhb_loop+0x60/0xb0 [ 380.610423][T14516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.610440][T14516] RIP: 0033:0x7f3c3178eec9 [ 380.610456][T14516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.610471][T14516] RSP: 002b:00007f3c3257f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.610489][T14516] RAX: ffffffffffffffda RBX: 00007f3c319e5fa0 RCX: 00007f3c3178eec9 [ 380.610502][T14516] RDX: 0000000000008000 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 380.610512][T14516] RBP: 00007f3c3257f090 R08: 0000000000000000 R09: 0000000000000000 [ 380.610522][T14516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.610533][T14516] R13: 00007f3c319e6038 R14: 00007f3c319e5fa0 R15: 00007ffe6721f9f8 [ 380.610563][T14516] [ 380.610637][T10139] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 381.051530][T10139] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.072874][T10139] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.081436][T10139] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 381.090091][T10139] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 381.101221][T14524] tipc: Enabled bearer , priority 0 [ 381.143646][T14517] sch_tbf: burst 0 is lower than device dvmrp1 mtu (1480) ! [ 381.261062][T14525] syzkaller0: entered promiscuous mode [ 381.267706][T14525] syzkaller0: entered allmulticast mode [ 381.315279][T14540] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 381.373814][T14514] tipc: Resetting bearer [ 381.498763][T14514] tipc: Disabling bearer [ 381.719179][T14560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2354'. [ 382.047022][T14573] netlink: 'syz.1.2357': attribute type 4 has an invalid length. [ 382.103170][T14573] netlink: 'syz.1.2357': attribute type 4 has an invalid length. [ 382.104800][T14577] tipc: Enabled bearer , priority 0 [ 382.136098][T14577] syzkaller0: entered promiscuous mode [ 382.141601][T14577] syzkaller0: entered allmulticast mode [ 382.205010][T14577] tipc: Resetting bearer [ 382.220255][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 382.239023][T14575] tipc: Resetting bearer [ 382.246483][T14579] nbd: must specify a size in bytes for the device [ 382.285357][T14575] tipc: Disabling bearer [ 405.620571][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 405.670974][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 405.721746][T14609] xfrm1: entered allmulticast mode [ 405.896565][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 405.920258][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 405.962947][T14616] netlink: 50 bytes leftover after parsing attributes in process `syz.4.2371'. [ 406.083316][T14626] netlink: 'syz.3.2375': attribute type 4 has an invalid length. [ 406.099757][T14628] netlink: 'syz.3.2375': attribute type 4 has an invalid length. [ 406.677717][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 406.688481][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 408.347160][T14641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 408.378566][T14641] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.396384][T14641] gretap3: entered promiscuous mode [ 408.402619][T14641] gretap3: entered allmulticast mode [ 409.012144][T14674] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2391'. [ 409.157783][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2394'. [ 409.258833][T14689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2396'. [ 410.096017][T14724] : entered promiscuous mode [ 410.240819][T14734] tipc: Enabled bearer , priority 0 [ 410.495795][T14734] syzkaller0: entered promiscuous mode [ 410.513148][T14734] syzkaller0: entered allmulticast mode [ 410.535216][T14734] tipc: Resetting bearer [ 410.860764][T10142] tipc: Resetting bearer [ 410.901283][T14768] __nla_validate_parse: 2 callbacks suppressed [ 410.901301][T14768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2418'. [ 410.925456][T14732] tipc: Resetting bearer [ 411.302061][T14772] sctp: [Deprecated]: syz.1.2420 (pid 14772) Use of int in maxseg socket option. [ 411.302061][T14772] Use struct sctp_assoc_value instead [ 411.353325][ T5923] tipc: Node number set to 2025235893 [ 411.453635][T14774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 411.454868][T14775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 413.278602][T14732] tipc: Disabling bearer [ 413.298935][T14757] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 413.332864][ T5923] vxcan1 speed is unknown, defaulting to 1000 [ 413.521417][T14787] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2424'. [ 413.532198][T14786] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2425'. [ 413.558393][T14786] netlink: zone id is out of range [ 413.569223][T14786] netlink: get zone limit has 8 unknown bytes [ 413.754969][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2427'. [ 413.888743][T14804] netlink: 'syz.4.2430': attribute type 6 has an invalid length. [ 413.983698][T14808] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 414.168264][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 414.324639][T14826] netlink: 'syz.3.2438': attribute type 3 has an invalid length. [ 414.353490][T14826] netlink: 'syz.3.2438': attribute type 3 has an invalid length. [ 414.366557][T14830] netlink: 'syz.4.2437': attribute type 10 has an invalid length. [ 414.542997][T14836] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2439'. [ 414.595264][T14834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2439'. [ 414.634777][T14830] team0: Port device hsr_slave_0 added [ 415.245105][T14870] sctp: [Deprecated]: syz.1.2447 (pid 14870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.245105][T14870] Use struct sctp_sack_info instead [ 415.465820][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 415.511809][T14876] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 415.514207][T14879] netlink: 212320 bytes leftover after parsing attributes in process `syz.4.2451'. [ 415.546555][T14879] netlink: get zone limit has 8 unknown bytes [ 415.564403][T14876] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 415.622394][T14876] netlink: 'syz.3.2450': attribute type 2 has an invalid length. [ 415.654767][T14876] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2450'. [ 416.021563][T14905] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20004 [ 416.119266][T14911] __nla_validate_parse: 1 callbacks suppressed [ 416.119286][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 416.156236][T14910] macvtap0: entered promiscuous mode [ 416.161572][T14910] macvtap0: entered allmulticast mode [ 416.170127][T14910] bond0: entered allmulticast mode [ 416.179791][T14910] geneve1: entered allmulticast mode [ 416.190422][T14910] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 416.209706][T14910] team0: Device macvtap0 failed to register rx_handler [ 416.232698][T14913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2459'. [ 416.259255][T14910] bond0: left allmulticast mode [ 416.264923][T14910] geneve1: left allmulticast mode [ 416.773554][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 416.822194][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2468'. [ 416.860413][T14941] tipc: Enabled bearer , priority 0 [ 416.891412][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 416.906065][T14941] syzkaller0: entered promiscuous mode [ 416.925358][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 416.930076][T14941] syzkaller0: entered allmulticast mode [ 416.993720][T14939] tipc: Enabled bearer , priority 12 [ 417.136950][T14947] tipc: Resetting bearer [ 417.152156][T14940] tipc: Resetting bearer [ 417.218048][T14940] tipc: Disabling bearer [ 417.372132][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2476'. [ 417.402170][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 417.485058][T14961] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2474'. [ 417.645554][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2478'. [ 418.101173][T14993] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 418.130670][T14993] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 418.175098][T14995] erspan0: entered promiscuous mode [ 418.365332][T15002] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 418.652511][T15017] tipc: Enabled bearer , priority 0 [ 418.699745][T15025] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 418.720028][T15021] syzkaller0: entered promiscuous mode [ 418.744755][T15021] syzkaller0: entered allmulticast mode [ 418.754992][T15025] netlink: 'syz.4.2492': attribute type 2 has an invalid length. [ 419.057275][T15021] tipc: Resetting bearer [ 419.096288][T15011] tipc: Resetting bearer [ 419.166725][T15011] tipc: Disabling bearer [ 419.401410][T15046] validate_nla: 1 callbacks suppressed [ 419.401431][T15046] netlink: 'syz.4.2499': attribute type 1 has an invalid length. [ 419.463974][T15046] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 419.500947][T15057] netlink: 'syz.3.2497': attribute type 13 has an invalid length. [ 419.831555][T15057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.856207][T15057] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.910712][T15057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.974988][T15060] vlan3: entered allmulticast mode [ 419.981145][T15060] hsr0: entered allmulticast mode [ 419.986907][T15060] hsr_slave_0: entered allmulticast mode [ 420.004821][T15060] hsr_slave_1: entered allmulticast mode [ 420.584610][T15020] vxcan1 speed is unknown, defaulting to 1000 [ 420.606179][T15083] syzkaller0: entered promiscuous mode [ 420.612589][T15083] syzkaller0: entered allmulticast mode [ 420.647924][T15080] tipc: Enabled bearer , priority 0 [ 420.677251][T15082] tipc: Enabled bearer , priority 0 [ 420.705309][T15082] syzkaller0: entered promiscuous mode [ 420.711268][T15082] syzkaller0: entered allmulticast mode [ 420.736492][T15083] tipc: Resetting bearer [ 420.767331][T15083] tipc: Disabling bearer [ 420.831439][T15082] tipc: Resetting bearer [ 420.843857][T15081] tipc: Resetting bearer [ 420.885013][T15081] tipc: Disabling bearer [ 421.204464][T15098] __nla_validate_parse: 9 callbacks suppressed [ 421.204484][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 421.220597][T15099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2512'. [ 421.234709][T15099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 421.267915][T15100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2513'. [ 421.827006][T15115] macvlan0: entered promiscuous mode [ 421.857781][T15115] batadv0: entered promiscuous mode [ 421.877537][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 421.891379][T15119] netlink: 'syz.1.2517': attribute type 3 has an invalid length. [ 421.922333][T15115] debugfs: 'hsr1' already exists in 'hsr' [ 421.969752][T15115] Cannot create hsr debugfs directory [ 421.994825][T15115] hsr1: entered allmulticast mode [ 422.008086][T15115] macvlan0: entered allmulticast mode [ 422.034332][T15115] veth1_vlan: entered allmulticast mode [ 422.063303][T15115] batadv0: entered allmulticast mode [ 422.124355][T15115] macvlan0: left promiscuous mode [ 422.148727][T15115] batadv0: left promiscuous mode [ 422.262221][T15047] infiniband syz1: set down [ 422.288136][T15047] infiniband syz1: added bond0 [ 422.307653][T15047] syz1: rxe_create_cq: returned err = -12 [ 422.330708][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2518'. [ 422.380636][T15047] infiniband syz1: Couldn't create ib_mad CQ [ 422.449156][T15047] infiniband syz1: Couldn't open port 1 [ 422.500090][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 422.740082][T15047] RDS/IB: syz1: added [ 422.789658][T15047] smc: adding ib device syz1 with port count 1 [ 422.815426][T15047] smc: ib device syz1 port 1 has pnetid [ 422.922437][T15153] netlink: 'syz.1.2522': attribute type 39 has an invalid length. [ 422.982509][T15156] netlink: 'syz.1.2522': attribute type 21 has an invalid length. [ 423.024914][T15156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2522'. [ 423.211394][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2524'. [ 423.890497][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2526'. [ 424.687382][T15211] 8021q: VLANs not supported on ip6_vti0 [ 424.948350][T15221] netlink: 'syz.1.2537': attribute type 10 has an invalid length. [ 425.015971][T15229] netlink: 'syz.4.2539': attribute type 16 has an invalid length. [ 425.043638][T15231] netlink: 'syz.4.2539': attribute type 16 has an invalid length. [ 425.050734][T15229] netlink: 'syz.4.2539': attribute type 17 has an invalid length. [ 425.052719][T15231] netlink: 'syz.4.2539': attribute type 17 has an invalid length. [ 425.103450][T15231] lo: left promiscuous mode [ 425.169887][T15231] tunl0: left promiscuous mode [ 425.193243][T15231] gre0: left promiscuous mode [ 425.211120][T15231] gretap0: left promiscuous mode [ 425.256603][T15231] erspan0: left promiscuous mode [ 425.285618][T15231] ip_vti0: left promiscuous mode [ 425.344293][T15231] bond0: left promiscuous mode [ 425.361631][T15231] geneve1: left promiscuous mode [ 425.407182][T15231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.420654][T15231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.471582][T15229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.337344][T15264] __nla_validate_parse: 6 callbacks suppressed [ 426.337392][T15264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2548'. [ 426.734107][T15281] nbd1: detected capacity change from 0 to 127 [ 426.908666][T15280] nbd2: detected capacity change from 0 to 127 [ 426.927382][ T5873] block nbd1: Receive control failed (result -104) [ 426.936706][ T5880] block nbd2: Receive control failed (result -32) [ 426.949619][T14607] block nbd2: Dead connection, failed to find a fallback [ 426.958303][T14607] block nbd2: shutting down sockets [ 426.968006][T14607] blk_print_req_error: 138 callbacks suppressed [ 426.968025][T14607] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 426.988105][T14607] buffer_io_error: 138 callbacks suppressed [ 426.988125][T14607] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.003589][T14607] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.012996][T14607] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.021022][T14607] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.031999][T14607] Buffer I/O error on dev nbd2, logical block 2, async page read [ 427.040463][T14607] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.050218][T14607] Buffer I/O error on dev nbd2, logical block 3, async page read [ 427.058746][T14607] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.069645][T14607] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.079793][T14607] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.112211][T14607] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.157526][T14607] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.191784][T14607] Buffer I/O error on dev nbd2, logical block 2, async page read [ 427.222490][T14607] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.249927][T15296] tipc: Enabled bearer , priority 0 [ 427.261220][T14607] Buffer I/O error on dev nbd2, logical block 3, async page read [ 427.277832][T15296] syzkaller0: entered promiscuous mode [ 427.286331][T15296] syzkaller0: entered allmulticast mode [ 427.292301][T14607] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.338657][T15296] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 427.352311][T14607] Buffer I/O error on dev nbd2, logical block 0, async page read [ 427.377124][T14607] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 427.402893][T14607] Buffer I/O error on dev nbd2, logical block 1, async page read [ 427.437209][T14607] ldm_validate_partition_table(): Disk read failed. [ 427.458649][T15296] tipc: Resetting bearer [ 427.481033][T15295] tipc: Resetting bearer [ 427.492237][T14607] Dev nbd2: unable to read RDB block 0 [ 427.502448][T14607] nbd2: unable to read partition table [ 427.548959][T15295] tipc: Disabling bearer [ 427.560085][T14607] ldm_validate_partition_table(): Disk read failed. [ 427.579953][T14607] Dev nbd2: unable to read RDB block 0 [ 427.591425][T14607] nbd2: unable to read partition table [ 427.664694][T14607] ldm_validate_partition_table(): Disk read failed. [ 427.711652][T14607] Dev nbd2: unable to read RDB block 0 [ 427.750359][T14607] nbd2: unable to read partition table [ 427.779882][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'. [ 427.828851][T14607] ldm_validate_partition_table(): Disk read failed. [ 427.839589][T15247] vxcan1 speed is unknown, defaulting to 1000 [ 427.868429][T14607] Dev nbd2: unable to read RDB block 0 [ 427.911025][T14607] nbd2: unable to read partition table [ 427.964743][T15309] tipc: Enabled bearer , priority 0 [ 427.983928][T15309] syzkaller0: entered promiscuous mode [ 428.000831][T15309] syzkaller0: entered allmulticast mode [ 428.089052][T15308] tipc: Resetting bearer [ 428.148196][T15308] tipc: Disabling bearer [ 428.300781][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 428.305498][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2565'. [ 428.651118][T15331] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 428.932296][T15341] macvtap1: entered promiscuous mode [ 428.959125][T15341] macvtap1: entered allmulticast mode [ 428.969149][T15341] bond0: entered allmulticast mode [ 428.976111][T15341] bridge_slave_1: entered allmulticast mode [ 428.990963][T15341] bond0: entered promiscuous mode [ 428.997982][T15341] bridge_slave_1: entered promiscuous mode [ 429.015840][T15341] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 429.026798][T15341] team0: Device macvtap1 failed to register rx_handler [ 429.037178][T15341] bond0: left allmulticast mode [ 429.042152][T15341] bridge_slave_1: left allmulticast mode [ 429.051752][T15341] bond0: left promiscuous mode [ 429.059192][T15341] bridge_slave_1: left promiscuous mode [ 429.649683][T15359] tipc: Enabled bearer , priority 0 [ 429.693901][T15359] syzkaller0: entered promiscuous mode [ 429.700411][T15359] syzkaller0: entered allmulticast mode [ 429.764349][T15364] netlink: 'syz.1.2578': attribute type 64 has an invalid length. [ 429.778050][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 429.799637][T15364] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2578'. [ 429.819630][T15358] tipc: Resetting bearer [ 429.867218][T15358] tipc: Disabling bearer [ 430.257126][T15382] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 430.320029][T15377] tap0: tun_chr_ioctl cmd 1074025678 [ 430.325480][T15377] tap0: group set to 0 [ 430.922323][T15398] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 431.015826][T15398] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 431.056267][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.138110][T15398] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 431.167115][T15398] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 431.222848][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.271586][T15398] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 431.311533][T15398] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 431.346009][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.384644][T15398] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 431.446514][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2592'. [ 431.459016][T15398] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 431.477506][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.491275][T15398] netlink: 'syz.0.2589': attribute type 21 has an invalid length. [ 431.513974][T15414] tipc: Enabled bearer , priority 0 [ 431.567351][T15398] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 431.597380][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.621266][T15414] syzkaller0: entered promiscuous mode [ 431.637027][T15414] syzkaller0: entered allmulticast mode [ 431.721968][T15422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2594'. [ 431.724513][T15398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2589'. [ 431.735067][T15422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2594'. [ 431.790091][T15412] tipc: Resetting bearer [ 431.844257][T15412] tipc: Disabling bearer [ 431.898838][T15426] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2596'. [ 431.935197][T15426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'. [ 432.217885][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2600'. [ 432.270485][T15435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.404442][T15436] bond4: (slave veth9): Enslaving as an active interface with a down link [ 433.042622][T15481] pim6reg: entered allmulticast mode [ 433.066641][T15481] pim6reg: left allmulticast mode [ 433.890418][T15507] raw_sendmsg: syz.3.2616 forgot to set AF_INET. Fix it! [ 434.300743][T15532] tipc: Enabled bearer , priority 0 [ 434.355681][T15532] tipc: Resetting bearer [ 434.412594][T15531] tipc: Disabling bearer [ 435.207378][T15568] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 435.421668][T15563] veth1_vlan (unregistering): left allmulticast mode [ 435.801372][T15582] tipc: Enabled bearer , priority 0 [ 435.898242][T15578] tipc: Resetting bearer [ 436.160719][T15577] tipc: Disabling bearer [ 436.514847][T15606] openvswitch: netlink: Actions may not be safe on all matching packets [ 436.716023][T15526] vxcan1 speed is unknown, defaulting to 1000 [ 436.896092][T15623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.942196][T15624] validate_nla: 5 callbacks suppressed [ 436.942217][T15624] netlink: 'syz.3.2648': attribute type 28 has an invalid length. [ 437.042413][T15624] netlink: 'syz.3.2648': attribute type 3 has an invalid length. [ 437.080158][T15624] __nla_validate_parse: 7 callbacks suppressed [ 437.080178][T15624] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2648'. [ 437.191366][T15628] netlink: 'syz.2.2649': attribute type 11 has an invalid length. [ 437.196370][T15630] syzkaller1: entered promiscuous mode [ 437.205533][T15628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2649'. [ 437.250619][T15630] syzkaller1: entered allmulticast mode [ 437.870176][T15650] tipc: Enabled bearer , priority 0 [ 437.924752][T15650] tipc: Resetting bearer [ 437.964964][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2656'. [ 437.975340][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'. [ 438.093885][T15646] tipc: Disabling bearer [ 438.961121][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.398594][T15700] xt_l2tp: invalid flags combination: 8 [ 439.488339][T15700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2667'. [ 439.687449][T15706] syzkaller0: entered promiscuous mode [ 439.746216][T15706] syzkaller0: entered allmulticast mode [ 439.795914][T15712] netlink: 'syz.2.2670': attribute type 1 has an invalid length. [ 440.015068][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'. [ 440.038679][T15712] bond6: entered promiscuous mode [ 440.071651][T15712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.597774][T15731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2677'. [ 440.748614][T15738] netlink: 'syz.1.2679': attribute type 15 has an invalid length. [ 441.556432][T15761] syzkaller0: entered promiscuous mode [ 441.589229][T15761] syzkaller0: entered allmulticast mode [ 441.648829][T15771] netlink: 576 bytes leftover after parsing attributes in process `syz.0.2690'. [ 441.899387][T15777] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 442.076840][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2696'. [ 442.102445][T15784] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20001 [ 442.127500][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2694'. [ 442.141487][T15782] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2694'. [ 442.141506][T15787] tc_dump_action: action bad kind [ 442.141526][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'. [ 442.248590][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 442.379745][T15803] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 442.439321][T15803] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2698'. [ 442.778937][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 442.812292][T15824] netlink: set zone limit has 8 unknown bytes [ 442.834062][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 442.852553][T15826] syzkaller0: entered promiscuous mode [ 442.870418][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2706'. [ 442.880881][T15826] syzkaller0: entered allmulticast mode [ 443.566717][T15853] openvswitch: netlink: IPv4 tunnel dst address is zero [ 443.886393][T15866] syzkaller0: entered promiscuous mode [ 443.901672][T15866] syzkaller0: entered allmulticast mode [ 443.933078][T15864] wg2: entered promiscuous mode [ 443.938068][T15864] wg2: entered allmulticast mode [ 444.778992][T15910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2733'. [ 444.831554][T15910] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2733'. [ 444.980852][T15920] syzkaller1: entered promiscuous mode [ 445.028349][T15920] syzkaller1: entered allmulticast mode [ 445.233695][T15934] syzkaller0: entered promiscuous mode [ 445.239498][T15934] syzkaller0: entered allmulticast mode [ 445.993940][T15963] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 446.032677][T15968] sch_fq: defrate 0 ignored. [ 446.202682][T15972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.494419][T15987] syzkaller0: entered promiscuous mode [ 446.543876][T15987] syzkaller0: entered allmulticast mode [ 446.991923][T16013] syzkaller1: entered promiscuous mode [ 446.993366][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.006403][T16013] syzkaller1: entered allmulticast mode [ 447.024148][T16015] tipc: Enabling of bearer rejected, failed to enable media [ 447.061789][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.147673][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.156420][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.166629][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.175473][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.182999][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.192094][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.200106][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.259740][T16014] xt_l2tp: missing protocol rule (udp|l2tpip) [ 447.527328][T16030] __nla_validate_parse: 3 callbacks suppressed [ 447.527370][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'. [ 447.585661][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2766'. [ 447.597590][T16030] netlink: 'syz.0.2766': attribute type 7 has an invalid length. [ 447.863087][T16051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.877501][T16051] netlink: 146844 bytes leftover after parsing attributes in process `syz.1.2771'. [ 448.094239][T16058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2775'. [ 448.127303][T16058] netlink: 'syz.2.2775': attribute type 9 has an invalid length. [ 448.157209][T16058] netlink: 'syz.2.2775': attribute type 6 has an invalid length. [ 448.169369][T16058] netlink: 'syz.2.2775': attribute type 7 has an invalid length. [ 448.221974][T16058] netlink: 'syz.2.2775': attribute type 8 has an invalid length. [ 448.582467][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2782'. [ 448.639118][T16084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2782'. [ 448.747770][T16093] xt_l2tp: v2 tid > 0xffff: 1114244 [ 449.037980][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2786'. [ 449.132622][T16102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2786'. [ 450.045097][T16152] netlink: zone id is out of range [ 450.051236][T16152] netlink: zone id is out of range [ 450.065842][T16152] netlink: zone id is out of range [ 450.072399][T16152] netlink: zone id is out of range [ 450.098707][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 450.149230][T16152] netlink: zone id is out of range [ 450.163821][T16152] netlink: zone id is out of range [ 450.237565][T16152] netlink: zone id is out of range [ 450.266261][T16152] netlink: zone id is out of range [ 450.271626][T16152] netlink: zone id is out of range [ 450.526216][T16171] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 450.600533][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'. [ 451.224682][T16196] bridge8: entered promiscuous mode [ 451.229939][T16196] bridge8: entered allmulticast mode [ 451.646001][T16213] netlink: 'syz.3.2820': attribute type 1 has an invalid length. [ 451.727632][T16225] netlink: 'syz.0.2819': attribute type 16 has an invalid length. [ 451.752151][T16225] netlink: 'syz.0.2819': attribute type 17 has an invalid length. [ 451.906582][T16225] gretap0: left promiscuous mode [ 451.912664][T16225] erspan0: left promiscuous mode [ 452.298288][T16251] netlink: 'syz.0.2832': attribute type 11 has an invalid length. [ 452.374480][T16255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 452.458016][T16255] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 452.633497][T16279] __nla_validate_parse: 6 callbacks suppressed [ 452.633517][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.657701][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.669930][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.708811][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.719596][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.734491][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.776096][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.799778][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.824362][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 452.844717][T16279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2840'. [ 453.059936][T16297] netlink: 'syz.2.2846': attribute type 1 has an invalid length. [ 453.455786][T16309] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 453.497493][T16315] syz1: rxe_newlink: already configured on bond0 [ 453.535098][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.556253][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.564602][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.573053][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.580976][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.616431][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.625799][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.634109][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.646555][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.654559][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.368857][T16357] net_ratelimit: 14 callbacks suppressed [ 454.368877][T16357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.574871][T16366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.759078][T16311] vxcan1 speed is unknown, defaulting to 1000 [ 455.550280][T16407] nbd: nbd0 already in use [ 455.580830][T16407] netlink: 'syz.1.2878': attribute type 58 has an invalid length. [ 455.753967][ T5873] Bluetooth: hci3: command tx timeout [ 455.882009][T16409] syzkaller0: entered promiscuous mode [ 455.914346][T16409] syzkaller0: entered allmulticast mode [ 455.947798][T16413] tipc: Enabled bearer , priority 0 [ 456.014137][T16432] lo: entered promiscuous mode [ 456.025680][T16432] gre0: entered promiscuous mode [ 456.062442][T16432] gretap0: entered promiscuous mode [ 456.073528][T16432] erspan0: entered promiscuous mode [ 456.083377][T16432] ip_vti0: entered promiscuous mode [ 456.095538][T16408] tipc: Resetting bearer [ 456.125964][T16408] tipc: Disabling bearer [ 456.321873][T16449] netlink: 'syz.2.2889': attribute type 1 has an invalid length. [ 456.409508][T16311] chnl_net:caif_netlink_parms(): no params data found [ 456.769457][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.815249][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.822521][T16311] bridge_slave_0: entered allmulticast mode [ 456.863344][T16311] bridge_slave_0: entered promiscuous mode [ 456.889180][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.927555][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.956138][T16311] bridge_slave_1: entered allmulticast mode [ 456.986354][T16311] bridge_slave_1: entered promiscuous mode [ 457.157896][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.190735][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.243888][T16494] netlink: 'syz.3.2899': attribute type 5 has an invalid length. [ 457.270569][T16311] team0: Port device team_slave_0 added [ 457.284335][ T94] block nbd1: Possible stuck request ffff888025297000: control (read@0,1024B). Runtime 30 seconds [ 457.296378][ T94] block nbd1: Possible stuck request ffff8880252971c0: control (read@1024,1024B). Runtime 30 seconds [ 457.308003][ T94] block nbd1: Possible stuck request ffff888025297380: control (read@2048,1024B). Runtime 30 seconds [ 457.319306][ T94] block nbd1: Possible stuck request ffff888025297540: control (read@3072,1024B). Runtime 30 seconds [ 457.343738][T16496] netlink: 'syz.3.2899': attribute type 32 has an invalid length. [ 457.370590][T16494] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 457.435091][T16311] team0: Port device team_slave_1 added [ 457.551316][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.576897][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.643892][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.683788][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.701500][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.769688][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.773425][T16523] nbd: must specify a device to reconfigure [ 457.836874][ T5873] Bluetooth: hci3: command tx timeout [ 458.038490][T16531] __nla_validate_parse: 42 callbacks suppressed [ 458.038508][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2905'. [ 458.106244][T16311] hsr_slave_0: entered promiscuous mode [ 458.132625][T16311] hsr_slave_1: entered promiscuous mode [ 458.139517][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 458.150836][T16311] Cannot create hsr debugfs directory [ 458.190322][T16538] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 458.341039][T16543] netlink: 'syz.4.2911': attribute type 29 has an invalid length. [ 458.354627][T16541] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 458.442018][T16541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.734614][T16569] netlink: 'syz.2.2916': attribute type 1 has an invalid length. [ 458.825079][T16311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.837075][T16311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.957846][T16311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.968402][T16311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.046381][T16311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.061595][T16311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.347884][T16311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.362897][T16311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.681706][T16640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2931'. [ 459.699445][T16640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'. [ 459.710632][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 459.739202][T16647] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 459.894726][T16311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.914420][ T5873] Bluetooth: hci3: command tx timeout [ 459.920632][T16311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.932669][T16653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2932'. [ 459.946883][T16311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.958422][T16654] netlink: 'syz.4.2933': attribute type 11 has an invalid length. [ 459.970816][T16311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.978761][T16654] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2933'. [ 460.298100][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.387563][T16685] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2939'. [ 460.395004][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.442388][T10134] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.449614][T10134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.503518][T16685] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 460.522811][T16685] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 460.546113][T16690] pim6reg1: entered promiscuous mode [ 460.551481][T16690] pim6reg1: entered allmulticast mode [ 460.577818][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.585022][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.597904][T16698] netlink: 'syz.4.2943': attribute type 4 has an invalid length. [ 460.622273][T16698] netlink: 'syz.4.2943': attribute type 4 has an invalid length. [ 460.668754][T16698] netlink: 'syz.4.2943': attribute type 30 has an invalid length. [ 461.171165][T16311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.180910][T16731] tipc: Enabling of bearer rejected, failed to enable media [ 461.188647][T16733] netlink: 'syz.3.2951': attribute type 1 has an invalid length. [ 461.201478][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2951'. [ 461.291244][T16311] veth0_vlan: entered promiscuous mode [ 461.327877][T16311] veth1_vlan: entered promiscuous mode [ 461.345986][T16740] openvswitch: netlink: Tunnel attr 16 has unexpected len 5 expected 0 [ 461.499020][T16311] veth0_macvtap: entered promiscuous mode [ 461.536151][T16311] veth1_macvtap: entered promiscuous mode [ 461.588991][T16746] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 461.613209][T16748] netlink: 'syz.1.2954': attribute type 18 has an invalid length. [ 461.619875][T16311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.632907][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 461.650837][T16311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.721835][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.750724][T16753] openvswitch: netlink: Message has 4 unknown bytes. [ 461.783033][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.792077][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.838872][T16748] netlink: 'syz.1.2954': attribute type 18 has an invalid length. [ 461.854581][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.866805][T16748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2954'. [ 461.868720][T16758] nft_compat: unsupported protocol 1 [ 462.004171][ T5873] Bluetooth: hci3: command tx timeout [ 462.054215][T10134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.062104][T10134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.174947][T10141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.213161][T10141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.614194][T16794] tipc: Enabling of bearer rejected, failed to enable media [ 463.176258][T16820] __nla_validate_parse: 5 callbacks suppressed [ 463.176277][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2969'. [ 463.955951][T16853] validate_nla: 1 callbacks suppressed [ 463.955974][T16853] netlink: 'syz.0.2978': attribute type 1 has an invalid length. [ 463.994647][T16853] netlink: 'syz.0.2978': attribute type 2 has an invalid length. [ 464.020323][T16853] netlink: 'syz.0.2978': attribute type 3 has an invalid length. [ 464.038128][T16853] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2978'. [ 464.039962][T16857] netlink: 'syz.2.2981': attribute type 11 has an invalid length. [ 464.069218][T16857] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2981'. [ 464.118092][T16855] tipc: Enabling of bearer rejected, failed to enable media [ 464.234714][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.245265][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.259687][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.270156][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.279191][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.339970][T16862] xt_l2tp: invalid flags combination: 8 [ 464.357769][ T3022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.494334][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2984'. [ 464.599027][ T3022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.703873][T16887] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2987'. [ 464.778057][T16889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 464.832414][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2988'. [ 464.880152][ T3022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.179723][ T3022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.417756][T16930] tipc: Enabling of bearer rejected, media not registered [ 465.439746][T16930] tipc: Enabling of bearer rejected, media not registered [ 465.456834][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 465.478293][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 465.670166][T16943] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2999'. [ 466.323960][ T5873] Bluetooth: hci2: command tx timeout [ 466.331934][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.341459][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.349899][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.358162][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.367003][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.374925][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.383361][T16974] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 466.574890][ T3022] bond4 (unregistering): (slave gretap2): Releasing active interface [ 466.677030][ T3022] dvmrp0 (unregistering): left allmulticast mode [ 467.243131][ T3022] bond0 (unregistering): Released all slaves [ 467.359556][ T3022] bond1 (unregistering): Released all slaves [ 467.373441][ T3022] bond2 (unregistering): Released all slaves [ 467.388529][ T3022] bond3 (unregistering): Released all slaves [ 467.401219][ T3022] bond4 (unregistering): Released all slaves [ 467.420626][ T3022] bond5 (unregistering): Released all slaves [ 467.436272][ T3022] bond6 (unregistering): Released all slaves [ 467.469769][T16866] vxcan1 speed is unknown, defaulting to 1000 [ 467.666704][ T3022] : left promiscuous mode [ 467.945948][ T3022] tipc: Left network mode [ 468.404442][ T5873] Bluetooth: hci2: command tx timeout [ 468.685139][T17046] __nla_validate_parse: 38 callbacks suppressed [ 468.685160][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3024'. [ 469.428648][T17077] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3031'. [ 469.931847][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 469.947507][T17096] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3035'. [ 470.156951][T17105] validate_nla: 27 callbacks suppressed [ 470.156969][T17105] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 470.217489][T17106] netlink: 'syz.0.3037': attribute type 2 has an invalid length. [ 470.477349][ T5873] Bluetooth: hci2: command tx timeout [ 470.507212][T17113] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 470.525476][T17113] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 470.690323][T17118] gretap3: entered promiscuous mode [ 470.712228][T17118] bond6: (slave gretap3): making interface the new active one [ 470.721158][T17118] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 470.742113][T17121] macvlan2: entered promiscuous mode [ 470.748202][T17121] macvlan2: entered allmulticast mode [ 470.760157][T17121] bond6: entered promiscuous mode [ 470.778933][T17121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.831805][T17121] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 470.857843][T17121] bond6: left promiscuous mode [ 470.907096][T16866] chnl_net:caif_netlink_parms(): no params data found [ 470.990518][ T3022] hsr_slave_0: left promiscuous mode [ 471.021148][ T3022] hsr_slave_1: left promiscuous mode [ 471.079328][ T3022] veth1_macvtap: left promiscuous mode [ 471.741970][ T7247] smc: removing ib device syz! [ 471.999451][T17139] tipc: Enabling of bearer rejected, failed to enable media [ 472.019728][T17144] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 472.092353][T17166] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 472.150351][T17169] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 472.274627][T17172] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 472.553554][ T5873] Bluetooth: hci2: command tx timeout [ 472.828835][T16866] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.851391][T16866] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.907168][T16866] bridge_slave_0: entered allmulticast mode [ 472.939982][T16866] bridge_slave_0: entered promiscuous mode [ 473.005984][T16866] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.047251][T16866] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.085453][T16866] bridge_slave_1: entered allmulticast mode [ 473.112919][T16866] bridge_slave_1: entered promiscuous mode [ 473.875813][T17221] tipc: Started in network mode [ 473.889692][T17221] tipc: Node identity be46f59b0065, cluster identity 4711 [ 473.907899][T17221] tipc: Enabled bearer , priority 0 [ 473.929478][T17218] tipc: Resetting bearer [ 473.963789][T17224] syzkaller0: entered promiscuous mode [ 473.996722][T17224] syzkaller0: entered allmulticast mode [ 474.029258][T17208] tipc: Resetting bearer [ 474.068688][T17208] tipc: Disabling bearer [ 474.135594][T17266] Bluetooth: MGMT ver 1.23 [ 474.152233][T16866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.195079][T16866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.313138][ T5873] Bluetooth: hci0: command tx timeout [ 474.351072][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 474.383761][T17266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.413252][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.422547][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3064'. [ 474.606970][T17283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3067'. [ 474.640576][T16866] team0: Port device team_slave_0 added [ 474.769962][T16866] team0: Port device team_slave_1 added [ 474.860460][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3067'. [ 475.195487][T16866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.206927][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.276434][T16866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.338832][T17295] tipc: Enabled bearer , priority 0 [ 475.423300][T16866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.433750][T16866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.523960][T16866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.583534][T17299] syzkaller0: entered promiscuous mode [ 475.589545][T17299] syzkaller0: entered allmulticast mode [ 475.660897][T17291] tipc: Resetting bearer [ 475.814964][T17327] tipc: Enabled bearer , priority 0 [ 475.871030][T17289] tipc: Resetting bearer [ 475.939993][T17289] tipc: Disabling bearer [ 475.995598][T17328] syzkaller0: entered promiscuous mode [ 476.001456][T17328] syzkaller0: entered allmulticast mode [ 476.085075][T17318] tipc: Resetting bearer [ 476.109625][ T3022] IPVS: stop unused estimator thread 0... [ 476.193245][T16866] hsr_slave_0: entered promiscuous mode [ 476.213526][T16866] hsr_slave_1: entered promiscuous mode [ 476.221094][T16866] debugfs: 'hsr0' already exists in 'hsr' [ 476.232049][T16866] Cannot create hsr debugfs directory [ 476.252535][T17316] tipc: Resetting bearer [ 476.317070][T17316] tipc: Disabling bearer [ 476.530943][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3081'. [ 476.640360][T17370] netlink: 'syz.3.3081': attribute type 1 has an invalid length. [ 476.956620][T17380] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.175901][T17391] netlink: 'syz.2.3088': attribute type 1 has an invalid length. [ 477.323708][T17392] bond8: (slave bridge4): making interface the new active one [ 477.383423][T17392] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 477.744214][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3097'. [ 478.019122][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3099'. [ 478.226501][T16866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.293888][T16866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.347570][T16866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.375867][T16866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.741476][T16866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.877185][T16866] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.916477][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3109'. [ 480.829714][T17510] tipc: Enabled bearer , priority 0 [ 480.853660][T17512] syzkaller0: entered promiscuous mode [ 480.859162][T17512] syzkaller0: entered allmulticast mode [ 480.929509][T17526] tipc: Resetting bearer [ 480.968320][T17532] netlink: 'syz.3.3116': attribute type 2 has an invalid length. [ 480.971329][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.983290][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.017376][T17503] tipc: Resetting bearer [ 481.060422][T17503] tipc: Disabling bearer [ 481.101220][ T7251] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.108429][ T7251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.268890][T17550] IPv6: sit2: Disabled Multicast RS [ 481.294386][T17550] sit2: entered allmulticast mode [ 481.462704][T16866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.734210][T17587] netlink: 'syz.4.3129': attribute type 9 has an invalid length. [ 481.741970][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 481.759107][T17587] netlink: 'syz.4.3129': attribute type 9 has an invalid length. [ 481.804326][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3129'. [ 482.012050][T17603] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3134'. [ 482.060435][T17604] tipc: Enabled bearer , priority 0 [ 482.080879][T17604] syzkaller0: entered promiscuous mode [ 482.110386][T17604] syzkaller0: entered allmulticast mode [ 482.224083][T17604] tipc: Resetting bearer [ 482.278553][T17600] tipc: Resetting bearer [ 482.344158][T17600] tipc: Disabling bearer [ 482.402377][T16866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.567731][T16866] veth0_vlan: entered promiscuous mode [ 482.591538][T16866] veth1_vlan: entered promiscuous mode [ 482.695538][T16866] veth0_macvtap: entered promiscuous mode [ 482.721813][T16866] veth1_macvtap: entered promiscuous mode [ 482.791954][T16866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.853829][T16866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.890730][ T7251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.905309][ T7251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.957328][ T7251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.978086][T17652] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 482.988997][ T7251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.029971][T17652] netlink: 'syz.4.3143': attribute type 28 has an invalid length. [ 483.054849][T17652] netlink: 'syz.4.3143': attribute type 3 has an invalid length. [ 483.094040][T17652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3143'. [ 483.145281][T17652] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3143'. [ 483.327387][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 483.348663][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.370662][T17669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3146'. [ 483.390377][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.422173][T17670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3146'. [ 483.529632][ T3022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.571342][ T3022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.761971][T17685] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3151'. [ 483.823056][T17685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3151'. [ 483.863690][T17685] netlink: 'syz.4.3151': attribute type 2 has an invalid length. [ 483.919557][T17689] geneve2: entered promiscuous mode [ 484.894511][T17730] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 485.013701][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.028664][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.039065][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.060987][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.071447][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.296377][ T5862] syz_tun (unregistering): left promiscuous mode [ 485.369878][T17750] netlink: 'syz.1.3165': attribute type 10 has an invalid length. [ 485.419541][ T30] audit: type=1800 audit(1758861101.191:4): pid=17754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3166" name="memory.events" dev="tmpfs" ino=3201 res=0 errno=0 [ 486.096272][T17785] netlink: 'syz.4.3174': attribute type 5 has an invalid length. [ 486.280964][T17737] vxcan1 speed is unknown, defaulting to 1000 [ 486.753941][T17814] __nla_validate_parse: 6 callbacks suppressed [ 486.753959][T17814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 487.113337][ T5873] Bluetooth: hci5: command tx timeout [ 487.363099][ T94] block nbd1: Possible stuck request ffff888025297000: control (read@0,1024B). Runtime 60 seconds [ 487.392211][ T94] block nbd1: Possible stuck request ffff8880252971c0: control (read@1024,1024B). Runtime 60 seconds [ 487.404212][ T94] block nbd1: Possible stuck request ffff888025297380: control (read@2048,1024B). Runtime 60 seconds [ 487.416136][ T94] block nbd1: Possible stuck request ffff888025297540: control (read@3072,1024B). Runtime 60 seconds [ 488.618277][ T3534] bond6 (unregistering): (slave gretap3): Releasing active interface [ 489.074820][ T3534] bond0 (unregistering): Released all slaves [ 489.089445][ T3534] bond1 (unregistering): Released all slaves [ 489.195870][ T5873] Bluetooth: hci5: command tx timeout [ 489.225052][ T3534] bond2 (unregistering): Released all slaves [ 489.350712][ T3534] bond3 (unregistering): Released all slaves [ 489.466342][ T3534] bond4 (unregistering): (slave veth9): Releasing active interface [ 489.477371][ T3534] bond4 (unregistering): Released all slaves [ 489.594285][ T3534] bond5 (unregistering): Released all slaves [ 489.610113][ T3534] bond6 (unregistering): Released all slaves [ 489.623138][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3180'. [ 489.633229][T17808] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3180'. [ 489.740047][T17832] bridge2: entered promiscuous mode [ 489.754555][T17832] bridge2: entered allmulticast mode [ 489.834438][T17850] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3187'. [ 490.128737][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 490.296754][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 490.326374][T17873] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 490.362966][T17873] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3191'. [ 490.376877][T17879] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3194'. [ 490.391408][T17880] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3194'. [ 490.518738][ T7251] smc: removing ib device syz1 [ 490.555440][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 491.126125][T17907] netlink: 'syz.4.3200': attribute type 1 has an invalid length. [ 491.276537][ T5873] Bluetooth: hci5: command tx timeout [ 491.571970][T17931] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 491.609586][T17931] netlink: 'syz.2.3203': attribute type 1 has an invalid length. [ 491.976152][T17952] netlink: 'syz.4.3205': attribute type 42 has an invalid length. [ 492.380405][T17957] __nla_validate_parse: 3 callbacks suppressed [ 492.380424][T17957] netlink: 404 bytes leftover after parsing attributes in process `syz.1.3207'. [ 492.425102][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3207'. [ 492.518235][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3207'. [ 492.552495][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3207'. [ 492.569889][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 492.630426][T17973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3209'. [ 492.709852][T17971] bond6: left promiscuous mode [ 492.816540][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 493.359680][ T5873] Bluetooth: hci5: command tx timeout [ 493.548151][T18001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3215'. [ 493.714012][T17965] bridge_slave_1: left allmulticast mode [ 493.731009][T17965] bridge_slave_1: left promiscuous mode [ 493.756072][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.831923][T17965] bridge_slave_0: left allmulticast mode [ 493.852817][T17965] bridge_slave_0: left promiscuous mode [ 493.858644][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.892120][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 494.089390][ T3534] : left promiscuous mode [ 494.284069][T17737] chnl_net:caif_netlink_parms(): no params data found [ 494.329340][ T3534] tipc: Disabling bearer [ 494.360132][ T3534] tipc: Left network mode [ 494.526587][ T3534] IPVS: stopping master sync thread 7081 ... [ 494.722133][T18031] syzkaller0: entered promiscuous mode [ 494.757483][T18031] syzkaller0: entered allmulticast mode [ 494.874604][T10134] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.887441][T10134] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.221298][T10134] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.237071][T10134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.310664][T17737] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.328502][T17737] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.367374][T17737] bridge_slave_0: entered allmulticast mode [ 495.380894][T17737] bridge_slave_0: entered promiscuous mode [ 495.543364][T17737] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.573244][T17737] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.619412][T17737] bridge_slave_1: entered allmulticast mode [ 495.661237][T17737] bridge_slave_1: entered promiscuous mode [ 495.859533][T18093] tipc: Enabled bearer , priority 0 [ 496.019640][T18102] syzkaller1: entered promiscuous mode [ 496.027153][T18102] syzkaller1: entered allmulticast mode [ 496.080293][T18093] veth0_to_team: mtu less than device minimum [ 496.096488][T18096] syzkaller0: entered promiscuous mode [ 496.114191][T18096] syzkaller0: entered allmulticast mode [ 496.211311][T17737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.373029][T18088] tipc: Resetting bearer [ 496.476282][T18088] tipc: Disabling bearer [ 496.568600][T17737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.631933][T18121] bond0: (slave bond_slave_0): Releasing backup interface [ 496.713582][T18121] bond0: (slave bond_slave_1): Releasing backup interface [ 496.798151][T18121] team0: Port device team_slave_0 removed [ 496.883614][T18121] team0: Port device team_slave_1 removed [ 496.906073][T18121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.927008][T18121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.964880][T18121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.983536][T18121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.169798][T18141] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 497.201411][T18141] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 497.218335][T18138] syzkaller0: entered promiscuous mode [ 497.226383][T18138] syzkaller0: entered allmulticast mode [ 497.241817][ T3534] batadv_slave_0: left promiscuous mode [ 497.257461][ T3534] hsr_slave_0: left promiscuous mode [ 497.264639][ T3534] hsr_slave_1: left promiscuous mode [ 497.348664][ T3534] pim6reg (unregistering): left allmulticast mode [ 497.463286][T10134] smc: removing ib device syz0 [ 498.296995][ T3534] lo (unregistering): left allmulticast mode [ 498.317038][T17737] team0: Port device team_slave_0 added [ 498.356227][T17737] team0: Port device team_slave_1 added [ 498.376741][T18162] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 498.446458][ T9] ================================================================== [ 498.454560][ T9] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 498.463334][ T9] Read of size 8 at addr ffff88807e5e62e8 by task kworker/0:0/9 [ 498.470961][ T9] [ 498.473285][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 498.473302][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 498.473312][ T9] Workqueue: events smc_ib_port_event_work [ 498.473336][ T9] Call Trace: [ 498.473342][ T9] [ 498.473349][ T9] dump_stack_lvl+0x189/0x250 [ 498.473365][ T9] ? rcu_is_watching+0x15/0xb0 [ 498.473378][ T9] ? __kasan_check_byte+0x12/0x40 [ 498.473396][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.473409][ T9] ? rcu_is_watching+0x15/0xb0 [ 498.473421][ T9] ? lock_release+0x4b/0x3e0 [ 498.473440][ T9] ? __virt_addr_valid+0x1c8/0x5c0 [ 498.473456][ T9] ? __virt_addr_valid+0x4a5/0x5c0 [ 498.473472][ T9] print_report+0xca/0x240 [ 498.473484][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 498.473500][ T9] kasan_report+0x118/0x150 [ 498.473517][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 498.473535][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 498.473551][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 498.473569][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 498.473588][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 498.473606][ T9] rxe_query_port+0x93/0x3b0 [ 498.473621][ T9] ib_query_port+0x16d/0x830 [ 498.473638][ T9] smc_ib_port_event_work+0x15a/0x940 [ 498.473660][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.473671][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 498.473684][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 498.473696][ T9] process_scheduled_works+0xae1/0x17b0 [ 498.473718][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.473736][ T9] worker_thread+0x8a0/0xda0 [ 498.473758][ T9] kthread+0x70e/0x8a0 [ 498.473773][ T9] ? __pfx_worker_thread+0x10/0x10 [ 498.473785][ T9] ? __pfx_kthread+0x10/0x10 [ 498.473800][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.473811][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.473824][ T9] ? __pfx_kthread+0x10/0x10 [ 498.473843][ T9] ret_from_fork+0x439/0x7d0 [ 498.473857][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 498.473871][ T9] ? __switch_to_asm+0x39/0x70 [ 498.473886][ T9] ? __switch_to_asm+0x33/0x70 [ 498.473901][ T9] ? __pfx_kthread+0x10/0x10 [ 498.473916][ T9] ret_from_fork_asm+0x1a/0x30 [ 498.473936][ T9] [ 498.473942][ T9] [ 498.695292][ T9] Allocated by task 5862: [ 498.699602][ T9] kasan_save_track+0x3e/0x80 [ 498.704270][ T9] __kasan_kmalloc+0x93/0xb0 [ 498.708845][ T9] __kvmalloc_node_noprof+0x30d/0x5f0 [ 498.714205][ T9] alloc_netdev_mqs+0xa3/0x11b0 [ 498.719040][ T9] rtnl_create_link+0x31f/0xd10 [ 498.723874][ T9] rtnl_newlink_create+0x25c/0xb00 [ 498.728968][ T9] rtnl_newlink+0x16d6/0x1c70 [ 498.733624][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 498.738543][ T9] netlink_rcv_skb+0x208/0x470 [ 498.743284][ T9] netlink_unicast+0x82f/0x9e0 [ 498.748031][ T9] netlink_sendmsg+0x805/0xb30 [ 498.752778][ T9] __sock_sendmsg+0x219/0x270 [ 498.757448][ T9] __sys_sendto+0x3bd/0x520 [ 498.761961][ T9] __x64_sys_sendto+0xde/0x100 [ 498.766705][ T9] do_syscall_64+0xfa/0x3b0 [ 498.771191][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.777153][ T9] [ 498.779457][ T9] Freed by task 3534: [ 498.783413][ T9] kasan_save_track+0x3e/0x80 [ 498.788076][ T9] kasan_save_free_info+0x46/0x50 [ 498.793080][ T9] __kasan_slab_free+0x5b/0x80 [ 498.797833][ T9] kfree+0x18e/0x440 [ 498.801711][ T9] device_release+0x9c/0x1c0 [ 498.806285][ T9] kobject_put+0x22b/0x480 [ 498.810835][ T9] netdev_run_todo+0xd2e/0xea0 [ 498.815621][ T9] default_device_exit_batch+0x81e/0x890 [ 498.821254][ T9] ops_undo_list+0x525/0x990 [ 498.825826][ T9] cleanup_net+0x4c5/0x800 [ 498.830223][ T9] process_scheduled_works+0xae1/0x17b0 [ 498.835748][ T9] worker_thread+0x8a0/0xda0 [ 498.840319][ T9] kthread+0x70e/0x8a0 [ 498.844371][ T9] ret_from_fork+0x439/0x7d0 [ 498.848942][ T9] ret_from_fork_asm+0x1a/0x30 [ 498.853691][ T9] [ 498.856036][ T9] The buggy address belongs to the object at ffff88807e5e6000 [ 498.856036][ T9] which belongs to the cache kmalloc-cg-4k of size 4096 [ 498.870336][ T9] The buggy address is located 744 bytes inside of [ 498.870336][ T9] freed 4096-byte region [ffff88807e5e6000, ffff88807e5e7000) [ 498.884219][ T9] [ 498.886535][ T9] The buggy address belongs to the physical page: [ 498.892948][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e5e0 [ 498.901704][ T9] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 498.910185][ T9] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 498.917711][ T9] page_type: f5(slab) [ 498.921677][ T9] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 498.930331][ T9] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 498.938900][ T9] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 498.947558][ T9] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 498.956216][ T9] head: 00fff00000000003 ffffea0001f97801 00000000ffffffff 00000000ffffffff [ 498.964955][ T9] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 498.973604][ T9] page dumped because: kasan: bad access detected [ 498.980009][ T9] page_owner tracks the page as allocated [ 498.985701][ T9] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5863, tgid 5863 (syz-executor), ts 75972202565, free_ts 75927429328 [ 499.007048][ T9] post_alloc_hook+0x240/0x2a0 [ 499.011821][ T9] get_page_from_freelist+0x21e4/0x22c0 [ 499.017351][ T9] __alloc_frozen_pages_noprof+0x181/0x370 [ 499.023137][ T9] alloc_pages_mpol+0x232/0x4a0 [ 499.027970][ T9] allocate_slab+0x8a/0x370 [ 499.032454][ T9] ___slab_alloc+0xbeb/0x1420 [ 499.037378][ T9] __kmalloc_cache_noprof+0x296/0x3d0 [ 499.042758][ T9] ipv6_add_dev+0x6ca/0x1370 [ 499.047334][ T9] addrconf_notify+0x794/0x1010 [ 499.052170][ T9] notifier_call_chain+0x1b3/0x3e0 [ 499.057263][ T9] register_netdevice+0x1608/0x1ae0 [ 499.062445][ T9] ipvlan_link_new+0x407/0xa90 [ 499.067200][ T9] rtnl_newlink_create+0x310/0xb00 [ 499.072316][ T9] rtnl_newlink+0x16d6/0x1c70 [ 499.076986][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 499.081905][ T9] netlink_rcv_skb+0x208/0x470 [ 499.086648][ T9] page last free pid 5864 tgid 5864 stack trace: [ 499.092953][ T9] __free_frozen_pages+0xbc4/0xd30 [ 499.098063][ T9] __put_partials+0x156/0x1a0 [ 499.102721][ T9] put_cpu_partial+0x17c/0x250 [ 499.107476][ T9] __slab_free+0x2d5/0x3c0 [ 499.111871][ T9] qlist_free_all+0x97/0x140 [ 499.116790][ T9] kasan_quarantine_reduce+0x148/0x160 [ 499.122233][ T9] __kasan_slab_alloc+0x22/0x80 [ 499.127063][ T9] __kmalloc_cache_noprof+0x1be/0x3d0 [ 499.132417][ T9] kset_create_and_add+0x5a/0x170 [ 499.137422][ T9] netdev_register_kobject+0x1a2/0x310 [ 499.142870][ T9] register_netdevice+0x126c/0x1ae0 [ 499.148058][ T9] xfrmi_newlink+0x49b/0x7b0 [ 499.152629][ T9] rtnl_newlink_create+0x310/0xb00 [ 499.157719][ T9] rtnl_newlink+0x16d6/0x1c70 [ 499.162400][ T9] rtnetlink_rcv_msg+0x7cf/0xb70 [ 499.167318][ T9] netlink_rcv_skb+0x208/0x470 [ 499.172089][ T9] [ 499.174395][ T9] Memory state around the buggy address: [ 499.180006][ T9] ffff88807e5e6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.188044][ T9] ffff88807e5e6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.196108][ T9] >ffff88807e5e6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.204149][ T9] ^ [ 499.211673][ T9] ffff88807e5e6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.219715][ T9] ffff88807e5e6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 499.227762][ T9] ================================================================== [ 499.258203][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 499.265430][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 499.274545][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.284610][ T9] Workqueue: events smc_ib_port_event_work [ 499.290439][ T9] Call Trace: [ 499.293718][ T9] [ 499.296648][ T9] dump_stack_lvl+0x99/0x250 [ 499.301250][ T9] ? __asan_memcpy+0x40/0x70 [ 499.305828][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.311010][ T9] ? __pfx__printk+0x10/0x10 [ 499.315613][ T9] vpanic+0x281/0x750 [ 499.319576][ T9] ? preempt_schedule+0xae/0xc0 [ 499.324407][ T9] ? __pfx_vpanic+0x10/0x10 [ 499.328892][ T9] ? preempt_schedule_common+0x83/0xd0 [ 499.334349][ T9] ? preempt_schedule+0xae/0xc0 [ 499.339184][ T9] ? __pfx_preempt_schedule+0x10/0x10 [ 499.344544][ T9] panic+0xb9/0xc0 [ 499.348276][ T9] ? __pfx_panic+0x10/0x10 [ 499.352700][ T9] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 499.358589][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 499.364558][ T9] check_panic_on_warn+0x89/0xb0 [ 499.369500][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 499.375461][ T9] end_report+0x78/0x160 [ 499.379690][ T9] kasan_report+0x129/0x150 [ 499.384179][ T9] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 499.390149][ T9] __ethtool_get_link_ksettings+0x6e/0x190 [ 499.395944][ T9] ib_get_eth_speed+0x15e/0x7b0 [ 499.400785][ T9] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 499.406151][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 499.411341][ T9] rxe_query_port+0x93/0x3b0 [ 499.415916][ T9] ib_query_port+0x16d/0x830 [ 499.420495][ T9] smc_ib_port_event_work+0x15a/0x940 [ 499.425858][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.431039][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 499.436738][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 499.442441][ T9] process_scheduled_works+0xae1/0x17b0 [ 499.447980][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 499.453948][ T9] worker_thread+0x8a0/0xda0 [ 499.458554][ T9] kthread+0x70e/0x8a0 [ 499.462613][ T9] ? __pfx_worker_thread+0x10/0x10 [ 499.467712][ T9] ? __pfx_kthread+0x10/0x10 [ 499.472284][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 499.477464][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 499.482733][ T9] ? __pfx_kthread+0x10/0x10 [ 499.487316][ T9] ret_from_fork+0x439/0x7d0 [ 499.491893][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 499.496988][ T9] ? __switch_to_asm+0x39/0x70 [ 499.501737][ T9] ? __switch_to_asm+0x33/0x70 [ 499.506495][ T9] ? __pfx_kthread+0x10/0x10 [ 499.511076][ T9] ret_from_fork_asm+0x1a/0x30 [ 499.515834][ T9] [ 499.519109][ T9] Kernel Offset: disabled [ 499.523414][ T9] Rebooting in 86400 seconds..