last executing test programs: 3.54495576s ago: executing program 2 (id=3675): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'nr0\x00', 0xc}) 3.169954938s ago: executing program 2 (id=3681): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x120, 0x3a}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x2000006, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x38}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x38, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}}]}, 0x38}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149e42, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000001000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETLINK(r7, 0x400454cd, 0x305) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200902, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 3.010601079s ago: executing program 3 (id=3682): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0xb, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x101, 0x2}, {0x1, 0x1000, 0x4412}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x4a}, 0x28) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listen(r1, 0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x400, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8040) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeff2ef1020000ffe203f03adcac4b74fffffffffffeffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 2.833837137s ago: executing program 4 (id=3683): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000300)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2d1}, 0x94) 2.737334203s ago: executing program 4 (id=3685): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x200000e5, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00', 0x0, [0x7, 0x1000, 0xcd5, 0x7, 0x7ff]}, &(0x7f00000001c0)=0x54) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.539863247s ago: executing program 3 (id=3687): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x24, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x7079, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r1}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) 2.477063969s ago: executing program 4 (id=3689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x34}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000f02000000020000000000000e030000000000000000005f"], 0x0, 0x54}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) socket$can_j1939(0x1d, 0x2, 0x7) 2.324945412s ago: executing program 3 (id=3690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0xff}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x4, 0x0}, @rand_addr=0x64010102, 0xfffd, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x9, 0x0, 0x9}, 0x3c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r4, 0x29, 0xcf, 0x0, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000001000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011000100"/111], 0x7c}}, 0x0) 2.307512703s ago: executing program 2 (id=3692): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x40103) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) (async) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) 2.122923657s ago: executing program 4 (id=3693): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xf1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x10000}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x10000}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0x6}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r3, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}}, 0x0) 2.097552043s ago: executing program 3 (id=3694): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000080)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x2, 0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r4 = socket$inet(0x2, 0x80000, 0x1) r5 = openat$cgroup_pressure(r2, &(0x7f00000001c0)='io.pressure\x00', 0x2, 0x0) close(r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', r6, 0x4, 0x85, 0x2, 0x2, 0x30, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x8, 0x6, 0x1}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', r3, 0x40, 0x8, 0x2, 0x92, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x64, 0x0, 0x81, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x17, 0x83, [@dev={0xac, 0x14, 0x14, 0x3f}, @empty, @empty, @multicast1, @local]}, @noop, @rr={0x7, 0xb, 0x94, [@dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0xbb, 0x0, 0x7, [0x3, 0xe]}]}}}}}) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000500)={@rand_addr, @initdev, 0x0}, &(0x7f0000000540)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x200, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000880) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x709bcd75}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000880)={r12, 0x5a, "c3a3d895b9681f820bc996590d6f3039bed4c9d34663ac6b35b6bd9ebeeda155d8e74e1c0dfa40ad232cfd079714fb36a065addff65f1cee74a8cf6934f74d6b739c0daa5f9bc1c72f82ef2df0dc9b04d5465f9fd0c63e56ab2e"}, &(0x7f0000000900)=0x62) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000940)={r13, 0x5}, &(0x7f0000000980)=0x8) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r14, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r15, 0x20, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xe, 0x8, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000b00)={'security\x00', 0x2, [{}, {}]}, 0x48) r16 = socket$pptp(0x18, 0x1, 0x2) shutdown(r16, 0xecd126cfc8aeb8f3) ioctl$INCFS_IOC_PERMIT_FILL(r16, 0x40046721, &(0x7f0000000b80)={r4}) ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000bc0)={{0x1, 0x1, 0x10000, 0x6, 0x156}, [{0x8, 0x6, 0x40}, {0x7, 0x7, 0x40, 0x89}, {0x800, 0x80000001, 0x7, 0x1}, {0x0, 0x6f, 0xfd, 0x2}, {0x100000000, 0x5}, {0x7ff, 0x8, 0xf8, 0x1}, {0x2, 0x7f, 0x1, 0x8}, {0xfffffffffffffffb, 0x5, 0xb9, 0x6}, {0x5, 0xe97, 0x0, 0x68}, {0xb, 0x3, 0xff, 0x4}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000e40)={'erspan0\x00', &(0x7f0000000d00)={'tunl0\x00', r10, 0x700, 0x8, 0x21, 0x8, {{0x3a, 0x4, 0x0, 0x3b, 0xe8, 0x66, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x39, 0x3, [{0xc, 0xc, "bdbff8633a7c348bcc62"}, {0x0, 0x5, "00eb3a"}, {0x7, 0x5, "e96258"}, {0x6, 0xe, "956f02091b75c0cab0895469"}, {0x2, 0xf, "2a81e0f3f204b08abf59f65bec"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @noop, @timestamp_prespec={0x44, 0xc, 0xc, 0x3, 0x5, [{@broadcast, 0x16cd}]}, @rr={0x7, 0x27, 0x7d, [@private=0xa010102, @private=0xa010101, @broadcast, @empty, @local, @empty, @multicast1, @multicast1, @rand_addr=0x64010100]}, @noop, @timestamp={0x44, 0x24, 0x60, 0x0, 0x8, [0x8, 0x5, 0x7c, 0x1e, 0x80000001, 0x3, 0xa95f, 0xffff2484]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x40, 0x1, 0x6, [{@multicast2, 0x7c90}, {@multicast1, 0x8001}]}, @rr={0x7, 0x23, 0x43, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @remote, @broadcast, @empty, @multicast2]}]}}}}}) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x48, r18, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4c, 0x35}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xfc6593fe0984e1f6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@bloom_filter={0x1e, 0x7fffffff, 0x1, 0x8, 0x80, 0xffffffffffffffff, 0x7, '\x00', r17, r1, 0x0, 0x1, 0x2, 0xc}, 0x50) 1.99573118s ago: executing program 1 (id=3696): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000feffffff060000000e0001006e657464657673696d0000000f4002006e657464657673696d300000080003000000000008000b00580900000600f3ff930700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000980)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x8, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="08adb4774ddbc4362729cc8cabaf32eec3523b7d76a9b2b6ae0e84455835e33a3d5eb8ce019c422c9c0b6b338b73aa506bfb628f47a5b8f31a218027f0f97ae1d1bee670d2736226b306124b5db1799d4ec9f857931f947456505c2ad3a4fd4e60519fe6c34580927710", 0x6a}], 0x2, &(0x7f0000000600)=[{0xf0, 0x109, 0x2, "3d23590684e4e35f38b8a25a9b77fddb646fbbef669e02343c346c68859adf5262e9a97879cee095f42d63cafa196cf80eed9b1565388d9fc8637a4a1d30cc7cb7c56a7a9cb3beaa3ca0693b7a8c51241726c724d0c940bdcdd683caa5f1a767db406f8855bcf835f9087df15447e450c0a900ac1727fc64d12ce45a567010c73d05dc7df6830dae7041373cba4362d1d3790fadf2a63dd275ee172977dc225f8889d09bdad85cbede32f361841c6b11f354fd471b1355cae42008a47033ac226ba44913f87894d0a8cf4af30c442b23d31f1ec68637c98057"}, {0x108, 0xff, 0x7, "48f6f257bc767513e0b76e76904e4e838940ddccb66ee0017035dbf1ac3e7e73b8c50eaabf99c6cb0a12b74d2f5fbaaa88ba296161a56af7fafb572395aeef177c459105b5f40b6eb15fbf91cb9cf5d9304e312702862eae73e090b513e3f5e3a1b50b2cbd4f9509fef344edf6f6794227759c94fe4aeeb351fd8604f4619bbf6b5340e48252c561ff7313090f19d6b686d87e499a822776e450af39dace0b63dd24fe0f2a54c22f234057574d7c760391209e7fc6c2e58a845ada70d21cc0298060181fc6b3f57216105843a92516edd980ef0d525441ab30ea9c0b73d97dd4d85f62a62b88f4dd5a801ec07398ae32529e537a4cdf2ef5"}, {0x80, 0x115, 0x4, "f48c3488040071e417d7a17dc76784f3a6244680c8b1915760212c3e5cd2c8e275c106f3cc98cf71d11e1e4849e9a74338b8fa2a95285a51b7704149803ad178b3a44332645068cd6eb94a49b40263d9f60aa303be03c5457e540621ed520403f22f7562d8ce94372611"}, {0x10, 0xada59e8acfaf5fcd, 0x5}, {0xd8, 0x102, 0x6, "0c59fbccb7ed494fc8fb6169631d8b2609557521b7bf2ee69953656cf9c34e3055b8133ec7e5f271febca748c76920c915b19ed88ecf0c4c530dd30f13e7f0a045df48bc672c200511acfe87f9e4e5f94aa0d6ec9c36c01707b8bf1fe9959e43957825075bd2330077ceeccb1cda2aebff5cc677576d4f33ca91e5fd78742b28d5ac02ea8d166bafa2d94d207418d461b8a7c60122a02e774d0677602a4d63415d50640378732935adc27214803ca4eddb3740a627fc7108021df489c2915de21fd80861ca7588"}], 0x360}, 0x40000) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x6000000, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000080)=""/228, 0xe4}) 1.891822898s ago: executing program 2 (id=3697): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x6, 0x3, 0x8f9}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000300)=0x8) r3 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) write(r3, &(0x7f00000004c0)="6f74658032803fac3dcc7c1a6e8af585f11cb3ab141e0b75a5ef935060c36cc23ecdcc02a18e86bead15ee03bb759d051047c86d6ca15df492021b2c6b99edc2255971da461001cedc8466821650b9693f08ae33daf1d301675f4677bca9c9ad719fc6e6e8e7230c856bac8fd021474964", 0x71) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f8000000ee000100fefff7ff00010000ac1e0001000000000000000000000000fc010000000000000000000008000000000000004e230005000000003a0000008a836816092fd71c9b29c2d46fa9c8d07d4fe3f869952f94050b01f707cb5e30e1b1e77f2658e24478c8f15e1651da2188db696a118cf79856bc410975d80f1792f3a6a4bf03e05d9673255672d52f3902562b43cfb6714c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000ffffffffffffffff0000000000000000bc03000000000000feffffffffffffff02000000fcffffff400000002abd70000435000002000100200000000000000008001d0000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in6=@private1, 0x4, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x1000001, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x0, 0x33}, 0x0, @in=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 1.631191297s ago: executing program 2 (id=3699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110bc0000000000e60000e300000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110bc0000000000e60000e300000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) 1.630581564s ago: executing program 4 (id=3700): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x14, &(0x7f00000000c0)={&(0x7f0000000040)="f57838a9c7703a0ff893ccfe404f076174fa90b0e24d7dbaa56077366d2e15a0af5e80e9c7277dc11ab41b7d907496159740e685a6098a5390e022d762251c208362a5ab9b", 0x45}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) accept4(r0, 0x0, &(0x7f0000000140), 0x0) (async) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x520, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x840) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x520, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x840) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_hci(r3, 0x0, 0x1, &(0x7f0000000340)=""/91, &(0x7f00000003c0)=0x5b) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @random="e4d9d80f02ea"}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0xc8}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0xc8}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x9, 0x0, 0x1, 0x100}, &(0x7f0000000600)=0x98) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000540)={r4, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x9, 0x0, 0x1, 0x100}, &(0x7f0000000600)=0x98) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000640)={0x6, 0x6, 0x5, 0x9, 0x9, 0x10, 0xf1c7, 0x65, r5}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (async) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r7, 0x8080583a, &(0x7f00000006c0)={0x5, 0x2, 0x502bfd28, 0x90000000, 0x67, 0x0, 0x1}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'macsec0\x00', &(0x7f0000000740)=@ethtool_perm_addr={0x20, 0x80, "536ecb79246d3a0b5fd83995b925b3f8259c33b8f434a94ebcc74c6f400cecae42028772dc2d5e087dce1a4e8cf4e8a82eef47a8df903fd65f1a0feb052165ae0fd57f2d72645958b482f47798a307bdc0a743e3aac1b1d4189019e4fbbc607e48a6b499ce60ad578d2f97a728af20bf9d1d4b73fb981ad88060d060cf37a758"}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'macsec0\x00', &(0x7f0000000740)=@ethtool_perm_addr={0x20, 0x80, "536ecb79246d3a0b5fd83995b925b3f8259c33b8f434a94ebcc74c6f400cecae42028772dc2d5e087dce1a4e8cf4e8a82eef47a8df903fd65f1a0feb052165ae0fd57f2d72645958b482f47798a307bdc0a743e3aac1b1d4189019e4fbbc607e48a6b499ce60ad578d2f97a728af20bf9d1d4b73fb981ad88060d060cf37a758"}}) r8 = accept4$inet(r6, &(0x7f0000000840)={0x2, 0x0, @remote}, &(0x7f0000000880)=0x10, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000008c0)={0x0, 0x1, 0x5, 0x3, r5}, &(0x7f0000000900)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000008c0)={0x0, 0x1, 0x5, 0x3, r5}, &(0x7f0000000900)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000940)={r9, @in6={{0xa, 0x4e20, 0x200, @remote, 0x8}}}, &(0x7f0000000a00)=0x84) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ac0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@ipv4_newaddr={0x4c, 0x14, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x1, 0x80, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @remote}, @IFA_FLAGS={0x8}, @IFA_LABEL={0x14, 0x3, 'ip6gre0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040011}, 0xc004) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000c00), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000c00), 0x4) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000cc0)={r4, 0x300000}, 0x8) r12 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_WIPHY(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x7}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xfffffffb}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7ef}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x456364e18acbf673}, 0x40000800) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000e40)={0x200, {{0xa, 0x4e23, 0x8, @loopback}}}, 0x88) ioctl$INCFS_IOC_CREATE_FILE(r11, 0xc058671e, &(0x7f00000012c0)={{'\x00', 0x2}, {0x8}, 0x104, 0x0, 0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)="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", 0x1a4, 0x0, &(0x7f0000001140)={0x2, 0xc8, {0x0, 0xc, 0x71, "d3dba4206a4b2464ed7bc7e44b2d870290ed61b3e21e8a984ef2ce67d043e4a765b8ac41579d0629c758eb6b5571e8a42e145b768e71bc6522ec564af1fdb8c7d5a20fbc52dfc04803cef315f7cc3cd13783a5d7d0c9c8cf035eb4117c58fe0f6a4ba2733119e24dd607bbd90efea3ba50", 0x4a, "a9ca66e2872d6f5e17a369ffb5892b3036861dbac531ada77d4472ccfde3b2edfb0a06e07c6376b70f84ffbb8e29ff84938c0d6596fc55d1afd8d3093a91bb77b72eadbb20fb464629bd"}, 0x70, "94cb9481ee0b07e6dd79bd64f4f9c4f94bd4c85852cbd39f3bd2ae25e2b20d086104b433e7aba6bd3bb3cf265c369597e4af96ba785b73efd6454e32c430935293c88f188e47899e997f85d296d1ddbc455a5d11120ff1028e9843b8ec41ad088819071686b44caf151d77e995c812e0"}, 0x144}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001340)={r4, 0xcd}, 0x8) 1.619799885s ago: executing program 1 (id=3701): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000301010100000000000000000a000003300001802c00018014000300fe80000000000000000000000000003b14000400fe578800000000000000000000000001010ca3b0f391cc6d2678000000"], 0x50}, 0x1, 0x0, 0x0, 0x2400009c}, 0x40010) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 1.53585783s ago: executing program 3 (id=3702): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000009c5a000000000004000000000000"], 0x0, 0x26}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x11, 0x4, [0x25a, 0x10, 0x0, 0x6]}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 1.338397111s ago: executing program 2 (id=3703): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000010101010000000000000000000000060000000000000000cc7d5f5ab85d725cf572fc1860ebe0b843b26cfc0609a39ac519e2a2e18e1a8bf883302c0f4750109054b5046c30abc4f36e5868dbb3cb4ed0fdf86c0eb6bbcb338f1bce21b886"], 0x1c}, 0x1, 0x0, 0x0, 0x20004011}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x9, @private1, 0x9}, {0xa, 0x4e1f, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0xffffffffffffffff, {[0x400, 0x3a, 0x5, 0x6, 0x1260, 0x4, 0x1, 0x97]}}, 0x5c) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000d100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffee8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001090400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000040000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000000000000"], 0x94}}, 0x0) 1.337768251s ago: executing program 4 (id=3704): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r6, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x34, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x403}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x24004090) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) 1.155173078s ago: executing program 1 (id=3706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffe}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x4040004) 864.190491ms ago: executing program 1 (id=3708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xd044, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) 815.946075ms ago: executing program 0 (id=3709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x28, 0x7, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x40000000}, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001000000703bd074a09624fdf903e0ce25458c76977a88f4f7b96343328d42ff7c8719389f4e8ec48ed4b80a6a77c234c948fe534a7473854a46c1eff9054b12fb799281be714e48271954cc694613c650e11cfdec55ec7ffa9626152802176717f7610e2d47a8add3184914f3855afb800cbe1ec486e1b7d5956e4c63d7a021e4537eff3300f932f6ec5ceb96ad65c5b1f7397eb67e2c"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x800) 685.754105ms ago: executing program 1 (id=3710): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1c58}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x3701d6c31e775ab8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r2, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x2}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@deltclass={0x9c, 0x29, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1}, {0x9, 0xfffb}, {0xe, 0x1}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe0, 0x6}}, @TCA_RATE={0x6, 0x5, {0x10, 0x5}}, @tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x2, 0x7217, 0x3ff, 0x3, 0x4}, {0x7, 0x5, 0xc7b, 0x6, 0xfdc9, 0xed}, 0xfffffffb, 0xd835, 0x8, 0xc62, 0x8000}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x48800) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4044) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 665.348922ms ago: executing program 0 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8cfb, 0x440}, [@IFLA_GROUP={0x0, 0x1b, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x0) 499.719232ms ago: executing program 0 (id=3712): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x0, 0x0]}, {}, {}, {0xa888, 0x88be, 0x81000000}}}}}}}, 0x0) 480.586724ms ago: executing program 0 (id=3713): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000400), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x4c}}, 0x0) 398.093015ms ago: executing program 0 (id=3714): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYBLOB="0100008100000000000006000009080004000a01010008000500ac1414aa0f000700756e636f6e66696e65640000"], 0x34}, 0x2, 0x34005, 0x0, 0x1}, 0x44000) 74.16082ms ago: executing program 3 (id=3715): listen(0xffffffffffffffff, 0x8) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) r2 = accept4$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80800) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000140)={0x0, 0x9, 0x8, 0x1}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000540)) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpu.stat\x00', 0x0, 0x0) accept(r2, &(0x7f00000005c0)=@un=@abs, &(0x7f0000000640)=0x80) sendmmsg$sock(r2, &(0x7f0000001b00)=[{{&(0x7f0000000680)=@qipcrtr={0x2a, 0x3, 0x8000}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)="dbf9fc8b2b307af940952e244d4a4b3226a22a39f9f15817fab906d746e083b843576a8297572672a0c77c31d7b3d52920957fc1864c15347ab512ade24270c52aa78a47ac6ce1e8e1dab58e3041f6cc5a8690fecb93d1c159ae48bd7f96cb2f8ba7d529b5ad5f0450abe603a270af83ac509e7d7b1ca6ca706c9a22362285bdff37ce017d53b441771dbab296adda33980ade334285ff7426af2906a2486ef1a12d8db224396e", 0xa7}, {&(0x7f00000007c0)="ed79c6c13714f9747e604913c607511da4a06a1bf5d823ad1737e497609633d15baee0d1c4b38b36c92ae156fcadf7092109dad0eae15321963b9f66a99c25608c35b03c7ac94e17d58b2c0589a5b05a7a442c38fad178db5d27910d662c4c590d67bc6a1d863b9063f23e", 0x6b}, {&(0x7f0000000840)="50383a450c88a93f282cd359760ae349f653cd1956cead484fc29d35256f63b8ecebe8c5cffd9acc967aaad35c", 0x2d}, {&(0x7f0000000880)="e759225b87512088dbbc01bb1ca526a9c714e352de84e8409bd31909ac1f0e6fbfd7ab114bf24a7fedd1a8d1b05f7712c3319d0dbef74e14a4bd4e5ef30828a98e5bdfe5ff13059da456f2694d05bef6931671dc336545064394279e1902a61a1b3e8045232f1560bec04214d6af936fd9d0e998c8c5f225e79d4c92ca44605ea2ebbfc3d5bfe4c19a92a88e594bac3c62fd30ad5c10c02c378a095a286e53ce09e73394f3c34b5b72ace951b27a81d343dede51d8c84ccc9afae5c247f08b7f240289174d0ea03e3667d395cb57d5c0007cac", 0xd3}, {&(0x7f0000000980)="9f97168e1a325b16479f86a6c9b91a1fb85fac8ecd604f1d47239deb70cf4649b44df3ae253ef2b306738450007407f9591210946479a052a52a94647e4181a5f9fc82d8482ceb979e663ff539309d29b60ee3c60c12fa05370928c5aff2f1cfaa8dd657544028d7d117d9", 0x6b}, {&(0x7f0000000a00)="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", 0x1000}], 0x6, &(0x7f0000001a80)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x1, 0x800) pread64(r1, &(0x7f0000001b40)=""/4096, 0x1000, 0x0) r4 = getpid() sendmsg$nl_generic(r1, &(0x7f0000003fc0)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003f80)={&(0x7f0000002b80)={0x13d0, 0x3b, 0x4, 0x70bd2c, 0x25dfdbfc, {0x10}, [@typed={0x8, 0x57, 0x0, 0x0, @u32=0x3}, @generic="40b1756066b205067458c7ff5cdd67910124076020a5b3479b45c384a3b2f5e9fd260b8af6a055bbd372fe2a78fe04a19f", @generic="01221f296307d51c44e274c29f78097031ab8b6851ef3feb13b2d26e610019080f25b40e628de6564b6a2319603a2aef51c68b08bd8190f830d63abe71b75364eb7f9f71a4da5176bce587a7fd1d1d85bc61922352caa3d81fa88ed24adaca2730e74cd27a02acd74646a71b3f8e1b299c7cc27c5fc3a580db6d8f3c47d3059263c7c5932b74a9fb00a7e00d81e6eab1767e775ed31439e22a003b0ab6273ec79d22134adbaa0d3ca2210b9572585ed5d5bde9faca5b155b5bd10b8568cd256276980e9c2489a0c6c04b9aa78d9122b1007c0b", @nested={0x18b, 0x161, 0x0, 0x1, [@generic="ccf955c99d1904c8d31dde110902eaf6335d2f7d48bbbcf16cf14586f14d52b2bcbcb3dca4b149268bbd9b7e5926291970b62f1551c98bb9de74920bfbe44ec1a57743fafcec7227f5a8acd6e934b9038f463b4da47ed9fca8321918e95d6321ac148ca071d77511f1c280770a4c0e5889653605b52a6aee41e1650c1831ee9884379cc9f88766bef6abd637f5abc1200180c0b6532443c24639232ebba0ad06a6a7f3e2e1557086c61def8be943f3b7ae33690a0256a09d24a4745b", @generic="3edc526fc3f607fce76ca34a7fe27a119f9d4f3dfcb2d5fc763066d36e521ca1c40efff10cae0ac4a490ea472d799977800c46361e48ced43be42f471a9569b73177c42fa53341f81d36657c5541defec6e88d39a6fd254a7e5f51f71227a33f70f8d9b75ef75b67657f8539e686042412e4b00b5eb6bb922e870af9cdb92f494109ba5c671bbcc763cba3a5d2bc7145b474aa7eb853c3ebcf045c3aadfaf095daa9438dd79367027caf9e1b173ef4e759c101cf5f137002ed10f6631ffd4c1f0f7ba98e990c8b47afd1b6"]}, @nested={0x11a, 0xd4, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x97, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x110}, @nested={0x4, 0x136}, @nested={0x4, 0xa4}, @generic="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"]}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r4}, @generic="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"]}, 0x13d0}, 0x1, 0x0, 0x0, 0x4804}, 0x4040010) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000004000), 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000004040)='\x00', 0x1) write$cgroup_pid(r3, &(0x7f0000004080)=r4, 0x12) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f00000040c0)={0x101, 0x6, 0x8000, 0x100, 0xd58b, 0x4, 0x101, 0x7}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140), &(0x7f0000004180)=0xc) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000041c0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000004200)) r6 = accept4$packet(r3, 0x0, &(0x7f0000004240), 0x800) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000004380)={@empty, @multicast1, 0x0}, &(0x7f00000043c0)=0xc) recvfrom$packet(r6, &(0x7f0000004280)=""/214, 0xd6, 0x0, &(0x7f0000004400)={0x11, 0x3, r7, 0x1, 0x6, 0x6, @remote}, 0x14) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000004440)=""/235, &(0x7f0000004540)=0xeb) connect$l2tp6(r1, &(0x7f0000004580)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7003ab20, 0x3}, 0x20) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000045c0)={0x1ff, 0x6}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r8, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000004600)="50dbea2fdf86572605db2b829fd60aa181d9dc857050545f7fe4207cf59addfd0aab562581e444b2cd38d30a1f43ce54bc025127895220030435f8d42d08a17a26f05829171832aa5cc0b8046f0cca6378cc8db4f0356a1b3c72", 0x5a}], 0x1, &(0x7f00000046c0)=[{0xb8, 0x3a, 0x80, "1a5a9b1af8bb1bb9ce5d50075f876fee24c00fea9fec9ea04556c5a050a7e224349dee53e0d842088aacfa60bb5a99603f8031881842b9b95666857f39930ff1e3f69df938d5bb9e2af07ee9d85bf2c0781852c9182f62768bab3dd7d0f9b47fafe7f5ef12d69f61ddef21d0eaf5a5cbbe1d020376f6f879b215939cdb4715920d05d6659ba810528d68fd87047afa3044fc3833aabda5b4865ca717e56dedea46"}, {0x1010, 0x1, 0x6, "3de00d33aa01480e2e0d260a548177c4223edf2b7adf98ce73db7245e0029a69610021714aeec0eb68847c3b0f1d9f4d1a30579fe25e3c66fd7b12c3101ae94f3fb5e7d3307882705e6fc55c337547fbab81702ab471b062b34ca8414543092f132b9b9b68006daec866b41567e9940175a1f141b85afd57d7cd12e37afc81d81b6691b26a01d12d5359a30725aaea1c62f3e9672995fd3f29ac464af18b2ba0f7e9a21482b00713e0a6c997c2c70a6958e5e953b89748195fa08ab40e2d36c8b6e21414ac58e14b7f91c3dd6ad2f3c94d47e05147625458da825fd6511637b2fed66de1bc1f8c9748d743b46b607dbc5d516dc4ab7d274f17ee6542149f383ac621130f7a524a6d18fe223ed7dea303eb6296f658c1646f6c291795a051851d716dc1a3eee35eff2263b34b6b7fc70e8af70ed3b836d5c04f2adf0594b7250622f59e314fe23e91ce3cd6629ffb49c8d696dcedaf5bfb21466810463510fab84c00e0f00fd4eda6fc9149b2ed9c698a1458dd69d33b0a8df296ba7018b9111e5395a5f576b02f2b60784838d3d32698f14d10ed73230540391ebc1cd3b35eda52cc0f25d9f47711746a1c10b2dff70d3ba5f9432fdd4c220b9bc283661f1712c9df55d77878a632b84b3f2afa64f2d6185dc538484947342b57d3cb6716cc5485a7e14191c794dc711c3c192db79cb7ec92e65ec5b2bc86cf1d92e2de5cde6794b8432e3dc4cff1674751dbcec0dc0f0bbfd693bf61483a80ee9e831bc6ff73ede00861b476c468e562229048b6e422f9b88254b1f4b9c39bca7306d8d37d4e1205f23f17b56e096b0cd0938cf15e3deb90e28878d2c466554f101a0a394b87a9e4ca87eef7692a2e6d7365c8add41df62b2b5ad0a7a361816fd729b48705ca8a36ca2857932772126ed2ca8eb7072c4eab348753b2162ca6723c5853bd22654ed8204166f69363affe7af0921bae095cc2f7c3978a562b5d1cac6253bc0f0b38d74062449d8c1488bfb12a6cfa208db4ba200d3176d07e00ca2eba277b3d0d3daa102f3a19769a8ecf5ef97551322e476e0e0ad78e06be89b8662da5585793a18ea6690fccc59c2c99b554aae9c6364d7d0cfcc586dd2e91f2fc5f08048893f120d382eca1adc7cb43cc08560f8f4cbbce324fc409ce9eeb453973a67f68e3f9669a3f733d8c029adf7fdf66568fdaa080c99dbc3e0486f8d04ee533c42c245fffa05ddbc33fdc65788de8f8ad3c37ea3fda23495266d654460314b64eca458ab8ce1a3e2ea6c5c434ba42a97b9690c19909825f2d54769df1736681b4be2921ecdd846a9244e5697dd4db539d85f9fc2bc6cf9c6217d9ccc045b0008cd3fa093db30698853053bda7ce99ffbc4623631640139e4e2a7eab4330c9e47e19742259af97be60a130f74903028d4e142e5a4e9884523f59b0b94beb32add32c85fb5794e8ff4ea07b28a6c8190d9c6693399bd2d6475ceed138ef1c1b73c1fc8f16a25585756cb8957ad01cf6c4fbdba1f1b6591bcc33d5d91f9f0e331f236315f49d10c31758e640ba275f662b42375475dfc560f130c35b1f2dc15d3b45bd2493e4ae07628c306cce49ac1ca510d338e435925fbf24fdc0cb03fca9aef8212a17f2a18f990dbb4c3976d64bca9b71c4fe0d0c800ef7f1418f383a931626caa895b4d92037ce36bf826d85ff58e0f1aaba047555562ef89a347a97df149f242eddc6b2b4c7068d464640250e5dd5aaca26359783ae3be6b2c394d183200587d1592d3f98a7c5c13ced7d0dbf81ebaa671f57e10349d58d47a333a157bfb0b363077b8ffe7ae5a309af333b7d4d5cdd8847f31a2b73567afe97d4081cd61ca89e6b79fd1673d3717791ea198916944fb14a37b087fb46ebb960a98b44720108194b01e6933443ce64a87d9884845252ab8303a7e7511d166ff8215404bf83d6d8e31c48d52cb7cdf0f5d5826b47027c0aa29fe1748d3fbac15ecaa8b4212ea3c558b7b87e006cecc804970c52b83e45dcf84942659968aba69272ea7dcb337e6a2b994c80be9af98c210e17a1e9a6016b295f52955f3c552f90d053b9c4850550a95a625118960b5d12c1628f8d51d60e6eb7e9fb072ddce18c4a54dc5c271b3582f54fd6b25400abe77dd77bffb695486b63b09ec5fb3b5f2e60e48f734015cb54fcdb4b958dbaf7c5770ef5f445a9b08ecd4a2c6192bf6fcaf4e43c0a2156e7c5fbfab3b1a3a937a5666d08d91d400bb5ab8d9b649d511cbac2b3fd082f08710bf9ce6ee79c77e20264ab189287306367e38638d38ef387af93af4658b1d74d0218eca736f1983f16c13b61a125160f73b5f28f311b8805e012f1f52d449192acf72557e146d434927bc16db0fdcf947cb1d385b1d6450b6712cb2c751c533979090c59be7fa866cdf1d915c00288f44af0f93eb082f619b9e26c53e7a6cb9450d866b4228fa923783cedf8c998bde9863cba21751556d6610f6b1188ae7cee010f478308c279155862951f77ceeb1a428f755ecda39690e32211eea1ca5f2bfd4483e76dfcbbbdcdb4603d6f65eacfd0ca52317a8d28ef715c5723941874877741821232eed806b0f0024111b4eb7d1c5d7fa8ee97566ccb77ea8e0d60ee9a39f443346026da3e9ac78135e8b29728c8ecfd184375e41a15a4bb6bc846ea37def7e2011e7698a2bbeb11fda235391f411d445ffdb0ef30131fde117e49c3818970cb6663a29219f0f99c078a7cf5dbca5d7e209dccff35de1dc0346eb8161a96624508c87f3bed8800974f7fc8c7d73d21f05e76d5efa18822f6989896db6b1093c626f57d72ebee3c4db45563b16d34314cf4f3dc5108ee21f10f276d5d16a13fbabb8e61de5a6e6d612350cd8a75384375e0ebb4690b8842e06053f63816b38f0f33f9c730b79ffbc3fa95a235898a4fdae224c22b4b8e206d25c275b6932a321b6bc785eb3ab1d4ece4756b27e23f613c8a3f0fd0645004cc5f692dea6d726c3331fdef433deaa3f2e944a3a95afde99309309b85089f7e56f475fe7eeb25a43892a6fe6da9912499afb071f7790529234393dde663979f271b1ef91dff1a3cd0f503a7e795968027b72ebf55792d160c3003b5bf4ddca4f7a43793ee00d599cb66bc14ae0199893653bb9e1c7efd1d9a1896bc07ea813846ef015616caef29c826500f140563c38498bdafa64e210322f8427e8352fedf327bf8e7f65e6559882d3ac811e383b08ea10cf601d9c874c46c92d36d466d399ad740a306047e459c3360941b37fd6158a063dcea8307adcdc0b5efe0ea9a0c4faba160368661f104fc72cde6a4887b1937bd805e3ccfe45491801d5c4c4a1ce57492f15a29f286e4454cb92429c7e624442d55472dfde7ca01d49480265ffb9193b3a4cea69f81d10006eb5952bc00bbc6595fcd4fb678d5b220ceeede05e8482ec824f86eba873b56326be396539ae039d00a763a5c9ae5bf8d5913b30c800e35171d5a8f6e714b6d56def459145dd9e056cebcb7edd2b10fdca02ec4a554f5fe99a6d6fa76df1eb98e2f5fc2d59236e9253a7657e73489c6d7403f272441d503e281312fbfec69869bd598744c9ae7bcf7eec3c0bbe47926fa39fdef0143e5fd5a2210983c0d7c8deccdc1f546048919a0087b44256ea413085035a459f3f9f0373e47fa16ced4c33e28dbcf26e7c0a50e52ce6bb7ade5f7d9c3d5d4c5798a40a41b96ff7c8aa0e2f35f78cbbaac3f35411d66936c6867d0fab5c5ad6ca746773a666cfbbc0c1ac3c8054c1f2223f62636e92d59f67a64f5c23237e7722a257e3b10f3f781d2e39d370b099fb3f2cdbe9af00737cff6117b6502cf349b1ff94966ba78e8a690cbe2aed097fe56ff6a53d8c0785878017a7c08dce693d86b524fded5bae15b2565570e4949c0e93f03a570901fdb249a23b2967592f761fdad54e2423a9194b8298c6dbfd5d6a84cf804c337fa5e46cc1c6d3b5a227418433e1f4fe5ef9959864a353aa83b96793797a09b76a10eb5d726134af4b7432e8df38a6fb6d26b6dee95f4221c569968de8bb6a0dd8d69fe39c61641c27bd9af5863b98d04b133c440db1fc0eba75985541b9736a6f55f7341f732b660a5e604548480d94822e4d8099bc76416edc20ec447aa5324e974a88acdd0b3a9efe62c72ce98876d6f8e4bfa76d6c3a8d6bf638c61e3fe9a4cc3dcd56364bb945853bb98665faff419fabeb43c5e348a2c971abf63279faee775cf7191a0772ff7f6fae8921ef8a76717d94a018168622fa3949432abafac24705930d78526fc284fa8326dccca69ffd9635ff0551d7a0be59142377e5f587d972b7977b7e68172e257b78110221dc768cf9239734b2fb437d1f12495ed0b9cdc6c0b9627d6696de1ea6e363047717017eed490b542aab68dd5647619c5e60dba9ff7b56d3462447bda3de16d37d10d4d5567bf61ebd936c77397145aa850c56c173d67d559bddba89d6a5175ba473e316cefcfe4ff7856ecea8e6d2488558c48537c1da41899ba46b607b57ee99b1fff427c4e0cf88e7815ceed17ddeb55d8273c31f15099997d9c39eecc06fe9599c94e7cb857c3335f12fffbcea87d1687866225843614f937983e61369e8d0ba9a482ea345aa5c34f191af10fc90726015d913d40c4b39f49a2ceb9126dbca3a4a5423dce0f902f9bdb4176f008bcd1a1cfd075da5658edafa6058b8b9e39d7412327f65b26877d80c9e1c10b5ad09a7540694a0e425032c38ca32341026aa8edf701d163a4701f295620ee14a6c1664d95b11186272ad5a1188b83b9585bff77a173c983222c0a38ecc7d242a5a5322f541972d4fabc0d4d4e0bb2b6643f97ea1ff36273a17e945354e0340bedec5b56f408930219d8b7bb8479de19ddda5bc0fa36e97140c16e33222542be555c77041d3808928fce7468286e31a6a5e19c899d681850b13b40f302f1558503acf3f40d0a46ae6eb869196467837ba8f09ffb6090feede84c01bc465c860b8ac2777f512f4fbbe80394aa7b8be989963677b54c570813046c8a5fac2e2f9d11070866807ba6a189a4e9835674a7d5a0fcd6cc5f830cd40fe18484c96569b22b4c214c1095b997d3557f747ab274df030137b24f8a6bcb76a47fd55720d5cff0af8e194728d85689a1996ed2888ebade0fc040b0f4a267a4a235bb325ac20118b1d896a31aea816aa49eec90a449e265c26c9affe652e6202970451e403047a470dc73562a8989490aeb763ec31665525f5d7344c8994845c48e4490e8f0f7dec4e71560f1ec56a5a206e90d6007b0f5276ac45a85f7697e68053bdcbf828b4ff5a708a1dbcfeeaa6f17e9906d43ca3f4aeb2461fdd92aaee60e5504f2d5a803fd7de74fddada205820648724d1204f526e176c1ce7d5cb4777caa7868a3c674ec0f9ef17d4959ad9dea27999bfa369ba7a1d2b5fd34fe64bc03fc8352424f53b6845c2e850742e808191dc32b9c074036f5c5cffbca143c97a4998f6cc13de7290395438dca2f7f15ed21a31133438b9353345c84f6e8e7b93c74af48799677b0b18f1026cff8bf9151dbc0bee6603aeff2fcbe9a761108e82468ce51afa3b3ff38ad0449f4953652ecfde8428133b14c5ed474288d2efa693342972dd7bd27b9acf224564fc0721a65a6d014a14953dd3c89882a750f83afdbf3b1e0a2ac552857bedecc59f2258cb654478e75e7cbe6e0c6fb044e706c3fc36bc9c57830b69aa1e02df500f30265a193cee30bb3825ebe781e384eed6473b5296db40b68616c2affafc9610c2b28dfa418aa0f48a81076ac06"}, {0xf8, 0x101, 0x7ff, "8e9caeddfbaba2b7cdd6676307cdea40f3b2e5ec2c72f08feac45f7a493726cab7b546f51fb7b217d1411f2478f558745ede4fec4ca0cf9c09759a4fd3ae454b94fad3b00325808cd13c93e8571e19934d7c10131dfadeda44161b412a7011ac5b3c039177314a66885d9f1a4231b2a5ebb187376f156a39b628431dbd1172e24066a5fd4d7f16d093d705ca26e8b6cde8fa5de6c7bef363a7d598019215b9fa2c74dfa473abe0b3229c6b97fac3076ec2c256a430b37a1b96d1d59477d51958a85936f0858d987b58b5022fe02acb90140ee5a9c63d45b791aa327bbfdbea776a74"}], 0x11c0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) recvfrom$inet(r3, &(0x7f00000058c0)=""/100, 0x64, 0x10000, &(0x7f0000005940)={0x2, 0x4e21, @local}, 0x10) 65.900694ms ago: executing program 0 (id=3716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000080)={0x2c, 0xb, r4, 0x2}, 0x10) 0s ago: executing program 1 (id=3717): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) (async) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$XFS_IOC_FSINUMBERS(r1, 0xc0205867, &(0x7f00000004c0)={&(0x7f0000000080)=0x9, 0xfffffff2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000480)}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000580)=0x0) write$cgroup_pid(r1, &(0x7f00000005c0)=r3, 0x12) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000600)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x38, 0x800, 0x70bd29, 0x25dfdbfb, {0x18}, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40001) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r7, &(0x7f0000001900)={&(0x7f0000000780), 0xc, &(0x7f00000017c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001800)=[{0xc8, 0x0, 0x0, ""/178}], 0xc8, 0x40000100}, 0x38, 0x142) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000001940)) (async) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000001980)={0x2a, 0x1, 0x7fff}, 0xc) (async) r10 = accept$packet(r1, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a00)=0x14) getsockname$packet(r10, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001a80)=0x14) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xa8, r11, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) write(r4, &(0x7f0000001c80)="1e3c78593b604f2bf2ebb454350ec3bdac4de3871d37da854bcacfdcbae601b4f8cc91d7880fdf7d3842aa06c17a9ed893c632a542fa44830c40de86a6fb6814b66673de921cae544c9c364616e95945041313078988e9a8bc634bfd0dd77517da50845a69769128e58cce527ab98dc065c51c5b7fe3328a2e738dc3477d", 0x7e) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000001d00)=0x8000) (async) accept4$packet(r10, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14, 0x800) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@gettfilter={0x2c, 0x2e, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x8, 0xffe0}, {0x4, 0x5}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f00), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, r13, 0x0, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008805}, 0x1) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r14, 0x84, 0x13, &(0x7f0000002000)=0x8, 0x4) kernel console output (not intermixed with test programs): blocked as long as it is part of bond. [ 309.174726][T13787] bond8: (slave 26±ÿª¨úrBº“): Enslaving as an active interface with an up link [ 309.195209][T13787] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 309.244425][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2124'. [ 309.382612][T13748] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.436120][T13593] lo speed is unknown, defaulting to 1000 [ 309.539371][T13791] syzkaller0: entered promiscuous mode [ 309.558211][T13791] syzkaller0: entered allmulticast mode [ 309.675733][T13807] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2127'. [ 312.026942][T13593] lo speed is unknown, defaulting to 1000 [ 312.235543][ T6153] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.251880][T13827] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2131'. [ 312.262191][T13829] netlink: 'syz.2.2132': attribute type 1 has an invalid length. [ 312.272415][ T158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.495672][ T158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.554418][T13841] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 312.580697][ T158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.998179][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 313.012341][T13864] nbd: must specify a device to reconfigure [ 314.257862][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2153'. [ 314.865922][T13937] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 314.881641][T13937] netlink: 'syz.3.2163': attribute type 2 has an invalid length. [ 314.896792][T13937] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 314.915164][T13937] netlink: 'syz.3.2163': attribute type 2 has an invalid length. [ 314.954108][T13945] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 314.973060][T13941] ipvlan2: entered promiscuous mode [ 314.989995][T13944] tipc: Enabled bearer , priority 0 [ 315.027402][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2163'. [ 315.254360][T13952] syzkaller0: entered promiscuous mode [ 315.264629][T13952] syzkaller0: entered allmulticast mode [ 315.272531][T13952] tipc: Resetting bearer [ 315.319555][T13955] bridge9: entered promiscuous mode [ 315.330034][T13955] bridge9: entered allmulticast mode [ 315.346280][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 315.357280][T13938] tipc: Resetting bearer [ 315.507336][T13973] tipc: Failed to remove unknown binding: 66,0,0/1611346261:2053636609/2053636610 [ 315.585343][T13973] tipc: Failed to remove unknown binding: 66,0,0/1611346261:2053636609/2053636610 [ 316.069647][T13991] netlink: 'syz.4.2173': attribute type 1 has an invalid length. [ 316.995230][T13998] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2174'. [ 318.137461][T13938] tipc: Disabling bearer [ 318.389966][T14005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2176'. [ 318.539924][T14014] syzkaller0: entered promiscuous mode [ 318.551797][T14014] syzkaller0: entered allmulticast mode [ 318.613022][T14014] tipc: Enabled bearer , priority 0 [ 318.626794][T14020] Cannot find add_set index 0 as target [ 318.633005][T14014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 318.674393][T14022] syzkaller0: entered promiscuous mode [ 318.681982][T14022] syzkaller0: entered allmulticast mode [ 318.779384][T14013] tipc: Resetting bearer [ 318.821246][T14013] tipc: Disabling bearer [ 319.356882][T14044] syzkaller1: entered promiscuous mode [ 319.383044][T14044] syzkaller1: entered allmulticast mode [ 319.659202][T14064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.892999][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 319.903119][T14088] SET target dimension over the limit! [ 319.959240][T14094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2198'. [ 320.009184][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2196'. [ 320.029776][T14098] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2196'. [ 320.051069][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2196'. [ 320.510869][T14124] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 320.540964][T14124] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 321.150925][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2213'. [ 321.519749][T14172] sock: sock_timestamping_bind_phc: sock not bind to device [ 321.640613][T14177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2221'. [ 321.672882][T14177] unsupported nla_type 7424 [ 321.768020][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 321.968107][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2227'. [ 322.206934][T14210] netlink: 'syz.4.2232': attribute type 12 has an invalid length. [ 322.267523][T14215] tipc: Enabling of bearer rejected, already enabled [ 322.618298][T14233] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 322.961826][T14261] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.2246'. [ 323.018724][T14261] pim6reg: entered allmulticast mode [ 323.042458][T14261] pim6reg: left allmulticast mode [ 323.113375][T14268] bridge_slave_0: left allmulticast mode [ 323.133258][T14268] bridge_slave_0: left promiscuous mode [ 323.141369][T14268] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.173409][T14268] bridge_slave_1: left promiscuous mode [ 323.181749][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.199108][T14268] bond9: (slave veth0_to_bond): Releasing active interface [ 323.239452][T14268] bond0: (slave bond_slave_0): Releasing backup interface [ 323.260259][T14268] bond0: (slave bond_slave_1): Releasing backup interface [ 323.296126][T14268] team0: Port device team_slave_0 removed [ 323.319477][T14268] team0: Port device team_slave_1 removed [ 323.347045][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.370481][T14268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.406500][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.421816][T14268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.432890][T14268] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 323.450406][ T5369] lo speed is unknown, defaulting to 1000 [ 323.896055][T14304] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 323.969477][T14305] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 323.977406][T14304] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 324.332661][T14324] netlink: Conntrack attr has 4 unknown bytes [ 324.369191][T14327] netlink: 'syz.3.2267': attribute type 33 has an invalid length. [ 324.383867][T14328] bond9 (unregistering): Released all slaves [ 324.494382][T14327] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 324.542141][T14327] bond7 (unregistering): Released all slaves [ 324.580110][T14324] syzkaller0: mtu less than device minimum [ 324.913166][T14344] bridge8: entered promiscuous mode [ 324.954211][T14344] bridge8: entered allmulticast mode [ 325.319326][T14366] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.319574][T14365] __nla_validate_parse: 2 callbacks suppressed [ 325.319809][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2279'. [ 325.369980][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2279'. [ 325.371261][T14366] team0: Device xfrm0 is of different type [ 325.464618][T14369] tipc: Enabled bearer , priority 0 [ 325.552975][T14372] netlink: 'syz.4.2280': attribute type 83 has an invalid length. [ 325.578971][T14372] pim6reg1: entered promiscuous mode [ 325.593091][T14372] pim6reg1: entered allmulticast mode [ 325.734251][T14379] netlink: 'syz.2.2282': attribute type 1 has an invalid length. [ 325.952519][T14388] bond8: (slave bridge10): making interface the new active one [ 326.012754][T14388] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 326.018534][T14399] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2286'. [ 326.049677][T14399] netlink: ct family unspecified [ 326.400375][T14412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2291'. [ 326.420484][T14406] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.952878][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2293'. [ 328.053348][T14427] xfrm1: entered promiscuous mode [ 328.064658][T14427] xfrm1: entered allmulticast mode [ 328.462774][T14449] ip6t_REJECT: ECHOREPLY is not supported [ 328.467145][T14451] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2302'. [ 328.766536][T14463] 8021q: VLANs not supported on syzkaller1 [ 329.071592][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 329.193684][T14481] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2308'. [ 329.413572][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2313'. [ 329.627821][T14511] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2317'. [ 329.647157][T14511] netlink: 'syz.2.2317': attribute type 6 has an invalid length. [ 329.687805][T14511] netlink: 'syz.2.2317': attribute type 5 has an invalid length. [ 330.176979][T14488] tipc: Resetting bearer [ 330.515997][T14542] __nla_validate_parse: 2 callbacks suppressed [ 330.516020][T14542] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2320'. [ 331.065767][T14568] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 331.093277][T14568] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 331.131184][T14568] tipc: Resetting bearer [ 331.156681][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2326'. [ 331.167348][T14575] xt_hashlimit: size too large, truncated to 1048576 [ 331.184679][T14580] xt_hashlimit: size too large, truncated to 1048576 [ 331.442691][T14585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 332.098669][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2337'. [ 332.325782][T14644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2339'. [ 332.824039][T14665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.877002][T14667] netlink: 'syz.2.2345': attribute type 10 has an invalid length. [ 332.893474][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 332.952987][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 333.189601][T14680] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 333.223783][T14680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2348'. [ 333.340031][T14692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2352'. [ 333.745035][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 334.094829][T14723] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 334.125191][T14723] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 334.161751][T14730] openvswitch: netlink: Flow actions attr not present in new flow. [ 334.798044][T14762] syzkaller0: entered promiscuous mode [ 334.828255][T14762] syzkaller0: entered allmulticast mode [ 335.078882][T14775] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 335.288455][T14781] netlink: 'syz.1.2368': attribute type 1 has an invalid length. [ 335.498783][T14790] xt_CT: No such helper "snmp_trap" [ 335.853345][T14811] nbd: must specify a device to reconfigure [ 335.862136][T14810] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 336.051889][T14800] bond10 (unregistering): Released all slaves [ 336.064015][T14823] Bluetooth: hci1: too big key_count value 32778 [ 336.103425][T14826] __nla_validate_parse: 3 callbacks suppressed [ 336.103447][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 336.188592][T14824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2378'. [ 336.232510][T14824] tc_dump_action: action bad kind [ 336.446851][T14840] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 336.981970][T14868] ip6t_rpfilter: unknown options [ 337.563422][T14886] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2395'. [ 337.629852][T14901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 338.557273][T14925] macsec0: left allmulticast mode [ 338.889434][T14946] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2406'. [ 339.217054][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2410'. [ 339.318992][T14961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2410'. [ 339.330636][T14967] netlink: 'syz.4.2409': attribute type 32 has an invalid length. [ 339.396178][T14970] netlink: 'syz.2.2411': attribute type 10 has an invalid length. [ 339.425280][T14970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 339.463734][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2409'. [ 339.485098][T14968] veth9: entered allmulticast mode [ 339.499967][ T6153] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 339.515244][T14971] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 339.535753][T14971] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 339.999989][T14957] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.429362][T15021] tipc: Enabling of bearer rejected, failed to enable media [ 340.547813][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 340.616160][T15034] netlink: 'syz.0.2424': attribute type 1 has an invalid length. [ 340.624288][T15034] netlink: 'syz.0.2424': attribute type 2 has an invalid length. [ 340.633245][T15034] netlink: 'syz.0.2424': attribute type 2 has an invalid length. [ 340.640821][T15022] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 340.641343][T15034] netlink: 'syz.0.2424': attribute type 2 has an invalid length. [ 340.660925][T15022] bond9 (unregistering): Released all slaves [ 341.353555][T15065] __nla_validate_parse: 6 callbacks suppressed [ 341.353577][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2431'. [ 341.376668][T15069] bond0: left promiscuous mode [ 341.389285][T15069] bond_slave_0: left promiscuous mode [ 341.395209][T15069] bond_slave_1: left promiscuous mode [ 341.401487][T15069] team0: left promiscuous mode [ 341.407851][T15069] team_slave_0: left promiscuous mode [ 341.417268][T15069] team_slave_1: left promiscuous mode [ 341.423251][T15069] batadv1: left promiscuous mode [ 341.463883][T15069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.889720][T15089] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 342.083956][T15110] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 342.123656][T15110] netlink: 'syz.0.2439': attribute type 2 has an invalid length. [ 342.174183][T15117] syzkaller0: entered promiscuous mode [ 342.204937][T15123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.224584][T15117] syzkaller0: entered allmulticast mode [ 342.460676][T15105] syzkaller0: entered promiscuous mode [ 342.471259][T15105] syzkaller0: entered allmulticast mode [ 342.536457][T15131] bond0: Error: CAN devices cannot be enslaved [ 342.732685][T15143] netlink: 'syz.1.2443': attribute type 1 has an invalid length. [ 342.751581][T15143] netlink: 'syz.1.2443': attribute type 7 has an invalid length. [ 342.784516][T15143] netlink: 'syz.1.2443': attribute type 8 has an invalid length. [ 342.823678][T15143] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2443'. [ 342.858452][T15143] NCSI netlink: No device for ifindex 65584 [ 343.173031][T15162] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2448'. [ 343.206564][T15162] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 343.219939][T15165] x_tables: unsorted underflow at hook 4 [ 343.378572][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 343.405958][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 343.435657][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 346.203556][T15142] netlink: 'syz.1.2443': attribute type 12 has an invalid length. [ 346.286930][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 346.318696][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2450'. [ 346.354211][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'. [ 346.612547][T15214] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2461'. [ 346.740548][T15214] ¾x9ÿ: renamed from bridge_slave_0 [ 346.764119][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2462'. [ 346.941613][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2464'. [ 347.303991][T15254] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2467'. [ 347.320315][T15254] xt_policy: neither incoming nor outgoing policy selected [ 347.803928][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2471'. [ 349.435026][T15200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 349.536375][T15226] netlink: 'syz.3.2463': attribute type 1 has an invalid length. [ 349.778759][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2477'. [ 349.779293][T15364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.790654][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 349.882667][T15371] netlink: 'syz.4.2479': attribute type 1 has an invalid length. [ 349.931242][T15366] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2476'. [ 350.142545][T15371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 350.343011][T15396] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2486'. [ 350.371501][T15396] netlink: 'syz.1.2486': attribute type 1 has an invalid length. [ 350.640420][T15416] netlink: 'syz.4.2491': attribute type 2 has an invalid length. [ 350.688957][T15416] netlink: 'syz.4.2491': attribute type 2 has an invalid length. [ 350.725963][T15416] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2491'. [ 350.951461][T15430] netlink: 'syz.1.2493': attribute type 1 has an invalid length. [ 351.034747][T15430] 8021q: adding VLAN 0 to HW filter on device bond10 [ 351.046206][T15437] ip_vti0: entered promiscuous mode [ 351.552409][T15457] openvswitch: netlink: nsh attr 4608 is out of range max 3 [ 351.614893][T15459] netlink: 'syz.4.2501': attribute type 1 has an invalid length. [ 351.652889][T15459] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 351.858196][T15473] netlink: 'syz.0.2503': attribute type 1 has an invalid length. [ 351.985945][T15477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.063658][T15489] __nla_validate_parse: 2 callbacks suppressed [ 352.063681][T15489] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.2507'. [ 352.091889][T15473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.110312][T15489] 0ªX¹¦Dö»: renamed from  [ 352.130501][T15489] 0ªX¹¦Dö»: left promiscuous mode [ 352.142829][T15489] 0ªX¹¦Dö»: entered allmulticast mode [ 352.154377][T15477] netlink: 'syz.2.2505': attribute type 7 has an invalid length. [ 352.330982][T15483] lo speed is unknown, defaulting to 1000 [ 352.486349][T15503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2511'. [ 352.579988][T15503] syzkaller0: entered promiscuous mode [ 352.590318][T15503] syzkaller0: entered allmulticast mode [ 352.619724][T15502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.735360][T15518] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2514'. [ 353.133809][T15534] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2518'. [ 353.294823][T15549] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2517'. [ 353.590531][T15559] netlink: 'syz.1.2521': attribute type 83 has an invalid length. [ 354.479946][T15590] netlink: 'syz.0.2528': attribute type 1 has an invalid length. [ 354.610146][T15596] openvswitch: netlink: IP tunnel dst address not specified [ 354.671047][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 354.694206][T15596] syzkaller1: entered promiscuous mode [ 354.725025][T15601] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2529'. [ 354.728475][T15596] syzkaller1: entered allmulticast mode [ 355.160313][T15616] netlink: 'syz.2.2533': attribute type 11 has an invalid length. [ 355.191105][T15616] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 355.258944][ T29] audit: type=1804 audit(1780656055.948:9): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2533" name="/newroot/484/cgroup.controllers" dev="tmpfs" ino=2483 res=1 errno=0 [ 355.302889][T15620] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2534'. [ 355.326094][ T29] audit: type=1800 audit(1780656055.958:10): pid=15616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2533" name="cgroup.controllers" dev="tmpfs" ino=2483 res=0 errno=0 [ 355.348262][T15620] netlink: 'syz.4.2534': attribute type 7 has an invalid length. [ 355.367312][T15620] netlink: 'syz.4.2534': attribute type 8 has an invalid length. [ 355.392128][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2534'. [ 355.488533][T15629] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2538'. [ 356.100768][T15668] netlink: 'syz.3.2543': attribute type 2 has an invalid length. [ 356.415622][T15683] netlink: 'syz.2.2546': attribute type 24 has an invalid length. [ 356.611150][T15689] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 356.842860][T15688] bond5: entered promiscuous mode [ 356.867194][T15688] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.077183][T15716] validate_nla: 1 callbacks suppressed [ 357.077203][T15716] netlink: 'syz.0.2555': attribute type 1 has an invalid length. [ 357.122678][T15716] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2555'. [ 357.197873][T15722] tipc: Enabled bearer , priority 0 [ 357.351821][T15734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2558'. [ 357.380433][T15722] syzkaller0: entered promiscuous mode [ 357.400897][T15722] syzkaller0: entered allmulticast mode [ 357.414637][T15722] tipc: Resetting bearer [ 357.451723][T15718] tipc: Resetting bearer [ 359.882379][T15718] tipc: Disabling bearer [ 359.893010][T15742] tipc: Resetting bearer [ 359.900940][T15742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.947278][T15746] team0: Refused to change device type [ 359.984359][T15748] tipc: Enabling of bearer rejected, already enabled [ 360.013103][T15747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.188816][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 360.229383][T15759] nbd: must specify at least one socket [ 360.297815][T15761] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 360.331006][T15761] netlink: 'syz.0.2570': attribute type 30 has an invalid length. [ 360.435146][T15770] netlink: 'syz.3.2574': attribute type 24 has an invalid length. [ 360.445930][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 360.825350][T15789] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2581'. [ 361.086629][T15801] netlink: 'syz.0.2584': attribute type 9 has an invalid length. [ 361.095807][T15801] netlink: 'syz.0.2584': attribute type 6 has an invalid length. [ 361.103965][T15801] netlink: 'syz.0.2584': attribute type 7 has an invalid length. [ 361.112920][T15801] netlink: 'syz.0.2584': attribute type 8 has an invalid length. [ 361.416638][T15813] xt_ecn: cannot match TCP bits for non-tcp packets [ 361.478960][T15813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 361.537247][T15820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2588'. [ 361.874795][T15832] xt_connbytes: Forcing CT accounting to be enabled [ 362.220898][T15852] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2598'. [ 362.230133][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2598'. [ 362.274096][T15854] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2601'. [ 362.316318][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2601'. [ 362.345851][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2601'. [ 362.525895][T15870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2604'. [ 362.620766][T15873] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.700875][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 362.818812][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 362.882846][T15885] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2610'. [ 362.911104][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2608'. [ 363.176006][T15895] netlink: 'syz.3.2613': attribute type 75 has an invalid length. [ 363.638753][T15921] vlan3: entered promiscuous mode [ 363.648265][T15921] bridge0: entered promiscuous mode [ 363.912807][ T29] audit: type=1800 audit(1780656064.598:11): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2624" name="memory.events" dev="tmpfs" ino=2568 res=0 errno=0 [ 364.093216][T15941] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 364.271901][T15950] bond10: entered promiscuous mode [ 364.287438][T15950] bond10: entered allmulticast mode [ 364.391098][T15961] syzkaller0: entered promiscuous mode [ 364.396737][T15961] syzkaller0: entered allmulticast mode [ 364.531129][T15968] netlink: 'syz.1.2631': attribute type 1 has an invalid length. [ 365.486196][ T5641] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 365.495337][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 366.913838][T15955] syzkaller1: entered promiscuous mode [ 366.927427][T15955] syzkaller1: entered allmulticast mode [ 367.089896][T15989] netlink: 'syz.2.2639': attribute type 11 has an invalid length. [ 367.261559][T15994] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 367.283418][T15994] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 367.526421][T16011] __nla_validate_parse: 8 callbacks suppressed [ 367.526443][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 367.583786][T16017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2646'. [ 367.594781][T16014] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2645'. [ 368.088834][T16039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.308161][T16047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2653'. [ 368.327960][T16046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.018864][T16061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2658'. [ 369.044557][T16062] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2657'. [ 369.119192][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2660'. [ 369.374677][T16076] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 369.414906][T16080] Cannot find set identified by id 3 to match [ 369.866521][T16098] netlink: 'syz.2.2668': attribute type 15 has an invalid length. [ 370.104457][T16102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2670'. [ 370.378764][T16116] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.033012][T16151] syzkaller0: entered promiscuous mode [ 371.046416][T16151] syzkaller0: entered allmulticast mode [ 371.050136][T16160] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 371.326355][T16173] x_tables: unsorted entry at hook 3 [ 371.477661][T16178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2687'. [ 373.835319][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.869045][T16183] syzkaller1: entered promiscuous mode [ 373.887981][T16183] syzkaller1: entered allmulticast mode [ 374.036081][T16190] netlink: 'syz.3.2689': attribute type 21 has an invalid length. [ 374.040414][T16196] --map-set only usable from mangle table [ 374.051970][T16192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2692'. [ 374.552784][T16228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2701'. [ 374.624205][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2701'. [ 374.731176][T16240] netlink: 'syz.1.2704': attribute type 10 has an invalid length. [ 375.207745][T16265] openvswitch: netlink: IP tunnel dst address not specified [ 375.391209][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2717'. [ 375.531942][T16284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 375.640382][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2720'. [ 375.891484][T16293] openvswitch: netlink: IP tunnel dst address not specified [ 375.941488][T16293] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2723'. [ 375.996133][T16271] infiniband syz2: set down [ 376.004918][T16271] infiniband syz2: added ipvlan0 [ 376.060669][T16271] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 376.087440][T16271] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 376.112872][T16271] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 376.187693][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'. [ 376.230372][T16271] RDS/IB: syz2: added [ 376.239591][T16303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2727'. [ 376.252102][T16271] smc: adding ib device syz2 with port count 1 [ 376.278890][T16271] smc: ib device syz2 port 1 has no pnetid [ 376.294964][T16303] syzkaller0: entered promiscuous mode [ 376.313825][T16303] syzkaller0: entered allmulticast mode [ 376.407579][T16318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'. [ 376.484812][T16321] netlink: 'syz.4.2730': attribute type 5 has an invalid length. [ 376.602063][T16325] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 376.662804][T16328] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 376.683944][T16328] netlink: 'syz.1.2732': attribute type 2 has an invalid length. [ 376.700278][T16325] syzkaller0: entered promiscuous mode [ 376.708661][T16325] syzkaller0: entered allmulticast mode [ 376.718259][T16328] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 376.741280][T16328] netlink: 'syz.1.2732': attribute type 2 has an invalid length. [ 377.161555][T16345] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.169352][T16345] bridge0: port 1(bond7) entered blocking state [ 377.176186][T16345] bridge0: port 1(bond7) entered disabled state [ 377.183073][T16345] bond7: entered allmulticast mode [ 377.458061][T16363] netlink: 'syz.2.2741': attribute type 12 has an invalid length. [ 377.725915][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 377.726453][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 378.054022][T16388] netlink: 'syz.1.2748': attribute type 1 has an invalid length. [ 378.454986][T16400] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 378.498360][T16405] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 378.963836][ T29] audit: type=1804 audit(1780656079.648:12): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2758" name="/newroot/531/cgroup.controllers" dev="tmpfs" ino=2727 res=1 errno=0 [ 378.987360][ T29] audit: type=1800 audit(1780656079.648:13): pid=16420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2758" name="cgroup.controllers" dev="tmpfs" ino=2727 res=0 errno=0 [ 379.052176][T16409] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 379.069070][T16409] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 379.105030][T16409] gretap1: entered promiscuous mode [ 379.182632][T16409] gretap1: entered allmulticast mode [ 379.630836][T16446] __nla_validate_parse: 11 callbacks suppressed [ 379.630859][T16446] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2763'. [ 380.625316][T16488] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 380.647328][T16496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.809888][T16499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2777'. [ 380.819430][T16499] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2777'. [ 380.849281][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 380.886103][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 380.916679][T16506] openvswitch: netlink: IPv4 tun info is not correct [ 381.395673][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 381.524762][T16540] IPv6: sit1: Disabled Multicast RS [ 381.553906][T16540] sit1: entered allmulticast mode [ 381.710774][T16550] netlink: 'syz.3.2789': attribute type 3 has an invalid length. [ 381.882383][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2794'. [ 381.897820][T16554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2792'. [ 381.923557][T16561] netlink: 'syz.3.2795': attribute type 9 has an invalid length. [ 381.932092][T16562] netlink: 'syz.3.2795': attribute type 9 has an invalid length. [ 381.955284][T16557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2794'. [ 381.968648][T16561] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2795'. [ 382.142367][T16556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.764642][T16596] syzkaller0: entered promiscuous mode [ 382.795339][T16596] syzkaller0: entered allmulticast mode [ 383.133996][ T6153] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.147427][T16622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.156055][ T6153] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.202845][T16624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.798077][T16663] xt_hashlimit: size too large, truncated to 1048576 [ 384.043065][T16680] SET target dimension over the limit! [ 384.284593][T16694] bond11: invalid ARP target 0.0.0.0 specified for addition [ 384.293668][T16694] bond11: option arp_ip_target: invalid value (0) [ 384.459857][T16694] bond11 (unregistering): Released all slaves [ 384.834111][T16675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 385.066122][T16719] __nla_validate_parse: 6 callbacks suppressed [ 385.066143][T16719] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2841'. [ 385.178218][T16722] tipc: Enabled bearer , priority 0 [ 385.313459][T16733] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 385.415846][T16722] syzkaller0: entered promiscuous mode [ 385.449077][T16741] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2848'. [ 385.462601][T16722] syzkaller0: entered allmulticast mode [ 385.475321][T16722] tipc: Resetting bearer [ 385.551724][T16720] tipc: Resetting bearer [ 385.823812][T16759] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2853'. [ 388.189462][T16720] tipc: Disabling bearer [ 388.494982][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2858'. [ 388.663924][ T158] bond0: (slave bond_slave_0): interface is now down [ 388.704024][ T158] bond0: (slave bond_slave_1): interface is now down [ 388.724945][ T158] bond0: (slave team0): interface is now down [ 388.819513][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 388.833089][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 388.838312][ T158] bond0: now running without any active interface! [ 388.862228][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 388.877243][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 388.891704][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 389.093255][T16801] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 389.471316][T16808] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2867'. [ 389.881535][T16833] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2875'. [ 389.881548][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2874'. [ 390.144089][T16844] macvlan3: entered promiscuous mode [ 390.165942][T16844] macvlan3: entered allmulticast mode [ 390.177873][T16844] team0: Device macvlan3 is already an upper device of the team interface [ 390.222154][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'. [ 390.231139][T16788] lo speed is unknown, defaulting to 1000 [ 390.275364][T16845] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2877'. [ 390.293571][T16845] netlink: 50 bytes leftover after parsing attributes in process `syz.2.2877'. [ 390.512375][T16862] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2882'. [ 390.742451][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2885'. [ 390.926481][ T5641] Bluetooth: hci5: command tx timeout [ 391.760611][T16915] x_tables: unsorted entry at hook 2 [ 392.253393][T16937] sctp: [Deprecated]: syz.1.2900 (pid 16937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.253393][T16937] Use struct sctp_sack_info instead [ 392.554445][T16956] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2907'. [ 392.568727][T16954] blkio.reset_stats is deprecated [ 392.739655][T16966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 392.858306][T16970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2911'. [ 392.862955][T16962] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 392.901094][T16962] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 392.904941][T16969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2910'. [ 392.953435][T16962] tipc: Resetting bearer [ 393.008479][ T5641] Bluetooth: hci5: command tx timeout [ 393.413267][T16788] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.420819][T16788] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.429179][T16788] bridge_slave_0: entered allmulticast mode [ 393.437870][T16788] bridge_slave_0: entered promiscuous mode [ 393.452584][T16788] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.460350][T16788] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.468073][T16788] bridge_slave_1: entered allmulticast mode [ 393.487413][T16788] bridge_slave_1: entered promiscuous mode [ 393.752402][T16788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.797350][T16788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.866652][T17007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2920'. [ 393.881398][T17014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 393.929681][T16788] team0: Port device team_slave_0 added [ 393.953561][T16788] team0: Port device team_slave_1 added [ 394.088061][T16788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.095202][T16788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.127043][T16788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.149651][T16788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.157223][T16788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.185306][T16788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.414842][T16788] hsr_slave_0: entered promiscuous mode [ 394.438473][T16788] hsr_slave_1: entered promiscuous mode [ 394.456776][T16788] debugfs: 'hsr0' already exists in 'hsr' [ 394.469838][T16788] Cannot create hsr debugfs directory [ 394.702961][T17047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.782993][T17047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.858672][T17047] bond0 (unregistering): (slave team0): Releasing backup interface [ 394.891192][T17047] bond0 (unregistering): Released all slaves [ 395.085864][ T5641] Bluetooth: hci5: command tx timeout [ 395.554274][T16788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.583155][T17087] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 395.598675][ T29] audit: type=1107 audit(1780656096.288:14): pid=17084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 395.833526][T16788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.889059][T17102] netlink: 'syz.1.2946': attribute type 15 has an invalid length. [ 395.910598][T17102] __nla_validate_parse: 2 callbacks suppressed [ 395.910621][T17102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2946'. [ 396.051909][T16788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.243670][T16788] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.892321][T17144] netlink: 'syz.0.2957': attribute type 26 has an invalid length. [ 396.921645][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 396.954747][T17144] netlink: 'syz.0.2957': attribute type 26 has an invalid length. [ 396.966110][T16788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 396.973311][T17144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 396.989630][T16788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.000304][T16788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.017865][T16788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.072366][T16788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.100092][T16788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.117980][T16788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.149477][T16788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.166225][ T5641] Bluetooth: hci5: command tx timeout [ 397.441338][T16788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.523189][T16788] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.527665][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2961'. [ 397.559045][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.566350][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.650927][T17170] SET target dimension over the limit! [ 397.656855][T17171] netlink: 'syz.0.2961': attribute type 1 has an invalid length. [ 397.662402][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.672555][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.683944][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 397.699009][T17170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2962'. [ 397.802644][T17170] gretap0: entered promiscuous mode [ 397.822071][T17170] gretap0: left promiscuous mode [ 397.911589][T17154] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 398.005004][T17180] bond12 (unregistering): Released all slaves [ 398.121011][T17195] veth0: entered promiscuous mode [ 398.420404][T17191] veth0: left promiscuous mode [ 398.537089][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2971'. [ 398.622199][T17211] macsec0: entered promiscuous mode [ 398.665987][T17211] macsec0: entered allmulticast mode [ 398.678455][T17211] bridge0: port 3(macsec0) entered blocking state [ 398.696378][T17211] bridge0: port 3(macsec0) entered disabled state [ 398.704391][T17219] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2973'. [ 398.909051][T17218] netlink: 'syz.2.2974': attribute type 1 has an invalid length. [ 399.278281][T17236] xt_hl: Unknown TTL match mode: 255 [ 399.326364][T17239] netlink: 'syz.4.2977': attribute type 1 has an invalid length. [ 399.573276][T17248] netlink: 'syz.0.2980': attribute type 21 has an invalid length. [ 399.592224][T17248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2980'. [ 399.905171][T17258] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 399.916873][T16788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.091059][T17269] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.092301][T17267] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 400.116788][T17268] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 400.146201][T17267] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 400.318736][T17282] wlan0: mtu less than device minimum [ 400.377806][T17277] scsi_nl_rcv_msg: discarding partial skb [ 400.433663][T16788] veth0_vlan: entered promiscuous mode [ 400.490326][T16788] veth1_vlan: entered promiscuous mode [ 400.615860][T17288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2991'. [ 400.752897][T17288] 8021q: adding VLAN 0 to HW filter on device bond11 [ 400.777614][T16788] veth0_macvtap: entered promiscuous mode [ 400.876663][T17297] 8021q: adding VLAN 0 to HW filter on device bond12 [ 400.891221][T17297] bond11: (slave bond12): Enslaving as an active interface with an up link [ 400.923683][T16788] veth1_macvtap: entered promiscuous mode [ 401.006334][T17304] netlink: 115 bytes leftover after parsing attributes in process `syz.0.2996'. [ 401.030059][T16788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.091138][T16788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.170472][ T3332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.192851][ T3332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.235262][ T3332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.252740][T17310] openvswitch: netlink: IPv4 tun info is not correct [ 401.269228][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.458276][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3002'. [ 401.565241][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.606559][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.758666][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.775275][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.800492][T17330] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 402.558566][T17376] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 402.567569][ T5749] IPVS: starting estimator thread 0... [ 402.653526][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.668775][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.678440][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.685688][T17377] IPVS: using max 32 ests per chain, 76800 per kthread [ 402.711601][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.722473][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.988044][T17396] xfrm0: mtu less than device minimum [ 403.269414][T17413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3021'. [ 403.500117][T17420] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 403.544876][T17422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3024'. [ 403.702599][T17428] tipc: Enabling of bearer rejected, already enabled [ 403.993364][T17436] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 404.017706][T17436] bond0 (unregistering): Released all slaves [ 404.073923][T17378] lo speed is unknown, defaulting to 1000 [ 404.481923][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3034'. [ 404.534530][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3034'. [ 404.623350][T17457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3034'. [ 404.630248][T17454] 8021q: adding VLAN 0 to HW filter on device bond13 [ 404.684004][T17457] bond13 (unregistering): Released all slaves [ 404.767907][ T5641] Bluetooth: hci3: command tx timeout [ 405.428235][T17471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 405.614695][T17378] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.622583][T17378] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.630529][T17378] bridge_slave_0: entered allmulticast mode [ 405.638984][T17378] bridge_slave_0: entered promiscuous mode [ 405.649800][T17378] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.657191][T17378] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.664491][T17378] bridge_slave_1: entered allmulticast mode [ 405.678991][T17378] bridge_slave_1: entered promiscuous mode [ 405.777531][T17378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.798861][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3043'. [ 405.815277][T17378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.845738][T17491] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3043'. [ 405.859421][T17378] team0: Port device team_slave_0 added [ 405.893472][T17378] team0: Port device team_slave_1 added [ 406.002469][T17378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.032768][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.062456][T17378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.101231][T17378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.124832][T17378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.226417][T17378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.498569][T17515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.509930][T17514] __nla_validate_parse: 1 callbacks suppressed [ 406.509951][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 406.554765][T17378] hsr_slave_0: entered promiscuous mode [ 406.576875][T17378] hsr_slave_1: entered promiscuous mode [ 406.607336][T17378] debugfs: 'hsr0' already exists in 'hsr' [ 406.630893][T17378] Cannot create hsr debugfs directory [ 406.704192][T17514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 406.740135][T17522] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3052'. [ 406.787320][T17524] netlink: 'syz.1.3053': attribute type 12 has an invalid length. [ 406.804969][T17524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3053'. [ 406.869819][ T5641] Bluetooth: hci3: command tx timeout [ 406.962690][T17524] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 407.023329][T17531] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 407.615036][T17378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.640355][T17378] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.820685][T17378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.832203][T17378] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.985767][T17378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.995426][T17448] Set syz1 is full, maxelem 65536 reached [ 407.996440][T17378] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.257192][T17551] netlink: 'syz.3.3062': attribute type 39 has an invalid length. [ 408.441267][T17558] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.490261][T17558] netlink: 'syz.1.3064': attribute type 4 has an invalid length. [ 408.517889][T17558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3064'. [ 408.598127][T17563] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3066'. [ 408.761326][T17563] tipc: Started in network mode [ 408.777699][T17563] tipc: Node identity a673c9915c9f, cluster identity 4711 [ 408.800041][T17563] tipc: Enabled bearer , priority 0 [ 408.832141][T17378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.858739][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.868674][T17564] syzkaller0: entered promiscuous mode [ 408.880181][T17564] syzkaller0: entered allmulticast mode [ 408.898805][T17566] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.921167][T17378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.928296][ T5641] Bluetooth: hci3: command tx timeout [ 408.954339][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.976771][T17378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.003533][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.032515][T17564] tipc: Resetting bearer [ 409.061428][T17562] tipc: Resetting bearer [ 409.130999][T17562] tipc: Disabling bearer [ 409.179777][T17378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 409.254146][T17378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.644870][T17378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.663766][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'. [ 409.717358][ T29] audit: type=1800 audit(1780656110.398:15): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3073" name="memory.events" dev="tmpfs" ino=3323 res=0 errno=0 [ 409.717457][T17615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3073'. [ 409.766747][T17378] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.815117][T17356] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.822407][T17356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.833177][ T29] audit: type=1804 audit(1780656110.408:16): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3073" name="/newroot/649/memory.events" dev="tmpfs" ino=3323 res=1 errno=0 [ 409.903330][T17357] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.910600][T17357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.211562][T17593] netlink: 'syz.2.3071': attribute type 16 has an invalid length. [ 410.229242][T17629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.240041][T17593] netlink: 'syz.2.3071': attribute type 17 has an invalid length. [ 410.344046][T17593] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 410.702671][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3083'. [ 410.780305][T17646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 410.826087][T17651] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 411.007483][ T5641] Bluetooth: hci3: command tx timeout [ 411.171427][T17665] xt_hashlimit: size too large, truncated to 1048576 [ 411.518183][T17378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.587763][T17690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3092'. [ 411.662279][T17378] veth0_vlan: entered promiscuous mode [ 411.701854][T17378] veth1_vlan: entered promiscuous mode [ 411.795207][T17378] veth0_macvtap: entered promiscuous mode [ 411.831171][T17378] veth1_macvtap: entered promiscuous mode [ 411.863757][T17378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.915127][T17378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.949761][T17352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.962363][T17703] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3095'. [ 411.964591][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'. [ 411.980658][T17352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.989826][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3096'. [ 412.010704][T17352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.021912][T17352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.068297][T17698] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 412.207477][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.218265][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.255084][T17709] netlink: 'syz.3.3097': attribute type 1 has an invalid length. [ 412.267456][T17709] netlink: 'syz.3.3097': attribute type 11 has an invalid length. [ 412.291926][T17709] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3097'. [ 412.344306][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.378954][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.455259][T17716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3098'. [ 412.487197][T17720] openvswitch: netlink: Duplicate or invalid key (type 0). [ 412.494610][T17720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.579346][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 412.711848][T17725] bond2: entered promiscuous mode [ 412.720165][T17725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 412.804059][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 412.814039][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 412.847562][T17732] tipc: Enabled bearer , priority 0 [ 412.920681][T17732] syzkaller0: entered promiscuous mode [ 412.945924][T17732] syzkaller0: entered allmulticast mode [ 413.058222][T17744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 413.259138][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.274388][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.286549][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.300622][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.309057][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.660850][T17756] tipc: Resetting bearer [ 413.670380][T17730] tipc: Resetting bearer [ 413.696126][T17730] tipc: Disabling bearer [ 414.213778][T17785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.408704][T17786] bond1: entered promiscuous mode [ 414.427554][T17786] bond1: entered allmulticast mode [ 414.440214][T17786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.489181][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 414.650444][T17754] lo speed is unknown, defaulting to 1000 [ 414.653800][T17807] netlink: 'syz.1.3120': attribute type 21 has an invalid length. [ 414.672732][T17808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.883960][T17819] netlink: 'syz.3.3121': attribute type 30 has an invalid length. [ 414.943783][T17820] netlink: 'syz.3.3121': attribute type 30 has an invalid length. [ 415.024360][ T1159] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.055301][ T1159] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.151212][ T1159] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.225296][ T1159] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.406807][ T50] Bluetooth: hci4: command tx timeout [ 417.174090][T17899] __nla_validate_parse: 5 callbacks suppressed [ 417.174111][T17899] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3137'. [ 417.218337][T17900] netlink: 'syz.0.3139': attribute type 21 has an invalid length. [ 417.251821][T17900] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.255682][T17903] netlink: 'syz.4.3140': attribute type 1 has an invalid length. [ 417.486613][ T50] Bluetooth: hci4: command tx timeout [ 417.529255][T17910] bond0: (slave veth3): Enslaving as an active interface with a down link [ 417.581330][T17903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.624117][T17754] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.643513][T17754] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.658960][T17754] bridge_slave_0: entered allmulticast mode [ 417.668547][T17754] bridge_slave_0: entered promiscuous mode [ 417.741142][T17754] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.761609][T17754] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.772413][T17929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.783047][T17754] bridge_slave_1: entered allmulticast mode [ 417.791759][T17754] bridge_slave_1: entered promiscuous mode [ 417.822225][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3146'. [ 417.916499][T17754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.940596][T17754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.972306][T17937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3147'. [ 418.012132][T17754] team0: Port device team_slave_0 added [ 418.019650][T17937] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3147'. [ 418.021320][T17754] team0: Port device team_slave_1 added [ 418.094097][T17754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.101692][T17754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.133922][T17754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.165858][T17754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.173291][T17754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.201838][T17754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.297626][T17946] netlink: 'syz.0.3151': attribute type 83 has an invalid length. [ 418.318657][T17754] hsr_slave_0: entered promiscuous mode [ 418.330942][T17754] hsr_slave_1: entered promiscuous mode [ 418.350831][T17754] debugfs: 'hsr0' already exists in 'hsr' [ 418.365278][T17754] Cannot create hsr debugfs directory [ 418.494986][T17954] netlink: 204944 bytes leftover after parsing attributes in process `syz.1.3152'. [ 418.973972][T17973] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.174552][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3158'. [ 419.260718][T17980] netlink: 'syz.0.3158': attribute type 9 has an invalid length. [ 419.538174][T17992] team0: Device gtp1 is up. Set it down before adding it as a team port [ 419.566877][ T50] Bluetooth: hci4: command tx timeout [ 419.610065][T17997] syzkaller0: entered promiscuous mode [ 419.615920][T17997] syzkaller0: entered allmulticast mode [ 419.707978][T17754] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.937476][T17754] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.020258][T18014] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 420.162873][T18021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3169'. [ 420.172172][T18021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3169'. [ 420.201947][T17754] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.232528][T18021] team0: entered promiscuous mode [ 420.261290][T18021] geneve1: entered promiscuous mode [ 420.414627][T18030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3170'. [ 420.443750][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3170'. [ 420.823383][T18047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.839209][T18047] batadv_slave_1: entered promiscuous mode [ 420.860968][T18043] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 421.038362][T18037] syzkaller0: entered promiscuous mode [ 421.046916][T18037] syzkaller0: entered allmulticast mode [ 421.138184][T18049] bond13: (slave gretap2): making interface the new active one [ 421.148469][T18049] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 421.645860][ T50] Bluetooth: hci4: command tx timeout [ 424.253041][T18087] tipc: Enabling of bearer rejected, failed to enable media [ 424.378355][T17754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.409974][T17754] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 424.447885][T17754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.480804][T17754] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.509668][T17754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.566960][T17754] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 424.597064][T17754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.629255][T17754] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.705169][T18121] __nla_validate_parse: 2 callbacks suppressed [ 424.705191][T18121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3190'. [ 424.881850][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 424.973247][T18132] netlink: 'syz.0.3192': attribute type 6 has an invalid length. [ 426.051981][T18149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3193'. [ 426.240358][T17754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.342291][T17754] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.377045][T18164] syzkaller0: entered promiscuous mode [ 426.392735][T18164] syzkaller0: entered allmulticast mode [ 426.416686][T17351] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.423946][T17351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.494579][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.501872][T17354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.715927][T18184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3201'. [ 426.917978][T18187] netlink: 'syz.3.3202': attribute type 1 has an invalid length. [ 427.058680][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'. [ 427.365161][T18218] netlink: 'syz.3.3207': attribute type 21 has an invalid length. [ 427.397825][T18218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3207'. [ 428.041120][T18242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3213'. [ 428.073576][T18245] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.089182][T18243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 428.108029][T18245] IPv6: Can't replace route, no match found [ 428.125140][T18247] tipc: Started in network mode [ 428.146049][T18247] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 428.193241][T18249] netlink: 'syz.4.3213': attribute type 1 has an invalid length. [ 428.209989][T18247] tipc: Enabled bearer , priority 10 [ 428.211538][T18251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3215'. [ 428.275313][T18255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3215'. [ 428.357307][T18238] IPVS: persistence engine module ip_vs_pe_À not found [ 428.466043][T17754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.644108][T18264] vet: renamed from veth0_vlan (while UP) [ 428.824664][T17754] veth0_vlan: entered promiscuous mode [ 428.904322][T17754] veth1_vlan: entered promiscuous mode [ 428.928066][T18282] netlink: 'syz.0.3222': attribute type 83 has an invalid length. [ 428.974882][T18283] netlink: 'syz.0.3222': attribute type 83 has an invalid length. [ 429.025107][T17754] veth0_macvtap: entered promiscuous mode [ 429.082291][T17754] veth1_macvtap: entered promiscuous mode [ 429.149559][T17754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.162826][T17754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.271901][ T1159] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.306933][ T1159] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.324643][ T1159] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.338228][ T1159] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.349257][ T5369] tipc: Node number set to 4269801492 [ 432.085823][T18287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.230450][T17357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.255323][T17357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.399454][T17354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.439538][T17354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.699602][T18353] syzkaller0: entered promiscuous mode [ 432.720126][T18353] syzkaller0: entered allmulticast mode [ 432.796955][T18360] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 433.111524][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.126292][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.138098][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.151228][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.162858][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.239910][T18368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3242'. [ 433.300385][T18368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3242'. [ 433.361388][T18368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3242'. [ 433.514753][T18377] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 433.526332][T18378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3246'. [ 433.675133][T18377] veth3: entered promiscuous mode [ 433.696106][T18377] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 433.740398][T18390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3248'. [ 433.988600][T18396] vlan2: entered promiscuous mode [ 433.994196][T18396] bridge0: entered promiscuous mode [ 434.381510][T18418] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3255'. [ 434.412306][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3255'. [ 434.461665][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3255'. [ 434.495032][T18418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3255'. [ 434.506464][T18364] lo speed is unknown, defaulting to 1000 [ 434.594039][T18423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.757134][T18433] netlink: 'syz.0.3259': attribute type 1 has an invalid length. [ 435.123330][T18450] syzkaller0: entered promiscuous mode [ 435.167148][T18450] syzkaller0: entered allmulticast mode [ 435.205612][T18448] 0: reclassify loop, rule prio 0, protocol 800 [ 435.247302][ T50] Bluetooth: hci2: command tx timeout [ 436.280822][T18497] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3276'. [ 436.363307][T18497] netlink: 'syz.3.3276': attribute type 6 has an invalid length. [ 436.405569][T18497] netlink: 'syz.3.3276': attribute type 5 has an invalid length. [ 436.753469][T18520] bond3: Invalid ad_actor_system MAC address. [ 436.759895][T18520] bond3: option ad_actor_system: invalid value (1) [ 436.771103][T18520] bond3 (unregistering): Released all slaves [ 437.325996][ T50] Bluetooth: hci2: command tx timeout [ 437.759182][T18566] bond1: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 437.773023][T18566] bond1 (unregistering): Released all slaves [ 437.828182][T18364] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.835838][T18364] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.843312][T18364] bridge_slave_0: entered allmulticast mode [ 437.853940][T18364] bridge_slave_0: entered promiscuous mode [ 437.866850][T18364] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.874421][T18364] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.882479][T18364] bridge_slave_1: entered allmulticast mode [ 437.892218][T18364] bridge_slave_1: entered promiscuous mode [ 437.977747][T18364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.011443][T18364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.029216][T18571] syzkaller0: entered promiscuous mode [ 438.035247][T18571] syzkaller0: entered allmulticast mode [ 438.187218][T18364] team0: Port device team_slave_0 added [ 438.208278][T18364] team0: Port device team_slave_1 added [ 438.487870][T18364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.509446][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.541541][T18588] __nla_validate_parse: 4 callbacks suppressed [ 438.541564][T18588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3299'. [ 438.604883][T18364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.661806][T18364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.688872][T18364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.732168][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3301'. [ 438.744276][T18364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.780939][T18599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3300'. [ 438.799497][T18601] tipc: Enabling of bearer rejected, already enabled [ 438.968899][T18364] hsr_slave_0: entered promiscuous mode [ 438.986987][T18364] hsr_slave_1: entered promiscuous mode [ 438.993997][T18364] debugfs: 'hsr0' already exists in 'hsr' [ 439.000571][T18364] Cannot create hsr debugfs directory [ 439.041566][T18610] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3305'. [ 439.406886][ T50] Bluetooth: hci2: command tx timeout [ 439.422108][T18364] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.544599][T18364] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.790078][T18364] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.922377][T18636] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 439.978881][T18644] gre1: entered promiscuous mode [ 440.044160][ T5369] hid (null): report_id 2362177985 is invalid [ 440.051988][T18364] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.088625][ T5369] hid-generic 0005:0006:0004.0002: report_id 2362177985 is invalid [ 440.140249][ T5369] hid-generic 0005:0006:0004.0002: item 0 4 1 8 parsing failed [ 440.241258][ T5369] hid-generic 0005:0006:0004.0002: probe with driver hid-generic failed with error -22 [ 440.678738][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 440.794975][T18675] netlink: 'syz.3.3325': attribute type 12 has an invalid length. [ 440.804490][T18675] netlink: 'syz.3.3325': attribute type 29 has an invalid length. [ 440.812914][T18675] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3325'. [ 440.836623][T18675] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3325'. [ 440.866678][T18364] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.895296][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.016744][T18364] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.028315][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.040743][T18364] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.041673][T18680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3328'. [ 441.068196][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.093179][T18692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3329'. [ 441.096629][T18689] lo speed is unknown, defaulting to 1000 [ 441.106810][T18364] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.125343][T18364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.229454][T18695] netlink: 'syz.0.3330': attribute type 4 has an invalid length. [ 441.239934][T18695] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3330'. [ 441.495760][ T50] Bluetooth: hci2: command tx timeout [ 443.655932][T18671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 443.866781][T18714] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3334'. [ 444.152033][T18364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.249791][T18364] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.300855][T17351] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.308202][T17351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.351568][T17356] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.358885][T17356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.618450][T18754] veth1_to_bond: entered allmulticast mode [ 444.633720][T18754] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3346'. [ 444.645960][T18755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3345'. [ 444.649635][T18757] netlink: 'syz.3.3347': attribute type 10 has an invalid length. [ 444.687225][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3347'. [ 444.865308][T18770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 444.883602][T18754] bond3 (unregistering): Released all slaves [ 444.942552][T18772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3350'. [ 444.952978][T18772] netlink: 'syz.2.3350': attribute type 26 has an invalid length. [ 445.068651][T18757] team0: Port device geneve1 added [ 445.082721][T18766] veth1_to_bond: left allmulticast mode [ 445.647451][T18801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3359'. [ 445.662951][T18801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3359'. [ 445.672740][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3359'. [ 445.683561][T18801] syzkaller0: entered promiscuous mode [ 445.689977][T18801] syzkaller0: entered allmulticast mode [ 445.757388][T18801] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3359'. [ 446.197401][T18826] team0: No ports can be present during mode change [ 446.208695][ T29] audit: type=1800 audit(1780656146.898:17): pid=18817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3361" name="memory.events" dev="tmpfs" ino=183 res=0 errno=0 [ 446.332238][T18364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.395712][T18833] openvswitch: netlink: Duplicate or invalid key (type 0). [ 446.419030][T18833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.563574][T18840] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.571122][T18840] IPv6: NLM_F_CREATE should be set when creating new route [ 446.578465][T18840] IPv6: NLM_F_CREATE should be set when creating new route [ 446.668741][T18850] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 446.949268][T18364] veth0_vlan: entered promiscuous mode [ 447.080372][T18364] veth1_vlan: entered promiscuous mode [ 447.163374][T18364] veth0_macvtap: entered promiscuous mode [ 447.184963][T18364] veth1_macvtap: entered promiscuous mode [ 447.243545][T18364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.274961][T18364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.319286][T17357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.352282][T17357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.393680][T17357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.428232][T17357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.588370][T18879] : entered promiscuous mode [ 447.622511][T18884] netlink: 'syz.1.3378': attribute type 4 has an invalid length. [ 447.652553][T18882] netlink: 'syz.1.3378': attribute type 1 has an invalid length. [ 447.780891][T17339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.817524][T17339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.873227][T18894] netlink: 'syz.3.3380': attribute type 9 has an invalid length. [ 447.915020][T17356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.949016][T17356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.354407][T18955] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 451.395795][T18963] xt_hashlimit: size too large, truncated to 1048576 [ 451.398915][T18959] __nla_validate_parse: 7 callbacks suppressed [ 451.398934][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.463523][T18959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.522741][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.597112][T18959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.635903][T18959] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3395'. [ 451.923429][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.939488][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.950656][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.961165][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.975755][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.062271][T18981] tipc: Started in network mode [ 452.082365][T18981] tipc: Node identity 1a583ae50356, cluster identity 4711 [ 452.111933][T18981] tipc: Enabled bearer , priority 0 [ 452.218497][T18981] nftables ruleset with unbound chain [ 452.325051][T18978] tipc: Disabling bearer [ 452.816639][T18977] lo speed is unknown, defaulting to 1000 [ 453.029475][T19010] x_tables: duplicate underflow at hook 2 [ 453.119877][T19016] netlink: 'syz.2.3411': attribute type 1 has an invalid length. [ 453.270290][T19016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.380686][T19019] xt_policy: too many policy elements [ 453.594962][T19036] xt_hashlimit: size too large, truncated to 1048576 [ 453.719960][T19037] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3416'. [ 453.910984][T19043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3419'. [ 453.969566][T19046] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3419'. [ 453.975113][T19044] : entered promiscuous mode [ 454.045666][ T50] Bluetooth: hci1: command tx timeout [ 454.422079][T19057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3422'. [ 454.631332][T19062] netlink: 'syz.2.3424': attribute type 1 has an invalid length. [ 454.682252][T19062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.024111][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 455.354019][T19098] netlink: 'syz.3.3433': attribute type 13 has an invalid length. [ 455.364263][T19099] netlink: 'syz.3.3433': attribute type 13 has an invalid length. [ 455.390914][T19098] veth1_macvtap: left promiscuous mode [ 455.403494][T19098] macsec0: entered allmulticast mode [ 455.601346][T19101] syzkaller0: entered promiscuous mode [ 455.607350][T19101] syzkaller0: entered allmulticast mode [ 455.614745][T18977] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.634656][T18977] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.642861][T18977] bridge_slave_0: entered allmulticast mode [ 455.671142][T18977] bridge_slave_0: entered promiscuous mode [ 456.131226][ T50] Bluetooth: hci1: command tx timeout [ 458.215434][ T50] Bluetooth: hci1: command tx timeout [ 458.929452][T18977] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.936885][T18977] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.944183][T18977] bridge_slave_1: entered allmulticast mode [ 458.953089][T18977] bridge_slave_1: entered promiscuous mode [ 459.063589][T19131] __nla_validate_parse: 3 callbacks suppressed [ 459.063609][T19131] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3442'. [ 459.124341][T19130] ip6gre1: entered allmulticast mode [ 459.160951][T18977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.200275][T18977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.383322][T18977] team0: Port device team_slave_0 added [ 459.444707][T19146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.453178][T19146] bridge0: port 3(bond1) entered blocking state [ 459.462709][T19146] bridge0: port 3(bond1) entered disabled state [ 459.471977][T19146] bond1: entered allmulticast mode [ 459.480846][T19146] bond1: entered promiscuous mode [ 459.493771][T19146] bridge0: port 3(bond1) entered blocking state [ 459.500281][T19146] bridge0: port 3(bond1) entered forwarding state [ 459.520277][T18977] team0: Port device team_slave_1 added [ 459.840816][T19157] syzkaller0: entered promiscuous mode [ 459.853097][T19157] syzkaller0: entered allmulticast mode [ 459.873733][T18977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.899484][T18977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.926943][T18977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.995317][T18977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.003555][T18977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.033637][T18977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.297208][ T50] Bluetooth: hci1: command tx timeout [ 463.000794][T17355] bridge0: port 3(bond1) entered disabled state [ 463.256847][T18977] hsr_slave_0: entered promiscuous mode [ 463.273780][T18977] hsr_slave_1: entered promiscuous mode [ 463.299973][T18977] debugfs: 'hsr0' already exists in 'hsr' [ 463.315455][T18977] Cannot create hsr debugfs directory [ 463.332550][T19239] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 463.385587][T19239] netlink: 'syz.4.3467': attribute type 1 has an invalid length. [ 464.022223][T19269] FAULT_INJECTION: forcing a failure. [ 464.022223][T19269] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 464.072396][T19269] CPU: 1 UID: 0 PID: 19269 Comm: syz.3.3475 Not tainted syzkaller #0 PREEMPT(full) [ 464.072431][T19269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.072443][T19269] Call Trace: [ 464.072452][T19269] [ 464.072460][T19269] dump_stack_lvl+0xe8/0x150 [ 464.072611][T19269] should_fail_ex+0x412/0x560 [ 464.072709][T19269] _copy_from_user+0x2d/0xb0 [ 464.072764][T19269] ___sys_sendmsg+0x1c6/0x360 [ 464.072857][T19269] ? __lock_acquire+0x6b5/0x2cf0 [ 464.072910][T19269] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.072964][T19269] ? __fget_files+0x2a/0x420 [ 464.073016][T19269] ? __fget_files+0x3a0/0x420 [ 464.073047][T19269] __x64_sys_sendmsg+0x1bd/0x2a0 [ 464.073068][T19269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.073096][T19269] ? __pfx_ksys_write+0x10/0x10 [ 464.073137][T19269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.073174][T19269] do_syscall_64+0x174/0x580 [ 464.073258][T19269] ? trace_irq_disable+0x3b/0x140 [ 464.073301][T19269] ? clear_bhb_loop+0x40/0x90 [ 464.073324][T19269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.073342][T19269] RIP: 0033:0x7fc98a59ce59 [ 464.073360][T19269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.073376][T19269] RSP: 002b:00007fc98b3e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.073397][T19269] RAX: ffffffffffffffda RBX: 00007fc98a815fa0 RCX: 00007fc98a59ce59 [ 464.073411][T19269] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 464.073422][T19269] RBP: 00007fc98b3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 464.073434][T19269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.073444][T19269] R13: 00007fc98a816038 R14: 00007fc98a815fa0 R15: 00007ffcf98609d8 [ 464.073474][T19269] [ 464.282113][T18977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.293861][T18977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.478803][T19273] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 464.614763][T18977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.642799][T18977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.699266][T19283] syzkaller0: entered promiscuous mode [ 464.715118][T19283] syzkaller0: entered allmulticast mode [ 464.913454][T18977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.941740][T18977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.181902][T18977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.189655][T19304] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3486'. [ 465.195595][T18977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.226698][T19307] FAULT_INJECTION: forcing a failure. [ 465.226698][T19307] name failslab, interval 1, probability 0, space 0, times 0 [ 465.268479][T19307] CPU: 0 UID: 0 PID: 19307 Comm: syz.3.3487 Not tainted syzkaller #0 PREEMPT(full) [ 465.268507][T19307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.268519][T19307] Call Trace: [ 465.268526][T19307] [ 465.268533][T19307] dump_stack_lvl+0xe8/0x150 [ 465.268561][T19307] should_fail_ex+0x412/0x560 [ 465.268586][T19307] should_failslab+0xa8/0x100 [ 465.268647][T19307] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 465.268682][T19307] ? __alloc_skb+0x186/0x7d0 [ 465.268764][T19307] ? __alloc_skb+0x1d0/0x7d0 [ 465.268788][T19307] ? __local_bh_enable_ip+0xd0/0x130 [ 465.268830][T19307] __alloc_skb+0x1d0/0x7d0 [ 465.268863][T19307] netlink_sendmsg+0x5d4/0xb40 [ 465.268963][T19307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.268998][T19307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 465.269099][T19307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 465.269150][T19307] ____sys_sendmsg+0x972/0x9f0 [ 465.269171][T19307] ? __might_fault+0xaf/0x130 [ 465.269212][T19307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.269243][T19307] ? import_iovec+0x73/0xa0 [ 465.269296][T19307] ___sys_sendmsg+0x2a5/0x360 [ 465.269315][T19307] ? __lock_acquire+0x6b5/0x2cf0 [ 465.269344][T19307] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.269401][T19307] ? __fget_files+0x2a/0x420 [ 465.269426][T19307] ? __fget_files+0x3a0/0x420 [ 465.269462][T19307] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.269487][T19307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.269519][T19307] ? __pfx_ksys_write+0x10/0x10 [ 465.269554][T19307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.269574][T19307] do_syscall_64+0x174/0x580 [ 465.269592][T19307] ? trace_irq_disable+0x3b/0x140 [ 465.269618][T19307] ? clear_bhb_loop+0x40/0x90 [ 465.269640][T19307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.269657][T19307] RIP: 0033:0x7fc98a59ce59 [ 465.269674][T19307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.269690][T19307] RSP: 002b:00007fc98b3e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.269709][T19307] RAX: ffffffffffffffda RBX: 00007fc98a815fa0 RCX: 00007fc98a59ce59 [ 465.269722][T19307] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 465.269733][T19307] RBP: 00007fc98b3e9090 R08: 0000000000000000 R09: 0000000000000000 [ 465.269749][T19307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.269768][T19307] R13: 00007fc98a816038 R14: 00007fc98a815fa0 R15: 00007ffcf98609d8 [ 465.269796][T19307] [ 465.920905][T19326] gre2: entered promiscuous mode [ 465.942784][T19326] gre2: entered allmulticast mode [ 466.007374][T19333] netlink: 'syz.2.3492': attribute type 1 has an invalid length. [ 466.151420][T19336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3494'. [ 466.232705][T18977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.250321][T18977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.277483][T18977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.313256][T18977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.336494][T18977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.364501][T18977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 466.405999][T18977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.412852][T19342] IPVS: persistence engine module ip_vs_pe_À not found [ 466.442471][T18977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 466.582203][T19358] FAULT_INJECTION: forcing a failure. [ 466.582203][T19358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.638066][T19358] CPU: 1 UID: 0 PID: 19358 Comm: syz.0.3499 Not tainted syzkaller #0 PREEMPT(full) [ 466.638097][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.638109][T19358] Call Trace: [ 466.638117][T19358] [ 466.638126][T19358] dump_stack_lvl+0xe8/0x150 [ 466.638156][T19358] should_fail_ex+0x412/0x560 [ 466.638183][T19358] _copy_from_iter+0x1d3/0x1670 [ 466.638210][T19358] ? rcu_is_watching+0x15/0xb0 [ 466.638266][T19358] ? __pfx__copy_from_iter+0x10/0x10 [ 466.638286][T19358] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 466.638334][T19358] ? netlink_sendmsg+0x650/0xb40 [ 466.638364][T19358] ? skb_put+0x11b/0x210 [ 466.638396][T19358] netlink_sendmsg+0x6c0/0xb40 [ 466.638434][T19358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.638467][T19358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 466.638500][T19358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.638531][T19358] ____sys_sendmsg+0x972/0x9f0 [ 466.638552][T19358] ? __might_fault+0xaf/0x130 [ 466.638584][T19358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.638614][T19358] ? import_iovec+0x73/0xa0 [ 466.638642][T19358] ___sys_sendmsg+0x2a5/0x360 [ 466.638662][T19358] ? __lock_acquire+0x6b5/0x2cf0 [ 466.638690][T19358] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.638748][T19358] ? __fget_files+0x2a/0x420 [ 466.638773][T19358] ? __fget_files+0x3a0/0x420 [ 466.638809][T19358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 466.638833][T19358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.638861][T19358] ? __pfx_ksys_write+0x10/0x10 [ 466.638894][T19358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.638913][T19358] do_syscall_64+0x174/0x580 [ 466.638931][T19358] ? trace_irq_disable+0x3b/0x140 [ 466.638957][T19358] ? clear_bhb_loop+0x40/0x90 [ 466.638980][T19358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.638998][T19358] RIP: 0033:0x7fef1df9ce59 [ 466.639015][T19358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.639030][T19358] RSP: 002b:00007fef1edc0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.639053][T19358] RAX: ffffffffffffffda RBX: 00007fef1e215fa0 RCX: 00007fef1df9ce59 [ 466.639067][T19358] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 466.639078][T19358] RBP: 00007fef1edc0090 R08: 0000000000000000 R09: 0000000000000000 [ 466.639094][T19358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.639106][T19358] R13: 00007fef1e216038 R14: 00007fef1e215fa0 R15: 00007ffee68ceff8 [ 466.639138][T19358] [ 467.003578][T18977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.041305][T18977] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.054973][T19365] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3501'. [ 467.072218][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.079529][T17354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.090671][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.097921][T17354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.174775][T18977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.178857][T19372] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 467.373315][T19382] netlink: 'syz.3.3505': attribute type 12 has an invalid length. [ 467.381852][T19382] netlink: 'syz.3.3505': attribute type 29 has an invalid length. [ 467.390480][T19382] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3505'. [ 467.402595][T19382] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 467.413257][T19382] netlink: 'syz.3.3505': attribute type 2 has an invalid length. [ 467.422053][T19382] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3505'. [ 467.468309][T19373] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 467.501585][T19373] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 467.533903][T19373] bond3: (slave ip6gre2): making interface the new active one [ 467.551409][T19373] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 467.575154][T19392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.014592][T19411] netlink: 'syz.4.3512': attribute type 11 has an invalid length. [ 468.050438][T19411] netlink: 'syz.4.3512': attribute type 11 has an invalid length. [ 468.075887][T19411] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3512'. [ 468.152508][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3512'. [ 468.154211][T19414] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3513'. [ 468.421009][T19417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.645853][T19447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.731246][T18977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.959453][T19455] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 468.993100][T18977] veth0_vlan: entered promiscuous mode [ 469.054642][T18977] veth1_vlan: entered promiscuous mode [ 469.162799][T19462] can: request_module (can-proto-0) failed. [ 469.190533][T18977] veth0_macvtap: entered promiscuous mode [ 469.231886][T18977] veth1_macvtap: entered promiscuous mode [ 469.304343][T18977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.368108][T18977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.416610][T17351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.443220][T17351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.470699][T17351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.498371][T17351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.772083][T17355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.814957][T17355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.899490][T19493] netlink: 'syz.3.3534': attribute type 13 has an invalid length. [ 469.933338][T19493] netlink: 'syz.3.3534': attribute type 58 has an invalid length. [ 469.967278][T19493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3534'. [ 469.972237][T19499] netlink: 'syz.3.3534': attribute type 12 has an invalid length. [ 470.002548][T19500] netlink: 'syz.4.3535': attribute type 1 has an invalid length. [ 470.015242][T17355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.033061][T19499] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.3534'. [ 470.042646][T17355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.294527][T19500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.352398][T19513] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3537'. [ 470.375063][T19507] bond2: (slave geneve2): making interface the new active one [ 470.407121][T19507] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 470.813253][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3539'. [ 470.974987][T19541] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3539'. [ 471.159566][T19541] netlink: 'syz.4.3539': attribute type 2 has an invalid length. [ 471.220107][T19541] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3539'. [ 474.779645][T19514] syzkaller1: entered promiscuous mode [ 474.794699][T19514] syzkaller1: entered allmulticast mode [ 474.991127][T19576] netlink: 'syz.1.3544': attribute type 29 has an invalid length. [ 475.508173][T19584] syzkaller0: entered promiscuous mode [ 475.513813][T19584] syzkaller0: entered allmulticast mode [ 475.544265][ T6161] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.726147][T19608] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3552'. [ 475.742496][T19610] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3553'. [ 476.520863][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3555'. [ 476.530634][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'. [ 476.539980][T19621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3555'. [ 479.099190][ T8750] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.108106][ T8750] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.131898][ T1159] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 479.318333][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3556'. [ 479.444882][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3556'. [ 479.465699][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 479.567990][T19625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.616167][T19635] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 479.769692][T19641] bond3 (unregistering): Released all slaves [ 479.811970][T19642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.871553][T19642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.084395][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 480.119504][T19661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3564'. [ 480.489492][T19674] netlink: 'syz.2.3570': attribute type 12 has an invalid length. [ 480.498602][T19674] netlink: 'syz.2.3570': attribute type 29 has an invalid length. [ 480.691681][T19683] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 480.958235][T19685] vlan0: entered promiscuous mode [ 480.974774][T19685] bridge0: entered promiscuous mode [ 481.205761][T19707] __nla_validate_parse: 3 callbacks suppressed [ 481.205782][T19707] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3579'. [ 481.221252][T19710] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3580'. [ 481.530780][T19676] infiniband syz0: set active [ 481.537010][T19676] infiniband syz0: added bridge_slave_1 [ 481.616084][T19676] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 481.689076][T19676] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 481.759055][T19676] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 481.900667][T19676] RDS/IB: syz0: added [ 481.915009][T19676] smc: adding ib device syz0 with port count 1 [ 481.947448][T19676] smc: ib device syz0 port 1 has no pnetid [ 482.118243][T19712] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 482.310627][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 482.517686][T19753] team0 (unregistering): Port device team_slave_0 removed [ 482.554754][T19753] team0 (unregistering): Port device team_slave_1 removed [ 482.647756][T19764] syzkaller0: entered promiscuous mode [ 482.664335][T19764] syzkaller0: entered allmulticast mode [ 482.680236][T19748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.873319][T19772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3593'. [ 483.318913][T19780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.412810][ T50] Bluetooth: hci2: command 0x0401 tx timeout [ 483.480918][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 483.696762][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3598'. [ 483.705940][T19788] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 483.919773][T19797] netlink: 'syz.1.3599': attribute type 10 has an invalid length. [ 484.038925][T19797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.103997][T19797] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 484.148168][T19813] xt_l2tp: v2 doesn't support IP mode [ 484.358173][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 484.413717][T19815] syzkaller0: entered promiscuous mode [ 484.422171][T19820] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 484.435987][T19815] syzkaller0: entered allmulticast mode [ 484.446257][T19820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3606'. [ 484.845803][ T50] Bluetooth: hci1: command tx timeout [ 484.997796][T19849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3611'. [ 485.329135][T19870] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3614'. [ 485.362112][T19870] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 486.088987][T19873] vlan2: entered allmulticast mode [ 486.124999][T19873] veth1_virt_wifi: entered allmulticast mode [ 486.142256][T19878] netlink: 'syz.2.3618': attribute type 21 has an invalid length. [ 486.406340][T19891] sctp: [Deprecated]: syz.3.3623 (pid 19891) Use of int in maxseg socket option. [ 486.406340][T19891] Use struct sctp_assoc_value instead [ 486.627877][ T6161] bridge_slave_1: left allmulticast mode [ 486.649345][ T6161] bridge_slave_1: left promiscuous mode [ 486.655884][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3624'. [ 486.676013][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.780190][ T6161] bridge_slave_0: left allmulticast mode [ 486.801721][ T6161] bridge_slave_0: left promiscuous mode [ 486.810228][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.147307][ T6161] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 487.174901][ T6161] ip6gre1 (unregistering): left promiscuous mode [ 487.820162][ T6161] bond1 (unregistering): Released all slaves [ 487.837228][ T6161] bond2 (unregistering): Released all slaves [ 487.853562][ T6161] bond4 (unregistering): Released all slaves [ 487.869207][ T6161] bond3 (unregistering): Released all slaves [ 487.902595][ T6161] bond0 (unregistering): Released all slaves [ 487.918923][ T6161] bond5 (unregistering): Released all slaves [ 487.934841][ T6161] bond6 (unregistering): Released all slaves [ 487.952731][ T6161] bond7 (unregistering): Released all slaves [ 487.973952][ T6161] bond8 (unregistering): (slave 26±ÿª¨úrBº“): Releasing backup interface [ 487.983896][ T6161] bond8 (unregistering): (slave 26±ÿª¨úrBº“): last VLAN challenged slave left bond - VLAN blocking is removed [ 487.998944][ T6161] bond8 (unregistering): Released all slaves [ 488.013439][ T6161] bond9 (unregistering): Released all slaves [ 488.030386][ T6161] bond10 (unregistering): Released all slaves [ 488.044495][ T6161] bond11 (unregistering): Released all slaves [ 488.091878][T19913] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 488.099982][T19913] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.327229][ T6161] tipc: Disabling bearer [ 488.366831][ T6161] tipc: Disabling bearer [ 488.405608][ T6161] tipc: Disabling bearer [ 488.457127][ T6161] tipc: Left network mode [ 488.553015][T19938] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 488.646030][T19945] geneve2: entered promiscuous mode [ 488.854907][T19957] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3638'. [ 488.968668][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3640'. [ 488.982783][T19959] syz.2.3639: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 489.073412][T19959] CPU: 0 UID: 0 PID: 19959 Comm: syz.2.3639 Not tainted syzkaller #0 PREEMPT(full) [ 489.073446][T19959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 489.073458][T19959] Call Trace: [ 489.073468][T19959] [ 489.073477][T19959] dump_stack_lvl+0xe8/0x150 [ 489.073507][T19959] warn_alloc+0x249/0x340 [ 489.073540][T19959] ? stack_trace_save+0xa9/0x100 [ 489.073602][T19959] ? __pfx_warn_alloc+0x10/0x10 [ 489.073638][T19959] ? kasan_save_track+0x4f/0x80 [ 489.073666][T19959] ? kasan_save_track+0x3e/0x80 [ 489.073690][T19959] ? __kasan_kmalloc+0x93/0xb0 [ 489.073716][T19959] ? __kmalloc_cache_noprof+0x31c/0x660 [ 489.073743][T19959] ? xskq_create+0x56/0x170 [ 489.073843][T19959] ? xsk_setsockopt+0x54c/0x990 [ 489.073870][T19959] ? do_sock_setsockopt+0x17c/0x1b0 [ 489.073928][T19959] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 489.073957][T19959] ? do_syscall_64+0x174/0x580 [ 489.073983][T19959] __vmalloc_node_range_noprof+0x132/0x1750 [ 489.074049][T19959] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 489.074086][T19959] ? __kasan_kmalloc+0x93/0xb0 [ 489.074122][T19959] vmalloc_user_noprof+0xad/0xe0 [ 489.074151][T19959] ? xskq_create+0xbf/0x170 [ 489.074182][T19959] xskq_create+0xbf/0x170 [ 489.074215][T19959] xsk_init_queue+0x8a/0xe0 [ 489.074248][T19959] xsk_setsockopt+0x54c/0x990 [ 489.074288][T19959] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.074317][T19959] ? __pfx_aa_sk_perm+0x10/0x10 [ 489.074378][T19959] ? aa_sock_opt_perm+0xff/0x1a0 [ 489.074412][T19959] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 489.074440][T19959] ? __pfx_xsk_setsockopt+0x10/0x10 [ 489.074469][T19959] do_sock_setsockopt+0x17c/0x1b0 [ 489.074505][T19959] __x64_sys_setsockopt+0x13d/0x1b0 [ 489.074538][T19959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.074562][T19959] do_syscall_64+0x174/0x580 [ 489.074582][T19959] ? trace_irq_disable+0x3b/0x140 [ 489.074612][T19959] ? clear_bhb_loop+0x40/0x90 [ 489.074637][T19959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.074656][T19959] RIP: 0033:0x7f92f7f9ce59 [ 489.074676][T19959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.074693][T19959] RSP: 002b:00007f92f8df1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 489.074716][T19959] RAX: ffffffffffffffda RBX: 00007f92f8215fa0 RCX: 00007f92f7f9ce59 [ 489.074731][T19959] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 489.074744][T19959] RBP: 00007f92f8032d6f R08: 0000000000000004 R09: 0000000000000000 [ 489.074756][T19959] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.074768][T19959] R13: 00007f92f8216038 R14: 00007f92f8215fa0 R15: 00007fff47b5dfb8 [ 489.074803][T19959] [ 489.076348][T19967] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20003 [ 489.101705][T19959] Mem-Info: [ 489.116883][T19961] bond4: entered promiscuous mode [ 489.190921][T19959] active_anon:6145 inactive_anon:0 isolated_anon:0 [ 489.190921][T19959] active_file:3206 inactive_file:40114 isolated_file:0 [ 489.190921][T19959] unevictable:768 dirty:72 writeback:0 [ 489.190921][T19959] slab_reclaimable:12503 slab_unreclaimable:136373 [ 489.190921][T19959] mapped:29377 shmem:1298 pagetables:1315 [ 489.190921][T19959] sec_pagetables:0 bounce:0 [ 489.190921][T19959] kernel_misc_reclaimable:0 [ 489.190921][T19959] free:1279752 free_pcp:9897 free_cma:0 [ 489.193374][T19961] 8021q: adding VLAN 0 to HW filter on device bond4 [ 489.210810][T19959] Node 0 active_anon:24580kB inactive_anon:0kB active_file:12824kB inactive_file:160256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117508kB dirty:284kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16496kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 489.459072][T19959] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 489.598556][T19959] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 489.702758][T19959] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 489.713092][T19959] Node 0 DMA32 free:1177432kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24680kB inactive_anon:0kB active_file:12824kB inactive_file:160256kB unevictable:1536kB writepending:284kB zspages:0kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:31560kB local_pcp:10792kB free_cma:0kB [ 489.766539][T19959] lowmem_reserve[]: 0 0 0 0 0 [ 489.772836][T19959] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 489.822696][T19959] lowmem_reserve[]: 0 0 0 0 0 [ 489.829789][T19959] Node 1 Normal free:3926084kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7304kB local_pcp:0kB free_cma:0kB [ 489.878357][T19959] lowmem_reserve[]: 0 0 0 0 0 [ 489.906967][T19959] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 489.951197][T19959] Node 0 DMA32: 7077*4kB (UM) 4906*8kB (UM) 2175*16kB (UM) 214*32kB (UME) 21*64kB (UM) 163*128kB (UE) 338*256kB (UM) 144*512kB (UE) 102*1024kB (UME) 22*2048kB (UM) 180*4096kB (UM) = 1178452kB [ 489.989451][T19959] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 490.018944][T19959] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926084kB [ 490.043777][T19986] netlink: 'syz.1.3644': attribute type 3 has an invalid length. [ 490.069400][T19987] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 490.082646][T19959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.082998][T19986] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3644'. [ 490.094797][T19959] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 490.140988][T19959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 490.181414][T19959] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 490.204559][T19959] 44615 total pagecache pages [ 490.244014][T19959] 0 pages in swap cache [ 490.268946][T19959] Free swap = 124996kB [ 490.302370][T19959] Total swap = 124996kB [ 490.335862][T19959] 2097051 pages RAM [ 490.339948][T19959] 0 pages HighMem/MovableOnly [ 490.344868][T19959] 427070 pages reserved [ 490.352458][T19959] 0 pages cma reserved [ 490.461168][T19997] netlink: 'syz.0.3647': attribute type 1 has an invalid length. [ 490.567112][T20000] netlink: 'syz.1.3648': attribute type 29 has an invalid length. [ 490.618653][T20000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 490.748375][T20008] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3650'. [ 491.497906][T20035] bond5: entered promiscuous mode [ 491.520578][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3649'. [ 491.540504][T20035] bond5: entered allmulticast mode [ 491.555116][T20035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.732920][T20055] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 491.747510][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'. [ 491.756975][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 491.859030][T20055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 491.927110][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 491.977769][T20058] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 491.989327][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3661'. [ 492.029885][T20048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 492.102390][T20059] bond6: (slave ip6gretap1): making interface the new active one [ 492.116846][T20059] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 492.250958][T20064] macvtap1: entered promiscuous mode [ 492.266870][T20064] vlan0: entered promiscuous mode [ 492.272576][T20064] macvtap1: entered allmulticast mode [ 492.278507][T20064] vlan0: entered allmulticast mode [ 492.283697][T20064] veth0_vlan: entered allmulticast mode [ 492.561565][T20084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3669'. [ 493.185874][T20108] netlink: 'syz.0.3678': attribute type 1 has an invalid length. [ 493.214192][T20112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3679'. [ 493.224133][T20112] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3679'. [ 493.236039][T20112] netlink: 'syz.1.3679': attribute type 5 has an invalid length. [ 493.244797][T20112] netlink: 'syz.1.3679': attribute type 6 has an invalid length. [ 493.257258][T20112] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3679'. [ 493.274093][T20112] netlink: 'syz.1.3679': attribute type 4 has an invalid length. [ 493.348246][T20115] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3679'. [ 493.482185][T20129] netlink: 'syz.3.3682': attribute type 21 has an invalid length. [ 493.514949][T20108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.746838][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.778866][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.854797][ T6161] veth1_vlan: left promiscuous mode [ 495.044010][ T6161] veth0_vlan: left promiscuous mode [ 495.478973][T20213] block nbd4: not configured, cannot reconfigure [ 495.672276][ T6161] pim6reg (unregistering): left allmulticast mode [ 495.946954][ T6160] smc: removing ib device syz2 [ 496.100972][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 496.118920][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 496.369747][ T10] ================================================================== [ 496.377887][ T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 496.386776][ T10] Read of size 8 at addr ffff88802bd2a2f0 by task kworker/0:1/10 [ 496.394521][ T10] [ 496.396872][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 496.396899][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 496.396912][ T10] Workqueue: events smc_ib_port_event_work [ 496.397020][ T10] Call Trace: [ 496.397028][ T10] [ 496.397036][ T10] dump_stack_lvl+0xe8/0x150 [ 496.397059][ T10] print_address_description+0x55/0x1e0 [ 496.397089][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 496.397112][ T10] print_report+0x58/0x70 [ 496.397129][ T10] kasan_report+0x117/0x150 [ 496.397158][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 496.397184][ T10] __ethtool_get_link_ksettings+0x5e/0x170 [ 496.397207][ T10] ib_get_eth_speed+0x180/0x7f0 [ 496.397316][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 496.397344][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 496.397375][ T10] rxe_query_port+0x93/0x3d0 [ 496.397430][ T10] ib_query_port+0x170/0x830 [ 496.397479][ T10] smc_ib_port_event_work+0x15a/0x940 [ 496.397513][ T10] ? process_scheduled_works+0xa70/0x1860 [ 496.397533][ T10] ? process_scheduled_works+0xa70/0x1860 [ 496.397553][ T10] process_scheduled_works+0xb5d/0x1860 [ 496.397586][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.397608][ T10] ? assign_work+0x3d5/0x5e0 [ 496.397630][ T10] worker_thread+0xa53/0xfc0 [ 496.397661][ T10] kthread+0x389/0x470 [ 496.397686][ T10] ? __pfx_worker_thread+0x10/0x10 [ 496.397705][ T10] ? __pfx_kthread+0x10/0x10 [ 496.397729][ T10] ret_from_fork+0x514/0xb70 [ 496.397767][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 496.397788][ T10] ? __switch_to+0xc79/0x1410 [ 496.397817][ T10] ? __pfx_kthread+0x10/0x10 [ 496.397842][ T10] ret_from_fork_asm+0x1a/0x30 [ 496.397873][ T10] [ 496.397881][ T10] [ 496.570520][ T10] Allocated by task 5648: [ 496.574847][ T10] kasan_save_track+0x3e/0x80 [ 496.579539][ T10] __kasan_kmalloc+0x93/0xb0 [ 496.584136][ T10] __kvmalloc_node_noprof+0x528/0x8a0 [ 496.589512][ T10] alloc_netdev_mqs+0xa8/0x1210 [ 496.594441][ T10] rtnl_create_link+0x31f/0xd70 [ 496.599330][ T10] rtnl_newlink_create+0x277/0xb70 [ 496.604444][ T10] rtnl_newlink+0x166a/0x1bb0 [ 496.609125][ T10] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 496.614071][ T10] netlink_rcv_skb+0x232/0x4b0 [ 496.618844][ T10] netlink_unicast+0x75c/0x8e0 [ 496.623619][ T10] netlink_sendmsg+0x813/0xb40 [ 496.628391][ T10] __sys_sendto+0x672/0x710 [ 496.632929][ T10] __x64_sys_sendto+0xde/0x100 [ 496.637963][ T10] do_syscall_64+0x174/0x580 [ 496.642557][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.648454][ T10] [ 496.650778][ T10] Freed by task 6161: [ 496.654754][ T10] kasan_save_track+0x3e/0x80 [ 496.659441][ T10] kasan_save_free_info+0x46/0x50 [ 496.664476][ T10] __kasan_slab_free+0x5c/0x80 [ 496.669255][ T10] kfree+0x1c5/0x640 [ 496.673158][ T10] device_release+0xc4/0x1f0 [ 496.677842][ T10] kobject_put+0x228/0x560 [ 496.682313][ T10] netdev_run_todo+0xc75/0xde0 [ 496.687081][ T10] default_device_exit_batch+0x967/0x9e0 [ 496.692758][ T10] ops_undo_list+0x52b/0x940 [ 496.697402][ T10] cleanup_net+0x56b/0x800 [ 496.701828][ T10] process_scheduled_works+0xb5d/0x1860 [ 496.707379][ T10] worker_thread+0xa53/0xfc0 [ 496.711984][ T10] kthread+0x389/0x470 [ 496.716061][ T10] ret_from_fork+0x514/0xb70 [ 496.720657][ T10] ret_from_fork_asm+0x1a/0x30 [ 496.725428][ T10] [ 496.727756][ T10] The buggy address belongs to the object at ffff88802bd2a000 [ 496.727756][ T10] which belongs to the cache kmalloc-cg-4k of size 4096 [ 496.742080][ T10] The buggy address is located 752 bytes inside of [ 496.742080][ T10] freed 4096-byte region [ffff88802bd2a000, ffff88802bd2b000) [ 496.755967][ T10] [ 496.758390][ T10] The buggy address belongs to the physical page: [ 496.764797][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2bd28 [ 496.773560][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 496.782059][ T10] memcg:ffff88803570dd01 [ 496.786296][ T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 496.793840][ T10] page_type: f5(slab) [ 496.797823][ T10] raw: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 496.806409][ T10] raw: 0000000000000000 0000000800040004 00000000f5000000 ffff88803570dd01 [ 496.814997][ T10] head: 00fff00000000040 ffff88813fe33500 dead000000000100 dead000000000122 [ 496.823670][ T10] head: 0000000000000000 0000000800040004 00000000f5000000 ffff88803570dd01 [ 496.832342][ T10] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 496.841016][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 496.849690][ T10] page dumped because: kasan: bad access detected [ 496.856122][ T10] page_owner tracks the page as allocated [ 496.861834][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5638, tgid 5638 (syz-executor), ts 90224063729, free_ts 63958257055 [ 496.884937][ T10] post_alloc_hook+0x22d/0x280 [ 496.889984][ T10] get_page_from_freelist+0x2593/0x2610 [ 496.895541][ T10] __alloc_frozen_pages_noprof+0x18d/0x380 [ 496.901357][ T10] allocate_slab+0x77/0x660 [ 496.905861][ T10] refill_objects+0x339/0x3d0 [ 496.910537][ T10] __pcs_replace_empty_main+0x321/0x720 [ 496.916180][ T10] __kvmalloc_node_noprof+0x657/0x8a0 [ 496.921558][ T10] alloc_netdev_mqs+0xa8/0x1210 [ 496.926406][ T10] rtnl_create_link+0x31f/0xd70 [ 496.931258][ T10] rtnl_newlink_create+0x277/0xb70 [ 496.936369][ T10] rtnl_newlink+0x166a/0x1bb0 [ 496.941065][ T10] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 496.946005][ T10] netlink_rcv_skb+0x232/0x4b0 [ 496.950781][ T10] netlink_unicast+0x75c/0x8e0 [ 496.955575][ T10] netlink_sendmsg+0x813/0xb40 [ 496.960345][ T10] __sys_sendto+0x672/0x710 [ 496.964855][ T10] page last free pid 5458 tgid 5458 stack trace: [ 496.971190][ T10] __free_frozen_pages+0xc1c/0xd30 [ 496.976308][ T10] __slab_free+0x274/0x2c0 [ 496.980730][ T10] qlist_free_all+0x99/0x100 [ 496.985326][ T10] kasan_quarantine_reduce+0x148/0x160 [ 496.990799][ T10] __kasan_slab_alloc+0x22/0x80 [ 496.995742][ T10] __kmalloc_noprof+0x316/0x760 [ 497.000595][ T10] tomoyo_supervisor+0xc22/0x1570 [ 497.005690][ T10] tomoyo_path_permission+0x25a/0x380 [ 497.011070][ T10] tomoyo_check_open_permission+0x2b2/0x470 [ 497.016967][ T10] security_file_open+0xa9/0x240 [ 497.021962][ T10] do_dentry_open+0x4a8/0x13a0 [ 497.026725][ T10] vfs_open+0x3b/0x340 [ 497.030800][ T10] path_openat+0x2e08/0x3860 [ 497.035399][ T10] do_file_open+0x23e/0x4a0 [ 497.039912][ T10] do_sys_openat2+0x113/0x200 [ 497.044777][ T10] __x64_sys_openat+0x138/0x170 [ 497.049636][ T10] [ 497.051960][ T10] Memory state around the buggy address: [ 497.057586][ T10] ffff88802bd2a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.065666][ T10] ffff88802bd2a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.073730][ T10] >ffff88802bd2a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.081800][ T10] ^ [ 497.089537][ T10] ffff88802bd2a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.097610][ T10] ffff88802bd2a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 497.105683][ T10] ================================================================== [ 497.144339][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 497.151600][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 497.160825][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 497.170914][ T10] Workqueue: events smc_ib_port_event_work [ 497.176769][ T10] Call Trace: [ 497.180058][ T10] [ 497.182995][ T10] vpanic+0x56c/0xa60 [ 497.186988][ T10] ? __pfx_vpanic+0x10/0x10 [ 497.191499][ T10] ? __pfx___schedule+0x10/0x10 [ 497.196442][ T10] panic+0xc5/0xd0 [ 497.200165][ T10] ? __pfx_panic+0x10/0x10 [ 497.204586][ T10] ? preempt_schedule_common+0x82/0xd0 [ 497.210058][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 497.216057][ T10] check_panic_on_warn+0x89/0xb0 [ 497.221029][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 497.227032][ T10] end_report+0x73/0x170 [ 497.231300][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 497.237284][ T10] kasan_report+0x128/0x150 [ 497.241796][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 497.247792][ T10] __ethtool_get_link_ksettings+0x5e/0x170 [ 497.253706][ T10] ib_get_eth_speed+0x180/0x7f0 [ 497.258567][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 497.263948][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 497.269070][ T10] rxe_query_port+0x93/0x3d0 [ 497.273709][ T10] ib_query_port+0x170/0x830 [ 497.278308][ T10] smc_ib_port_event_work+0x15a/0x940 [ 497.283692][ T10] ? process_scheduled_works+0xa70/0x1860 [ 497.289421][ T10] ? process_scheduled_works+0xa70/0x1860 [ 497.295152][ T10] process_scheduled_works+0xb5d/0x1860 [ 497.300712][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.306872][ T10] ? assign_work+0x3d5/0x5e0 [ 497.311465][ T10] worker_thread+0xa53/0xfc0 [ 497.316069][ T10] kthread+0x389/0x470 [ 497.320144][ T10] ? __pfx_worker_thread+0x10/0x10 [ 497.325258][ T10] ? __pfx_kthread+0x10/0x10 [ 497.329854][ T10] ret_from_fork+0x514/0xb70 [ 497.334448][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 497.339559][ T10] ? __switch_to+0xc79/0x1410 [ 497.344368][ T10] ? __pfx_kthread+0x10/0x10 [ 497.348990][ T10] ret_from_fork_asm+0x1a/0x30 [ 497.353817][ T10] [ 497.356984][ T10] Kernel Offset: disabled [ 497.361318][ T10] Rebooting in 86400 seconds..