last executing test programs: 8.140430435s ago: executing program 1 (id=3292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xb5, 0x2, 0x8, @private2, @empty, 0x10, 0x700, 0x400, 0x5d}}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r3}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0, 0x4e22, 0x9, 0x4e23, 0x40, 0xa, 0x80, 0x90, 0x5c, r1, r3}, {0x7, 0x9, 0x5f, 0x9, 0x7, 0x7f, 0x8, 0x9}, {0x7, 0x9, 0x1, 0x335a}, 0xbc98, 0x0, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d5, 0x32}, 0x2, @in=@broadcast, 0x34ff, 0x1, 0x0, 0x7, 0x5, 0x9, 0x1}}, 0xe8) socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) 7.965893318s ago: executing program 1 (id=3295): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x25, 0x301, 0x670bd24, 0x25dfdbff, {0x15}, [@typed={0x4, 0x15e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52, 0x400}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x52, 0x400}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 7.536117868s ago: executing program 1 (id=3300): r0 = epoll_create1(0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000140e3e402000000000007000006", @ANYRES32=0x0, @ANYBLOB="000000000c0002000000000000000000"], 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, &(0x7f00000002c0), &(0x7f00000002c0), 0xd9, r4}, 0x38) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r10, @ANYBLOB="08000200ac14"], 0x20}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r10}}, 0x18}}, 0x0) (async, rerun: 32) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_pwait(r0, &(0x7f0000000300)=[{}], 0x1, 0x1ff, 0x0, 0x0) (async, rerun: 32) epoll_pwait(r0, &(0x7f0000000480)=[{}], 0x1, 0xffffffff, 0x0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r11, &(0x7f00000011c0)={0x9}) r12 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffffff], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e20, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1c8, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) 7.136273957s ago: executing program 1 (id=3305): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffa, 0x20000001, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x4000850) 7.039704512s ago: executing program 1 (id=3308): r0 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r2}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x8, 0x4) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x14, 0x5a, 0x100, 0x200, 0x1, "", [@typed={0x4, 0xe4}]}, 0x14}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000003c0)='ns/net\x00') 6.868421257s ago: executing program 1 (id=3309): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x6001, 0x0, 0x980, &(0x7f0000000100), 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0xfffffffd}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30011800", @ANYRES16=r2, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000000000000000bb0800010000000000"], 0x30}}, 0x0) 2.631684049s ago: executing program 0 (id=3338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}]}, 0x20}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x63}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) socket$netlink(0x10, 0x3, 0x8) 2.459971048s ago: executing program 2 (id=3339): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, r3, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x523, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 2.404942321s ago: executing program 4 (id=3340): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040)=0x7, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2.355210584s ago: executing program 0 (id=3342): getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000340)=0x80, 0x80800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0xfff2, 0x4}, {0x5}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x4, 0x20000000, 0x5, 0x7}, 0x6, 0x5}, [{0x4b, 0x9ce, 0x6, 0xfffffffe, 0x9, 0x10000}, {0x81, 0x7, 0x80000001, 0x1, 0x9f, 0x3}, {0x5, 0x5, 0x400, 0x4b13e0b0, 0x8, 0x9}, {0x4, 0x20, 0x4, 0x200, 0x8, 0x75}, {0x3, 0x5, 0x8, 0x6, 0xfcc4, 0x2}, {0x24, 0x80, 0x1fb979a6, 0x1, 0x17fffc, 0x401}, {0x1, 0xff, 0x9, 0xfffffffb, 0xb2e, 0x2}, {0x4, 0x0, 0x3, 0x1ff, 0xbb59, 0x4}, {0x3, 0x0, 0x81, 0x8, 0x0, 0x5}, {0x9, 0x2, 0x200, 0xe, 0xb370, 0x1}, {0x4, 0x3, 0x4, 0x8, 0x2, 0x8e}, {0x0, 0x4, 0x9, 0x8, 0x3}, {0x0, 0x8, 0x80000001, 0x0, 0x8001, 0x3}, {0x78d, 0x2, 0x5, 0x4, 0x4, 0x8}, {0x6, 0x100, 0x18f, 0x7, 0x0, 0x1}, {0xc, 0x4, 0x3, 0xffffffff, 0x9, 0x5}, {0xfffffeff, 0x9, 0x101, 0x2, 0xfffffbff, 0x9}, {0xffffffff, 0x0, 0x8, 0x3, 0x80000000, 0x2}, {0x81, 0x7, 0x1, 0x6, 0x101, 0x9}, {0x7, 0x5, 0x7d, 0x0, 0x0, 0x2}, {0xab, 0x40, 0x3, 0xfffffffd, 0x0, 0x3}, {0x4, 0x7, 0x6, 0x80000001, 0xfffffffe, 0x2}, {0x10001, 0xff, 0x0, 0x0, 0x5, 0x66a8}, {0x708c, 0x5, 0x401, 0x3, 0x0, 0x4}, {0x8, 0xfffffffe, 0x1, 0x9, 0x5, 0x7}, {0x3, 0xef60, 0x8, 0x7, 0xf4ec, 0x8400000}, {0x8, 0x7, 0x3, 0x8, 0x73, 0x91}, {0x7, 0x3, 0x0, 0xffffff81, 0x6, 0x7fd}, {0xa6fd, 0x4, 0x80000001, 0x1, 0xffffffe1, 0x401}, {0x3, 0x34b, 0x5, 0x5, 0xf, 0x2}, {0x1, 0x7, 0xc0, 0x7, 0x100, 0x2}, {0x1, 0x3, 0xffffff3a, 0xffffff0c, 0x4, 0x59d4}, {0x420, 0x5, 0x1ee, 0x4, 0x1, 0x91}, {0x2, 0x1, 0x5, 0x0, 0x9, 0x2}, {0x296, 0x6, 0x5, 0x8, 0x81, 0xa}, {0xf54, 0xd3, 0x5, 0x60, 0x9, 0x10}, {0x200, 0xff, 0x9, 0x1, 0x4, 0x3}, {0x7, 0x80, 0xb, 0x0, 0x4, 0x200}, {0x3, 0x9, 0x7, 0x3, 0x3, 0x3}, {0x0, 0x10, 0x3ff, 0x5, 0x3, 0x4}, {0xd57, 0xffffffff, 0x7, 0x6, 0xe, 0xf}, {0x74c3, 0x4, 0x7, 0x0, 0x5, 0x5}, {0x1, 0x3, 0x1, 0x3, 0x101, 0x2}, {0x7f, 0x2, 0x1, 0xb6b, 0x0, 0x5}, {0xffff, 0xb28, 0x7, 0x3, 0x3, 0x80000000}, {0x0, 0xfc3, 0x8, 0x0, 0xcc3, 0x101}, {0xf4cd, 0x4, 0x9, 0x9, 0x7fff, 0x9}, {0x6, 0x2, 0xb7, 0x1, 0x80000002, 0x6}, {0x2, 0x0, 0x6, 0x1, 0x6, 0x1}, {0x7ff, 0x237, 0xdfc, 0xffff, 0x400, 0x3}, {0x3, 0x3, 0x800, 0x2, 0xebf, 0x6}, {0x3263, 0x7, 0x80000001, 0x8, 0xb, 0x9}, {0x8, 0x5, 0x5, 0x2, 0x1, 0x40}, {0x7fb, 0x400, 0x3, 0x400, 0x7, 0xa0a}, {0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0x8}, {0x487f, 0x800, 0x7ff, 0x6, 0x10001, 0x80000000}, {0x7fc, 0xd, 0x1ff, 0x6, 0xfffffff9, 0xffffff01}, {0x3, 0x3, 0x480, 0x8000, 0x8, 0x3}, {0xfffffffd, 0x8, 0x7, 0x5, 0x0, 0x101}, {0x5, 0x7, 0xd, 0x80000000, 0xffff, 0x2}, {0x1, 0x9, 0xfff, 0xffffff81, 0x0, 0x6f}, {0x3, 0x2, 0x6bfe1ad4, 0x3, 0x2, 0x8}, {0x2, 0x101, 0x80, 0xfff, 0x9, 0x9}, {0x25, 0x4, 0xfffffbff, 0x77cf, 0x10000800, 0x9}, {0x2, 0x4, 0x101, 0x5, 0x101, 0xd05}, {0xfdfffffe, 0xd, 0x0, 0x5, 0x7, 0x7941}, {0x2, 0x5, 0x7, 0x40, 0x9, 0x6}, {0x2, 0x370, 0x1, 0x8, 0x7, 0x9}, {0x3, 0x9, 0xc688, 0x3, 0x80000001, 0x3}, {0x5, 0x8, 0x3, 0x6, 0x7fff, 0x3}, {0x0, 0x2, 0x8, 0x10, 0x2, 0x5b5}, {0x2, 0x5, 0x4, 0xa, 0x19, 0x4}, {0xfffffffc, 0x95, 0x8, 0x202b, 0x5, 0x7}, {0x30, 0x1, 0x5, 0x1, 0x4, 0x5}, {0x0, 0x968d, 0x101, 0x5c, 0xff, 0xff}, {0x7, 0x5, 0x9, 0x8, 0x0, 0x7}, {0x6, 0x10000, 0x934, 0x9, 0x0, 0x80000}, {0x0, 0x3, 0x2, 0x10000, 0xc, 0x101}, {0x4, 0x1, 0x10001, 0x7, 0xf582, 0x7}, {0x2, 0x7, 0x5, 0xa6, 0x200003, 0x3de8}, {0xb9, 0x1, 0x8001, 0x1, 0xe9, 0xb440}, {0x1ff, 0x6, 0x3928, 0x5, 0x80000000, 0x3ff}, {0x18, 0x7fff, 0x7, 0xff, 0x81, 0x1b2}, {0x5, 0x3, 0x1, 0xd, 0x1, 0x800}, {0xc, 0x4, 0x78fd, 0x7, 0x7ff, 0x4}, {0x5, 0x34e1, 0x3, 0x7fffffff, 0x4, 0xd}, {0x1, 0x800, 0x3, 0xff, 0x2, 0x6}, {0x1, 0x8f2, 0x5, 0x2800000, 0x2, 0x7}, {0x401, 0x7ff, 0x6, 0x2a7318d7, 0x9, 0xffffff80}, {0x80000, 0xbd, 0x8, 0x0, 0x3b, 0x6}, {0xcd, 0x800, 0x7, 0x5}, {0x2, 0xb, 0xffffffff, 0x3, 0x7, 0x9}, {0x5, 0x0, 0x7fffffff, 0xb, 0x7, 0x4}, {0x9, 0x8, 0x5, 0x1ff, 0x2, 0xfffffffb}, {0x9, 0x276, 0x9, 0xffff, 0x93}, {0x8095, 0xfffffff2, 0x3, 0x3, 0x7, 0x8}, {0x76d, 0x9, 0x7, 0x1004, 0x3, 0xd}, {0x5, 0x4, 0x69, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xfffffe01, 0x7, 0x8, 0x1}, {0x1, 0x7c4, 0x18e99bd9, 0x2, 0x9, 0x5}, {0x9, 0x2, 0x46, 0xfffffffb, 0x0, 0x441}, {0xffff0001, 0x5, 0x9, 0x9, 0x0, 0x5}, {0x2, 0x6, 0x0, 0x1, 0x2, 0x7}, {0x9, 0x80000001, 0x3, 0x4, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x49, 0xffff, 0x1}, {0x9, 0x4af, 0x2, 0x5, 0x7c1e, 0x7}, {0x6, 0x7, 0xfffffffd, 0x37, 0x101, 0x6}, {0x5, 0x400, 0xcc, 0xa8, 0x200, 0x10}, {0x4, 0x101, 0x8000, 0x2b2b313a, 0x3, 0x9}, {0x9, 0x0, 0x6, 0x4, 0x4c14, 0x8}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xa0}, {0x8, 0x1, 0x68e4, 0xc, 0x340a, 0x7fff}, {0x401, 0x7f, 0x0, 0x0, 0x3, 0x98000000}, {0x6, 0x58, 0x10, 0x1, 0x29, 0x40}, {0xfffffff7, 0xffad, 0x5, 0x5d, 0xff, 0xe8000000}, {0x5, 0x40f1b4ea, 0x10000, 0x5, 0x3, 0x3}, {0xffffffff, 0xd26, 0x7, 0x7, 0x5, 0x2}, {0xffffffff, 0xfffe, 0x8, 0x7, 0x2, 0x5}, {0x1, 0x6, 0x4, 0x1, 0x3, 0x3}, {0x7, 0x36, 0x2006, 0x36, 0x6, 0x9}, {0x5, 0x9, 0xb, 0xf1f5, 0x5, 0x2}, {0x4000000, 0x8, 0xfffffffa, 0x0, 0xffffff87, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x7f, 0x6, 0x0, 0xffff, 0x1}, {0x9, 0x2, 0x3, 0x9, 0x4, 0x5}, {0x1119, 0xd75, 0xf, 0x1, 0x5, 0x1}, {0x6, 0x401, 0x2, 0x5359, 0x80000001, 0x8}, {0xb, 0x6db, 0x7, 0x200, 0xf0, 0x6}], [{0x3}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3, 0x2}, {0x2}, {0x1}, {0x0, 0x1}, {0x5}, {0x2}, {}, {}, {0x4, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x7, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x5}, {}, {0x5}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x46b716bf411929ed, 0x1}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x5}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r8, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x5dc}], 0x1}, 0x4000880) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="14009fcb5f5fc2a9ace7ad0000", @ANYRES16=r13, @ANYBLOB="010029bd7000fedbdf2512000000"], 0x14}}, 0x40) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r13, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa92}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40041}, 0x10) r14 = accept(r0, 0x0, &(0x7f0000000040)) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r15, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x114}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r14, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100003052dbd70200000000400000000", @ANYRES32=0x0, @ANYBLOB="0400040000000000200012800eefda1412d805499e880001006970366772657461700000cf1a000c00028005c514f01dda9be1129032566408dd23f0e13527f5abacc68abef630e34bed5ee7429b29c47f1640c2cc0688e852d35f5d6f90418601ff82b03f84f6f4b4515eba31c68939b1bcae3db534d5a0a553e2d224fd20bc8ae811fcffd7a9391250f15fdc98f5c6d57273bdaf4832e532f133d66f3e539799629e617962cb7738fd14f96d340f290d657aab33c6e983f2da67a05ef476e5cbda81fd22b6edddf3", @ANYRES32=r16, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2004c012}, 0x1) 2.144554972s ago: executing program 4 (id=3344): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000340)=""/184, 0xb8}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000000c0)=0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 2.048836283s ago: executing program 2 (id=3346): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000008000000000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000001600"/17]) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "0000df00"}, &(0x7f00000000c0)=0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x4) 1.796409408s ago: executing program 2 (id=3347): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close(0x3) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0) 1.795948257s ago: executing program 0 (id=3348): r0 = socket(0xa, 0x0, 0x3) sendto$packet(r0, &(0x7f0000000080)="70980953b2a982b12d6504de8166e052dea93a965b2c191e97b0abda4818d1a0710fafe97db94be3f194a562af234cccc970d36c26811ba52a87e065a94b1f6f5703902ba65721832f2d0e9fe701df17357aac", 0x53, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910442000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x41) 1.397271556s ago: executing program 3 (id=3349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 1.273113046s ago: executing program 4 (id=3350): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0xf0, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xc4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x3, 0xffff, 0x7ff}}, @TCA_CBS_PARMS={0xff26, 0x1, {0x8, '\x00', 0x0, 0xa054, 0x3, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x101, 0xfffff800, 0x55, 0x5bd}}, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0x6, 0x8, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x34, '\x00', 0x40, 0x4, 0x401, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x401, 0x7fffffff, 0x5, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x7, 0x3ff, 0x9, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x10, 0x1ff, 0x5, 0x3}}]}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x4c80, 0x4) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x20000010}}], 0x1, 0x3400c0c4) r11 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r11, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f0000000b40)=""/206, 0xce}, {&(0x7f0000003640)=""/224, 0xe0}], 0x5}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRESOCT=r11], 0x114}], 0x1}, 0x8090) 1.186725594s ago: executing program 0 (id=3351): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.120327029s ago: executing program 3 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x84, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd37d}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.119702538s ago: executing program 2 (id=3353): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x1, 0x1}, {0x16}, {0x1b}, {0x1b}, {0x4, 0x1}, {0x36}, {0x18}, {0x16}, {0x48}, {0x9}, {0x12, 0x1}, {0x6c, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6e}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r8, @ANYRES64=r6, @ANYBLOB="00000000000000020c001a800800058004000680"], 0x2c}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000000000000691165000000000085100000020000008500000000000000950000000006000095007d31f0ca20644dd61edf1dd98e61e202a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 848.38779ms ago: executing program 3 (id=3354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x9}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000cf0000", @ANYRESHEX=r0, @ANYRES32=r1], 0x38}}, 0x0) 766.501943ms ago: executing program 2 (id=3355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x50, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="f934971e687f2451"], 0x30}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x600}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 692.006347ms ago: executing program 3 (id=3356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4623, @remote}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) getsockopt$inet6_int(r0, 0x29, 0x4c, 0xffffffffffffffff, &(0x7f00000002c0)=0x5c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x40080) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4623, @remote}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) (async) getsockopt$inet6_int(r0, 0x29, 0x4c, 0xffffffffffffffff, &(0x7f00000002c0)=0x5c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027db700000000000040000000c00180004ac0f0001ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x40080) (async) 659.858636ms ago: executing program 0 (id=3357): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004020}, 0x80) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) 573.053002ms ago: executing program 4 (id=3358): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x10840}, 0x20040010) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250100000006000a0001000000050007000a00000006000800a0aa0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRES8], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) (async) bind$l2tp6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r3, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x5, 0x0, 0xfffffffe}, 0x10}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000182600000a2f100cab3f498f4b9343c0578d0e92c66b2835e97b18c3c54634297fbfb52f75309ee300c3020906795359e7b1c59700ade3c0fc5223eea3a9246e2f710c546034f0cf18b2bdfdd7fd64ca6978d78a0833ab56360fcd3fcbdff850a59572be8030f2a41c3072396c5b52e38dc3334b0fcc1aac028859efdac2d43b7fa666fdeac9066549b25ab488794bf903fc55fa48494337933d25bab2e0f8e5d644d911e86fbd0493b206943853eac35bffa74467a167", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00'], &(0x7f00000005c0)='GPL\x00', 0x30, 0x1f, &(0x7f0000000600)=""/31, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x145f3, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[r5, r7, r7, r7, r7, r7, r7], &(0x7f0000000b00)=[{0x4, 0x1, 0xf, 0x3}, {0x5, 0x5, 0xc, 0x4}], 0x10, 0x5}, 0x94) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000080), &(0x7f0000000300)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={0xffffffffffffffff, r8}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 422.956854ms ago: executing program 2 (id=3359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$l2tp(0x2, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="4cf7", 0x2}], 0x1}}], 0x1, 0x4040001) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f071fff000100000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r11 = socket(0x14, 0x2, 0x4) accept4$unix(r11, 0x0, 0x0, 0x80000) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e1c, @empty}, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x174, 0x0, 0x320, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8532}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe4, 0xa8, @random="6606e3d3c1145925e4052e33978791e6a154661ed365eac4f0fa7d69d47223f3408656cf5311baec08c9cefb126596e23dfeb053bf0f786f42cee2f66e0c45b730a5eb7b380eaa7e0ac78f5f2403ba9dd5dc05fadb4c8a79208d20be4d94f38f30e1817f86a36f6b63a94b2afcdcf5a6621d707558fb9983807300827ca5b1432478d2e43058781886188cfde4a2f1de2505270fce4779bf8b4d4712d328c363c8b2361871066bda031d4a2317d7cada350885cff39428e2a85cbbe4db90bfbb8976e24919cf781579b8cf7c61049810c0efa759fe475a1df6939e038fa6c437"}]}, 0x174}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) getpeername(r1, 0x0, &(0x7f0000000240)) 342.958134ms ago: executing program 4 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 286.486269ms ago: executing program 3 (id=3361): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x20}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x80000001}]}, 0x28}}, 0x0) 179.969372ms ago: executing program 0 (id=3362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r2 = socket$inet(0x2, 0x3, 0xffffffff) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xf6}}}, 0x24}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400d2b657af147fd1f226a8d6000afa55502a916c2b3000998732e89d602c1e320091709ec13e1712c211969ab06cb78d", @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2514000000"], 0x14}}, 0x4040) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x6c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8605}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4ac}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040004) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000016000107000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x38, r12, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x117}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000e40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e00)={&(0x7f0000000900)={0x4d4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME={0x499, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @from_mac=@device_b, {0xb, 0x4}}, 0x4440, 0x47, @random=0x4, @val={0x1, 0x1, [{0x36}]}, @void, [{0xdd, 0x5e, "dfce0c8c79ce95a9353e7c7d5cea8e9bb36a4902cf3be4e76ba028653f07fb65f198f153fffe1faf955b1587a42a14c365338d59ffa4b594baf537110f7108503af893302ff22e3063451eed8c3f0c5faaed5dc3415603015b2c0d037114"}, {0xdd, 0x94, "27e2c49e4638a411c73d82c1b9a7ef8b1abc6127f4e046f4aa843160c5b23364e3de97a69d3aef9f1255eded844f6c58f081492608615425983e07f8aa317977c93e3f8bf51083f18ffe6c50fb4f7be4bff289bc9e4c28e4c035733f53d0bcfbad85b5136963728e8f1f437f8da649bf091eda2b2b5205b17af3e55aeebaa34fd679781384a8ab893f037e78b5bb68bcbe9caa7d"}, {0xdd, 0x6c, "fb7308380e3a9c45e95446e998fe8a2c14f39396233f7edac1db1e82abc120f11800989770d88b5deef1c405c350b7acb910f2a6ac1bbbeb18ac17016bdd748f06728fb09f16456ec0f742d84a2c08825802585d97a6eb08625c1a7c7aca8f805c504400560ccde2b8ebe53a"}, {0xdd, 0xb6, "43a6a5f704f16621404a03d6185d639b2a3a6cad56eaea65139153141c6f2f63fcd8341d944f2f1c8b09a4e1ea09552409de5db3876dde9f7f72a7d9407afb06e22d71aad115b24ae8958a6dbad9eb858b704b92974a9ff72f5d7ae15f4b3d1a81a28b96c346bad6ca21123f41e8a34bfcfc0b9cfa2ac15d2a690929383814d2893a79116fa6005f32cf30c57eeaa9a486f9d1c13e9ae115604c169008e299952d4c35d9d7d51ea68a823ae9f621499d3018fa812462"}, {0xdd, 0x7f, "461a1f742c0eb8e3d0a79cbc500797e0040eaafc2fb9e924faf985f2b927166687a70919eaa09438ec7e73d3153f67b8b009402d4aa3049d5d21b65a0ebca8cad76ee9944a1073c4bed9cea0ebe5a8804d01eeb475c25916e3ce0a360ceccc13d83c57d5177d1230864ff35180feadcb471ead14c025c31df210462d06577f"}, {0xdd, 0x6a, "d511dd3786884ffd4b3fc67a3d496cd06b1b977efd620f3a741ce5740ce110784e0b0111909652adcd5350f18e834919db09542b830e2b26bdf789f8ed3aaeffa9e5df2293ea0e52f9897e7a2eb51bea5350409969f8227880091ad87ad7fb0d705073fb2c9615f83e12"}, {0xdd, 0xc4, "f9203ea04da62ec179ed81a9192ba5dba13807f0fd6085bb2bc0373e00b20942bb2164f44a9f7f146a5dc38df6aa0aabe6b67e87be80d7647263fe78fda87490d3252451863e27c490acf4b6810db184510cf6f2d82cd4d01891f1b8da9a8c966aa6f6f094556b018cc557703e79764397721107b1052c6e1227d575b752c8d8e5c0ef3ec3b38b0c19a315009367c66d6dc289f7f741c9a71c204b6eddd3f160e2b39f1950dc6cb8e3d993fda24c935df535520a4a8c42c1a307063e658207b457e4e691"}, {0xdd, 0xa3, "3cca020004b83eb60520d75e354b39b8285c4349ba0d27a584f6df8feab33b032c7247c2d966681ef9a15df52bce4c477c966acd4a96bc64c00f6269c8493cf8869de1a78f88b13119ba73029eec8ac0b063058445efd3016ffcb37749d9a1ab81b8365c3269c20f33abc44a9d2c5f72084fe36f3333f60a3d7a177cfc7267255e5d44253c13debdd5dce9b52c3320d35411c586cc8ba0b33b068cf5ed1421c905e912"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x400, 0x5, 0x4, 0xb3, 0xf]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2e3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4d4}, 0x1, 0x0, 0x0, 0x80d0}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r15, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000fff0008"], 0x70}, 0x1, 0x0, 0x0, 0x2800}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000740)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000e00000008000300", @ANYRES32=r16, @ANYBLOB="18002a006512ffffffffffff080211000000ffffffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x204c049}, 0x0) 31.428854ms ago: executing program 4 (id=3363): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000019000100000000000000000002000000000000000000000008000400", @ANYRES32, @ANYBLOB="08001e004e"], 0x2c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000380)={0xa, 0xe22, 0x80, @mcast2, 0x1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000efffffffffff1b00128009000100626f6e64000000000c0002800800046308000000d566181349618e88f66245e9ac6116053e8b63144b43453ab48114ccfa15cdacc66b53c301de1d070bdaec2d19bb82224948d2b886eeb23daec1be8000fa3ae625f4ad3189a75a2970df99a24425e3a18da6395f4ed921c35b19ba64bb"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 0s ago: executing program 3 (id=3364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10000) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010318bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4044) recvmmsg(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001840)=""/4091, 0xffb}], 0x1}, 0x70001}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8a}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x102, 0x0) kernel console output (not intermixed with test programs): ementation only supports local addresses [ 277.061495][T11444] macvlan0: entered promiscuous mode [ 277.084504][T11444] macvlan0: entered allmulticast mode [ 277.091466][T11444] bond4: (slave macvlan0): Opening slave failed [ 277.176330][T11461] nftables ruleset with unbound chain [ 277.444388][T11470] syzkaller0: entered promiscuous mode [ 277.462456][T11470] syzkaller0: entered allmulticast mode [ 277.493567][T11470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.814602][T11489] bond0: option miimon: invalid value (18446744071829782528) [ 277.828723][T11489] bond0: option miimon: allowed values 0 - 2147483647 [ 277.935239][T11496] team0: No ports can be present during mode change [ 278.145635][T11506] __nla_validate_parse: 3 callbacks suppressed [ 278.145655][T11506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1480'. [ 278.239633][T11508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 278.364955][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1484'. [ 278.766910][T11533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1490'. [ 278.836873][T11535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1491'. [ 278.987483][T11542] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1495'. [ 279.261356][T11556] sctp: [Deprecated]: syz.0.1499 (pid 11556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.261356][T11556] Use struct sctp_sack_info instead [ 279.279349][T11558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1500'. [ 279.449688][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 279.474549][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'. [ 279.961889][T11597] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1509'. [ 280.625106][T11632] netlink: 'syz.0.1518': attribute type 4 has an invalid length. [ 280.684529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.694882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.806536][T11618] syzkaller0: entered promiscuous mode [ 280.812230][T11618] syzkaller0: entered allmulticast mode [ 280.946960][T11654] netlink: 'syz.2.1519': attribute type 62 has an invalid length. [ 282.715048][T11659] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 283.259944][T11708] netem: change failed [ 283.338359][T11712] __nla_validate_parse: 6 callbacks suppressed [ 283.338379][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 283.480660][T11711] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1534'. [ 283.648721][T11727] Can't find ip_set type haship [ 283.682283][T11729] Can't find ip_set type haship [ 284.021033][T11748] bridge3: entered allmulticast mode [ 284.038304][T11751] netlink: 'syz.4.1544': attribute type 1 has an invalid length. [ 284.057451][T11754] IPv6: NLM_F_REPLACE set, but no existing node found! [ 284.068523][T11753] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.432830][T11774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1548'. [ 284.484175][T11774] openvswitch: netlink: Flow key attr not present in new flow. [ 284.825329][T11794] netlink: 'syz.3.1555': attribute type 21 has an invalid length. [ 284.868378][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 284.905234][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 284.952137][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 284.996865][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 285.125648][T11806] netlink: 'syz.4.1557': attribute type 10 has an invalid length. [ 285.210685][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.249956][T11806] bond0: (slave team0): Enslaving as an active interface with an up link [ 285.504695][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 285.544892][T11828] IPv6: addrconf: prefix option has invalid lifetime [ 285.570573][T11826] ip6t_srh: unknown srh invflags 4000 [ 285.585708][T11823] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 285.634579][T11826] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1563'. [ 285.639230][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1565'. [ 286.044811][T11850] ¾x9’: renamed from bridge_slave_0 [ 286.141773][T11853] gretap3: entered promiscuous mode [ 286.444432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.453262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.496210][T11874] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 286.938171][T11896] bridge0: port 3(veth1_to_bridge) entered blocking state [ 286.956373][T11896] bridge0: port 3(veth1_to_bridge) entered disabled state [ 286.998533][T11896] veth1_to_bridge: entered allmulticast mode [ 287.030358][T11896] veth1_to_bridge: entered promiscuous mode [ 287.078135][T11904] netlink: 'syz.2.1579': attribute type 49 has an invalid length. [ 287.427904][T11914] tipc: Enabling of bearer rejected, failed to enable media [ 287.532477][T11919] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 287.636045][T11923] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 287.757073][T11923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.135811][T11951] syzkaller0: entered promiscuous mode [ 288.167881][T11951] syzkaller0: entered allmulticast mode [ 288.413310][ T6539] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 288.726188][T11980] vlan2: entered promiscuous mode [ 288.754939][T11980] bridge0: entered promiscuous mode [ 288.823235][T11987] __nla_validate_parse: 9 callbacks suppressed [ 288.823257][T11987] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1604'. [ 288.869618][T11987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.936678][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 289.058202][T11999] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 289.124569][T11994] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1607'. [ 289.145609][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 289.406929][T12014] netlink: 'syz.1.1613': attribute type 10 has an invalid length. [ 289.445864][T12014] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.481469][T12014] bond0: (slave team0): Enslaving as an active interface with an up link [ 289.606723][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1618'. [ 289.682663][T12031] netlink: 'syz.2.1620': attribute type 13 has an invalid length. [ 289.703360][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 289.793750][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1620'. [ 289.841021][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1623'. [ 289.851545][T12042] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1622'. [ 290.161227][T12066] netlink: 'syz.0.1630': attribute type 2 has an invalid length. [ 290.185223][T12066] netlink: 'syz.0.1630': attribute type 1 has an invalid length. [ 290.245744][T12072] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1631'. [ 290.413351][T12078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.620216][T12090] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 290.630856][T12092] netlink: 'syz.1.1640': attribute type 7 has an invalid length. [ 290.639914][T12090] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 290.656241][T12092] netlink: 'syz.1.1640': attribute type 8 has an invalid length. [ 290.670793][T12090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.700002][T12090] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 290.710424][T12095] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 290.965306][T12098] bond4: (slave gretap1): making interface the new active one [ 291.012110][T12098] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 291.043463][T12118] macsec0: left allmulticast mode [ 291.066682][T12119] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 291.195476][T12114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 291.203248][T12114] bridge0: port 1(bond3) entered blocking state [ 291.209939][T12114] bridge0: port 1(bond3) entered disabled state [ 291.219619][T12114] bond3: entered allmulticast mode [ 291.228828][T12114] bond3: entered promiscuous mode [ 291.235148][T12114] bridge0: port 1(bond3) entered blocking state [ 291.243098][T12114] bridge0: port 1(bond3) entered forwarding state [ 291.277973][ T152] bridge0: port 1(bond3) entered disabled state [ 291.334685][T12130] syzkaller0: entered promiscuous mode [ 291.341088][T12130] syzkaller0: entered allmulticast mode [ 292.569177][T12194] tipc: Enabled bearer , priority 0 [ 292.602615][T12194] syzkaller0: entered promiscuous mode [ 292.624430][T12194] syzkaller0: entered allmulticast mode [ 292.715440][T12194] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 292.800014][T12194] tipc: Resetting bearer [ 292.842815][T12193] tipc: Resetting bearer [ 292.953240][T12193] tipc: Disabling bearer [ 293.432123][T12233] validate_nla: 3 callbacks suppressed [ 293.432144][T12233] netlink: 'syz.1.1675': attribute type 2 has an invalid length. [ 293.454185][T12233] netlink: 'syz.1.1675': attribute type 2 has an invalid length. [ 293.516359][T12239] openvswitch: netlink: IP tunnel dst address not specified [ 293.571617][T12239] bond0: entered promiscuous mode [ 293.583554][T12239] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 293.603135][T12242] netlink: 'syz.2.1679': attribute type 61 has an invalid length. [ 293.868613][ T29] audit: type=1804 audit(1780690640.239:5): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1684" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1661 res=1 errno=0 [ 293.941836][ T29] audit: type=1800 audit(1780690640.239:6): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1684" name="cgroup.controllers" dev="tmpfs" ino=1661 res=0 errno=0 [ 294.085427][T12274] netlink: 'syz.4.1687': attribute type 8 has an invalid length. [ 294.469887][T12289] __nla_validate_parse: 9 callbacks suppressed [ 294.469908][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'. [ 294.547439][T12295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'. [ 294.571961][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1695'. [ 294.824665][T12304] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 294.832509][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 295.082676][T12311] tipc: Enabling of bearer rejected, failed to enable media [ 295.118203][T12311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1701'. [ 295.240024][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1706'. [ 295.259634][T12323] Bluetooth: MGMT ver 1.23 [ 295.276648][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1706'. [ 295.397891][T12327] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1708'. [ 295.454520][T12327] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1708'. [ 295.481994][T12335] raw_sendmsg: syz.0.1710 forgot to set AF_INET. Fix it! [ 295.693173][T12349] bridge10: entered allmulticast mode [ 295.852892][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 296.067259][T12367] syzkaller0: entered promiscuous mode [ 296.072986][T12367] syzkaller0: entered allmulticast mode [ 296.209893][T12377] nftables ruleset with unbound set [ 297.324101][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 297.331828][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 299.622460][T12403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.787856][T12462] __nla_validate_parse: 2 callbacks suppressed [ 299.787879][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 299.834558][T12464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1736'. [ 299.862927][T12467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1736'. [ 300.190263][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 301.047138][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1748'. [ 302.082866][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 302.411973][T12575] "syz.2.1763" (12575) uses obsolete ecb(arc4) skcipher [ 302.869615][T12606] gtp0: entered allmulticast mode [ 302.893446][T12606] team0: Device gtp0 is of different type [ 303.026317][T12612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1772'. [ 303.124537][T12620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1773'. [ 303.477594][T12632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.649889][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 303.717597][T12643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1779'. [ 303.911933][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.157810][T12663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.190491][T12664] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 304.592922][T12695] openvswitch: netlink: Key type 5664 is out of range max 32 [ 304.782416][T12701] sock: sock_set_timeout: `syz.1.1795' (pid 12701) tries to set negative timeout [ 304.822647][T12700] nbd: must specify a device to reconfigure [ 305.150687][T12718] __nla_validate_parse: 5 callbacks suppressed [ 305.150706][T12718] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1800'. [ 305.175497][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 305.429681][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 306.924225][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 306.960943][T12738] ipvlan0: entered promiscuous mode [ 307.386639][T12761] netlink: 'syz.0.1812': attribute type 24 has an invalid length. [ 307.621240][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 307.731262][T12782] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.742520][T12772] bond0: Error: CAN devices cannot be enslaved [ 307.997609][T12802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1825'. [ 308.361965][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'. [ 308.447914][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 308.708873][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 308.727718][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1835'. [ 308.737859][T12841] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 308.750578][T12841] bond4 (unregistering): Released all slaves [ 308.861825][T12854] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1836'. [ 309.184938][T12869] syzkaller1: entered promiscuous mode [ 309.195130][T12872] IPVS: stopping backup sync thread 7299 ... [ 309.198673][T12869] syzkaller1: entered allmulticast mode [ 309.372626][T12875] xt_hashlimit: size too large, truncated to 1048576 [ 309.389416][T12881] syzkaller0: entered promiscuous mode [ 309.406863][T12881] syzkaller0: entered allmulticast mode [ 309.428302][T12881] sctp: [Deprecated]: syz.1.1844 (pid 12881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.428302][T12881] Use struct sctp_sack_info instead [ 309.445855][T12883] IPv6: sit3: Disabled Multicast RS [ 309.829124][T12894] xt_l2tp: v2 doesn't support IP mode [ 310.069632][ T29] audit: type=1804 audit(1780690656.439:7): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1854" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1877 res=1 errno=0 [ 310.141603][T12912] netlink: 'syz.3.1853': attribute type 4 has an invalid length. [ 310.160328][ T29] audit: type=1800 audit(1780690656.439:8): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="cgroup.controllers" dev="tmpfs" ino=1877 res=0 errno=0 [ 310.193031][T12915] netlink: 'syz.3.1853': attribute type 4 has an invalid length. [ 310.213422][T12914] __nla_validate_parse: 7 callbacks suppressed [ 310.213444][T12914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1856'. [ 310.578031][T12936] netlink: 'syz.3.1862': attribute type 32 has an invalid length. [ 310.612533][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 310.696235][T12936] bond8: option coupled_control: invalid value (192) [ 310.726884][T12936] bond8 (unregistering): Released all slaves [ 310.773124][T12945] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1865'. [ 310.787646][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1865'. [ 310.819717][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 310.848865][T12949] sctp: [Deprecated]: syz.4.1866 (pid 12949) Use of int in max_burst socket option. [ 310.848865][T12949] Use struct sctp_assoc_value instead [ 310.899588][T12954] syz_tun: entered allmulticast mode [ 311.010339][T12941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1864'. [ 311.171126][T12967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1869'. [ 311.184743][T12967] tipc: Enabling of bearer rejected, already enabled [ 311.238587][T12968] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1870'. [ 311.336203][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 311.392834][T12975] netlink: 'syz.3.1872': attribute type 17 has an invalid length. [ 311.414272][T12975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1872'. [ 311.605712][T12985] ieee802154 phy0 wpan0: encryption failed: -126 [ 311.667988][T12988] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002 [ 312.253441][T13022] netlink: 'syz.2.1887': attribute type 13 has an invalid length. [ 312.309408][T13023] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 312.431785][T13031] netlink: 'syz.0.1892': attribute type 15 has an invalid length. [ 312.473769][T13032] netlink: 'syz.4.1891': attribute type 32 has an invalid length. [ 312.706123][T13023] 8021q: adding VLAN 0 to HW filter on device bond4 [ 312.768355][T13032] bond5: option coupled_control: invalid value (44) [ 312.778392][T13032] bond5 (unregistering): Released all slaves [ 313.087264][T13045] netlink: 'syz.2.1896': attribute type 8 has an invalid length. [ 313.131656][T13045] veth1_to_team: entered promiscuous mode [ 313.150914][T13045] gretap0: entered promiscuous mode [ 313.176160][T13045] veth1_to_team: left promiscuous mode [ 313.197683][T13045] gretap0: left promiscuous mode [ 313.459497][T13062] syzkaller1: entered promiscuous mode [ 313.476238][T13062] syzkaller1: entered allmulticast mode [ 313.525328][T13062] netem: change failed [ 313.690828][T13081] netlink: 'syz.0.1905': attribute type 6 has an invalid length. [ 313.703271][T13078] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.715049][T13081] netlink: 'syz.0.1905': attribute type 5 has an invalid length. [ 314.312748][T13114] pimreg3: entered allmulticast mode [ 314.399868][T13125] sctp: [Deprecated]: syz.3.1922 (pid 13125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.399868][T13125] Use struct sctp_sack_info instead [ 314.580555][T13139] openvswitch: netlink: Key type 245 is out of range max 32 [ 314.741801][T13145] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 314.838663][T13145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.050964][T13160] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 315.060017][T13160] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 315.209077][T13161] netlink: 'syz.1.1933': attribute type 1 has an invalid length. [ 315.256556][T13171] __nla_validate_parse: 17 callbacks suppressed [ 315.256576][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 315.377852][T13184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1940'. [ 315.597688][T13190] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.1943'. [ 315.636122][T13194] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 316.070370][T13207] veth0_to_bond: left allmulticast mode [ 316.090353][T13207] veth0_to_bond: left promiscuous mode [ 316.104730][T13207] bridge5: port 1(veth0_to_bond) entered disabled state [ 316.132147][T13207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.211585][T13219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 316.222692][T13212] syzkaller1: entered promiscuous mode [ 316.240348][T13212] syzkaller1: entered allmulticast mode [ 316.465765][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1953'. [ 316.736473][T13240] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 316.781047][T13240] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1957'. [ 317.009506][T13249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.250513][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.436287][T13272] gtp2: entered allmulticast mode [ 317.480772][T13272] team0: Device gtp2 is of different type [ 317.743037][T13291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1964'. [ 318.427887][T13328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1975'. [ 318.489383][T13328] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1975'. [ 318.771278][T13347] netlink: 'syz.3.1982': attribute type 2 has an invalid length. [ 318.940485][T13306] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.108377][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1968'. [ 319.390289][T13342] nbd0: detected capacity change from 0 to 63 [ 319.421356][T13384] ŖŖŖŖŖ»: renamed from veth1 [ 319.457282][ T4949] block nbd0: Receive control failed (result -104) [ 319.457669][ T5636] block nbd0: Receive control failed (result -32) [ 320.254338][T13422] netlink: 'syz.4.2000': attribute type 1 has an invalid length. [ 320.364196][T13422] bond5: option mode: invalid value (7) [ 320.393355][T13422] bond5 (unregistering): Released all slaves [ 320.399678][T13433] netlink: 'syz.4.2000': attribute type 10 has an invalid length. [ 320.452343][T13433] __nla_validate_parse: 14 callbacks suppressed [ 320.452364][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2000'. [ 320.552778][T13433] dummy0: entered promiscuous mode [ 320.750990][T13436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 321.371361][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 321.458772][T13481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2013'. [ 321.557348][T13489] tipc: Failed to remove unknown binding: 66,1,1/0:2819595746/2819595748 [ 321.608754][T13489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2015'. [ 321.711189][T13496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2017'. [ 321.774626][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 321.936306][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2016'. [ 322.049999][T13497] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 322.075577][T13497] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 322.147133][T13516] netlink: 'syz.4.2021': attribute type 8 has an invalid length. [ 322.363704][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2024'. [ 322.434571][T13529] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 322.459565][T13528] syzkaller0: entered promiscuous mode [ 322.483465][T13528] syzkaller0: entered allmulticast mode [ 322.530967][T13526] 0: reclassify loop, rule prio 0, protocol 700 [ 322.566985][T13536] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2028'. [ 322.590685][T13534] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2027'. [ 322.651148][T13541] xt_hashlimit: overflow, rate too high: 0 [ 323.028513][T13561] netlink: 'syz.0.2037': attribute type 2 has an invalid length. [ 323.037565][T13561] netlink: 'syz.0.2037': attribute type 11 has an invalid length. [ 323.064961][T13563] netlink: 'syz.2.2035': attribute type 1 has an invalid length. [ 323.295732][T13563] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.359040][T13558] bond5: (slave veth0_to_bond): making interface the new active one [ 323.399843][T13558] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 323.501297][T13570] bond5: (slave veth7): Enslaving as an active interface with a down link [ 323.547190][T13570] netlink: 'syz.2.2035': attribute type 1 has an invalid length. [ 323.557460][T13570] netlink: 'syz.2.2035': attribute type 2 has an invalid length. [ 324.369816][T13620] veth3: entered allmulticast mode [ 324.657560][T13637] sctp: [Deprecated]: syz.3.2059 (pid 13637) Use of int in maxseg socket option. [ 324.657560][T13637] Use struct sctp_assoc_value instead [ 324.702685][T13638] can: request_module (can-proto-0) failed. [ 324.861123][T13648] netlink: 'syz.1.2064': attribute type 1 has an invalid length. [ 324.894577][T13648] netlink: 'syz.1.2064': attribute type 2 has an invalid length. [ 325.160475][T13674] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.177161][T13668] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 325.649386][T13705] netlink: 'syz.4.2078': attribute type 1 has an invalid length. [ 325.779371][T13714] __nla_validate_parse: 15 callbacks suppressed [ 325.779395][T13714] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2080'. [ 325.809422][T13714] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 325.982261][T13725] lo: Caught tx_queue_len zero misconfig [ 326.013108][T13725] netlink: 'syz.2.2082': attribute type 5 has an invalid length. [ 326.112327][T13726] macvlan2: entered promiscuous mode [ 326.136956][T13726] macvlan2: entered allmulticast mode [ 326.150316][T13726] team0: Device macvlan2 is already an upper device of the team interface [ 326.689458][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 326.710693][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 326.769730][T13764] syzkaller0: entered promiscuous mode [ 326.776183][T13764] syzkaller0: entered allmulticast mode [ 326.785847][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 327.020662][T13774] IPv6: NLM_F_CREATE should be specified when creating new route [ 327.050346][T13774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.057692][T13774] IPv6: NLM_F_CREATE should be set when creating new route [ 327.199735][T13784] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 327.208658][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2104'. [ 327.798050][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2115'. [ 327.833682][T13819] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2115'. [ 328.020141][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 328.047434][T13830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2118'. [ 328.083130][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2120'. [ 328.285446][T13847] xt_hashlimit: size too large, truncated to 1048576 [ 328.394510][T13852] syzkaller1: entered promiscuous mode [ 328.404314][T13852] syzkaller1: entered allmulticast mode [ 328.788649][T13873] netlink: 'syz.1.2132': attribute type 7 has an invalid length. [ 328.828571][T13873] bond5: option all_slaves_active: invalid value (222) [ 328.837553][T13873] bond5 (unregistering): Released all slaves [ 329.057500][T13842] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 329.269575][T13885] xt_ecn: cannot match TCP bits for non-tcp packets [ 329.374593][T13903] sctp: [Deprecated]: syz.1.2140 (pid 13903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.374593][T13903] Use struct sctp_sack_info instead [ 330.284973][ T4949] Bluetooth: hci4: command 0x0401 tx timeout [ 349.888809][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 349.900051][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 349.907903][ T1603] block nbd0: Dead connection, failed to find a fallback [ 349.917635][ T1603] block nbd0: shutting down sockets [ 349.931362][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 349.941344][ T1603] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.953394][ T25] block nbd0: Connection timed out, retrying (0/2 alive) [ 349.965443][ T1603] Buffer I/O error on dev nbd0, logical block 0, async page read [ 349.975977][ T1603] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.985123][ T1603] Buffer I/O error on dev nbd0, logical block 3, async page read [ 349.993425][ T1603] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.002571][ T1603] Buffer I/O error on dev nbd0, logical block 2, async page read [ 350.011359][ T1603] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.020515][ T1603] Buffer I/O error on dev nbd0, logical block 1, async page read [ 350.031540][T11429] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.041974][T11429] Buffer I/O error on dev nbd0, logical block 0, async page read [ 350.050507][T11429] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.059713][T11429] Buffer I/O error on dev nbd0, logical block 1, async page read [ 350.068289][T11429] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.077425][T11429] Buffer I/O error on dev nbd0, logical block 2, async page read [ 350.085444][T11429] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.095185][T11429] Buffer I/O error on dev nbd0, logical block 3, async page read [ 350.103241][T11429] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.112402][T11429] Buffer I/O error on dev nbd0, logical block 0, async page read [ 350.120404][T11429] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 350.130407][T11429] Buffer I/O error on dev nbd0, logical block 1, async page read [ 350.141588][T11429] ldm_validate_partition_table(): Disk read failed. [ 350.158658][T11429] Dev nbd0: unable to read RDB block 0 [ 350.168705][T11429] nbd0: unable to read partition table [ 350.192550][T11429] ldm_validate_partition_table(): Disk read failed. [ 350.202416][T11429] Dev nbd0: unable to read RDB block 0 [ 350.212647][T11429] nbd0: unable to read partition table [ 350.285056][T13927] netlink: 'syz.1.2144': attribute type 18 has an invalid length. [ 350.315717][T13927] netlink: 'syz.1.2144': attribute type 18 has an invalid length. [ 350.355458][T13932] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 350.398426][T13932] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 350.468831][T13938] __nla_validate_parse: 9 callbacks suppressed [ 350.468855][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 350.519367][T13941] ip6tnl0: entered promiscuous mode [ 350.558371][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2150'. [ 350.704283][T13958] veth0_macvtap: Caught tx_queue_len zero misconfig [ 350.728872][ T4949] block nbd1: Receive control failed (result -32) [ 350.839281][T13965] netlink: 'syz.4.2156': attribute type 20 has an invalid length. [ 350.874470][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 350.943096][T13968] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 351.052748][T13973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2159'. [ 351.078132][T13977] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2160'. [ 351.081048][ T6713] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.112834][T13973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 351.144538][ T6713] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.167125][ T6713] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.198314][ T6713] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.839961][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 352.050092][T14029] blkio.reset_stats is deprecated [ 352.079630][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 352.100905][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 352.286027][T14026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 352.326959][T14026] bridge0: port 1(bond4) entered blocking state [ 352.329155][T14041] netlink: 'syz.1.2171': attribute type 2 has an invalid length. [ 352.351352][T14026] bridge0: port 1(bond4) entered disabled state [ 352.361846][T14026] bond4: entered allmulticast mode [ 352.403144][T14025] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.415406][T14025] bridge0: port 2(bond5) entered blocking state [ 352.421881][T14025] bridge0: port 2(bond5) entered disabled state [ 352.430534][T14025] bond5: entered allmulticast mode [ 352.449113][T14025] bond5: entered promiscuous mode [ 352.465386][T14025] bond4: entered promiscuous mode [ 352.477397][T14038] syz_tun: entered promiscuous mode [ 352.486373][T14038] syz_tun: entered allmulticast mode [ 352.891972][T14068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2182'. [ 353.157836][T14080] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 353.441873][T14098] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.337283][T14090] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 356.357608][T14104] netlink: 'syz.4.2193': attribute type 11 has an invalid length. [ 356.366683][T14104] __nla_validate_parse: 3 callbacks suppressed [ 356.366702][T14104] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2193'. [ 356.596208][T14127] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2200'. [ 356.629344][T14127] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2200'. [ 356.653656][T14126] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2200'. [ 356.672087][T14130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2202'. [ 356.694827][T14127] netlink: 'syz.4.2200': attribute type 5 has an invalid length. [ 356.711715][T14125] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2201'. [ 356.721481][T14127] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2200'. [ 356.757222][T14125] netlink: 'syz.1.2201': attribute type 2 has an invalid length. [ 356.800156][T14130] hsr_slave_1 (unregistering): left promiscuous mode [ 356.810733][T14138] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2203'. [ 357.033077][T14145] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 357.050752][T14145] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 357.059991][T14145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.112914][T14142] bond0: entered promiscuous mode [ 357.130159][T14142] bond_slave_0: entered promiscuous mode [ 357.150486][T14142] bond_slave_1: entered promiscuous mode [ 357.172550][T14142] team0: entered promiscuous mode [ 357.196323][T14142] team_slave_1: entered promiscuous mode [ 357.215264][T14148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.253590][T14142] batadv0: entered promiscuous mode [ 357.296365][T14142] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 357.339585][T14142] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 357.410292][T14142] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 357.445637][T14142] bond0: left promiscuous mode [ 357.458259][T14142] bond_slave_0: left promiscuous mode [ 357.472705][T14142] bond_slave_1: left promiscuous mode [ 357.479677][T14142] team0: left promiscuous mode [ 357.486748][T14142] team_slave_1: left promiscuous mode [ 357.510053][T14142] batadv0: left promiscuous mode [ 357.862958][T14135] infiniband syz0: set active [ 357.879239][T14135] infiniband syz0: added bridge_slave_1 [ 357.910168][T14135] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 357.932859][T14135] infiniband syz0: Couldn't open port 1 [ 357.965771][T14135] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 357.999019][T14135] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 358.017252][T14135] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 358.109987][T14135] RDS/IB: syz0: added [ 358.121113][T14192] Cannot find add_set index 65532 as target [ 358.127631][T14135] smc: adding ib device syz0 with port count 1 [ 358.135219][T14135] smc: ib device syz0 port 1 has no pnetid [ 358.340793][T14195] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2221'. [ 358.355255][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 358.849539][T14217] netlink: 'syz.3.2230': attribute type 2 has an invalid length. [ 359.277499][T14235] tipc: Started in network mode [ 359.282543][T14235] tipc: Node identity ac14142f, cluster identity 4711 [ 359.301269][T14235] tipc: New replicast peer: 0.0.0.0 [ 359.319336][T14235] tipc: Enabled bearer , priority 10 [ 359.335130][T14239] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 359.523218][ T7856] hid-generic 0005:0C45:1011.0002: item fetching failed at offset 0/1 [ 359.537562][ T7856] hid-generic 0005:0C45:1011.0002: probe with driver hid-generic failed with error -22 [ 359.550591][T14239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 359.763373][T14260] xt_limit: Overflow, try lower: 271964/0 [ 360.396323][T14296] sctp: [Deprecated]: syz.2.2255 (pid 14296) Use of int in max_burst socket option. [ 360.396323][T14296] Use struct sctp_assoc_value instead [ 360.434589][ T7856] tipc: Node number set to 2886997039 [ 360.570875][T14303] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.591110][T14303] xt_TPROXY: Can be used only with -p tcp or -p udp [ 360.609839][T14304] netlink: 'syz.3.2257': attribute type 3 has an invalid length. [ 361.148306][T14332] netlink: 'syz.4.2265': attribute type 4 has an invalid length. [ 361.670749][T14354] __nla_validate_parse: 7 callbacks suppressed [ 361.670769][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 361.830928][T14362] batadv_slave_0: Caught tx_queue_len zero misconfig [ 362.117807][T14383] netlink: zone id is out of range [ 362.132608][T14383] netlink: zone id is out of range [ 362.144445][T14383] netlink: zone id is out of range [ 362.156976][T14383] netlink: zone id is out of range [ 362.169413][T14383] netlink: zone id is out of range [ 362.200732][T14383] netlink: zone id is out of range [ 362.204557][T14388] bond0: left promiscuous mode [ 362.208960][ T6716] bond0: (slave bond_slave_0): interface is now down [ 362.217361][T14388] bond_slave_0: left promiscuous mode [ 362.227640][T14388] bond_slave_1: left promiscuous mode [ 362.240752][T14383] netlink: zone id is out of range [ 362.242247][T14388] bond0: left allmulticast mode [ 362.251427][T14388] bond_slave_0: left allmulticast mode [ 362.257297][ T6716] bond0: (slave bond_slave_1): interface is now down [ 362.265902][T14388] bond_slave_1: left allmulticast mode [ 362.271524][T14383] netlink: zone id is out of range [ 362.293238][T14383] netlink: zone id is out of range [ 362.308680][T14383] netlink: zone id is out of range [ 362.442206][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 362.670532][T14410] netlink: 'syz.0.2289': attribute type 4 has an invalid length. [ 362.717885][T14415] netlink: 'syz.0.2289': attribute type 4 has an invalid length. [ 363.067373][T14428] netlink: 'syz.2.2295': attribute type 2 has an invalid length. [ 363.084397][T14428] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2295'. [ 363.115041][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2294'. [ 363.318619][T14441] veth1_to_bond: entered allmulticast mode [ 363.348675][T14441] veth1_to_bond: left allmulticast mode [ 363.392085][T14445] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 363.412239][T14399] tipc: Enabling of bearer rejected, failed to enable media [ 363.530716][T14449] xt_hashlimit: size too large, truncated to 1048576 [ 363.548148][T14451] sock: sock_timestamping_bind_phc: sock not bind to device [ 363.628687][T14451] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2302'. [ 364.095289][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 364.132373][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 364.317351][T14483] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2314'. [ 364.769334][ T6545] bond0: (slave bond_slave_0): interface is now down [ 364.824731][ T6545] bond0: (slave bond_slave_1): interface is now down [ 364.879964][T14519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2320'. [ 364.931003][T14523] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2321'. [ 365.171205][T14531] 8021q: VLANs not supported on vcan0 [ 365.928171][T14573] xt_NFQUEUE: number of total queues is 0 [ 366.055840][T14581] syzkaller1: entered promiscuous mode [ 366.070680][T14581] syzkaller1: entered allmulticast mode [ 367.152721][T14640] __nla_validate_parse: 6 callbacks suppressed [ 367.152742][T14640] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2353'. [ 367.331156][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 367.360163][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2357'. [ 367.379697][T14654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2357'. [ 367.405000][ T6714] bond0: (slave bond_slave_0): interface is now down [ 367.411962][ T6714] bond0: (slave bond_slave_1): interface is now down [ 367.441946][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 367.465873][T14651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 367.492073][T14651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2356'. [ 367.527766][T14658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'. [ 367.694951][T14666] netlink: 'syz.2.2362': attribute type 1 has an invalid length. [ 367.799743][T14670] bridge0: port 4(ipvlan0) entered blocking state [ 367.808101][T14670] bridge0: port 4(ipvlan0) entered disabled state [ 367.817882][T14670] ipvlan0: entered allmulticast mode [ 367.823505][T14670] bridge0: entered allmulticast mode [ 367.834474][T14670] ipvlan0: left allmulticast mode [ 367.839588][T14670] bridge0: left allmulticast mode [ 368.140172][T14681] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2368'. [ 368.217055][T14686] netlink: 'syz.3.2371': attribute type 58 has an invalid length. [ 368.225371][T14686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2371'. [ 368.247811][T14686] netem: change failed [ 368.256826][T14686] netlink: 'syz.3.2371': attribute type 10 has an invalid length. [ 368.282772][T14686] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 368.397317][T14690] syzkaller0: entered promiscuous mode [ 368.403019][T14690] syzkaller0: entered allmulticast mode [ 368.422649][T14690] geneve1: entered promiscuous mode [ 368.642217][T14698] netlink: 'syz.1.2375': attribute type 16 has an invalid length. [ 368.670007][T14698] netlink: 'syz.1.2375': attribute type 3 has an invalid length. [ 368.964894][T14711] netlink: 'syz.2.2379': attribute type 12 has an invalid length. [ 369.027179][T14711] batadv_slave_1: Caught tx_queue_len zero misconfig [ 369.108682][ T6716] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.140470][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.160541][ T6716] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.382342][T14742] net_ratelimit: 45 callbacks suppressed [ 369.382366][T14742] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 369.438543][T14746] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 369.438543][T14746] Please contact the netfilter-devel mailing list or update your nftables rules. [ 369.658655][T14753] IPVS: stopping backup sync thread 9408 ... [ 369.764115][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.885564][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 369.964819][ T6713] bond0: (slave bond_slave_0): interface is now down [ 369.989701][ T6713] bond0: (slave bond_slave_1): interface is now down [ 370.035452][ T6713] bond0: now running without any active interface! [ 370.386452][T14797] sctp: [Deprecated]: syz.1.2407 (pid 14797) Use of int in max_burst socket option. [ 370.386452][T14797] Use struct sctp_assoc_value instead [ 371.122897][T14845] openvswitch: netlink: IP tunnel dst address not specified [ 371.317897][T14857] syz.3.2425 (14857) used obsolete PPPIOCDETACH ioctl [ 371.443717][T14867] netlink: 'syz.4.2426': attribute type 9 has an invalid length. [ 371.636300][T14875] siw: device registration error -23 [ 371.812789][T14884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.422095][T14908] netlink: 'syz.2.2443': attribute type 1 has an invalid length. [ 372.479096][T14908] __nla_validate_parse: 11 callbacks suppressed [ 372.479120][T14908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2443'. [ 372.604644][T14915] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3951214794/3951214796 [ 372.621518][T14914] bridge_slave_0: left promiscuous mode [ 372.627506][T14914] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.657525][T14915] tipc: Failed to remove unknown binding: 66,1,1/2886997039:3951214794/3951214796 [ 372.695364][T14914] veth1_to_bridge: left allmulticast mode [ 372.727883][T14923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 372.759498][T14914] veth1_to_bridge: left promiscuous mode [ 372.771629][T14914] bridge0: port 3(veth1_to_bridge) entered disabled state [ 372.822919][T14914] bridge_slave_1: left promiscuous mode [ 372.834320][T14914] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.891140][T14914] bond0: (slave bond_slave_0): Releasing backup interface [ 372.915790][T14914] bond0: (slave bond_slave_1): Releasing backup interface [ 372.928495][T14914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.940184][T14914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.949463][T14914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 372.967248][T14926] tipc: Enabling of bearer rejected, failed to enable media [ 373.164122][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.430091][T14949] xt_socket: unknown flags 0x50 [ 373.599021][T14956] vlan2: entered promiscuous mode [ 373.609976][T14956] gretap0: entered promiscuous mode [ 373.622835][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 373.657970][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 373.679633][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'. [ 373.727479][T14965] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 373.808624][ T6714] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.821793][ T6714] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.856075][ T6714] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.900302][ T6714] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.137549][T14983] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 374.161937][T14983] x_tables: duplicate underflow at hook 3 [ 374.379748][T14988] syzkaller0: entered promiscuous mode [ 374.390965][T14988] syzkaller0: entered allmulticast mode [ 374.447141][T14995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 374.479441][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 374.676876][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2469'. [ 374.884941][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2470'. [ 374.901114][T15008] bridge_slave_1: left allmulticast mode [ 374.910329][T15008] bridge_slave_1: left promiscuous mode [ 374.917115][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.929893][T15008] ¾x9’: left allmulticast mode [ 374.936207][T15008] ¾x9’: left promiscuous mode [ 374.941476][T15008] bridge0: port 1(1¾x9’) entered disabled state [ 375.116294][T15017] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 375.274602][T15025] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.2476'. [ 375.297046][T15017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 375.864290][ T6717] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.886249][ T6717] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.905669][ T6717] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.929552][ T6717] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.956854][ T6717] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.989771][ T6717] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.027742][ T6717] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.073310][ T6717] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.408240][T15067] netlink: 'syz.4.2492': attribute type 29 has an invalid length. [ 376.431451][T15067] netlink: 'syz.4.2492': attribute type 29 has an invalid length. [ 377.169261][T15111] tipc: Enabled bearer , priority 0 [ 377.282424][T15111] tipc: Resetting bearer [ 377.356032][T15121] xt_ecn: cannot match TCP bits for non-tcp packets [ 377.495384][T15128] __nla_validate_parse: 10 callbacks suppressed [ 377.495406][T15128] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2509'. [ 377.535090][T15128] 0·: renamed from hsr0 [ 377.601309][T15128] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.641909][T15128] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.674383][T15128] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 378.320373][T15173] syzkaller0: entered promiscuous mode [ 378.335825][T15173] syzkaller0: entered allmulticast mode [ 378.573611][T15190] netem: change failed [ 378.688195][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.722158][T15194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.774977][T15194] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2526'. [ 378.848177][T15204] netlink: 'syz.4.2531': attribute type 2 has an invalid length. [ 378.990888][T15210] syzkaller0: entered promiscuous mode [ 378.996636][T15210] syzkaller0: entered allmulticast mode [ 379.271641][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'. [ 379.516095][T15243] openvswitch: netlink: IPv4 tun info is not correct [ 379.589245][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 379.614524][T15249] netlink: 'syz.0.2543': attribute type 5 has an invalid length. [ 379.847781][T15260] netlink: 'syz.2.2546': attribute type 1 has an invalid length. [ 379.868882][T15260] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2546'. [ 379.880250][T15260] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2546'. [ 379.891169][T15260] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2546'. [ 380.275498][T15282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2552'. [ 380.293981][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'. [ 380.340250][T15282] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2552'. [ 380.379475][T15293] netlink: 'syz.2.2551': attribute type 10 has an invalid length. [ 380.395479][T15282] netlink: 'syz.3.2552': attribute type 3 has an invalid length. [ 380.427405][T15282] netlink: 'syz.3.2552': attribute type 2 has an invalid length. [ 380.593100][T15303] openvswitch: netlink: IPv4 tun info is not correct [ 381.225469][T15343] tipc: Failed to remove unknown binding: 66,0,0/4:606272388/606272389 [ 381.244006][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 381.308464][T15343] tipc: Failed to remove unknown binding: 66,0,0/4:606272388/606272389 [ 382.111504][T15391] netlink: 'syz.3.2577': attribute type 1 has an invalid length. [ 382.132851][T15389] netlink: 'syz.3.2577': attribute type 1 has an invalid length. [ 382.639950][T15420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.894937][T15431] netlink: 'syz.1.2584': attribute type 20 has an invalid length. [ 382.921169][T15431] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.017000][T15434] __nla_validate_parse: 10 callbacks suppressed [ 383.017021][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2587'. [ 383.083464][T15434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.305594][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'. [ 383.324428][T15455] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 383.342578][T15457] netlink: 'syz.4.2592': attribute type 3 has an invalid length. [ 383.394918][T15459] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 383.407159][T15462] ieee802154 phy0 wpan0: encryption failed: -126 [ 383.411277][T15464] netlink: 'syz.1.2595': attribute type 58 has an invalid length. [ 383.422518][T15465] netlink: 'syz.0.2593': attribute type 1 has an invalid length. [ 383.432038][T15464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2595'. [ 383.785306][T15483] team0: Port device vlan0 removed [ 383.920565][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 384.025109][ T5877] hid-generic 0005:0007:0007.0003: item fetching failed at offset 0/1 [ 384.055629][ T5877] hid-generic 0005:0007:0007.0003: probe with driver hid-generic failed with error -22 [ 384.135313][ T5877] hid-generic 0005:0007:0007.0004: item fetching failed at offset 0/1 [ 384.145203][ T5877] hid-generic 0005:0007:0007.0004: probe with driver hid-generic failed with error -22 [ 384.201404][ T7859] hid-generic 0005:0007:0007.0005: item fetching failed at offset 0/1 [ 384.248575][ T7859] hid-generic 0005:0007:0007.0005: probe with driver hid-generic failed with error -22 [ 384.286651][T15513] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 384.298184][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 384.346703][ T7859] hid-generic 0005:0007:0007.0006: item fetching failed at offset 0/1 [ 384.368802][ T7859] hid-generic 0005:0007:0007.0006: probe with driver hid-generic failed with error -22 [ 384.409438][T15522] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2610'. [ 384.592138][T15532] IPVS: set_ctl: invalid protocol: 3119 0.0.0.0:0 [ 384.642334][ T6714] tipc: Subscription rejected, illegal request [ 384.659532][T15538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2612'. [ 384.918188][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 384.946969][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2619'. [ 385.080471][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 385.107151][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 385.118967][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 385.173719][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'. [ 385.260282][T15573] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 385.427893][T15578] validate_nla: 2 callbacks suppressed [ 385.427914][T15578] netlink: 'syz.2.2629': attribute type 4 has an invalid length. [ 385.777760][T15593] xt_HMARK: spi-set and port-set can't be combined [ 385.802566][T15561] infiniband syz2: set down [ 385.808055][ T5877] ipvlan0 speed is unknown, defaulting to 1000 [ 385.823069][T15561] infiniband syz2: added ipvlan0 [ 385.915736][T15561] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 385.954797][T15561] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 385.972770][T15561] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 386.059822][T15561] RDS/IB: syz2: added [ 386.082591][T15561] smc: adding ib device syz2 with port count 1 [ 386.110730][T15561] smc: ib device syz2 port 1 has no pnetid [ 386.131151][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 386.156520][ T5877] ipvlan0 speed is unknown, defaulting to 1000 [ 386.205170][T15612] veth0_macvtap: left promiscuous mode [ 386.710553][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 387.087496][T15644] netlink: 'syz.3.2649': attribute type 11 has an invalid length. [ 387.107345][T15644] netlink: 'syz.3.2649': attribute type 5 has an invalid length. [ 387.410808][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 387.598522][T15669] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 387.610685][T15669] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 387.781082][T15680] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 387.849000][T15680] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 387.849394][T15682] ieee802154 phy0 wpan0: encryption failed: -126 [ 388.070560][T15689] netlink: 'syz.0.2663': attribute type 10 has an invalid length. [ 388.112547][T15689] __nla_validate_parse: 11 callbacks suppressed [ 388.112566][T15689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2663'. [ 388.138993][T15685] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 388.183422][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 388.448568][T15701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2666'. [ 388.525287][T15706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2668'. [ 388.541736][T15701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2666'. [ 388.842885][T15717] syzkaller0: entered allmulticast mode [ 388.851085][T15717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.727674][T15756] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2681'. [ 391.375116][T15561] ipvlan0 speed is unknown, defaulting to 1000 [ 392.251151][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 392.292036][T15800] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 392.665920][T15820] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 392.811487][T15828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.341520][T15851] netlink: 'syz.4.2710': attribute type 7 has an invalid length. [ 393.546044][T15836] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2704'. [ 393.581838][T15836] openvswitch: netlink: Flow key attr not present in new flow. [ 393.649885][T15862] : renamed from bond0 [ 393.899551][T15872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 393.933237][T15871] syzkaller0: entered promiscuous mode [ 393.954518][T15871] syzkaller0: entered allmulticast mode [ 393.979721][T15872] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2715'. [ 394.668137][T15904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2720'. [ 394.702690][T15904] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2720'. [ 394.793619][T15904] gretap4: entered promiscuous mode [ 394.815846][T15904] gretap4: entered allmulticast mode [ 395.273422][T15936] netlink: 'syz.0.2728': attribute type 1 has an invalid length. [ 395.305217][T15936] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2728'. [ 395.430524][T15942] ip6gretap1: entered allmulticast mode [ 395.513426][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 395.570776][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2733'. [ 395.596914][T15951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2734'. [ 395.608194][T15947] netlink: 'syz.4.2733': attribute type 18 has an invalid length. [ 395.623471][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 396.052239][T15982] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 396.071827][T15982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.528961][T16006] netlink: 'syz.1.2753': attribute type 1 has an invalid length. [ 396.636763][T16006] 8021q: adding VLAN 0 to HW filter on device bond6 [ 396.690949][T16008] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 396.746634][T16006] macvlan0: entered promiscuous mode [ 396.752177][T16006] macvlan0: entered allmulticast mode [ 396.759346][T16006] bond6: entered promiscuous mode [ 396.766200][T16006] veth0_to_bond: entered promiscuous mode [ 396.788319][T16006] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 396.802574][T16006] bond6: left promiscuous mode [ 396.821911][T16006] veth0_to_bond: left promiscuous mode [ 397.050802][T16030] : entered promiscuous mode [ 397.100702][T16036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.191824][T16043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.243981][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 397.510097][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.860763][T16075] bond0: option min_links: invalid value (18446744073709551614) [ 397.896934][T16075] bond0: option min_links: allowed values 0 - 2147483647 [ 397.933537][T16075] bond0 (unregistering): Released all slaves [ 398.011479][T16082] bond7: entered allmulticast mode [ 398.050879][T16082] vti0: entered allmulticast mode [ 398.242149][T16099] netem: change failed [ 398.272989][T16101] veth1_macvtap: entered promiscuous mode [ 398.450762][T16111] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 398.468327][T16111] bond6 (unregistering): Released all slaves [ 398.708646][T16123] __nla_validate_parse: 8 callbacks suppressed [ 398.708667][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 398.879120][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 398.956444][T16118] netlink: 'syz.2.2784': attribute type 1 has an invalid length. [ 398.999623][T16133] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 399.137604][T16117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.278769][T16141] vlan0: entered promiscuous mode [ 399.293939][T16141] bridge0: entered promiscuous mode [ 399.366561][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.379892][ T5636] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.388257][ T5636] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.399130][ T5636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.408770][ T5636] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.601166][T16149] tipc: Enabled bearer , priority 0 [ 399.609460][T16149] syzkaller0: entered promiscuous mode [ 399.616079][T16149] syzkaller0: entered allmulticast mode [ 399.625173][T16149] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 399.645535][T16152] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2791'. [ 399.718260][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.770396][T16152] bridge_slave_0 (unregistering): left allmulticast mode [ 399.779614][T16158] netlink: 'syz.4.2792': attribute type 8 has an invalid length. [ 399.793086][T16152] bridge_slave_0 (unregistering): left promiscuous mode [ 399.800220][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2792'. [ 399.824036][T16152] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.898933][T16158] veth1_to_team: entered promiscuous mode [ 399.912716][T16158] veth1_to_team: left promiscuous mode [ 399.956441][T16155] tipc: Resetting bearer [ 399.970895][T16148] tipc: Resetting bearer [ 400.048611][T16148] tipc: Disabling bearer [ 400.119030][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 400.299534][T16177] netlink: 'syz.2.2797': attribute type 5 has an invalid length. [ 400.301417][T16181] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2799'. [ 400.319283][T16180] netlink: 'syz.1.2798': attribute type 1 has an invalid length. [ 400.741539][T16201] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 401.483983][ T4949] Bluetooth: hci5: command tx timeout [ 401.549482][ T29] audit: type=1800 audit(1780690747.919:9): pid=16230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2813" name="memory.events" dev="tmpfs" ino=2747 res=0 errno=0 [ 401.606542][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2813'. [ 401.787882][T16144] ipvlan0 speed is unknown, defaulting to 1000 [ 401.940859][T16242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 402.199602][T16251] No such timeout policy "syz1" [ 402.279618][T16253] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2819'. [ 402.767637][T16278] x_tables: duplicate underflow at hook 2 [ 402.974714][T16292] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2830'. [ 403.565988][ T4949] Bluetooth: hci5: command tx timeout [ 403.674326][T16315] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 403.698831][T16315] bond6 (unregistering): Released all slaves [ 403.870733][T16318] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 403.906625][T16318] bond6 (unregistering): Released all slaves [ 404.163689][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.171563][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.180646][T16144] bridge_slave_0: entered allmulticast mode [ 404.188766][T16144] bridge_slave_0: entered promiscuous mode [ 404.199164][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.207854][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.216488][T16144] bridge_slave_1: entered allmulticast mode [ 404.227746][T16144] bridge_slave_1: entered promiscuous mode [ 404.302620][T16144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.341869][T16334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.375031][T16144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.538328][T16144] team0: Port device team_slave_0 added [ 404.557035][T16144] team0: Port device team_slave_1 added [ 404.670781][T16144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.687111][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.741251][T16144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.812088][T16144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.834605][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.962840][T16144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.187046][T16144] hsr_slave_0: entered promiscuous mode [ 405.203280][T16144] hsr_slave_1: entered promiscuous mode [ 405.240511][T16364] v: renamed from ip6_vti0 (while UP) [ 405.283278][T16375] __nla_validate_parse: 1 callbacks suppressed [ 405.283300][T16375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2851'. [ 405.399026][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 405.653951][ T4949] Bluetooth: hci5: command tx timeout [ 405.971879][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 406.007588][T16144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.019997][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 406.030084][T16144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.247146][T16144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.325895][T16144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.475004][T16423] bridge8: entered promiscuous mode [ 406.504893][T16423] bridge8: entered allmulticast mode [ 406.561924][T16432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2869'. [ 406.597127][T16144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.613313][T16144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.698442][T16440] syzkaller1: entered promiscuous mode [ 406.713659][T16429] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2868'. [ 406.727189][T16440] syzkaller1: entered allmulticast mode [ 406.786496][T16144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.821226][T16144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 406.951269][T16447] dummy0: mtu less than device minimum [ 407.055891][T16451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.501144][T16144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 407.617598][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2880'. [ 407.655950][T16144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.666171][T16144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 407.724624][ T4949] Bluetooth: hci5: command tx timeout [ 407.767710][T16144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.797430][T16475] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 408.021333][T16475] bond7 (unregistering): Released all slaves [ 408.131497][T16144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 408.169395][T16144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.208016][T16144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 408.259395][T16144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 408.359093][T16496] syzkaller0: entered promiscuous mode [ 408.366062][T16496] syzkaller0: entered allmulticast mode [ 408.642111][T16144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.681449][T16507] netlink: 'syz.1.2886': attribute type 3 has an invalid length. [ 408.855179][T16144] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.882719][ T6716] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.889979][ T6716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.005339][T16528] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2890'. [ 409.046978][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.054242][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.410611][T16539] macvlan0: entered promiscuous mode [ 409.826680][T16562] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2902'. [ 410.496047][T16591] netlink: 'syz.0.2911': attribute type 13 has an invalid length. [ 410.505956][T16591] veth1_macvtap: left promiscuous mode [ 410.511590][T16591] macsec0: entered allmulticast mode [ 410.675121][T16598] 8021q: VLANs not supported on vcan0 [ 410.792259][T16144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.919736][T16144] veth0_vlan: entered promiscuous mode [ 410.968512][T16144] veth1_vlan: entered promiscuous mode [ 411.211407][T16144] veth0_macvtap: entered promiscuous mode [ 411.234882][T16144] veth1_macvtap: entered promiscuous mode [ 411.291248][T16615] netlink: 'syz.0.2914': attribute type 10 has an invalid length. [ 411.308665][T16144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.340598][T16615] macsec0: left allmulticast mode [ 411.353020][T16615] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 411.376571][T16144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.418295][ T6715] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.457772][ T6715] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.483761][ T6715] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.501422][ T6715] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.539280][T16622] netlink: 388 bytes leftover after parsing attributes in process `syz.2.2917'. [ 411.679197][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 413.658051][T16599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 413.833246][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.867990][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.950462][ T6712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.998573][ T6712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.232605][T16653] "syz.1.2927" (16653) uses obsolete ecb(arc4) skcipher [ 414.489585][T16675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2927'. [ 414.558845][T16653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2927'. [ 414.608400][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 414.641616][T16653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2927'. [ 415.088289][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2935'. [ 415.306755][T16701] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 415.324420][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2935'. [ 415.399009][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.414512][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.426354][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.434602][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.442393][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.506104][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 416.158143][T16735] SET target dimension over the limit! [ 416.170746][T16733] "syz.1.2942" (16733) uses obsolete ecb(arc4) skcipher [ 416.402908][T16743] team0: Mode changed to "roundrobin" [ 416.521813][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2946'. [ 416.568457][T16750] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 416.582245][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2948'. [ 416.847193][T16760] xt_policy: too many policy elements [ 416.855636][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2949'. [ 417.042316][T16774] syzkaller1: left promiscuous mode [ 417.089300][T16774] syzkaller1: left allmulticast mode [ 417.121467][T16779] netlink: 'syz.4.2955': attribute type 9 has an invalid length. [ 417.138941][T16779] netlink: 'syz.4.2955': attribute type 6 has an invalid length. [ 417.305680][T16781] unsupported nlmsg_type 40 [ 417.484715][ T5636] Bluetooth: hci1: command tx timeout [ 417.610653][ T6716] bond3: left allmulticast mode [ 417.638594][ T6716] bond3: left promiscuous mode [ 417.667425][ T6716] bridge0: port 1(bond3) entered disabled state [ 418.021564][T16790] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2959'. [ 418.268116][T16811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2965'. [ 418.432188][T16819] x_tables: unsorted entry at hook 2 [ 418.581315][T16826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2968'. [ 418.672892][ T6716] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 419.190084][ T6716]  (unregistering): Released all slaves [ 419.201821][ T6716] bond1 (unregistering): Released all slaves [ 419.219313][ T6716] bond2 (unregistering): Released all slaves [ 419.246283][ T6716] bond3 (unregistering): Released all slaves [ 419.265211][ T6716] bond4 (unregistering): Released all slaves [ 419.292597][ T6716] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 419.304272][ T6716] bond5 (unregistering): (slave veth7): Releasing active interface [ 419.313276][ T6716] bond5 (unregistering): Released all slaves [ 419.332154][ T6716] bond6 (unregistering): Released all slaves [ 419.348444][T16705] ipvlan0 speed is unknown, defaulting to 1000 [ 419.512865][ T6716] tipc: Left network mode [ 419.566179][ T5636] Bluetooth: hci1: command tx timeout [ 419.782733][T16837] xfrm1: entered allmulticast mode [ 419.823283][T16840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.186115][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2974'. [ 420.572439][T16862] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 420.597696][T16869] netlink: 'syz.3.2977': attribute type 21 has an invalid length. [ 421.074458][T16876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 421.118583][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 421.481196][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.619324][T16907] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 421.649200][ T5636] Bluetooth: hci1: command tx timeout [ 421.700751][T16907] bond6: entered promiscuous mode [ 421.707773][T16907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.905793][T16907] bond6: (slave bridge8): making interface the new active one [ 421.914373][T16907] bridge8: entered promiscuous mode [ 421.928340][T16907] bridge8: left promiscuous mode [ 421.930853][T16920] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2986'. [ 422.530385][T16930] syzkaller1: entered promiscuous mode [ 422.554829][T16930] syzkaller1: entered allmulticast mode [ 422.796410][T16958] ieee802154 phy0 wpan0: encryption failed: -126 [ 423.187890][ T6716] hsr_slave_0: left promiscuous mode [ 423.725051][ T4949] Bluetooth: hci1: command tx timeout [ 423.820117][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.828423][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.836446][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.845253][T16705] bridge_slave_0: entered allmulticast mode [ 423.853447][T16705] bridge_slave_0: entered promiscuous mode [ 423.868444][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.876862][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.886381][T16705] bridge_slave_1: entered allmulticast mode [ 423.895008][T16705] bridge_slave_1: entered promiscuous mode [ 423.944798][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.962041][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.035128][T16705] team0: Port device team_slave_0 added [ 424.046357][T16705] team0: Port device team_slave_1 added [ 424.113109][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.129201][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.159687][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.175896][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.182980][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.209980][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.276552][T16705] hsr_slave_0: entered promiscuous mode [ 424.283148][T16705] hsr_slave_1: entered promiscuous mode [ 424.296616][T16705] debugfs: 'hsr0' already exists in 'hsr' [ 424.302396][T16705] Cannot create hsr debugfs directory [ 424.315893][ T6716] IPVS: stop unused estimator thread 0... [ 424.889286][T16919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.924992][T16705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.029164][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.062178][T16705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.122306][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.175606][T16705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 425.229135][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.262870][T16705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 425.309170][T16705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.324212][ T5636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 425.420503][T17025] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 425.526910][T17029] netlink: 'syz.3.3005': attribute type 12 has an invalid length. [ 425.548150][T17031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 425.574780][T17029] netlink: 'syz.3.3005': attribute type 29 has an invalid length. [ 425.602603][T17029] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3005'. [ 425.660973][T17038] syzkaller0: entered promiscuous mode [ 425.676548][T17038] syzkaller0: entered allmulticast mode [ 425.840273][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3009'. [ 426.272536][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.356679][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.408241][T17067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 426.438732][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.446054][ T6715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.533258][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.540531][ T6717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.297515][T17103] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3020'. [ 427.318198][T17052] ipvlan0 speed is unknown, defaulting to 1000 [ 427.337388][T17105] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3021'. [ 427.365308][T17105] 8021q: VLANs not supported on gre0 [ 427.721084][T17123] netlink: 'syz.3.3024': attribute type 4 has an invalid length. [ 427.855353][T17132] netlink: 'syz.1.3022': attribute type 1 has an invalid length. [ 428.228938][T17145] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3026'. [ 428.297230][T17149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3027'. [ 428.406559][T17152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 428.418543][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.453147][T17152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3028'. [ 428.511695][T17152] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3028'. [ 428.829437][T16705] veth0_vlan: entered promiscuous mode [ 428.873309][T16705] veth1_vlan: entered promiscuous mode [ 428.969866][T16705] veth0_macvtap: entered promiscuous mode [ 429.008479][T16705] veth1_macvtap: entered promiscuous mode [ 429.076968][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.137062][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.166794][ T6545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.190064][ T6545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.231100][ T6715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.258448][ T6715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.605354][T17190] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 429.679609][T17194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3038'. [ 429.867670][T17202] xt_cluster: node mask cannot exceed total number of nodes [ 429.877076][T17203] xt_cluster: node mask cannot exceed total number of nodes [ 429.884698][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 429.943168][ T6715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.962522][ T6715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.306124][T17219] netlink: 10184 bytes leftover after parsing attributes in process `syz.1.3040'. [ 430.338344][T17219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3040'. [ 430.471285][ T6717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.480194][ T6717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.765909][T17236] syzkaller0: entered promiscuous mode [ 430.787116][T17236] syzkaller0: entered allmulticast mode [ 430.827874][T17236] tipc: New replicast peer: 255.255.255.255 [ 430.854677][T17236] tipc: Enabled bearer , priority 10 [ 430.982445][T17245] syzkaller0: entered promiscuous mode [ 430.997155][T17245] syzkaller0: entered allmulticast mode [ 431.692344][T17268] netlink: 'syz.1.3048': attribute type 4 has an invalid length. [ 431.871615][T17268] netlink: 'syz.1.3048': attribute type 4 has an invalid length. [ 432.253177][T17288] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 432.309117][T17289] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 432.372454][ T4949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.391105][T17288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.406651][ T4949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.415892][ T4949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.437680][ T4949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.440691][T17291] lo speed is unknown, defaulting to 1000 [ 432.465833][ T4949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.669509][T17291] lo speed is unknown, defaulting to 1000 [ 432.690256][T17291] lo speed is unknown, defaulting to 1000 [ 432.745679][T17291] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 432.796433][T17291] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 432.874144][T17291] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 432.984685][T17291] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 433.027084][ T5642] syz_tun (unregistering): left allmulticast mode [ 433.169317][T17291] lo speed is unknown, defaulting to 1000 [ 433.201896][T17291] lo speed is unknown, defaulting to 1000 [ 433.215288][T17291] lo speed is unknown, defaulting to 1000 [ 433.225179][T17291] lo speed is unknown, defaulting to 1000 [ 433.335717][ T6716] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.370724][T17328] openvswitch: netlink: IPv6 tunnel dst address is zero [ 433.391817][T17291] lo speed is unknown, defaulting to 1000 [ 433.414649][T17291] lo speed is unknown, defaulting to 1000 [ 433.598785][ T6716] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.639121][T17344] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3064'. [ 433.651900][T17344] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3064'. [ 433.675673][T17344] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3064'. [ 433.696589][T17344] netlink: 704 bytes leftover after parsing attributes in process `syz.1.3064'. [ 433.871279][ T6716] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.904577][T17348] netlink: 'syz.0.3065': attribute type 21 has an invalid length. [ 433.970418][T17348] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 434.020268][T17354] gre1: entered promiscuous mode [ 434.067806][T17354] gre1: entered allmulticast mode [ 434.115217][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3069'. [ 434.146705][T17364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3070'. [ 434.317250][ T6716] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.338495][T17367] netlink: 'syz.3.3071': attribute type 9 has an invalid length. [ 434.379822][T17296] ipvlan0 speed is unknown, defaulting to 1000 [ 434.442735][T17373] veth0: entered promiscuous mode [ 434.453732][T17373] netlink: 'syz.0.3073': attribute type 39 has an invalid length. [ 434.527405][ T5636] Bluetooth: hci4: command tx timeout [ 434.538613][T17373] syz_tun (unregistering): left allmulticast mode [ 434.856325][T17373] veth0: left promiscuous mode [ 434.897363][T17394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3079'. [ 434.973597][T17392] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 435.380073][T17415] xt_l2tp: invalid flags combination: 8 [ 435.464520][T17420] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3087'. [ 435.480070][T17420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3087'. [ 435.612373][ T6716] bond4 (unregistering): (slave gretap1): Releasing active interface [ 435.721377][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3090'. [ 435.779922][T17433] netlink: 'syz.1.3090': attribute type 7 has an invalid length. [ 436.013751][T17438] openvswitch: netlink: Invalid VLAN frame [ 436.040645][ T6716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.056163][ T6716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.067248][ T6716] bond0 (unregistering): (slave team0): Releasing backup interface [ 436.081704][ T6716] bond0 (unregistering): Released all slaves [ 436.094236][ T6716] bond1 (unregistering): Released all slaves [ 436.111078][ T6716] bond2 (unregistering): Released all slaves [ 436.129711][ T6716] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 436.150256][ T6716] bond3 (unregistering): Released all slaves [ 436.166746][ T6716] bond4 (unregistering): Released all slaves [ 436.182994][ T6716] bond5 (unregistering): Released all slaves [ 436.199246][T17296] lo speed is unknown, defaulting to 1000 [ 436.222202][T17421] tipc: Failed to obtain node identity [ 436.237696][T17421] tipc: Enabling of bearer rejected, failed to enable media [ 436.407660][T17441] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 436.489472][ T6716] : left promiscuous mode [ 436.604020][ T5636] Bluetooth: hci4: command tx timeout [ 436.658766][T17459] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 436.860197][ T6716] tipc: Disabling bearer [ 436.878341][ T6716] tipc: Left network mode [ 436.978873][T17468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.201026][T17484] x_tables: duplicate entry at hook 2 [ 438.364050][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 438.607702][T17544] geneve2: entered promiscuous mode [ 438.622884][T17544] geneve2: entered allmulticast mode [ 438.686047][ T5636] Bluetooth: hci4: command tx timeout [ 438.777585][T17551] veth0: entered promiscuous mode [ 438.915336][T17562] bond7: entered promiscuous mode [ 438.925267][T17562] bond7: entered allmulticast mode [ 439.028270][T17550] veth0: left promiscuous mode [ 439.049426][T17296] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.067739][T17296] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.086963][T17296] bridge_slave_0: entered allmulticast mode [ 439.103504][T17296] bridge_slave_0: entered promiscuous mode [ 439.128905][T17296] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.179790][T17296] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.226473][T17296] bridge_slave_1: entered allmulticast mode [ 439.307003][T17296] bridge_slave_1: entered promiscuous mode [ 439.651152][T17296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.739191][T17607] bridge_slave_0: left allmulticast mode [ 439.782733][T17607] bridge_slave_0: left promiscuous mode [ 439.834672][T17607] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.893487][T17607] bridge_slave_1: left allmulticast mode [ 439.937271][T17607] bridge_slave_1: left promiscuous mode [ 439.944215][T17607] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.986294][T17607] bond0: (slave bond_slave_0): Releasing backup interface [ 440.013513][T17607] bond0: (slave bond_slave_1): Releasing backup interface [ 440.070119][T17607] team0: Port device team_slave_0 removed [ 440.101656][T17607] team0: Port device team_slave_1 removed [ 440.121763][T17607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.139655][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.158606][T17607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.218698][T17607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.227002][T17607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.248765][T17607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.303281][T17296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.467157][T17628] __nla_validate_parse: 10 callbacks suppressed [ 440.467179][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 440.515260][T17593] syzkaller0: entered promiscuous mode [ 440.520813][T17593] syzkaller0: entered allmulticast mode [ 440.767974][ T5636] Bluetooth: hci4: command tx timeout [ 442.514941][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 442.558400][ T6716] hsr_slave_0: left promiscuous mode [ 442.568073][ T6716] hsr_slave_1: left promiscuous mode [ 442.782932][ T6716] team0 (unregistering): Port device vlan0 removed [ 442.900279][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 443.076359][T17624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.105402][T17624] team0: Port device batadv0 added [ 443.148313][T17296] team0: Port device team_slave_0 added [ 443.207959][T17296] team0: Port device team_slave_1 added [ 443.312100][T17296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.326333][T17296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.353452][T17296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.381997][T17296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.390896][T17296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.439449][T17296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.482196][T17650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'. [ 443.492441][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3129'. [ 443.510687][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 443.521470][T17653] netlink: 'syz.2.3130': attribute type 21 has an invalid length. [ 443.529853][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 443.578534][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3130'. [ 443.590278][ T6717] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.599108][T17653] netlink: 'syz.2.3130': attribute type 21 has an invalid length. [ 443.599131][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3130'. [ 443.617450][ T6716] IPVS: stop unused estimator thread 0... [ 443.655147][ T6717] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.672798][ T6717] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.695433][ T6717] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.796867][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3132'. [ 443.896352][T17658] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 443.978546][T17296] hsr_slave_0: entered promiscuous mode [ 443.999345][T17296] hsr_slave_1: entered promiscuous mode [ 444.026011][T17296] debugfs: 'hsr0' already exists in 'hsr' [ 444.041301][T17296] Cannot create hsr debugfs directory [ 444.389881][T17689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3135'. [ 444.489421][T17695] bridge_slave_0: left allmulticast mode [ 444.527856][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3138'. [ 444.537649][T17695] bridge_slave_0: left promiscuous mode [ 444.573721][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.642198][T17695] bridge_slave_1: left allmulticast mode [ 444.683055][T17695] bridge_slave_1: left promiscuous mode [ 444.709767][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.744453][T17695] bond0: (slave bond_slave_0): Releasing backup interface [ 444.775893][T17695] bond0: (slave bond_slave_1): Releasing backup interface [ 444.817847][T17695] team0: Port device team_slave_0 removed [ 444.872948][T17695] team0: Port device team_slave_1 removed [ 444.890924][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.909598][T17695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.944499][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.955121][T17695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.973023][T17695] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.084576][T17698] team0: Mode changed to "loadbalance" [ 445.091600][T17710] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 445.100167][T17704] vlan0: entered promiscuous mode [ 445.106712][T17710] netlink: 'syz.2.3140': attribute type 1 has an invalid length. [ 445.141214][T17704] team0: Port device vlan0 added [ 445.195425][ T5294] 8021q: adding VLAN 0 to HW filter on device eth3 [ 445.575183][T17749] __nla_validate_parse: 3 callbacks suppressed [ 445.575211][T17749] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3150'. [ 445.634220][T17749] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 446.099392][T17769] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3153'. [ 446.408643][T17776] bridge0: port 3(gretap0) entered blocking state [ 446.427110][T17776] bridge0: port 3(gretap0) entered disabled state [ 446.438904][T17776] gretap0: entered allmulticast mode [ 446.447660][T17776] gretap0: entered promiscuous mode [ 446.697484][T17786] lo: entered allmulticast mode [ 446.769902][T17793] netlink: 'syz.0.3157': attribute type 10 has an invalid length. [ 446.779978][T17792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3159'. [ 446.797908][T17793] tipc: Resetting bearer [ 446.913197][T17296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.952722][T17296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.986920][T17296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.029207][T17296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.051570][T17296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.067460][T17296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.086214][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 447.086978][T17296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.139085][T17296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.155482][T17806] tc_dump_action: action bad kind [ 447.234672][T17815] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3164'. [ 447.377930][T17820] No such timeout policy "syz1" [ 447.511367][T17296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.609511][T17296] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.616837][T17830] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 447.637629][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.644887][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.727605][T17830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.750982][T17833] vlan2: entered promiscuous mode [ 447.765496][T17833] bond2: entered promiscuous mode [ 447.772124][T17833] vlan2: entered allmulticast mode [ 447.777651][T17833] bond2: entered allmulticast mode [ 447.808021][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.815284][ T6717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.298186][T17861] ipt_ECN: cannot use operation on non-tcp rule [ 448.531475][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 448.622946][T17872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3176'. [ 448.701724][T17868] syzkaller0: entered promiscuous mode [ 448.720355][T17868] syzkaller0: entered allmulticast mode [ 448.901285][T17890] Bluetooth: MGMT ver 1.23 [ 448.923552][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'. [ 449.208727][T17901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3182'. [ 451.560112][T17934] veth1_to_bond: entered allmulticast mode [ 451.598473][T17934] veth1_to_bond: left allmulticast mode [ 451.949476][T17959] xt_bpf: check failed: parse error [ 452.240285][T17296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.469062][T17988] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 452.496017][T17988] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 452.570328][T18001] syzkaller0: entered promiscuous mode [ 452.577246][T18001] syzkaller0: entered allmulticast mode [ 452.978405][T17296] veth0_vlan: entered promiscuous mode [ 453.012096][T17296] veth1_vlan: entered promiscuous mode [ 453.110724][T17296] veth0_macvtap: entered promiscuous mode [ 453.196928][T17296] veth1_macvtap: entered promiscuous mode [ 453.225248][T17296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.242698][T17296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.268390][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.286675][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.305640][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.318027][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.065674][T17969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.092482][T17990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.210722][ T6542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.243558][ T6542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.352349][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.376399][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 455.387934][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.166153][T18089] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3211'. [ 456.222901][T18094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3212'. [ 456.436643][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 456.450605][ T5636] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 456.459183][ T5636] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 456.471138][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 456.479394][ T5636] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.654070][ T7856] IPVS: starting estimator thread 0... [ 456.766329][T18109] IPVS: using max 34 ests per chain, 81600 per kthread [ 457.194948][T18131] xfrm1: entered allmulticast mode [ 457.399398][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 457.466597][T18145] team0: Mode changed to "loadbalance" [ 457.535824][T18145] vlan0: entered promiscuous mode [ 457.571901][T18145] team0: Port device vlan0 added [ 458.094033][T18098] ipvlan0 speed is unknown, defaulting to 1000 [ 458.252165][T18175] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 458.451179][T18186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3237'. [ 458.526075][ T5636] Bluetooth: hci2: command tx timeout [ 458.550395][T18098] lo speed is unknown, defaulting to 1000 [ 458.571934][T18190] netlink: 'syz.4.3240': attribute type 2 has an invalid length. [ 458.621979][T18190] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3240'. [ 458.819869][T18201] netlink: 'syz.4.3244': attribute type 1 has an invalid length. [ 459.116566][T18215] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 459.117088][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3246'. [ 459.130283][T18215] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3247'. [ 459.143539][T18215] netlink: 'syz.3.3247': attribute type 1 has an invalid length. [ 459.152443][T18215] netlink: 'syz.3.3247': attribute type 8 has an invalid length. [ 459.161922][T18215] netlink: 582 bytes leftover after parsing attributes in process `syz.3.3247'. [ 459.172226][T18212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3246'. [ 459.292392][T18098] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.307676][T18098] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.335899][T18098] bridge_slave_0: entered allmulticast mode [ 459.368079][T18098] bridge_slave_0: entered promiscuous mode [ 459.387162][T18098] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.411409][T18098] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.422504][T18098] bridge_slave_1: entered allmulticast mode [ 459.431100][T18098] bridge_slave_1: entered promiscuous mode [ 459.563128][T18098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.594639][T18229] ip6tnl0: entered allmulticast mode [ 459.637646][T18098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.730132][T18098] team0: Port device team_slave_0 added [ 459.781377][T18098] team0: Port device team_slave_1 added [ 459.857027][T18098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.865408][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.895703][T18098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.910334][T18098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.920810][T18098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.988966][T18098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.187801][T18098] hsr_slave_0: entered promiscuous mode [ 460.194634][T18098] hsr_slave_1: entered promiscuous mode [ 460.201401][T18098] debugfs: 'hsr0' already exists in 'hsr' [ 460.208485][T18098] Cannot create hsr debugfs directory [ 460.221518][T18263] macvlan2: entered promiscuous mode [ 460.227458][T18263] macvlan2: entered allmulticast mode [ 460.233044][T18263] team0: Device macvlan2 is already an upper device of the team interface [ 460.538415][T18098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.571477][T18098] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.604979][ T5636] Bluetooth: hci2: command tx timeout [ 460.677949][T18098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.691544][T18098] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.772074][T18278] __nla_validate_parse: 3 callbacks suppressed [ 460.772093][T18278] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3265'. [ 460.775508][T18098] bond0: (slave netdevsim1): Releasing backup interface [ 460.801666][T18098] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 460.817389][T18098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.829288][T18098] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.984451][T18098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.995137][T18098] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.005880][ T6539] wlan1: Trigger new scan to find an IBSS to join [ 461.032738][T18286] syzkaller0: entered promiscuous mode [ 461.040202][T18286] syzkaller0: entered allmulticast mode [ 461.050142][T18286] 0: reclassify loop, rule prio 0, protocol 800 [ 462.571858][T18235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.582205][T18260] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3260'. [ 462.618145][T18098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 462.685677][ T5636] Bluetooth: hci2: command tx timeout [ 462.726425][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.735776][T18098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 462.767396][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.786737][T18098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 462.819432][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.851410][T18295] netlink: 'syz.2.3269': attribute type 27 has an invalid length. [ 462.863648][T18295] netlink: 'syz.2.3269': attribute type 4 has an invalid length. [ 462.873220][T18295] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3269'. [ 462.907653][T18289] bond3: (slave gre0): Device is not bonding slave [ 462.916434][T18289] bond3: option active_slave: invalid value (gre0) [ 462.928845][T18289] bond3 (unregistering): Released all slaves [ 462.980862][T18098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 463.003350][T18098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.178956][T18314] x_tables: unsorted underflow at hook 4 [ 463.197793][T18315] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3274'. [ 463.241096][T18314] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3273'. [ 463.308732][T18098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.345857][T18098] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.377147][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.384437][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.421860][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.429144][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.529893][T18330] bond0: Error: Cannot enslave bond to itself. [ 463.777754][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3281'. [ 463.798832][T18341] macsec1: entered promiscuous mode [ 463.807379][T18341] bridge0: entered promiscuous mode [ 463.812933][T18341] macsec1: entered allmulticast mode [ 463.820764][T18341] bridge0: entered allmulticast mode [ 463.828509][T18341] bridge0: port 3(macsec1) entered blocking state [ 463.836135][T18341] bridge0: port 3(macsec1) entered disabled state [ 463.851646][T18341] bridge0: left allmulticast mode [ 463.867201][ T5877] bridge0: left promiscuous mode [ 463.881232][T18339] pim6reg: entered allmulticast mode [ 463.965395][ T6712] wlan1: Trigger new scan to find an IBSS to join [ 464.156790][T18354] openvswitch: netlink: EtherType 0 is less than min 600 [ 464.235867][T18359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'. [ 464.583979][T18098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.668386][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3291'. [ 464.706569][T18383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3291'. [ 464.737813][T18383] netlink: 'syz.4.3291': attribute type 12 has an invalid length. [ 464.764105][ T5636] Bluetooth: hci2: command tx timeout [ 464.786212][T18383] netlink: 'syz.4.3291': attribute type 11 has an invalid length. [ 464.796119][T18098] veth0_vlan: entered promiscuous mode [ 464.817882][T18098] veth1_vlan: entered promiscuous mode [ 464.890867][T18098] veth0_macvtap: entered promiscuous mode [ 464.933147][T18098] veth1_macvtap: entered promiscuous mode [ 464.982557][T18098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.045504][T18401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.061283][T18401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.098699][T18098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.138921][ T6542] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.165772][ T6542] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.180518][ T6542] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.193363][ T6542] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.246871][T18406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3300'. [ 465.493244][ T6712] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.515674][ T6712] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.657638][ T6716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.681055][ T6716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.097589][T18452] __nla_validate_parse: 1 callbacks suppressed [ 466.097610][T18452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3314'. [ 466.393061][T18458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3315'. [ 466.428432][T18458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3315'. [ 466.506699][ T4949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 466.521467][ T4949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 466.530328][ T4949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 466.541543][ T4949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 466.555593][ T4949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.902437][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3318'. [ 466.938786][ T6712] wlan1: Trigger new scan to find an IBSS to join [ 467.027160][T18482] batadv_slave_1: entered promiscuous mode [ 467.172482][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 467.251555][T18482] macsec0: entered promiscuous mode [ 467.269062][T18496] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 467.310602][T18496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.322780][T18498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 467.333706][T18499] netlink: 'syz.3.3322': attribute type 3 has an invalid length. [ 467.361893][T18493] veth1_macvtap: left promiscuous mode [ 467.380826][T18493] macsec0 (unregistering): left promiscuous mode [ 467.400164][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 467.468637][T18482] batadv_slave_1: left promiscuous mode [ 467.493290][T18504] netlink: 'syz.3.3324': attribute type 8 has an invalid length. [ 467.526098][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 467.581720][T18506] "syz.2.3325" (18506) uses obsolete ecb(arc4) skcipher [ 467.737725][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 467.838908][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3326'. [ 467.892879][ T6542] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.959820][ T6717] wlan1: Creating new IBSS network, BSSID c6:ab:57:c5:27:fe [ 467.977209][ T6542] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.008743][ T6542] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.042758][ T6542] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.332087][ T6712] bridge_slave_1: left promiscuous mode [ 468.347886][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.410434][ T6712] veth3: left allmulticast mode [ 468.439380][ T6712] veth3: left promiscuous mode [ 468.461431][ T6712] bridge4: port 1(veth3) entered disabled state [ 468.604026][ T5636] Bluetooth: hci3: command tx timeout [ 469.149849][ T6712] bond1 (unregistering): (slave geneve2): Releasing active interface [ 469.682920][ T6712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.697183][ T6712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.710460][ T6712] bond0 (unregistering): (slave team0): Releasing backup interface [ 469.725372][ T6712] bond0 (unregistering): Released all slaves [ 469.737287][ T6712] bond1 (unregistering): Released all slaves [ 469.756608][ T6712] bond2 (unregistering): (slave veth5): Releasing active interface [ 469.766667][ T6712] bond2 (unregistering): Released all slaves [ 469.785894][ T6712] bond3 (unregistering): (slave lo): Releasing backup interface [ 469.800324][ T6712] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 469.813293][ T6712] bond3 (unregistering): Released all slaves [ 469.832908][ T6712] bond4 (unregistering): Released all slaves [ 469.850362][ T6712] bond5 (unregistering): Released all slaves [ 469.869417][ T6712] bond6 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 469.891084][ T6712] bond6 (unregistering): Released all slaves [ 469.907563][ T6712] bond7 (unregistering): Released all slaves [ 469.962443][T18547] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 470.103025][T18463] ipvlan0 speed is unknown, defaulting to 1000 [ 470.121260][ T5294] 8021q: adding VLAN 0 to HW filter on device eth1 [ 470.156826][T18577] xt_socket: unknown flags 0x8 [ 470.167989][ T7856] lo speed is unknown, defaulting to 1000 [ 470.182548][ T7876] syz1: Port: 1 Link DOWN [ 470.186265][ T7856] syś2: Port: 1 Link DOWN [ 470.410040][T18581] vcan1: entered promiscuous mode [ 470.432091][T18581] vcan1: entered allmulticast mode [ 470.555560][T18589] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 470.685099][ T5636] Bluetooth: hci3: command tx timeout [ 470.792961][T18463] lo speed is unknown, defaulting to 1000 [ 471.117817][ T6542] smbdirect: ib_dev[syz1] removed [ 471.641758][ T6712] tipc: Disabling bearer [ 471.668544][ T6712] tipc: Left network mode [ 471.682029][T18632] syzkaller0: entered promiscuous mode [ 471.705973][T18632] syzkaller0: entered allmulticast mode [ 471.785786][ T6712] IPVS: stopping master sync thread 16701 ... [ 471.806458][T18642] __nla_validate_parse: 2 callbacks suppressed [ 471.806480][T18642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 471.966665][ T5294] 8021q: adding VLAN 0 to HW filter on device eth2 [ 472.093495][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 472.123162][T18653] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 472.259174][ T7856] IPVS: starting estimator thread 0... [ 472.365239][T18667] IPVS: using max 26 ests per chain, 62400 per kthread [ 472.754564][T18681] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3362'. [ 472.764407][ T5636] Bluetooth: hci3: command tx timeout [ 472.810632][T18690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3362'. [ 472.880674][T18694] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3363'. [ 473.001373][ T152] smc: removing ib device syz2 [ 473.068925][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.078770][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.170660][ T7876] ================================================================== [ 473.178779][ T7876] BUG: KASAN: use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 473.187154][ T7876] Read of size 8 at addr ffff88807ac702f0 by task kworker/1:16/7876 [ 473.195160][ T7876] [ 473.197534][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 473.197559][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.197574][ T7876] Workqueue: infiniband ib_cache_event_task [ 473.197609][ T7876] Call Trace: [ 473.197619][ T7876] [ 473.197631][ T7876] dump_stack_lvl+0xe8/0x150 [ 473.197657][ T7876] print_address_description+0x55/0x1e0 [ 473.197679][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.197705][ T7876] print_report+0x58/0x70 [ 473.197724][ T7876] kasan_report+0x117/0x150 [ 473.197746][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.197775][ T7876] __ethtool_get_link_ksettings+0x5e/0x170 [ 473.197800][ T7876] ib_get_eth_speed+0x180/0x7f0 [ 473.197828][ T7876] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 473.197871][ T7876] ? do_raw_spin_unlock+0xf5/0x210 [ 473.197902][ T7876] ? rxe_query_port+0x6b/0x3d0 [ 473.197931][ T7876] rxe_query_port+0x93/0x3d0 [ 473.197959][ T7876] ib_query_port+0x170/0x830 [ 473.197991][ T7876] ib_cache_update+0x1ba/0xc70 [ 473.198016][ T7876] ? __pfx_clockevents_program_event+0x10/0x10 [ 473.198046][ T7876] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.198075][ T7876] ? __pfx_ib_cache_update+0x10/0x10 [ 473.198098][ T7876] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.198129][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.198151][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.198174][ T7876] ib_cache_event_task+0xe0/0x1d0 [ 473.198199][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.198222][ T7876] process_scheduled_works+0xb5d/0x1860 [ 473.198262][ T7876] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.198288][ T7876] ? assign_work+0x3d5/0x5e0 [ 473.198311][ T7876] worker_thread+0xa53/0xfc0 [ 473.198349][ T7876] kthread+0x389/0x470 [ 473.198377][ T7876] ? __pfx_worker_thread+0x10/0x10 [ 473.198398][ T7876] ? __pfx_kthread+0x10/0x10 [ 473.198426][ T7876] ret_from_fork+0x514/0xb70 [ 473.198450][ T7876] ? __pfx_ret_from_fork+0x10/0x10 [ 473.198472][ T7876] ? __switch_to+0xc79/0x1410 [ 473.198503][ T7876] ? __pfx_kthread+0x10/0x10 [ 473.198531][ T7876] ret_from_fork_asm+0x1a/0x30 [ 473.198565][ T7876] [ 473.198573][ T7876] [ 473.408859][ T7876] The buggy address belongs to the physical page: [ 473.415313][ T7876] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ac70000 pfn:0x7ac70 [ 473.425663][ T7876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 473.432805][ T7876] raw: 00fff00000000000 ffffea0001f87308 ffffea0001dd6e08 0000000000000000 [ 473.441407][ T7876] raw: ffff88807ac70000 0000000000000000 00000000ffffffff 0000000000000000 [ 473.450000][ T7876] page dumped because: kasan: bad access detected [ 473.456436][ T7876] page_owner tracks the page as freed [ 473.461832][ T7876] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 5635, tgid 5635 (syz-executor), ts 90702742528, free_ts 473125111390 [ 473.483641][ T7876] post_alloc_hook+0x22d/0x280 [ 473.488432][ T7876] get_page_from_freelist+0x2593/0x2610 [ 473.494006][ T7876] __alloc_frozen_pages_noprof+0x18d/0x380 [ 473.499835][ T7876] alloc_pages_mpol+0x235/0x490 [ 473.504701][ T7876] ___kmalloc_large_node+0x4e/0x120 [ 473.509925][ T7876] __kmalloc_large_node_noprof+0x18/0x90 [ 473.515592][ T7876] __kvmalloc_node_noprof+0x7b/0x8a0 [ 473.520914][ T7876] alloc_netdev_mqs+0xa8/0x1210 [ 473.525787][ T7876] ieee80211_if_add+0x4cc/0x13d0 [ 473.530747][ T7876] ieee80211_register_hw+0x3ebc/0x4a70 [ 473.536222][ T7876] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 473.542054][ T7876] hwsim_new_radio_nl+0xf6a/0x1c00 [ 473.547213][ T7876] genl_family_rcv_msg_doit+0x22a/0x330 [ 473.552788][ T7876] genl_rcv_msg+0x61c/0x7a0 [ 473.557306][ T7876] netlink_rcv_skb+0x232/0x4b0 [ 473.562089][ T7876] genl_rcv+0x28/0x40 [ 473.566092][ T7876] page last free pid 6712 tgid 6712 stack trace: [ 473.572425][ T7876] __free_frozen_pages+0xc1c/0xd30 [ 473.577558][ T7876] device_release+0xc4/0x1f0 [ 473.582238][ T7876] kobject_put+0x228/0x560 [ 473.586674][ T7876] netdev_run_todo+0xc75/0xde0 [ 473.591454][ T7876] ieee80211_unregister_hw+0x128/0x2c0 [ 473.596927][ T7876] mac80211_hwsim_del_radio+0x28a/0x4a0 [ 473.602495][ T7876] hwsim_exit_net+0xede/0xfa0 [ 473.607251][ T7876] ops_undo_list+0x49f/0x940 [ 473.611868][ T7876] cleanup_net+0x56b/0x800 [ 473.616316][ T7876] process_scheduled_works+0xb5d/0x1860 [ 473.621878][ T7876] worker_thread+0xa53/0xfc0 [ 473.626486][ T7876] kthread+0x389/0x470 [ 473.630574][ T7876] ret_from_fork+0x514/0xb70 [ 473.635173][ T7876] ret_from_fork_asm+0x1a/0x30 [ 473.639963][ T7876] [ 473.642294][ T7876] Memory state around the buggy address: [ 473.647932][ T7876] ffff88807ac70180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 473.656009][ T7876] ffff88807ac70200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 473.664098][ T7876] >ffff88807ac70280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 473.672184][ T7876] ^ [ 473.679930][ T7876] ffff88807ac70300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 473.688013][ T7876] ffff88807ac70380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 473.696174][ T7876] ================================================================== [ 473.761316][ T7876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 473.768713][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 473.778216][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.788328][ T7876] Workqueue: infiniband ib_cache_event_task [ 473.794459][ T7876] Call Trace: [ 473.797776][ T7876] [ 473.800736][ T7876] vpanic+0x56c/0xa60 [ 473.804767][ T7876] ? __pfx_vpanic+0x10/0x10 [ 473.809311][ T7876] ? __pfx___schedule+0x10/0x10 [ 473.814223][ T7876] panic+0xc5/0xd0 [ 473.817986][ T7876] ? __pfx_panic+0x10/0x10 [ 473.822447][ T7876] ? preempt_schedule_common+0x82/0xd0 [ 473.827994][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.834017][ T7876] check_panic_on_warn+0x89/0xb0 [ 473.838996][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.845016][ T7876] end_report+0x73/0x170 [ 473.849306][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.855434][ T7876] kasan_report+0x128/0x150 [ 473.859966][ T7876] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 473.865973][ T7876] __ethtool_get_link_ksettings+0x5e/0x170 [ 473.871803][ T7876] ib_get_eth_speed+0x180/0x7f0 [ 473.876686][ T7876] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 473.882098][ T7876] ? do_raw_spin_unlock+0xf5/0x210 [ 473.887250][ T7876] ? rxe_query_port+0x6b/0x3d0 [ 473.892057][ T7876] rxe_query_port+0x93/0x3d0 [ 473.896686][ T7876] ib_query_port+0x170/0x830 [ 473.901352][ T7876] ib_cache_update+0x1ba/0xc70 [ 473.906150][ T7876] ? __pfx_clockevents_program_event+0x10/0x10 [ 473.912515][ T7876] ? do_raw_spin_lock+0x12b/0x2f0 [ 473.917838][ T7876] ? __pfx_ib_cache_update+0x10/0x10 [ 473.923161][ T7876] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.928567][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.934369][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.940115][ T7876] ib_cache_event_task+0xe0/0x1d0 [ 473.945163][ T7876] ? process_scheduled_works+0xa70/0x1860 [ 473.950907][ T7876] process_scheduled_works+0xb5d/0x1860 [ 473.956490][ T7876] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.962489][ T7876] ? assign_work+0x3d5/0x5e0 [ 473.967190][ T7876] worker_thread+0xa53/0xfc0 [ 473.971815][ T7876] kthread+0x389/0x470 [ 473.975935][ T7876] ? __pfx_worker_thread+0x10/0x10 [ 473.981068][ T7876] ? __pfx_kthread+0x10/0x10 [ 473.986151][ T7876] ret_from_fork+0x514/0xb70 [ 473.990763][ T7876] ? __pfx_ret_from_fork+0x10/0x10 [ 473.995896][ T7876] ? __switch_to+0xc79/0x1410 [ 474.000599][ T7876] ? __pfx_kthread+0x10/0x10 [ 474.005220][ T7876] ret_from_fork_asm+0x1a/0x30 [ 474.010022][ T7876] [ 474.013671][ T7876] Kernel Offset: disabled [ 474.018009][ T7876] Rebooting in 86400 seconds..