last executing test programs: 2.525958737s ago: executing program 1 (id=2231): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000040)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.425273112s ago: executing program 1 (id=2232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000240)={0x1f, @none}, 0x8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 2.221231164s ago: executing program 1 (id=2234): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 2.14214917s ago: executing program 1 (id=2236): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x94}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x320a}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8000) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendto$inet(r4, &(0x7f0000000200)="c9d62afc4e28dc2d89be7208f6d47c16479356021f70ec57c7a9de328bffd652e0a8f7a821ee8a39156f3dbcb12c7a41c7a2817febe12a35419ec66ad2444f5161798bc3a71efb21fc89c7dbe54f78a89860f540fc8427df6f4214906d546be0182c29e57481c1516f4e6109cf2ec83d297726c5f7c6874329ee5587aff1c4729808717963ceafc82a88567bd45af2a73e480b5da1844906e2a13a949a33bb94f716", 0xa2, 0x8000, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES64=r3]) 2.051601082s ago: executing program 2 (id=2238): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="620ac4ff00000000711019000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x10011, 0x2, 0x2, 0x7, 0xc}, 0x20) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r6, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffc, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x15430}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@getnetconf={0x14, 0x52, 0x30, 0x70bd24, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x48044) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r11, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x200}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x10000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008051}, 0x841) 1.780999775s ago: executing program 2 (id=2243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = epoll_create1(0x80000) sendfile(r2, r1, 0x0, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x428, 0x3f4, 0x300, 0x70bd26, 0x25dfdbfd, {0x4, 0x1, 0x1a, [0x4, 0x4, 0x101, 0x100, 0x3, 0x4, 0x9, 0xa4, 0xfffffff5, 0x2000000, 0x3, 0x2, 0x52e, 0xf0000000, 0x5, 0x2, 0x3, 0xc00000, 0x9, 0xb774, 0xc, 0x323, 0x8, 0x2, 0x10001, 0x7d, 0xc, 0x3, 0x5, 0x0, 0x1, 0xa2, 0x8, 0x6, 0xc, 0x3, 0x4, 0x4f, 0x9, 0x8000, 0x4, 0x0, 0x8, 0x5, 0x101, 0xa, 0x9, 0x101, 0xe, 0x0, 0x5, 0xe36, 0x8a7, 0x3ff, 0x2, 0x0, 0x10, 0x6, 0xa4c, 0x2, 0x4, 0x6, 0x8000, 0x2], [0x8001, 0x0, 0x8, 0x0, 0x4, 0x9, 0x0, 0x7, 0xb, 0x3ff, 0x80, 0x81, 0x4, 0x1, 0x8, 0xffffffff, 0x3, 0x8, 0x1, 0x8001, 0x5, 0x8, 0x1, 0x9, 0x3ff, 0xaea, 0x401, 0x53d, 0x24, 0xab1b587, 0x5, 0x3, 0xad, 0x5, 0x1, 0x0, 0x8, 0x80, 0x7fffffff, 0x5, 0x7, 0x400000, 0x2, 0x7, 0x8, 0xffffffff, 0xc6a, 0x8, 0x1, 0x7, 0x6, 0x9, 0x8001, 0x3f, 0x2, 0x9, 0x0, 0x8000, 0x3, 0x6, 0x9, 0x3, 0x7, 0xfffff1fb], [0x1, 0x4, 0x3, 0x3, 0xfffeffff, 0x8c, 0xfffffff0, 0x200, 0x40, 0xd24, 0x46db, 0x7d51, 0x6, 0x3, 0x9, 0x8, 0x2, 0x585, 0x2d5, 0x37, 0x8, 0xa, 0x9d9f, 0x4, 0x3, 0xf, 0xfffffff7, 0x7, 0x939e, 0x61, 0x7, 0x3, 0x7, 0x80000001, 0xffffff1f, 0x5, 0x9, 0x1000, 0x3, 0x800, 0x7ff, 0x800, 0x4, 0x3, 0x3, 0x1, 0x2, 0x5, 0xa73, 0x2, 0x7, 0xe3, 0x1, 0x4, 0x6, 0x6, 0x6, 0x9, 0x9, 0x3, 0x1, 0x8001, 0x0, 0x5], [0x7, 0x7, 0x8, 0x3, 0x3, 0xfffffffd, 0x3, 0x1, 0xd2, 0x6990, 0xe, 0x7, 0xfffffffc, 0x2, 0x7fffffff, 0xd, 0x2b8de9df, 0xfffffffb, 0x85af, 0x87a, 0x8, 0x0, 0x4, 0x4, 0x5, 0x2, 0x7ff, 0x8, 0x4, 0x0, 0x4, 0x6, 0x74, 0x9, 0x3, 0x6, 0x7, 0x6, 0x0, 0x3, 0x4, 0x402, 0xb1b, 0x0, 0x8, 0x10000, 0x9, 0x8, 0x2, 0x8, 0x4, 0x8, 0x9, 0x180, 0xd322, 0x3e2a, 0xffffffff, 0x4, 0xfffffffa, 0x5, 0x5, 0xfffffffd, 0xffffffff], 0x7, ['sample\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x50) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x184, r3, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffff, 0x7a}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0xfa, 0x7}, {0x3, 0x3}, {0xfa, 0x1}, {0x4, 0x3}, {0x8, 0x2}, {0xa4, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0x4, 0x4}, {0xe, 0x7}, {0x54, 0x4}], "dbdce7ca57dc1f21"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x2, 0x2}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0x5}, {0x7, 0x7}, {0xb, 0x5}, {0x5}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x1}, {0x6}, {0x6, 0x2}, {}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x1}], "6f65477fc1cdd1f0"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x7}, {0x91, 0x4}, {0xe, 0x5}, {0x4}, {0x7, 0x6}, {0x19, 0x6}, {0x42, 0x7}, {0x3, 0x2}, {0xf8, 0x4}, {0xf8, 0x6}, {0x59}, {0xf0, 0x4}, {0x40, 0x7}, {0x6, 0x7}, {0x8, 0x5}, {0x6, 0x2}, {0xb3, 0x5}, {0x0, 0x7}, {0x6, 0x1}], "ebd735a2b7b68fbb"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x6, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x10, 0x1}, {0x3, 0x6}, {0xa, 0x4}, {0x6, 0x6}, {0x0, 0x7}, {0xa4, 0x4}, {0x4f, 0x4}, {0x0, 0x5}, {0x5, 0x3}, {0xb}, {0x6, 0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x80, 0x7}], "9b9ffdc1037d11c9"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x7, 0x6}, {0xc, 0x7}, {0x2, 0x4}, {0x1, 0x1}, {0x6, 0x6}, {0xc, 0x1}, {0x40, 0x5}, {0xaa}, {0x0, 0x7}, {0x20, 0x7}, {0x6, 0x7}, {0x7e}, {0xd2, 0x7}, {0x9, 0x7}, {0x2, 0x1}, {0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x40, 0x2}], "60ed0c6e748f3536"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "31696b34f8d1a5c2"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x4}, {0x5, 0x3}, {0x0, 0x3}, {0xa, 0x4}, {0x7, 0x1}, {0x78, 0x2}, {0x8, 0x2}], "8c9db0daf925434b"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x3, 0x3}, {0x29}, {0x78, 0x3}], "d4b9c1ab0d3de75f"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x2}, {0x8, 0x4}, {0x0, 0x6}, {0x4, 0x6}, {0x8, 0x4}, {0x8, 0x2}, {0x6b, 0x5}, {0x4, 0x5}, {0xd, 0x6}, {0x6, 0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x7, 0x3}, {0x8a, 0x7}, {0x0, 0x4}, {0x1f, 0x7}, {0x3, 0x2}, {0x9, 0x6}, {0xee, 0x5}], "de1d4a3c777134ba"}}]}, 0x184}}, 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@gettfilter={0x5c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0x2}, {0x13, 0x10}, {0xe, 0x1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x93ec}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x3ff}, {0x8, 0xb, 0x86}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000004", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.721159627s ago: executing program 3 (id=2245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00l\x00'/12], 0x10) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r2, 0x2, 0x30, 0x6, 0x4}, &(0x7f00000001c0)=0x18) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) 1.581163306s ago: executing program 3 (id=2247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000180)) 1.340987066s ago: executing program 3 (id=2251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7f83}, 0x8) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) 1.259395466s ago: executing program 3 (id=2254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f00000001c0)=0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f56e", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000800)="f6b328c40d4cc969a0513b8ffd72381d4ef4a89954104d4a81db2fa3c0f906a33482e2821787ac54c0c62da54d1c77255c322358d0e272be2ccacf8f689f0115afd7305a1ce39e8b54734910fd9257fc4d3d2f910d5b9965f73440df67940c76ddc3df", 0x63}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad628fdf1055f9a162c4bdcf92299f", 0x35}, {&(0x7f0000000940)="ee41e16fcc123e48fa04ef6edfc0fe23b7a87e1e837f1d1104d11ab1934265fd5cfbca479a17e7420ec938e84ad449c00288b126e26d6d80fb16c3c64ebcecade0b529986f4cfbcfa9c1c7138091b2ba9da4c7af757ac4d7990bfb36460a2eaaa3b786e6a14e457460793e0fdd4bdc6ef20050bc1ae8a5de6e0f84a007c740a9d6f1169a9b196652b0ee3e9d2dd06ceed86138dc7e", 0x95}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x2}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000180)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x5, 0xc263, 0x50, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x40, 0x40, 0x3, 0xf}}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x8, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x6, 0xfff3}, {0x10, 0x9}, {0xfff1, 0x8}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x2c000015) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.100976622s ago: executing program 1 (id=2256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/161, 0xa1}], 0x1) (async) ioctl$sock_SIOCSPGRP(r0, 0x541b, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f0000001f80)=[{0x0}, {&(0x7f0000000600)=""/62, 0x3e}], 0x2}, 0x4}], 0x1, 0x2, 0x0) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x4000010, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) 881.038151ms ago: executing program 0 (id=2260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x48, r4, 0x1, 0x0, 0x80, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @delba={0x3, 0x2, {{0x0, 0x0, 0xf}, 0x2a, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fddbdf256d00000008000300", @ANYRES32=r5, @ANYBLOB="0c38d20cac00990003000000"], 0x28}, 0x1, 0x0, 0x0, 0x48d0}, 0x4010) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000001000)={0x0, 'veth0_vlan\x00', {0x2}, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) 828.130544ms ago: executing program 2 (id=2262): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x7, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000440)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4018, r1}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000640)={0x20, @rand_addr=0x64010102, 0x4e23, 0x4, 'none\x00', 0x10, 0x8000, 0x57}, 0x2c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x1, 0x1, 0xa, 0xb, 0x40}, @call={0x85, 0x0, 0x0, 0x78}, @alu={0x4, 0x1, 0x5, 0x7, 0x6, 0x8, 0xffffffffffffffff}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xe8ea, 0xf0, &(0x7f0000000480)=""/240, 0x41000, 0x30, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x22601, 0xffffffffffffffff, 0xa, &(0x7f0000000600)=[r5, r6], &(0x7f0000000740)=[{0x5, 0x1, 0x9, 0x9}, {0x5, 0x2, 0x1, 0xb}, {0x1, 0x1, 0x4, 0x1}, {0x0, 0x3, 0x4, 0x6}, {0x4, 0x3, 0xd, 0x4}, {0x3, 0x4, 0x9, 0x6}, {0x0, 0x2, 0x0, 0xc}, {0x2, 0x5, 0x9, 0xc}, {0x3, 0x4, 0x10, 0x8}, {0x3, 0x4, 0xd}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 757.145447ms ago: executing program 0 (id=2264): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f000000000005000000000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 711.947603ms ago: executing program 4 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@ipv6_newaddrlabel={0x7c, 0x48, 0x300, 0x70bd28, 0x25dfdbfe, {0xa, 0x0, 0x10, 0x0, r1, 0x8001}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = openat$cgroup_ro(r3, &(0x7f0000000540)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e66631008000100", @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r9 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) sendmsg$nl_crypto(r6, &(0x7f0000000740)={&(0x7f0000000280), 0xc, &(0x7f0000000700)={&(0x7f00000005c0)=@alg={0x108, 0x10, 0x100, 0x70bd29, 0x25dfdbfb, {{'drbg_pr_sha256\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x40}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0xd1) write$cgroup_int(r9, &(0x7f0000001640), 0x12) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = socket(0x848000000015, 0x805, 0x0) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @private=0xa010101}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x40, {0x2, 0x4e24, @broadcast}, 'lo\x00'}) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7}, 0xfffffffffffffe0d) r11 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x17c, r12, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4b}}}}, [@NL80211_ATTR_IE={0x13d, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @mesh_chsw={0x76, 0x6, {0x1, 0x9, 0x27, 0xf9}}, @supported_rates={0x1, 0x4, [{0x16}, {0x24, 0x1}, {0xc}, {0x6c, 0x1}]}, @cf={0x4, 0x6, {0x7, 0x25, 0xbfd5, 0x7}}, @link_id={0x65, 0x12, {@from_mac, @device_a, @device_b}}, @tim={0x5, 0xab, {0xf, 0xe0, 0x3, "89f96b9321e45e2a9bc86c2b0373adb39cb4224364d94fa80e29e824299d60d3a366ec6b1ec056870c3e0730e542246fecc5ff970f3b45d121160999de89f8938515fa4245b233e1368b379f38c401ddeadf26925a61f4fdaf8374ce305e279525bbd63986634d8e204ef2c82cb7c870b60cf11474fb2ea53304ba6be7d06f60d679464e008777585245916ffa80c250f7872333a52e4fb100bfbad50cb69bcfe9e632c0d5e8e8e1"}}, @measure_req={0x26, 0x43, {0x2, 0x5, 0x5, "a2975c5a56bc01b3c51ad3f307f072c994409c4d000dcae81539d2220842d429b8f5ec159ede85dbb103670fd10313efce3208132929a66db4b4903fea4e8e1f"}}, @mic={0x8c, 0x18, {0xbce, "727708207bb7", @long="1141a29b0ca5e81cfad52161beda4fae"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x37}, @NL80211_ATTR_MAC={0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x810) 665.249982ms ago: executing program 0 (id=2266): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x138) 541.056315ms ago: executing program 4 (id=2267): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = socket$inet(0xa, 0x3, 0x2000002) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x5) (async) listen(r4, 0x5) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xb, 0x8, 0xfff, 0xfffffffa, 0x6}, &(0x7f0000000080)=0x14) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000000c0)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000023e0004"], 0x0, 0x56, 0x0, 0x8}, 0x20) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="48666d1c", @ANYRES16=r0, @ANYBLOB="020000000000000800006700000008000300", @ANYRES32=r3, @ANYBLOB="0800c300000000000800c40000000000"], 0x2c}}, 0x4008010) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x24}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 540.697131ms ago: executing program 0 (id=2268): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi\n', 0x3}], 0x1, 0x1) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061107e000000000006000000000000009500000000002000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) (rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_REPLY={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x94}}, 0x24044800) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) 521.190196ms ago: executing program 4 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='&\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000480)={{0x0, 0x6, 0x11, 0xe839, 0x7, 0x2, 0xa5, 0x7, 0x2, 0x5544, 0x9, 0x2, 0x8, 0x0, 0xda}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r1, 0x1ff, 0xe, 0x6, 0x4, 0x100, 0xff, 0x6, 0x4, 0x4, 0x3ff, 0x7, 0x5, 0x5e, 0xc}, 0x8, [0x0]}) 432.837277ms ago: executing program 4 (id=2270): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a712f0756b80000"], 0x54}}, 0x0) 325.107208ms ago: executing program 2 (id=2271): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) close(0x4) sendmsg$nl_route(r1, 0x0, 0x4008840) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, 0x0) 323.844486ms ago: executing program 0 (id=2272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) ioctl$TUNSETVNETLE(r2, 0x400454dc, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r1, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0) 310.82055ms ago: executing program 3 (id=2273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002804048024000180090001006d6574610000000014000280080002400000000008000140000000000900010073cd7a30000000000900020073797a32000000001400000011ee0000000a00000000000000000000189cf85e827435f5bad65b203cf81edec2f179b302380af25af7a9d15102323c85cd129b7a92fa58046f81316ff6e7da279b6e5e5cd4f4df9afd9b6c3b889fc8eb214c0ed93064945399bbf7bb00"/217], 0x7c}}, 0x0) 285.021338ms ago: executing program 4 (id=2274): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r2 = socket$inet_sctp(0x2, 0x0, 0x84) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34001900140a01020000000000000000020000d6f24af9cc90b17cdb510feb05080003400000000a0cb6e84000000000000000030900010073797a00000000140000001100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x40408d0}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf39e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000881) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 64) r7 = socket(0x1d, 0x2, 0x6) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x8000000000000003, {0x0, 0xf0}}, 0x18) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xe8, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0xcc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xd, 0x52, 0x3, 0x8000}, {0x0, 0x0, 0x9, 0x4432}, {0x1, 0x8, 0x8, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendto$inet6(r4, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) (async, rerun: 64) sendto$inet(r2, &(0x7f0000000b80)="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", 0x1000, 0x44801, 0x0, 0x0) (async, rerun: 64) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) r12 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r12, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x20000010) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 168.608658ms ago: executing program 2 (id=2275): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000200)={0x30002018}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) r6 = epoll_create(0x67) close(r6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x465}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x58}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8811) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'tunl0\x00', r5, 0x10, 0x1, 0x4c7, 0xbd6, {{0x17, 0x4, 0x2, 0x1a, 0x5c, 0x64, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@end, @ssrr={0x89, 0x1f, 0x31, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2]}, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0xa2, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @multicast1, @loopback, @multicast1]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f00000004c0)={@mcast2, 0x58, r9}) r10 = accept(r1, 0x0, &(0x7f0000000500)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$netlink(r10, &(0x7f0000000c00)={&(0x7f0000000540)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000000600)={0x468, 0x1a, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x44, 0xd, 0x0, 0x1, [@nested={0x4, 0x7e}, @generic="efd79fa623cda06699619ebaa5185dec3238f5164e0d228e04e9755801939066c1e5f9764b7c440b6e76391c089253c0f752c2bfdd60b8d7bc538a7c"]}, @nested={0x4, 0x51}, @nested={0x1c7, 0x10b, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @uid=r11}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="204b2ed4f94d50599318def1f0f05151d11713e1f6326df7981c49e8bcbccdad4ff7ee73e84c3c8c5229896c47660dd10ef39770a638ab579172fd4c9dd9fffc26f192c4669f720dd9dc2b2891403d078561e9523700254d3797436bc22c0bce5435535e037e31df6ce10d1d6bc36d0c6892e05ecdeecba41832cbc2ff9b377960d5b9378add989eb38e43997fb999889ff9064ae8ab53a425525a52bb138f57faf4aaad82819c1e7558e4aac3", @generic="9f3f25ead3f9627beb4f16fa62300eb611c683c905159f07c9a680845695833e83365fb1e353bf79f08fa3b9141eeccad83490a7f20ceb366477a41e08454f54d33d74ee0fc17c98fa995c73dc6670b1cbaac6824b18baaf468182c9026744831c87e4f009b42c17aa0e41de9c865b4b0cb2a781f9ff9fc64b52bb306f9613e76ec2ff431a36e52a251482949de740bf600f8aa8ff7e4d94a75dc7a26ae95a9f09a6ddac7e9378c3d1324eca63d6788c6acd337f1129cd00d5bc22c41b063844fe8102e7064c60d1d60c0f827a58be6549472f23f296d59785e3ec0451cc1dc899372da1559a9d588912c1c45ad23d9796fa2e9323ad", @nested={0x4, 0x109}]}, @nested={0xe6, 0x98, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @generic="f5d7eead342549fc17eccf6e66ea19d1731622dc82", @generic="58db8e4a49d1710b1e02cd4adfb5159aef1fdad0a6b299ac113acdb4c06b53cdeb0e34b664052f2767038e69a3e203ef7603d1fd6879bc3846a324b42762eedf85057f686dd6f3a0da9739f8ef942cb813f2b27e5a95e11dc0b289bfea4613cb789736ce581d2275ec62a20acaa63139ba7cfa7dfb9381977bea387ad6f9ceec0cdbaf233ebbb52849a47daf2ab27f21661c1fa4df81e9b3883cedf4eb3443d8b3fb5f7956e88829cd58e1b8d65b9dee670a832f8ade51c943"]}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0x401}, @typed={0x8, 0x96, 0x0, 0x0, @uid=0xee00}, @generic="485562a505064f8e40fbfbd3c1487e129ba5f176ca91253811bde7afa53069ee2084a1716d1c6cc52ed328deab36e1055d61c80513ac7bcd605133104803849331e38f4c515fb787b9cdcfb83a252f189414e5382d86576eb8820ab81c845554fdfcfabb7d03d6987a2168cf14a9387c8cc2bd790e28e1eafc80621d8a96d187a0e536f0fe2777ceacc2acc612f4a9abbf8dd44197282455e261e17f3bfec47f63d805b302cf29838a26e6971a1d8dc0c5160034fc4bfea82951466cb8d74f147594d1224a3c300f21196efdc87df3173e28478adde289b755a93195c4d1259a7339f0d3e997d97927b98b79a983809d297d2444902cfe5e", @generic="d02c3aaf5f42177e0d437b2c6c720a04154153ab6a5106baaced34294225159280b6ad4dcfdfb86e8badf8337ad3af1671c267f4c3c05e1b376b9baf8f726653cfb625e80f45caa4b9", @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x18}]}]}, 0x468}, {&(0x7f0000000a80)={0x104, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="0aee97e1c04659079600967082f75a3d83204df670beb3e7e2227aadbafac959afdbe7f4d7cf01cc0758d2d7e45039673d3b9b1fa8d8b7f68b716aabeb16838b64b366f0986ef43b93d5e264391f3732e4f6925583ab09267623ed92063496d6103ab315aa2ce7ad30e88e63ae9042cdb91b0ab4da0b636ed24813c66728ccc23b5251c7c9c14056b0deb1c765efd01a3048f59fbbfa386660b04abdff74bbaa93f27bd3138da50b85df137c9d03e5372b20a9fb28b8a88c74437b264b27fcbaf95c9a2114b6b80243d86dd66bb9f961c749538d1cfd735e80ae6c5df976d2ced0c24d145bbc8ca0f1e2d8471f93f360bf4281"]}, 0x104}], 0x2, 0x0, 0x0, 0x4000000}, 0x4008005) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000c40)) sendmsg$nl_route_sched(r10, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000cc0)=@gettaction={0x1d0, 0x32, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x75}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x380}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x75}}]}, @action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x54}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x42b}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x101402, 0x0) write$tun(r12, &(0x7f0000000f80)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @link_local, @empty}}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000fc0)={r2, 0x9, 0x1, 0x81}) ioctl$PPPIOCCONNECT(r13, 0x4004743a, &(0x7f0000001000)) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0xa, 0xe7, 0x1, 0x12838, r3, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x4, @void, @value, @value=r13}, 0x50) setsockopt$inet_msfilter(r13, 0x0, 0x29, &(0x7f00000010c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, [@local, @local, @rand_addr=0x64010102, @local, @remote, @remote, @multicast2, @remote, @multicast1]}, 0x34) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), r13) sendmsg$ETHTOOL_MSG_DEBUG_SET(r13, &(0x7f0000001540)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001180)={0x35c, r14, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "737958735c9929bafc11d3e1e985d7397c434fd2f42ae44aea2c7fbb4abe6800668de1eca3c6bb03d41c0f740ffbc3aa79ccdd532fcd197052335c6bc650d1bee887e4bb80c4228f77965338e9dacdc91760baa59a4474e19bffc8a73efebf43beaf95c7fcc848655b04cb11e968b4ce08537e52867a740ea9f09495464623c02c9c038315b5a81192b3018b5c272d073549ae"}, @ETHTOOL_A_BITSET_MASK={0x50, 0x5, "a4f0fcc69a32a9b692c22a78c6446d0dff68d608d8c9957023fef1d95c8c78dc70e3e70f091132f9244983d919aaf88acb28f1cad6b67be71fb711a0b80ba1b4c2922eae70b33b59055f453e"}, @ETHTOOL_A_BITSET_VALUE={0xa3, 0x4, "d56172f9ed786074fb51ff49e7bd28656447a1f3311bd4badbf451351d91db23a3cf1a787b9a1ae99f58288b05f425c3f23c476fee540dc30657ca5dbc5ae75eec49902dddbcdb5f77a7d4ed189c46f3ca483814f9eb34ce3bb40be58189b62021d67ea1307a99f05f42d04c273edc63839716bb3f33b7bc41439e400ea11dc64a2da2af313923092e1e94d56f3fb37736f1a7ac4261bb90b40502883ae3e8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '%pK \x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8d\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x764}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "7e2164aa291a6e2c1b58bff8a678"}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x35c}, 0x1, 0x0, 0x0, 0x9044}, 0x10) accept$nfc_llcp(r10, &(0x7f0000001580), &(0x7f0000001600)=0x60) ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000001640)={{0x2, 0x4e23, @rand_addr=0x64010100}, {0x306, @random="17ce9d18a464"}, 0x8, {0x2, 0x4e22, @remote}, 'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x11, 0x13, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @alu={0x7, 0x1, 0x1, 0x7, 0xa, 0xfffffffffffffffc, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='GPL\x00', 0x7fffffff, 0x38, &(0x7f00000017c0)=""/56, 0x40f00, 0x21, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[r13, r2, 0xffffffffffffffff], &(0x7f00000018c0)=[{0x3, 0x3c0, 0xd, 0x2}], 0x10, 0x581}, 0x94) 168.257881ms ago: executing program 1 (id=2276): r0 = socket$inet(0x2, 0x3, 0x7f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_DF={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, 0x0, 0x20000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10010000", @ANYRES16=r8, @ANYBLOB="01042bbd7000fddbdf251800000008000300", @ANYRES32, @ANYBLOB="ec00308024000300592c45819efd8db4bf966f84451627b2a4a98d0beb82d802123eec98ff95e16a240003004d98b61a4a5c29bac63e5a472dc234cb42bdeef928fb24d1c92bdf0128a3f0ce14000400b933907288c98ff2127ab387add7c62724000300e04c9937188fed9ba953521a44a84489437907b816b0343ec360b4aa18fe1d2f3000018014000380080002000200000006000300a3aa0000080001000400000008000100010000000800040002000000070004001b939fcb42a73e000000000000000000240003002e6f08b2da3e58eceeea0c9e63ff5b745c0f95c84c43de11f6aa5479dd337e0b08000300", @ANYRES32=r10], 0x110}}, 0x4004000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000080)={0x1100, 0x1, 0x8008000b, 0x8001}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r11, &(0x7f0000000400)={0x0, 0xfffd, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000000104010100000000000000000000000005000100007ca937b65efa62f4398d01000000000000064000000000"], 0x24}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1407, 0x800, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8060}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000180)="ad56b6c5820fae9d38a9e572f2", 0xd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12, 0x0, 0x1}, 0x48) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 73.580909ms ago: executing program 3 (id=2277): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) 8.462665ms ago: executing program 2 (id=2278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x840000000002, 0x3, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="86edb1c6000000e5db6417e58f44aa00348f0399", 0x14}], 0x1}}], 0x1, 0x20004086) 8.126966ms ago: executing program 4 (id=2279): r0 = socket(0x22, 0x2, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x746}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000200)="8a8af825496e4015c906c1d8dfb53d9ab7560f646954f74060e1361deb3774b8877b44829102f80a1281a6f5a585301337ee68a475aa22de740163741f7041d1357c0e3b540c6d9203be9d75f3aa1ad6e440098e010490ac5fc8b4d087253a4d582d8de609226c6d259f94a22a055783a482cae749a9c780da548b3715e39dd91ea9676c249add697253cf4ecaaa5e6b5f", 0x91, 0x40, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r5, @ANYRES32=r5], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf3000000000000015000200000000103d030100000000009500000000000000bc26080000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 0s ago: executing program 0 (id=2280): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r2) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) r4 = socket(0xa, 0x3, 0xff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000206052000000000000000000000000005000400000000000900020073797a300000000014000780080013402000000008000640000a1900050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x28, 0x4, 0x70}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c000000000120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x48}}, 0x40050) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1e08000f0000000000b8b0e10b", @ANYRES32, @ANYBLOB="3eb900"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0200000004000000010000000b00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000540)=0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r11, 0x8982, &(0x7f0000000340)={0x7, 'veth1_to_team\x00', {0x8}, 0x100}) r12 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r12, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r14}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can={0x1d, r14}, 0x80, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, &(0x7f0000000100)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x20}, 0x94) r15 = socket$pppoe(0x18, 0x1, 0x0) listen(r15, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@ipv4_deladdr={0x18, 0x15, 0x100, 0x70bd26, 0x25dfdbfc, {0x2, 0x1, 0x8d, 0x165}}, 0x18}, 0x1, 0x0, 0x0, 0x815}, 0x4000000) kernel console output (not intermixed with test programs): 5.541375][ T6387] __nla_validate_parse: 7 callbacks suppressed [ 105.541395][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 105.592724][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 105.746461][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 105.918418][ T6403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.149967][ T6411] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 106.293312][ T6416] netlink: 48 bytes leftover after parsing attributes in process `syz.3.109'. [ 106.404034][ T6411] bond1 (unregistering): Released all slaves [ 106.524580][ T6424] netlink: 'syz.0.112': attribute type 8 has an invalid length. [ 106.609520][ T6428] netlink: 'syz.1.113': attribute type 1 has an invalid length. [ 106.645512][ T6428] netlink: 'syz.1.113': attribute type 2 has an invalid length. [ 106.894637][ T6438] netlink: 'syz.2.115': attribute type 10 has an invalid length. [ 106.980082][ T6438] batman_adv: batadv0: Adding interface: team0 [ 107.017597][ T6438] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.112634][ T6438] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 107.239849][ T6450] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.119'. [ 107.281027][ T6450] netlink: zone id is out of range [ 107.349333][ T6450] netlink: zone id is out of range [ 107.394583][ T6450] netlink: zone id is out of range [ 107.437878][ T6450] netlink: zone id is out of range [ 107.466978][ T6450] netlink: zone id is out of range [ 107.480987][ T6450] netlink: zone id is out of range [ 107.504152][ T6450] netlink: zone id is out of range [ 107.509321][ T6450] netlink: zone id is out of range [ 107.864856][ T6474] netlink: 36 bytes leftover after parsing attributes in process `syz.2.127'. [ 108.128128][ T6483] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 108.443369][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.495761][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.636638][ T64] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.705353][ T64] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.773417][ T64] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.782199][ T64] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.801439][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.897692][ T6511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 108.975575][ T6511] vlan2: entered promiscuous mode [ 109.013474][ T6511] team0: entered promiscuous mode [ 109.033456][ T6511] team_slave_0: entered promiscuous mode [ 109.069853][ T6511] team_slave_1: entered promiscuous mode [ 109.298833][ T6532] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 109.389258][ T6532] syzkaller1: entered promiscuous mode [ 109.428302][ T6532] syzkaller1: entered allmulticast mode [ 109.487650][ T6532] ªªªªªª: renamed from vlan0 (while UP) [ 109.932991][ T6554] can: request_module (can-proto-0) failed. [ 110.003198][ T5879] Bluetooth: hci4: command tx timeout [ 110.082444][ T6573] net_ratelimit: 12 callbacks suppressed [ 110.082464][ T6573] openvswitch: netlink: Message has 8 unknown bytes. [ 110.496638][ T6588] tipc: Enabled bearer , priority 0 [ 110.572073][ T6593] __nla_validate_parse: 2 callbacks suppressed [ 110.572093][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 110.588189][ T6591] syzkaller0: entered promiscuous mode [ 110.596501][ T6591] syzkaller0: entered allmulticast mode [ 110.650289][ T6580] tipc: Resetting bearer [ 110.817013][ T6578] tipc: Resetting bearer [ 110.945018][ T6578] tipc: Disabling bearer [ 111.205090][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.165'. [ 111.245264][ T6623] netlink: 'syz.2.165': attribute type 2 has an invalid length. [ 111.327720][ T6627] netlink: 14 bytes leftover after parsing attributes in process `syz.3.168'. [ 111.352343][ T6628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.169'. [ 111.631996][ T6627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.643938][ T6627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.654932][ T6627] bond0 (unregistering): Released all slaves [ 111.702729][ T6636] team0: Device gtp1 is of different type [ 111.945791][ T6642] bond1 (unregistering): Released all slaves [ 112.027133][ T6662] ieee802154 phy0 wpan0: encryption failed: -22 [ 112.416263][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.452760][ T6676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.748616][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.767311][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.779673][ T6692] netlink: 'syz.4.185': attribute type 11 has an invalid length. [ 112.929396][ T6702] netlink: 44 bytes leftover after parsing attributes in process `syz.1.189'. [ 113.030781][ T6706] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 113.392442][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 113.406556][ T6724] netlink: 'syz.0.194': attribute type 4 has an invalid length. [ 113.617956][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.646252][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.685181][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.709790][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.909371][ T6743] netlink: 'syz.2.200': attribute type 7 has an invalid length. [ 113.921555][ T6745] netem: change failed [ 114.044339][ T6746] sctp: failed to load transform for md5: -2 [ 114.616910][ T6780] dvmrp0: entered allmulticast mode [ 115.585484][ T6832] netlink: 'syz.3.216': attribute type 2 has an invalid length. [ 115.718171][ T6805] syzkaller0: entered allmulticast mode [ 115.737972][ T6839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.768117][ T6838] netlink: 'syz.2.219': attribute type 16 has an invalid length. [ 115.780630][ T6841] netlink: 'syz.2.219': attribute type 16 has an invalid length. [ 115.802274][ T6838] netlink: 'syz.2.219': attribute type 17 has an invalid length. [ 115.803231][ T6841] netlink: 'syz.2.219': attribute type 17 has an invalid length. [ 115.848882][ T6841] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.858545][ T6841] batman_adv: batadv0: Interface activated: team0 [ 115.869949][ T6841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.918785][ T6844] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.996894][ T6838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.244347][ T6861] __nla_validate_parse: 13 callbacks suppressed [ 116.244368][ T6861] netlink: 10 bytes leftover after parsing attributes in process `syz.1.226'. [ 117.269740][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 117.311452][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 117.322312][ T6867] veth0: entered promiscuous mode [ 117.342082][ T6870] veth0: left promiscuous mode [ 117.661006][ T6881] netlink: 71 bytes leftover after parsing attributes in process `syz.4.234'. [ 117.687229][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 117.784809][ T6880] vlan2: entered allmulticast mode [ 117.790267][ T6880] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 117.988292][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.238'. [ 118.156827][ T6898] netlink: 'syz.4.237': attribute type 1 has an invalid length. [ 118.176196][ T6901] netlink: 788 bytes leftover after parsing attributes in process `syz.1.240'. [ 118.202768][ T6898] netlink: 16130 bytes leftover after parsing attributes in process `syz.4.237'. [ 118.551648][ T6927] netlink: 'syz.4.245': attribute type 10 has an invalid length. [ 118.593248][ T6927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 118.604931][ T6926] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 118.982100][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 119.022280][ T6947] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 119.042758][ T6947] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 119.057688][ T6947] NCSI netlink: No device for ifindex 813332851 [ 119.375934][ T6969] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 119.504507][ T6969] gretap1: entered promiscuous mode [ 119.520049][ T6969] gretap1: entered allmulticast mode [ 119.557399][ T6977] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 119.642932][ T6975] netlink: 'syz.4.261': attribute type 1 has an invalid length. [ 119.831596][ T6989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.850838][ T6977] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.866678][ T6977] bond1: (slave bond2): making interface the new active one [ 119.876415][ T6977] bond1: (slave bond2): Enslaving as an active interface with an up link [ 120.017547][ T6975] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 120.067259][ T6977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.160821][ T7007] veth0: entered promiscuous mode [ 121.039373][ T7053] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 121.265594][ T7061] tipc: Started in network mode [ 121.270523][ T7061] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 121.338592][ T7061] tipc: Enabled bearer , priority 10 [ 121.425570][ T7073] C: renamed from team_slave_0 (while UP) [ 121.535230][ T7073] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 121.562716][ T7073] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 122.453047][ T5993] tipc: Node number set to 4269801492 [ 122.713205][ T7123] __nla_validate_parse: 6 callbacks suppressed [ 122.713225][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 122.951854][ T7133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.477361][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 123.526418][ T7148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.542870][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.563343][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 123.592956][ T7150] netlink: 'syz.4.298': attribute type 33 has an invalid length. [ 123.602091][ T7150] netlink: 152 bytes leftover after parsing attributes in process `syz.4.298'. [ 123.638236][ T7148] netlink: 'syz.2.299': attribute type 11 has an invalid length. [ 123.655394][ T7156] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 123.682907][ T7148] netlink: 224 bytes leftover after parsing attributes in process `syz.2.299'. [ 124.153237][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 124.187796][ T7167] tipc: New replicast peer: 255.255.255.255 [ 124.200848][ T7167] tipc: Enabled bearer , priority 10 [ 124.215024][ T7167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 124.607233][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 124.625859][ T7185] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 124.635146][ T7185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.809221][ T7190] netlink: 'syz.2.315': attribute type 5 has an invalid length. [ 127.433586][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.456724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.537542][ T7316] netlink: 'syz.0.357': attribute type 8 has an invalid length. [ 128.042446][ T7341] __nla_validate_parse: 10 callbacks suppressed [ 128.042466][ T7341] netlink: 96 bytes leftover after parsing attributes in process `syz.1.361'. [ 128.044764][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.362'. [ 128.084587][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 128.113540][ T7341] netlink: 14 bytes leftover after parsing attributes in process `syz.1.361'. [ 128.402165][ T7353] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 128.439538][ T7353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.367'. [ 128.457933][ T7359] pim6reg: entered allmulticast mode [ 128.459758][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.2.370'. [ 128.491207][ T7353] dummy0: entered promiscuous mode [ 128.503714][ T7353] bridge0: port 3(dummy0) entered blocking state [ 128.512121][ T7353] bridge0: port 3(dummy0) entered disabled state [ 128.526648][ T7353] dummy0: entered allmulticast mode [ 128.545939][ T7353] bridge0: port 3(dummy0) entered blocking state [ 128.552458][ T7353] bridge0: port 3(dummy0) entered forwarding state [ 128.799228][ T7365] netlink: 'syz.2.370': attribute type 2 has an invalid length. [ 129.086475][ T7388] netlink: 44 bytes leftover after parsing attributes in process `syz.2.376'. [ 129.213225][ T7395] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 129.293835][ T7395] gretap1: entered promiscuous mode [ 129.487808][ T7401] netlink: 159784 bytes leftover after parsing attributes in process `syz.2.382'. [ 129.532672][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 129.703735][ T7405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.384'. [ 131.488583][ T7449] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 131.505330][ T7451] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.397'. [ 131.975773][ T7466] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 132.210225][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.460095][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066321800: rx timeout, send abort [ 132.480538][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.537726][ T7473] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 132.608771][ T7473] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 132.801093][ T7477] veth7: entered promiscuous mode [ 132.817207][ T7477] bond0: (slave veth7): Enslaving as an active interface with a down link [ 132.828013][ T7478] tipc: Enabling of bearer rejected, failed to enable media [ 132.840795][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.868140][ T3542] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.891424][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901716][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.906457][ T7489] netlink: 'syz.1.408': attribute type 21 has an invalid length. [ 132.919601][ T7489] netlink: 'syz.1.408': attribute type 5 has an invalid length. [ 132.969164][ C0] vcan0: j1939_tp_rxtimer: 0xffff888066321800: abort rx timeout. Force session deactivation [ 132.981094][ T7491] xt_socket: unknown flags 0xe4 [ 133.085150][ T7493] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 133.198259][ T7497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.254093][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 133.278928][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 133.307748][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 133.479200][ T7511] bond1: entered promiscuous mode [ 133.541147][ T7511] bond1: entered allmulticast mode [ 133.547305][ T7511] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.555158][ T7511] bridge1: port 1(bond1) entered blocking state [ 133.570849][ T7511] bridge1: port 1(bond1) entered disabled state [ 133.588375][ T7511] bridge1: port 1(bond1) entered blocking state [ 133.595540][ T7511] bridge1: port 1(bond1) entered forwarding state [ 133.778309][ T3506] bridge1: port 1(bond1) entered disabled state [ 133.985143][ T7530] __nla_validate_parse: 7 callbacks suppressed [ 133.985163][ T7530] netlink: 108 bytes leftover after parsing attributes in process `syz.4.420'. [ 134.396919][ T7554] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 134.420675][ T7554] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 134.450647][ T7554] netlink: 'syz.2.428': attribute type 3 has an invalid length. [ 134.466258][ T7554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'. [ 134.479237][ T7559] netlink: 'syz.4.430': attribute type 4 has an invalid length. [ 134.502334][ T10] wlan1 speed is unknown, defaulting to 1000 [ 134.512739][ T7501] infiniband syz0: set active [ 134.526668][ T7501] infiniband syz0: added wlan1 [ 134.563569][ T7501] syz0: rxe_create_cq: returned err = -12 [ 134.589518][ T7501] infiniband syz0: Couldn't create ib_mad CQ [ 134.615146][ T7501] infiniband syz0: Couldn't open port 1 [ 134.734532][ T7568] openvswitch: netlink: IPv4 tun info is not correct [ 134.740646][ T7501] RDS/IB: syz0: added [ 134.757480][ T7568] openvswitch: netlink: IPv4 tun info is not correct [ 134.764921][ T7501] smc: adding ib device syz0 with port count 1 [ 134.793201][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'. [ 134.799742][ T7501] smc: ib device syz0 port 1 has pnetid [ 134.813929][ T5933] wlan1 speed is unknown, defaulting to 1000 [ 134.829243][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 134.848365][ T7575] netlink: 108 bytes leftover after parsing attributes in process `syz.4.433'. [ 134.893666][ T7575] netlink: 108 bytes leftover after parsing attributes in process `syz.4.433'. [ 134.925819][ T7575] netlink: 84 bytes leftover after parsing attributes in process `syz.4.433'. [ 135.474512][ T7592] veth3: entered allmulticast mode [ 135.711418][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.443'. [ 135.846311][ T7607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.999708][ T7612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.006579][ T7621] netlink: 816 bytes leftover after parsing attributes in process `syz.0.446'. [ 136.017006][ T7612] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.030692][ T7612] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 136.050102][ T7615] unknown channel width for channel at 909000KHz? [ 136.056725][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 136.572095][ T7637] tap0: tun_chr_ioctl cmd 1074025677 [ 136.589073][ T7637] tap0: linktype set to 65534 [ 136.820898][ T7645] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 136.843690][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 137.445848][ T7663] ip6gre1: entered allmulticast mode [ 137.511801][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 137.516035][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 137.663862][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 137.782335][ T7681] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 138.096926][ T7688] netlink: 'syz.2.469': attribute type 8 has an invalid length. [ 138.137311][ T7696] netlink: 'syz.4.471': attribute type 58 has an invalid length. [ 138.141443][ T7695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.716463][ T7501] wlan1 speed is unknown, defaulting to 1000 [ 138.981169][ T7725] netlink: set zone limit has 8 unknown bytes [ 139.001896][ T7725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.009466][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 139.028553][ T7725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.086989][ T7727] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 139.246208][ T7727] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.270873][ T7726] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 139.303464][ T7735] vlan0: entered allmulticast mode [ 139.308661][ T7735] veth1: entered allmulticast mode [ 139.329299][ T7735] veth1: entered promiscuous mode [ 139.356205][ T7735] veth1: left promiscuous mode [ 139.371595][ T7735] bond1: (slave vlan0): making interface the new active one [ 139.388714][ T7735] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 139.411701][ T7735] veth1: entered promiscuous mode [ 139.434661][ T7735] vlan0: entered promiscuous mode [ 139.441044][ T7735] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 139.744651][ T7751] veth0: entered promiscuous mode [ 139.765305][ T7750] veth0: left promiscuous mode [ 139.816904][ T7754] __nla_validate_parse: 7 callbacks suppressed [ 139.816924][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 140.135589][ T7767] netlink: 'syz.1.495': attribute type 4 has an invalid length. [ 140.136101][ T7770] netlink: 'syz.0.496': attribute type 3 has an invalid length. [ 140.158635][ T7770] netlink: 766 bytes leftover after parsing attributes in process `syz.0.496'. [ 140.229626][ T7770] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 140.570014][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.664065][ T7792] netlink: 'syz.4.503': attribute type 10 has an invalid length. [ 140.671926][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.503'. [ 140.710068][ T7792] team0: Port device geneve0 added [ 140.822469][ T7795] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.829268][ T7795] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 141.125718][ T7811] netlink: 'syz.2.507': attribute type 4 has an invalid length. [ 141.222464][ T7806] tipc: Enabled bearer , priority 0 [ 141.311920][ T7812] syzkaller0: entered promiscuous mode [ 141.323782][ T7812] syzkaller0: entered allmulticast mode [ 141.341768][ T7816] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 141.461827][ T7822] tipc: Resetting bearer [ 141.578931][ T7805] tipc: Resetting bearer [ 141.615342][ T7805] tipc: Disabling bearer [ 141.651309][ T7834] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 141.756432][ T7838] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 141.865916][ T7844] geneve0: mtu less than device minimum [ 142.231826][ T7863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.523'. [ 142.589946][ T7876] netlink: 96 bytes leftover after parsing attributes in process `syz.4.527'. [ 142.984520][ T7890] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.531'. [ 143.172722][ T7900] netlink: 72 bytes leftover after parsing attributes in process `syz.4.535'. [ 143.247769][ T7903] netlink: 'syz.1.536': attribute type 2 has an invalid length. [ 143.400155][ T7912] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 143.451801][ T7915] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 143.499565][ T7894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.533'. [ 143.707740][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 143.734972][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 143.773470][ T7931] wlan1 speed is unknown, defaulting to 1000 [ 144.105677][ T7943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.463037][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.471628][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.745714][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.825890][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.837859][ T7976] __nla_validate_parse: 3 callbacks suppressed [ 144.837876][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 145.029234][ T7984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.173165][ T7986] netlink: 'syz.1.559': attribute type 1 has an invalid length. [ 145.250133][ T7976] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 145.303038][ T7976] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 145.338482][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.498114][ T7987] bond2: (slave gretap1): making interface the new active one [ 145.558977][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.561'. [ 145.576602][ T7987] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 145.596134][ T8002] netlink: 96 bytes leftover after parsing attributes in process `syz.2.563'. [ 145.644131][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.669205][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.750271][ T8007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.806922][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.856941][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 146.296791][ T8039] openvswitch: netlink: Unknown key attributes 2 [ 146.401206][ T8041] nbd: must specify an index to disconnect [ 146.535310][ T8049] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 146.570340][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 146.619156][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 146.637797][ T8057] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 146.648997][ T8057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.682021][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 147.010560][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 147.136348][ T8067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.146619][ T8067] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.168837][ T8067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.858641][ T8107] trusted_key: syz.1.592 sent an empty control message without MSG_MORE. [ 148.029421][ T8113] tipc: Enabling of bearer rejected, already enabled [ 148.090532][ T8115] tipc: Enabling of bearer rejected, already enabled [ 148.266076][ T8115] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.398827][ T8115] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 148.500941][ T8131] syzkaller1: entered promiscuous mode [ 148.556183][ T8131] syzkaller1: entered allmulticast mode [ 149.181939][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 149.822362][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 149.861934][ T8169] netlink: 'syz.4.610': attribute type 11 has an invalid length. [ 149.881345][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 149.900992][ T8169] netlink: 'syz.4.610': attribute type 11 has an invalid length. [ 149.913737][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 150.124946][ T8186] netlink: 2476 bytes leftover after parsing attributes in process `syz.0.615'. [ 150.154607][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.617'. [ 150.261575][ T8193] netlink: 256 bytes leftover after parsing attributes in process `syz.1.619'. [ 150.584581][ T13] vlan0: left promiscuous mode [ 150.610750][ T8205] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.726624][ T8216] netlink: 'syz.3.625': attribute type 10 has an invalid length. [ 150.746660][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.3.625'. [ 150.761878][ T8218] netlink: 'syz.2.627': attribute type 6 has an invalid length. [ 150.807631][ T8216] team0: Port device geneve0 added [ 150.866227][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 150.905671][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 150.921034][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 151.047684][ T8229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 151.371921][ T8249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.837759][ T8267] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.273606][ T8280] syz.3.648 (8280) used greatest stack depth: 17864 bytes left [ 152.329308][ T8288] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 152.703921][ T8303] batman_adv: batadv0: Adding interface: dummy0 [ 152.710235][ T8303] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.759687][ T8303] batman_adv: batadv0: Interface activated: dummy0 [ 152.799770][ T8304] batadv0: mtu less than device minimum [ 152.818894][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.831216][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.843244][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.854882][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.866342][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.878528][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 152.890096][ T8304] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 154.389374][ T8372] bond4 (unregistering): Released all slaves [ 154.721996][ T8409] tipc: Started in network mode [ 154.727915][ T8409] tipc: Node identity ae91a96a01a5, cluster identity 4711 [ 154.735804][ T8409] tipc: Enabled bearer , priority 0 [ 154.744069][ T8409] syzkaller0: entered promiscuous mode [ 154.749579][ T8409] syzkaller0: entered allmulticast mode [ 154.835685][ T8409] tipc: Resetting bearer [ 154.851989][ T8408] tipc: Resetting bearer [ 154.887814][ T8413] __nla_validate_parse: 18 callbacks suppressed [ 154.887835][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 154.888459][ T8408] tipc: Disabling bearer [ 155.051443][ T8421] netlink: 72 bytes leftover after parsing attributes in process `syz.4.689'. [ 155.959274][ T8456] tipc: Enabling of bearer rejected, already enabled [ 156.098986][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 156.114764][ T8479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.699'. [ 156.685921][ T8502] team0: Device wireguard0 is of different type [ 156.880763][ T8518] netlink: 'syz.0.713': attribute type 4 has an invalid length. [ 156.894196][ T8518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'. [ 157.101983][ T8527] netlink: 'syz.3.717': attribute type 1 has an invalid length. [ 157.802289][ T8555] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.810209][ T8555] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.994362][ T8555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.031132][ T8555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.251287][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.288786][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.316365][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.347700][ T5877] wlan1 speed is unknown, defaulting to 1000 [ 158.367315][ T5877] syz0: Port: 1 Link DOWN [ 158.423102][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.451052][ T24] wlan1 speed is unknown, defaulting to 1000 [ 158.950021][ T8596] syz_tun: entered allmulticast mode [ 158.997550][ T8596] netlink: 256 bytes leftover after parsing attributes in process `syz.1.734'. [ 159.048916][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.734'. [ 159.100405][ T8598] netlink: 36 bytes leftover after parsing attributes in process `syz.1.734'. [ 159.114987][ T8599] tipc: Enabled bearer , priority 0 [ 159.144195][ T8599] tipc: Resetting bearer [ 159.159860][ T8601] netlink: 248 bytes leftover after parsing attributes in process `syz.0.736'. [ 159.181517][ T8593] syz_tun: left allmulticast mode [ 159.310815][ T8610] netlink: 256 bytes leftover after parsing attributes in process `syz.2.737'. [ 159.324168][ T8602] tipc: Disabling bearer [ 160.016688][ T8630] hsr_slave_0 (unregistering): left promiscuous mode [ 160.496538][ T8664] __nla_validate_parse: 5 callbacks suppressed [ 160.496556][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 160.532861][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 160.581250][ T8669] syz.1.757: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.645751][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.1.757 Not tainted syzkaller #0 PREEMPT(full) [ 160.645779][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.645791][ T8669] Call Trace: [ 160.645799][ T8669] [ 160.645809][ T8669] dump_stack_lvl+0x189/0x250 [ 160.645844][ T8669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.645869][ T8669] ? __pfx__printk+0x10/0x10 [ 160.645896][ T8669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.645919][ T8669] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 160.645943][ T8669] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 160.645969][ T8669] warn_alloc+0x214/0x310 [ 160.645999][ T8669] ? stack_depot_save_flags+0x40/0x860 [ 160.646029][ T8669] ? __pfx_warn_alloc+0x10/0x10 [ 160.646061][ T8669] ? kasan_save_track+0x4f/0x80 [ 160.646086][ T8669] ? xskq_create+0x56/0x170 [ 160.646110][ T8669] ? xsk_init_queue+0xb0/0x110 [ 160.646134][ T8669] ? xsk_setsockopt+0x4dc/0x8d0 [ 160.646156][ T8669] ? do_sock_setsockopt+0x17c/0x1b0 [ 160.646173][ T8669] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 160.646190][ T8669] ? do_syscall_64+0xfa/0x3b0 [ 160.646206][ T8669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.646234][ T8669] __vmalloc_node_range_noprof+0x125/0x12f0 [ 160.646296][ T8669] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.646333][ T8669] ? __kasan_kmalloc+0x93/0xb0 [ 160.646362][ T8669] vmalloc_user_noprof+0xad/0xf0 [ 160.646390][ T8669] ? xskq_create+0xbf/0x170 [ 160.646418][ T8669] xskq_create+0xbf/0x170 [ 160.646449][ T8669] xsk_init_queue+0xb0/0x110 [ 160.646478][ T8669] xsk_setsockopt+0x4dc/0x8d0 [ 160.646507][ T8669] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.646533][ T8669] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.646566][ T8669] ? aa_sock_opt_perm+0xff/0x1b0 [ 160.646589][ T8669] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 160.646610][ T8669] ? __pfx_xsk_setsockopt+0x10/0x10 [ 160.646637][ T8669] do_sock_setsockopt+0x17c/0x1b0 [ 160.646672][ T8669] __x64_sys_setsockopt+0x13f/0x1b0 [ 160.646700][ T8669] do_syscall_64+0xfa/0x3b0 [ 160.646717][ T8669] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.646746][ T8669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.646764][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 160.646793][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.646812][ T8669] RIP: 0033:0x7f2680b8ebe9 [ 160.646830][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.646845][ T8669] RSP: 002b:00007f267edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.646867][ T8669] RAX: ffffffffffffffda RBX: 00007f2680dc5fa0 RCX: 00007f2680b8ebe9 [ 160.646881][ T8669] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 160.646892][ T8669] RBP: 00007f2680c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 160.646902][ T8669] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.646913][ T8669] R13: 00007f2680dc6038 R14: 00007f2680dc5fa0 R15: 00007ffd87ce0e98 [ 160.646948][ T8669] [ 160.659704][ T8662] xfrm1: entered promiscuous mode [ 160.696590][ T8669] Mem-Info: [ 160.696652][ T8669] active_anon:4752 inactive_anon:0 isolated_anon:0 [ 160.696652][ T8669] active_file:2374 inactive_file:39872 isolated_file:0 [ 160.696652][ T8669] unevictable:768 dirty:63 writeback:0 [ 160.696652][ T8669] slab_reclaimable:10949 slab_unreclaimable:101545 [ 160.696652][ T8669] mapped:29031 shmem:1361 pagetables:1024 [ 160.696652][ T8669] sec_pagetables:0 bounce:0 [ 160.696652][ T8669] kernel_misc_reclaimable:0 [ 160.696652][ T8669] free:1323708 free_pcp:15525 free_cma:0 [ 160.696707][ T8669] Node 0 active_anon:19008kB inactive_anon:0kB active_file:9496kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:244kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12296kB pagetables:3948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.696760][ T8669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 160.696808][ T8669] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.696868][ T8669] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 160.740803][ T8662] xfrm1: entered allmulticast mode [ 160.755710][ T8669] Node 0 DMA32 free:1396996kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18964kB inactive_anon:0kB active_file:9496kB inactive_file:157716kB unevictable:1536kB writepending:244kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:38628kB local_pcp:20384kB free_cma:0kB [ 160.755860][ T8669] lowmem_reserve[]: 0 0 1 1 1 [ 160.755917][ T8669] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 160.987532][ T8676] tipc: Enabled bearer , priority 0 [ 161.190429][ T8669] lowmem_reserve[]: 0 0 0 0 0 [ 161.200505][ T8669] Node 1 Normal free:3882464kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23776kB local_pcp:12960kB free_cma:0kB [ 161.281176][ T8669] lowmem_reserve[]: 0 0 0 0 0 [ 161.333082][ T8669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.432723][ T8669] Node 0 DMA32: 1085*4kB (UME) 873*8kB (UME) 271*16kB (UME) 182*32kB (UM) 39*64kB (UM) 6*128kB (ME) 9*256kB (UME) 11*512kB (UME) 5*1024kB (UME) 5*2048kB (UME) 329*4096kB (UM) = 1395628kB [ 161.469003][ T8679] tipc: Resetting bearer [ 161.485435][ T8669] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 161.515923][ T8669] Node 1 Normal: 196*4kB (UME) 58*8kB (UME) 38*16kB (UME) 75*32kB (UME) 21*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3882464kB [ 161.579093][ T8669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.631708][ T8669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.648129][ T8702] net_ratelimit: 18 callbacks suppressed [ 161.648149][ T8702] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 161.713633][ T8669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.743295][ T8675] tipc: Disabling bearer [ 161.766497][ T8669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.776332][ T8669] 43605 total pagecache pages [ 161.781108][ T8669] 0 pages in swap cache [ 161.806574][ T8669] Free swap = 124996kB [ 161.822953][ T8669] Total swap = 124996kB [ 161.827167][ T8669] 2097051 pages RAM [ 161.830994][ T8669] 0 pages HighMem/MovableOnly [ 161.862192][ T8669] 425667 pages reserved [ 161.891838][ T8669] 0 pages cma reserved [ 162.178892][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 162.351307][ T8738] netlink: 'syz.2.774': attribute type 1 has an invalid length. [ 162.480047][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.774'. [ 162.561731][ T8744] bond1: (slave gretap1): making interface the new active one [ 162.617798][ T8744] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 162.682916][ T8749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.948857][ T8765] netlink: 56 bytes leftover after parsing attributes in process `syz.1.784'. [ 163.917263][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 164.096256][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 164.211789][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.3.801'. [ 164.238544][ T8825] syz_tun: entered allmulticast mode [ 164.251312][ T8825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.802'. [ 164.275310][ T8823] syz_tun: left allmulticast mode [ 164.316196][ T8831] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 164.343039][ T8832] netlink: 3 bytes leftover after parsing attributes in process `syz.4.805'. [ 164.368105][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.404801][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.431458][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.458789][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.487094][ T8842] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 164.502722][ T8842] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.512876][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.513084][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.533275][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.545265][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.551440][ T8832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.661258][ T8845] wlan1 speed is unknown, defaulting to 1000 [ 164.936580][ T8857] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 165.295951][ T8871] tipc: Enabled bearer , priority 0 [ 165.307183][ T8871] syzkaller0: entered promiscuous mode [ 165.313065][ T8871] syzkaller0: entered allmulticast mode [ 165.375696][ T8871] tipc: Resetting bearer [ 165.402418][ T8868] tipc: Resetting bearer [ 165.455294][ T8868] tipc: Disabling bearer [ 165.592795][ T8884] __nla_validate_parse: 129 callbacks suppressed [ 165.592816][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.822'. [ 165.610665][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 165.741037][ T8894] pim6reg1: entered promiscuous mode [ 165.753849][ T8894] pim6reg1: entered allmulticast mode [ 165.962437][ T8907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 165.977806][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 165.989130][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.005309][ T8907] netlink: 5 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.019974][ T8907] netlink: 5 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.031857][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.047777][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.066554][ T8907] netlink: 5 bytes leftover after parsing attributes in process `syz.1.828'. [ 166.177509][ T8916] bond2 (unregistering): Released all slaves [ 167.051140][ T8960] wg1: entered promiscuous mode [ 167.647809][ T8990] veth11: entered promiscuous mode [ 167.665817][ T8990] veth11: entered allmulticast mode [ 167.696478][ T8990] syzkaller1: entered promiscuous mode [ 167.702004][ T8990] syzkaller1: entered allmulticast mode [ 167.714438][ T8990] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20003 [ 168.058816][ T9007] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 168.096674][ T3485] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.112352][ T3485] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.155729][ T3485] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.176886][ T3485] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.211311][ T9020] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 168.221739][ T9024] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 168.313763][ T9026] netlink: 'syz.3.865': attribute type 4 has an invalid length. [ 168.486935][ T9036] netlink: 'syz.3.870': attribute type 39 has an invalid length. [ 168.532768][ T9034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.620038][ T9034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.439187][ T9081] netlink: 'syz.3.882': attribute type 16 has an invalid length. [ 169.449958][ T9081] netlink: 'syz.3.882': attribute type 3 has an invalid length. [ 169.783250][ T9094] netlink: 'syz.2.885': attribute type 10 has an invalid length. [ 169.974491][ T9097] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 170.605305][ T9117] bond2 (unregistering): Released all slaves [ 170.760734][ T9125] __nla_validate_parse: 19 callbacks suppressed [ 170.760754][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 170.872913][ T9127] tipc: Enabled bearer , priority 0 [ 170.918391][ T9127] syzkaller0: entered promiscuous mode [ 170.941571][ T9127] syzkaller0: entered allmulticast mode [ 170.986244][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.898'. [ 171.002714][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.109754][ T9130] tipc: Resetting bearer [ 171.214324][ T9130] tipc: Disabling bearer [ 171.341106][ T9146] netlink: 516 bytes leftover after parsing attributes in process `syz.3.903'. [ 171.477280][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 171.605638][ T9152] syzkaller0: entered promiscuous mode [ 171.611522][ T9152] syzkaller0: entered allmulticast mode [ 171.629597][ T9154] geneve3: entered promiscuous mode [ 171.635224][ T9154] geneve3: entered allmulticast mode [ 171.644281][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 171.654386][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 171.668683][ T3485] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 171.681915][ T3485] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 171.690718][ T3485] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 171.724020][ T9156] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.907'. [ 171.957580][ T9174] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.911'. [ 173.140903][ T3485] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 173.165715][ T9173] team0: Device vti0 is of different type [ 173.341360][ T9187] batman_adv: batadv0: Interface deactivated: team0 [ 173.354971][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.917'. [ 173.360456][ T9187] batman_adv: batadv0: Removing interface: team0 [ 173.387922][ T9187] bridge_slave_0: left allmulticast mode [ 173.396341][ T9187] bridge_slave_0: left promiscuous mode [ 173.403166][ T9187] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.417045][ T9187] bridge_slave_1: left allmulticast mode [ 173.440697][ T9197] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 173.459085][ T9187] bridge_slave_1: left promiscuous mode [ 173.479228][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.540384][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 173.590929][ T9187] bond0: (slave bond_slave_0): Releasing backup interface [ 173.648164][ T9187] bond0: (slave bond_slave_1): Releasing backup interface [ 173.678034][ T9187] team_slave_0: left promiscuous mode [ 173.718761][ T9187] team0: Port device team_slave_0 removed [ 173.728259][ T9187] team_slave_1: left promiscuous mode [ 173.757851][ T9187] team0: Port device team_slave_1 removed [ 173.769391][ T9187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.778659][ T9187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.808928][ T9187] bond1: (slave gretap1): Releasing active interface [ 173.987814][ T9219] nbd: must specify a device to reconfigure [ 174.099871][ T9227] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 174.122673][ T9227] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 174.140606][ T9227] NCSI netlink: No device for ifindex 813332851 [ 174.284450][ T9235] net_ratelimit: 121 callbacks suppressed [ 174.284471][ T9235] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 174.587837][ T9250] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 174.627179][ T9250] block nbd1: not configured, cannot reconfigure [ 174.978420][ T9279] netlink: 'syz.2.944': attribute type 4 has an invalid length. [ 175.472265][ T9313] netlink: 'syz.4.955': attribute type 10 has an invalid length. [ 175.501626][ T9313] veth1_macvtap: left promiscuous mode [ 175.788539][ T9331] netlink: 'syz.0.962': attribute type 4 has an invalid length. [ 175.963564][ T9347] sctp: [Deprecated]: syz.3.965 (pid 9347) Use of int in max_burst socket option. [ 175.963564][ T9347] Use struct sctp_assoc_value instead [ 176.069694][ T9350] : entered promiscuous mode [ 176.088622][ T9354] __nla_validate_parse: 11 callbacks suppressed [ 176.088643][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.967'. [ 176.115285][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 176.124501][ T9354] netlink: 'syz.1.967': attribute type 15 has an invalid length. [ 176.137871][ T9358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.172661][ T9358] batadv_slave_0: entered promiscuous mode [ 176.410531][ T9379] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 176.511945][ T9382] bond3: (slave gretap2): making interface the new active one [ 176.520185][ T9382] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 176.531222][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.975'. [ 176.536610][ T9385] IPv6: sit1: Disabled Multicast RS [ 176.546989][ T9385] sit1: entered allmulticast mode [ 176.630389][ T9379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.657504][ T9390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 176.745107][ T9390] netlink: 10 bytes leftover after parsing attributes in process `syz.1.976'. [ 177.049192][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.984'. [ 177.081948][ T9408] netlink: 3 bytes leftover after parsing attributes in process `syz.0.984'. [ 177.095527][ T9408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.118635][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.987'. [ 177.130331][ T9408] netlink: 'syz.0.984': attribute type 12 has an invalid length. [ 177.139049][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 177.148178][ T9408] netlink: 148 bytes leftover after parsing attributes in process `syz.0.984'. [ 177.263468][ T9418] IPv6: sit1: Disabled Multicast RS [ 177.269927][ T9418] sit1: entered allmulticast mode [ 178.089239][ T9473] syzkaller0: entered promiscuous mode [ 178.099037][ T9473] syzkaller0: entered allmulticast mode [ 178.240465][ T9487] openvswitch: netlink: Message has -1 unknown bytes. [ 178.389834][ T9440] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.161730][ T9582] veth0_to_team: entered promiscuous mode [ 181.185553][ T9582] veth0_to_team: entered allmulticast mode [ 181.223913][ T9586] __nla_validate_parse: 7 callbacks suppressed [ 181.223927][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 181.251389][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 181.508832][ T9606] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4 [ 181.531027][ T9607] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4 [ 181.650171][ T9612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.939860][ T9632] validate_nla: 8 callbacks suppressed [ 181.939878][ T9632] netlink: 'syz.4.1052': attribute type 21 has an invalid length. [ 182.037243][ T9640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1053'. [ 182.096714][ T9645] netlink: 'syz.0.1055': attribute type 17 has an invalid length. [ 182.131698][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1055'. [ 182.141864][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 182.170731][ T9645] erspan0: entered promiscuous mode [ 182.205167][ T9645] gretap0: entered promiscuous mode [ 182.233304][ T9649] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 182.290141][ T9651] netlink: 'syz.2.1057': attribute type 2 has an invalid length. [ 182.311074][ T9651] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 182.528436][ T9667] netlink: 'syz.0.1062': attribute type 6 has an invalid length. [ 182.599026][ T9667] netlink: 'syz.0.1062': attribute type 9 has an invalid length. [ 182.700272][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1064'. [ 183.357297][ T9695] sctp: [Deprecated]: syz.4.1072 (pid 9695) Use of int in max_burst socket option deprecated. [ 183.357297][ T9695] Use struct sctp_assoc_value instead [ 183.718837][ T9713] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 183.780591][ T9713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.819565][ T9713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.827035][ T9713] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.891067][ T9713] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 184.007492][ T9725] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 184.099352][ T9731] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 184.359729][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 184.455125][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 184.631253][ T9758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 185.012300][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 185.049700][ T9780] tipc: Enabling of bearer rejected, failed to enable media [ 185.171290][ T9787] ipvlan0: mtu less than device minimum [ 185.179821][ T9787] unknown channel width for channel at 909000KHz? [ 185.190630][ T9787] netlink: 'syz.1.1097': attribute type 10 has an invalid length. [ 185.251542][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.259807][ T9787] bridge_slave_1: left allmulticast mode [ 185.265985][ T9787] bridge_slave_1: left promiscuous mode [ 185.271937][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.300429][ T9787] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 185.379240][ T9793] tipc: Enabled bearer , priority 0 [ 185.387389][ T9793] team_slave_1: entered promiscuous mode [ 185.399599][ T9793] team_slave_1: entered allmulticast mode [ 185.420314][ T9793] tipc: Resetting bearer [ 185.496551][ T9792] tipc: Disabling bearer [ 185.568319][ T9801] netlink: 'syz.3.1101': attribute type 12 has an invalid length. [ 185.670671][ T9808] netlink: 'syz.4.1102': attribute type 1 has an invalid length. [ 185.768752][ T9808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.909196][ T9809] veth5: entered promiscuous mode [ 185.951784][ T9809] bond6: (slave veth5): Enslaving as an active interface with an up link [ 186.246515][ T9833] sctp: [Deprecated]: syz.2.1112 (pid 9833) Use of int in maxseg socket option. [ 186.246515][ T9833] Use struct sctp_assoc_value instead [ 186.375715][ T9844] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 186.389400][ T9844] __nla_validate_parse: 4 callbacks suppressed [ 186.389420][ T9844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1116'. [ 186.407136][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1116'. [ 186.422327][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 186.525846][ T9853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 186.569943][ T24] IPVS: starting estimator thread 0... [ 186.666860][ T9854] IPVS: using max 26 ests per chain, 62400 per kthread [ 186.711970][ T9864] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1122'. [ 186.714395][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 186.761620][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1120'. [ 186.882217][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.965059][ T9877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1125'. [ 187.024086][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 187.190155][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 187.228274][ T9892] nftables ruleset with unbound set [ 187.397295][ T9903] mac80211_hwsim hwsim6 ÿ: renamed from wlan1 (while UP) [ 187.404889][ T24] IPVS: starting estimator thread 0... [ 187.496932][ T9905] IPVS: using max 25 ests per chain, 60000 per kthread [ 187.601509][ T9916] openvswitch: netlink: IP tunnel dst address not specified [ 187.649094][ T9923] macsec0: entered promiscuous mode [ 187.684654][ T9923] macsec0: entered allmulticast mode [ 187.722114][ T9923] veth1_macvtap: entered allmulticast mode [ 187.728420][ T9923] macsec0: left promiscuous mode [ 187.738171][ T9923] macsec0: left allmulticast mode [ 187.744586][ T9923] veth1_macvtap: left allmulticast mode [ 187.970709][ T9940] nbd: must specify at least one socket [ 188.159316][ T9948] tipc: Enabled bearer , priority 0 [ 188.171359][ T9948] syzkaller0: entered promiscuous mode [ 188.179322][ T9948] syzkaller0: entered allmulticast mode [ 188.222825][ T9947] tipc: Resetting bearer [ 188.273551][ T9947] tipc: Disabling bearer [ 188.290232][ T9956] lo: entered promiscuous mode [ 188.305357][ T9956] netlink: 'syz.2.1155': attribute type 2 has an invalid length. [ 188.314939][ T9956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.830367][ T9988] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 188.851068][ T9988] syz_tun: entered promiscuous mode [ 188.858396][ T9988] gretap0: entered promiscuous mode [ 189.244507][T10010] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.292249][T10010] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 189.799426][T10050] vlan2: entered allmulticast mode [ 189.831686][T10050] vlan1: entered allmulticast mode [ 189.862125][T10050] veth0_vlan: entered allmulticast mode [ 189.909955][T10056] vxcan1: entered allmulticast mode [ 190.102083][T10067] tipc: Enabling of bearer rejected, failed to enable media [ 190.265563][T10076] tipc: Enabled bearer , priority 0 [ 190.418312][T10076] syzkaller0: entered promiscuous mode [ 190.431465][T10076] syzkaller0: entered allmulticast mode [ 190.458925][T10090] tipc: Resetting bearer [ 190.483937][T10075] delete_channel: no stack [ 190.491445][T10094] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 190.500691][T10094] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 190.512100][T10094] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 190.520227][T10094] netlink: 'syz.3.1198': attribute type 2 has an invalid length. [ 190.678658][T10075] tipc: Resetting bearer [ 192.030029][T10075] tipc: Disabling bearer [ 192.052713][T10102] netlink: 'syz.1.1201': attribute type 13 has an invalid length. [ 192.385844][T10111] syzkaller0: entered promiscuous mode [ 192.399767][T10111] syzkaller0: entered allmulticast mode [ 192.614739][T10142] __nla_validate_parse: 50 callbacks suppressed [ 192.614758][T10142] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1212'. [ 192.637511][T10145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1213'. [ 193.537843][T10157] netlink: 'syz.1.1215': attribute type 1 has an invalid length. [ 193.651517][T10159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 194.208373][T10158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.217138][T10158] bond4: (slave bond5): making interface the new active one [ 194.225528][T10158] bond4: (slave bond5): Enslaving as an active interface with an up link [ 194.256542][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 194.301905][T10175] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1216'. [ 194.361531][T10180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1222'. [ 194.494615][ T5877] IPVS: starting estimator thread 0... [ 194.613065][T10192] IPVS: using max 26 ests per chain, 62400 per kthread [ 195.108867][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 195.123445][T10204] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 195.131088][T10204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.223867][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 195.460333][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 195.557641][T10228] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1232'. [ 195.586677][T10228] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1232'. [ 195.610912][T10228] netlink: 'syz.2.1232': attribute type 5 has an invalid length. [ 195.668853][T10228] netlink: 'syz.2.1232': attribute type 6 has an invalid length. [ 197.087062][T10313] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.268313][T10326] tipc: Enabled bearer , priority 0 [ 197.468691][T10333] syzkaller0: entered promiscuous mode [ 197.477534][T10333] syzkaller0: entered allmulticast mode [ 197.519417][T10353] netlink: 'syz.1.1267': attribute type 49 has an invalid length. [ 197.706801][T10361] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 197.726620][T10361] __nla_validate_parse: 4 callbacks suppressed [ 197.726643][T10361] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1268'. [ 197.754270][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'. [ 198.979084][T10326] tipc: Resetting bearer [ 199.149099][T10325] tipc: Disabling bearer [ 199.412025][T10385] tipc: Enabled bearer , priority 0 [ 199.436167][T10386] netlink: 'syz.3.1274': attribute type 23 has an invalid length. [ 199.445074][T10388] syzkaller0: entered promiscuous mode [ 199.470819][T10388] syzkaller0: entered allmulticast mode [ 199.567610][T10385] tipc: Resetting bearer [ 199.637438][T10383] tipc: Resetting bearer [ 199.668794][T10383] tipc: Disabling bearer [ 199.825408][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 199.860279][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'. [ 199.988413][T10415] syzkaller0: entered promiscuous mode [ 199.996877][T10415] syzkaller0: entered allmulticast mode [ 200.201246][T10427] netlink: 'syz.3.1286': attribute type 1 has an invalid length. [ 200.362928][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1285'. [ 201.981422][T10475] syzkaller0: entered promiscuous mode [ 201.993230][T10475] syzkaller0: entered allmulticast mode [ 202.154584][T10491] ip6erspan0: entered promiscuous mode [ 202.857792][T10512] netlink: 'syz.0.1306': attribute type 12 has an invalid length. [ 202.891543][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1307'. [ 202.988758][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 203.235760][T10536] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 203.270620][T10539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 203.295434][T10543] syz.0.1316: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 203.338549][T10543] CPU: 0 UID: 0 PID: 10543 Comm: syz.0.1316 Not tainted syzkaller #0 PREEMPT(full) [ 203.338579][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.338591][T10543] Call Trace: [ 203.338599][T10543] [ 203.338608][T10543] dump_stack_lvl+0x189/0x250 [ 203.338643][T10543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.338667][T10543] ? __pfx__printk+0x10/0x10 [ 203.338696][T10543] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.338720][T10543] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 203.338746][T10543] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 203.338773][T10543] warn_alloc+0x214/0x310 [ 203.338806][T10543] ? stack_depot_save_flags+0x40/0x860 [ 203.338836][T10543] ? __pfx_warn_alloc+0x10/0x10 [ 203.338868][T10543] ? kasan_save_track+0x4f/0x80 [ 203.338893][T10543] ? xskq_create+0x56/0x170 [ 203.338919][T10543] ? xsk_init_queue+0xb0/0x110 [ 203.338942][T10543] ? xsk_setsockopt+0x4dc/0x8d0 [ 203.338965][T10543] ? do_sock_setsockopt+0x17c/0x1b0 [ 203.338983][T10543] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 203.339001][T10543] ? do_syscall_64+0xfa/0x3b0 [ 203.339017][T10543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.339047][T10543] __vmalloc_node_range_noprof+0x125/0x12f0 [ 203.339114][T10543] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 203.339143][T10543] ? xskq_create+0x56/0x170 [ 203.339174][T10543] ? __kasan_kmalloc+0x93/0xb0 [ 203.339205][T10543] vmalloc_user_noprof+0xad/0xf0 [ 203.339241][T10543] ? xskq_create+0xbf/0x170 [ 203.339270][T10543] xskq_create+0xbf/0x170 [ 203.339302][T10543] xsk_init_queue+0xb0/0x110 [ 203.339332][T10543] xsk_setsockopt+0x4dc/0x8d0 [ 203.339362][T10543] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.339389][T10543] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.339423][T10543] ? aa_sock_opt_perm+0xff/0x1b0 [ 203.339447][T10543] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 203.339467][T10543] ? __pfx_xsk_setsockopt+0x10/0x10 [ 203.339494][T10543] do_sock_setsockopt+0x17c/0x1b0 [ 203.339522][T10543] __x64_sys_setsockopt+0x13f/0x1b0 [ 203.339550][T10543] do_syscall_64+0xfa/0x3b0 [ 203.339567][T10543] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.339595][T10543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.339614][T10543] ? clear_bhb_loop+0x60/0xb0 [ 203.339638][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.339657][T10543] RIP: 0033:0x7fdc8678ebe9 [ 203.339675][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.339690][T10543] RSP: 002b:00007fdc849f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.339712][T10543] RAX: ffffffffffffffda RBX: 00007fdc869c5fa0 RCX: 00007fdc8678ebe9 [ 203.339727][T10543] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 203.339738][T10543] RBP: 00007fdc86811e19 R08: 0000000000000004 R09: 0000000000000000 [ 203.339750][T10543] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.339761][T10543] R13: 00007fdc869c6038 R14: 00007fdc869c5fa0 R15: 00007fff4a34c9b8 [ 203.339797][T10543] [ 203.339804][T10543] Mem-Info: [ 203.462273][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 203.467386][T10543] active_anon:3752 inactive_anon:0 isolated_anon:0 [ 203.467386][T10543] active_file:2439 inactive_file:39888 isolated_file:0 [ 203.467386][T10543] unevictable:768 dirty:57 writeback:0 [ 203.467386][T10543] slab_reclaimable:11562 slab_unreclaimable:103290 [ 203.467386][T10543] mapped:28828 shmem:1361 pagetables:959 [ 203.467386][T10543] sec_pagetables:0 bounce:0 [ 203.467386][T10543] kernel_misc_reclaimable:0 [ 203.467386][T10543] free:1319742 free_pcp:15752 free_cma:0 [ 203.705898][T10543] Node 0 active_anon:15008kB inactive_anon:0kB active_file:9756kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115312kB dirty:224kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.774452][T10543] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 203.781579][T10559] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 203.806159][T10543] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.842999][T10543] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 203.848832][T10543] Node 0 DMA32 free:1376272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14964kB inactive_anon:0kB active_file:9756kB inactive_file:157780kB unevictable:1536kB writepending:224kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:35364kB local_pcp:21096kB free_cma:0kB [ 203.916195][T10543] lowmem_reserve[]: 0 0 1 1 1 [ 203.921530][T10543] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 203.996866][T10543] lowmem_reserve[]: 0 0 0 0 0 [ 204.021110][T10543] Node 1 Normal free:3882976kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23296kB local_pcp:12704kB free_cma:0kB [ 204.082781][T10572] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 204.090565][T10572] netlink: 'syz.4.1324': attribute type 4 has an invalid length. [ 204.126610][T10543] lowmem_reserve[]: 0 0 0 0 0 [ 204.164654][T10572] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1324'. [ 204.173382][T10543] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 204.191327][T10572] NCSI netlink: No device for ifindex 458760 [ 204.199474][T10575] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 204.207954][T10574] netlink: 'syz.3.1326': attribute type 4 has an invalid length. [ 204.210513][T10543] Node 0 DMA32: 922*4kB (UM) 211*8kB (UME) 257*16kB (UME) 284*32kB (UME) 89*64kB (UME) 19*128kB (UM) 14*256kB (UM) 13*512kB (UM) 4*1024kB (M) 2*2048kB (UM) 325*4096kB (M) = 1376336kB [ 204.253133][T10543] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 204.266342][T10543] Node 1 Normal: 196*4kB (UME) 58*8kB (UME) 38*16kB (UME) 83*32kB (UME) 25*64kB (UME) 10*128kB (UME) 5*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3882976kB [ 204.292671][T10543] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.309929][T10543] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.320447][T10543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 204.352727][T10543] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 204.391124][T10543] 43702 total pagecache pages [ 204.430072][T10543] 0 pages in swap cache [ 204.440105][T10543] Free swap = 124996kB [ 204.460341][T10543] Total swap = 124996kB [ 204.470460][T10543] 2097051 pages RAM [ 204.484608][T10543] 0 pages HighMem/MovableOnly [ 204.490481][T10543] 425667 pages reserved [ 204.500974][T10543] 0 pages cma reserved [ 205.170470][T10623] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 205.179530][T10623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.228095][T10625] tun0: tun_chr_ioctl cmd 1074025673 [ 205.242447][T10625] tun0: tun_chr_ioctl cmd 1074025675 [ 205.251348][T10625] tun0: persist disabled [ 205.296341][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 205.307836][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1340'. [ 205.562923][T10644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 205.622893][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 205.769546][T10663] tipc: Enabled bearer , priority 0 [ 205.777539][T10663] syzkaller0: entered promiscuous mode [ 205.783510][T10663] syzkaller0: entered allmulticast mode [ 205.847818][T10663] tipc: Resetting bearer [ 205.875692][T10662] tipc: Resetting bearer [ 205.900282][T10662] tipc: Disabling bearer [ 205.915189][T10667] tipc: Enabled bearer , priority 0 [ 205.920935][T10671] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1351'. [ 205.935565][T10667] syzkaller0: entered promiscuous mode [ 205.941085][T10667] syzkaller0: entered allmulticast mode [ 206.109573][T10680] tipc: Resetting bearer [ 206.162860][T10665] tipc: Resetting bearer [ 206.254963][T10665] tipc: Disabling bearer [ 206.412853][T10691] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1356'. [ 206.584775][T10706] IPv6: sit1: Disabled Multicast RS [ 206.598837][T10706] sit1: entered allmulticast mode [ 206.655353][T10712] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 206.792253][T10721] bond3: (slave gretap2): making interface the new active one [ 206.802382][T10721] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 206.851592][T10712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.087551][T10739] netlink: 'syz.0.1374': attribute type 5 has an invalid length. [ 207.109771][T10738] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 207.450292][T10756] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 207.563223][T10767] gretap2: entered promiscuous mode [ 207.600349][T10771] netlink: 'syz.2.1384': attribute type 21 has an invalid length. [ 208.078831][T10800] __nla_validate_parse: 16 callbacks suppressed [ 208.078852][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 208.167235][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'. [ 208.240178][T10810] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1395'. [ 208.311124][T10808] geneve2: entered promiscuous mode [ 208.317259][T10808] geneve2: entered allmulticast mode [ 208.328252][ T3542] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 208.352784][ T3542] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 208.382101][ T3542] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 208.575006][T10824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1400'. [ 208.616494][T10828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1402'. [ 208.627630][T10827] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1401'. [ 208.655483][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 208.785858][T10835] IPv6: Can't replace route, no match found [ 208.808359][T10827] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1401'. [ 208.847935][T10843] netlink: 'syz.0.1404': attribute type 11 has an invalid length. [ 209.038992][T10854] syzkaller1: entered promiscuous mode [ 209.055613][T10856] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1408'. [ 209.065022][T10854] syzkaller1: entered allmulticast mode [ 209.077092][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1408'. [ 209.095844][T10854] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 209.129836][T10853] macvtap1: entered allmulticast mode [ 209.143360][T10853] veth0_macvtap: entered allmulticast mode [ 209.297669][T10864] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 209.306385][T10864] team0: Device macvtap1 is already an upper device of the team interface [ 209.647422][T10879] dummy0: left allmulticast mode [ 209.677479][T10879] bridge0: port 3(dummy0) entered disabled state [ 209.701917][T10887] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 209.759660][T10879] bridge_slave_0: left allmulticast mode [ 209.766857][T10879] bridge_slave_0: left promiscuous mode [ 209.773006][T10879] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.826200][T10897] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 209.968047][T10903] netlink: 'syz.0.1419': attribute type 4 has an invalid length. [ 210.578760][T10887] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 210.848497][T10928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.343935][T10945] netlink: 'syz.3.1434': attribute type 16 has an invalid length. [ 211.352353][T10945] netlink: 'syz.3.1434': attribute type 17 has an invalid length. [ 211.386874][ T5886] Bluetooth: hci4: link tx timeout [ 211.394365][ T5886] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.405830][ T5886] Bluetooth: hci4: link tx timeout [ 211.410984][ T5886] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.436421][ T5886] Bluetooth: hci4: link tx timeout [ 211.441698][ T5886] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 211.452021][ T5886] Bluetooth: hci4: link tx timeout [ 211.457875][ T5886] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 211.650181][T10970] veth0_to_team: entered promiscuous mode [ 211.662138][T10970] veth0_to_team: entered allmulticast mode [ 211.765627][ T5188] Bluetooth: hci2: command 0x0406 tx timeout [ 211.771752][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.777922][ T5886] Bluetooth: hci3: command 0x0406 tx timeout [ 212.244381][ T5886] Bluetooth: hci4: link tx timeout [ 212.249554][ T5886] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 212.257278][ T5886] Bluetooth: hci4: link tx timeout [ 212.262412][ T5886] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 213.451488][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 215.522644][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 234.781387][T11033] __nla_validate_parse: 5 callbacks suppressed [ 234.781408][T11033] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1459'. [ 234.974030][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 234.978265][T11048] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1461'. [ 235.998380][T11105] netlink: 'syz.2.1481': attribute type 10 has an invalid length. [ 236.017227][T11105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1481'. [ 236.025068][T11107] sctp: [Deprecated]: syz.1.1479 (pid 11107) Use of int in maxseg socket option. [ 236.025068][T11107] Use struct sctp_assoc_value instead [ 236.109366][T11105] geneve0: entered promiscuous mode [ 236.115969][T11105] team0: Port device geneve0 added [ 236.130156][T11118] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1483'. [ 236.168747][T11118] netlink: 'syz.4.1483': attribute type 24 has an invalid length. [ 236.341573][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 236.359060][T11122] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1485'. [ 236.714297][T11140] syzkaller0: entered promiscuous mode [ 236.722865][T11140] syzkaller0: entered allmulticast mode [ 236.926087][ T9] IPVS: starting estimator thread 0... [ 237.043902][T11163] IPVS: using max 23 ests per chain, 55200 per kthread [ 237.075129][T11171] hsr0 speed is unknown, defaulting to 1000 [ 237.131655][T11171] hsr0 speed is unknown, defaulting to 1000 [ 237.153897][T11171] hsr0 speed is unknown, defaulting to 1000 [ 237.246633][T11171] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.429719][T11182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.596440][T11171] hsr0 speed is unknown, defaulting to 1000 [ 237.596487][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1500'. [ 239.285137][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.294404][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.303382][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.313221][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.322124][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.331322][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.341593][T11171] hsr0 speed is unknown, defaulting to 1000 [ 239.348387][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.381154][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.397834][T11171] hsr0 speed is unknown, defaulting to 1000 [ 239.427508][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1505'. [ 239.446026][T11211] tipc: Enabling of bearer rejected, failed to enable media [ 239.459133][T11171] hsr0 speed is unknown, defaulting to 1000 [ 239.475089][T11171] hsr0 speed is unknown, defaulting to 1000 [ 239.670189][T11242] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1511'. [ 239.836644][T11247] macvtap1: entered allmulticast mode [ 239.935588][T11259] 8021q: adding VLAN 0 to HW filter on device bond4 [ 240.013743][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'. [ 240.559809][T11280] sit1: entered promiscuous mode [ 240.571343][T11280] sit1: entered allmulticast mode [ 240.698601][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 240.745502][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 240.785956][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 240.795207][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1524'. [ 240.810054][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1524'. [ 240.983685][T11311] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 241.011551][T11311] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 241.021206][T11312] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1529'. [ 241.100883][T11311] gretap3: entered promiscuous mode [ 241.106366][T11311] gretap3: entered allmulticast mode [ 241.245854][T11335] netlink: 'syz.3.1536': attribute type 1 has an invalid length. [ 241.257056][T11332] syzkaller1: entered promiscuous mode [ 241.277216][T11332] syzkaller1: entered allmulticast mode [ 241.277274][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'. [ 241.320304][T11332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1535'. [ 241.320411][T11339] netlink: 'syz.0.1537': attribute type 1 has an invalid length. [ 241.350094][T11335] bond0: entered promiscuous mode [ 241.369566][T11335] bond0: left promiscuous mode [ 241.427533][T11339] bond5: entered promiscuous mode [ 241.453240][T11339] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.461602][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1540'. [ 241.574456][T11349] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.589784][T11349] bond5: (slave bond6): making interface the new active one [ 241.597012][T11361] netlink: 'syz.2.1542': attribute type 5 has an invalid length. [ 241.614635][T11349] bond6: entered promiscuous mode [ 241.626188][T11349] bond5: (slave bond6): Enslaving as an active interface with an up link [ 241.771737][T11370] bond0: Error: Cannot enslave bond to itself. [ 241.812174][T11355] netlink: 'syz.3.1541': attribute type 1 has an invalid length. [ 242.146212][T11390] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 242.248030][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.270069][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.281787][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.303304][T11393] netlink: 'syz.1.1548': attribute type 1 has an invalid length. [ 242.599603][T11413] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 242.610677][T11409] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 242.625392][T11409] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 242.649792][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.651058][T11405] vlan2: entered allmulticast mode [ 242.675828][T11405] hsr0: entered allmulticast mode [ 242.680910][T11405] hsr_slave_0: entered allmulticast mode [ 242.726709][T11405] hsr_slave_1: entered allmulticast mode [ 242.732768][ T1210] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 242.995487][T11434] netlink: 'syz.1.1561': attribute type 2 has an invalid length. [ 243.033830][T11439] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 243.320404][T11463] tipc: Enabling of bearer rejected, failed to enable media [ 243.722924][ T5995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.884534][T11499] bridge0: entered allmulticast mode [ 244.293015][ T958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.540232][T11522] netlink: 'syz.3.1591': attribute type 16 has an invalid length. [ 244.656389][T11522] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.684049][T11522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.897417][T11537] bridge_slave_1: left allmulticast mode [ 244.914542][T11537] bridge_slave_1: left promiscuous mode [ 244.930600][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.951825][T11537] bridge_slave_0: left allmulticast mode [ 244.982126][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.096244][T11554] __nla_validate_parse: 24 callbacks suppressed [ 245.096264][T11554] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1600'. [ 245.145781][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1597'. [ 245.170612][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 245.512665][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 245.539570][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 245.607959][T11584] gretap0: entered promiscuous mode [ 245.634399][T11584] batadv_slave_1: entered promiscuous mode [ 245.645404][T11588] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1608'. [ 245.657327][T11584] debugfs: 'hsr1' already exists in 'hsr' [ 245.665566][T11588] nbd: illegal input index -8454144 [ 245.692986][T11584] Cannot create hsr debugfs directory [ 246.322692][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 246.649100][T11634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1617'. [ 246.772054][T11640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1619'. [ 246.984624][T11657] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 247.181844][T11664] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 247.184856][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1630'. [ 247.825446][T11715] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1642'. [ 247.956977][T11722] validate_nla: 3 callbacks suppressed [ 247.956997][T11722] netlink: 'syz.4.1645': attribute type 1 has an invalid length. [ 247.971009][T11724] netlink: 'syz.3.1646': attribute type 11 has an invalid length. [ 248.130862][T11731] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 248.157204][T11731] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 248.204312][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.224678][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.237541][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.249729][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.732089][T11759] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 248.747292][T11759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.899711][T11778] netlink: 'syz.2.1661': attribute type 10 has an invalid length. [ 248.912317][T11774] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 248.922903][T11778] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 248.941841][T11778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.981918][T11774] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 249.230571][T11797] netlink: zone id is out of range [ 249.409481][T11807] lo: entered allmulticast mode [ 249.748485][T11828] syzkaller1: entered promiscuous mode [ 249.778843][T11828] syzkaller1: entered allmulticast mode [ 250.232369][T11857] pim6reg: entered allmulticast mode [ 250.258494][T11862] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 250.277102][T11860] __nla_validate_parse: 20 callbacks suppressed [ 250.277124][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1685'. [ 250.351888][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 250.419065][T11873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.446225][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 250.571107][T11878] atomic_op ffff888058530198 conn xmit_atomic 0000000000000000 [ 250.600363][T11878] syzkaller0: entered promiscuous mode [ 250.617049][T11878] syzkaller0: entered allmulticast mode [ 251.118494][T11912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1699'. [ 251.157927][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 251.462062][T11931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1708'. [ 251.526225][T11932] syzkaller1: entered promiscuous mode [ 251.553033][T11932] syzkaller1: entered allmulticast mode [ 251.870439][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 251.892696][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 251.918802][T11958] bridge0: port 3(vlan0) entered blocking state [ 251.929877][T11958] bridge0: port 3(vlan0) entered disabled state [ 251.950008][T11958] vlan0: entered allmulticast mode [ 251.961938][T11958] bridge0: entered allmulticast mode [ 251.973762][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 251.983310][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 251.994822][T11958] vlan0: left allmulticast mode [ 251.999748][T11958] bridge0: left allmulticast mode [ 252.178241][T11975] netlink: 'syz.4.1722': attribute type 5 has an invalid length. [ 252.336637][T11993] netlink: 'syz.4.1725': attribute type 13 has an invalid length. [ 252.363914][T11985] netlink: 'syz.1.1723': attribute type 4 has an invalid length. [ 252.378361][T11993] netlink: 'syz.4.1725': attribute type 27 has an invalid length. [ 252.386266][ T64] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.386301][ T64] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.386327][ T64] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 252.423284][T11993] lo: entered promiscuous mode [ 252.446621][T11993] tunl0: entered promiscuous mode [ 252.451870][T11993] tunl0: entered allmulticast mode [ 252.464454][T11993] gre0: entered promiscuous mode [ 252.469442][T11993] gre0: entered allmulticast mode [ 252.488970][T11993] gretap0: entered allmulticast mode [ 252.503531][T11993] gretap0: refused to change device tx_queue_len [ 252.523573][T11993] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 252.545994][ T64] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.560277][ T64] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.573123][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 252.602995][ T64] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 252.641074][ T64] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.650969][ T64] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.660112][ T64] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 252.669831][ T64] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.678298][ T64] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 252.689471][ T64] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 252.734463][T12001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.969156][T12019] validate_nla: 1 callbacks suppressed [ 252.969263][T12019] netlink: 'syz.3.1732': attribute type 13 has an invalid length. [ 253.474152][T12043] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 253.531256][T12046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.227743][T12083] syzkaller0: entered promiscuous mode [ 254.236158][T12083] syzkaller0: entered allmulticast mode [ 254.374615][T12083] bond4: entered promiscuous mode [ 254.379788][T12083] bond4: entered allmulticast mode [ 254.386365][T12083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.482666][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.608182][T12117] IPVS: set_ctl: invalid protocol: 48721 172.30.0.2:20003 [ 255.929260][T12103] tipc: Enabled bearer , priority 10 [ 255.936488][T12104] tipc: Enabling of bearer rejected, already enabled [ 256.261990][T12143] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.303280][T12145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.437695][T12151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.011179][T12177] syz.0.1777 (12177) used obsolete PPPIOCDETACH ioctl [ 257.030799][T12178] __nla_validate_parse: 6 callbacks suppressed [ 257.030822][T12178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1777'. [ 257.080282][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 257.099820][T12182] netlink: 'syz.1.1778': attribute type 1 has an invalid length. [ 257.147324][T12182] netlink: 'syz.1.1778': attribute type 1 has an invalid length. [ 257.177733][T12182] netlink: 'syz.1.1778': attribute type 2 has an invalid length. [ 257.195479][T12182] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1778'. [ 257.669038][T12212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.734200][T12216] Unsupported ieee802154 address type: 0 [ 257.914222][T12228] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 257.947299][T12227] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 258.471291][T12250] net veth1_virt_wifi .: renamed from virt_wifi0 [ 258.612265][T12260] Bluetooth: MGMT ver 1.23 [ 258.683542][T12263] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1806'. [ 258.944986][T12280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1812'. [ 259.301957][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1816'. [ 259.378285][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1819'. [ 259.825976][T12337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'. [ 260.120630][T12311] wlan1 speed is unknown, defaulting to 1000 [ 260.645467][T12311] hsr0 speed is unknown, defaulting to 1000 [ 261.122888][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 261.197276][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1839'. [ 262.175792][T12439] __nla_validate_parse: 3 callbacks suppressed [ 262.175814][T12439] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1852'. [ 262.322064][T12449] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1856'. [ 262.344329][T12449] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 263.111073][T12485] netlink: 'syz.0.1866': attribute type 1 has an invalid length. [ 263.646318][T12514] sch_tbf: burst 4398 is lower than device lo mtu (117440530) ! [ 264.100432][T12541] netlink: 212260 bytes leftover after parsing attributes in process `syz.3.1881'. [ 264.249492][ T1316] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20002 - 0 [ 264.286372][ T1316] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20002 - 0 [ 264.300177][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 264.318248][ T1316] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20002 - 0 [ 264.319272][T12508] wlan1 speed is unknown, defaulting to 1000 [ 264.353772][T12546] team_slave_0: entered promiscuous mode [ 264.359785][T12546] geneve0: entered promiscuous mode [ 264.388629][T12546] macsec2: entered promiscuous mode [ 264.413004][T12546] team0: entered promiscuous mode [ 264.450580][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.575439][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1887'. [ 264.575672][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.618218][ T3451] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.641593][ T3451] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.641868][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.680825][ T3451] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.681068][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.737908][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.763592][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.802273][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.817784][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.828526][T12565] vlan0: entered promiscuous mode [ 264.836371][T12565] vlan0: entered allmulticast mode [ 264.841519][T12565] veth0_vlan: entered allmulticast mode [ 264.858828][T12550] netlink: 'syz.2.1885': attribute type 18 has an invalid length. [ 264.891333][T12568] pim6reg1: entered promiscuous mode [ 264.896868][T12568] pim6reg1: entered allmulticast mode [ 264.909594][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1890'. [ 264.918682][T12568] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 264.926716][T12568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.981925][T12570] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1892'. [ 265.060361][T12572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.131413][T12508] hsr0 speed is unknown, defaulting to 1000 [ 265.211672][T12577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.275950][T12572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.387402][T12584] netlink: 212260 bytes leftover after parsing attributes in process `syz.2.1896'. [ 265.560455][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 265.589987][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 266.248856][T12625] xt_l2tp: invalid flags combination: 0 [ 266.256643][T12627] nbd: couldn't find a device at index -373156329 [ 266.534617][ T958] hsr0 speed is unknown, defaulting to 1000 [ 266.542531][ T958] syz1: Port: 1 Link DOWN [ 266.665288][T12660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.861045][T12674] tipc: Enabled bearer , priority 0 [ 266.870722][T12674] syzkaller0: entered promiscuous mode [ 266.882422][T12674] syzkaller0: entered allmulticast mode [ 266.933487][T12674] tipc: Resetting bearer [ 266.959011][T12673] tipc: Resetting bearer [ 267.000417][T12673] tipc: Disabling bearer [ 267.211071][T12692] __nla_validate_parse: 5 callbacks suppressed [ 267.211093][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 267.235024][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 267.340515][T12695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1932'. [ 267.381907][T12704] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1934'. [ 268.000047][T12734] wlan1 speed is unknown, defaulting to 1000 [ 268.266973][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1942'. [ 268.313904][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 268.322018][T12739] syzkaller0: entered promiscuous mode [ 268.328578][T12739] syzkaller0: entered allmulticast mode [ 268.340097][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1946'. [ 268.571979][ T36] nci: nci_rx_work: unknown MT 0x1 [ 270.290186][T12734] hsr0 speed is unknown, defaulting to 1000 [ 270.309276][T12787] macvtap1: entered promiscuous mode [ 270.526629][T12799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1959'. [ 270.672035][T12807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.958252][T12816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1966'. [ 270.978942][T12816] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1966'. [ 271.004356][T12816] validate_nla: 34 callbacks suppressed [ 271.004377][T12816] netlink: 'syz.0.1966': attribute type 6 has an invalid length. [ 271.058767][T12816] netlink: 'syz.0.1966': attribute type 5 has an invalid length. [ 271.569877][T12828] bond0: entered promiscuous mode [ 271.646997][T12828] bond0: left promiscuous mode [ 271.796191][T12843] batadv0: vlans aren't supported yet for dev_uc|mc_add() [ 271.827139][T12841] batadv0: vlans aren't supported yet for dev_uc|mc_add() [ 271.918667][T12845] openvswitch: netlink: IPv4 tun info is not correct [ 272.200029][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.245674][T12863] lo: entered promiscuous mode [ 272.252293][T12863] lo: entered allmulticast mode [ 272.271473][T12863] tunl0: entered promiscuous mode [ 272.287096][T12863] tunl0: entered allmulticast mode [ 272.307708][T12863] gre0: entered promiscuous mode [ 272.320615][T12863] gre0: entered allmulticast mode [ 272.343257][T12863] gretap0: entered allmulticast mode [ 272.348830][T12868] __nla_validate_parse: 7 callbacks suppressed [ 272.348850][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1982'. [ 272.353356][T12863] gretap0: refused to change device tx_queue_len [ 272.371853][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.411594][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.424837][T12867] geneve0: left promiscuous mode [ 272.475527][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 272.476821][T12867] team0: Port device geneve0 removed [ 272.560534][T12870] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 272.597839][T12863] gretap0: refused to change device tx_queue_len [ 272.608888][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.630123][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.660315][T12863] gretap0: refused to change device tx_queue_len [ 272.675212][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.692230][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.702971][T12863] gretap0: refused to change device tx_queue_len [ 272.709567][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.754156][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.768998][T12878] tipc: Enabled bearer , priority 0 [ 272.793335][T12863] gretap0: refused to change device tx_queue_len [ 272.816399][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.854782][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.864768][T12889] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 272.872834][T12863] gretap0: refused to change device tx_queue_len [ 272.887421][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 272.933296][T12863] netlink: 'syz.1.1981': attribute type 13 has an invalid length. [ 272.982802][T12886] syzkaller0: entered promiscuous mode [ 272.995613][T12886] syzkaller0: entered allmulticast mode [ 273.006966][T12895] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.031237][T12863] gretap0: refused to change device tx_queue_len [ 273.048257][T12863] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 273.092057][T12886] tipc: Resetting bearer [ 273.113517][T12876] tipc: Resetting bearer [ 273.191875][T12876] tipc: Disabling bearer [ 273.293392][T12907] bond0: entered promiscuous mode [ 273.298582][T12907] bond_slave_0: entered promiscuous mode [ 273.317736][T12907] bond_slave_1: entered promiscuous mode [ 273.346753][T12907] batadv0: entered promiscuous mode [ 273.353790][T12907] debugfs: 'hsr1' already exists in 'hsr' [ 273.370716][T12907] Cannot create hsr debugfs directory [ 273.377363][T12916] openvswitch: netlink: Actions may not be safe on all matching packets [ 273.392905][T12907] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 273.433769][T12907] hsr1: entered allmulticast mode [ 273.438881][T12907] bond0: entered allmulticast mode [ 273.455274][T12907] bond_slave_0: entered allmulticast mode [ 273.461083][T12907] bond_slave_1: entered allmulticast mode [ 273.478487][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 273.486135][T12907] batadv0: entered allmulticast mode [ 273.498004][T12907] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 273.510231][T12907] bond0: left promiscuous mode [ 273.515789][T12907] bond_slave_0: left promiscuous mode [ 273.524985][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 273.534534][T12907] bond_slave_1: left promiscuous mode [ 273.543793][T12907] batadv0: left promiscuous mode [ 273.586277][T12928] !€ÿ: renamed from bond_slave_0 [ 273.710419][T12934] netlink: 'syz.2.2002': attribute type 12 has an invalid length. [ 273.787786][T12937] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2003'. [ 273.843595][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 273.852926][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 273.909809][T12950] syz.1.2006 uses old SIOCAX25GETINFO [ 273.932423][T12950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2006'. [ 273.933635][T12944] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2000'. [ 274.410534][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'. [ 274.522823][T12969] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.553537][T12969] block nbd0: shutting down sockets [ 274.922697][T13003] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 274.971115][T13003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.171177][T13079] validate_nla: 3 callbacks suppressed [ 276.171192][T13079] netlink: 'syz.2.2045': attribute type 11 has an invalid length. [ 276.528549][T13097] tipc: Enabled bearer , priority 0 [ 276.631478][T13097] syzkaller0: entered promiscuous mode [ 276.666682][T13097] syzkaller0: entered allmulticast mode [ 276.684339][T13097] tipc: Resetting bearer [ 276.716870][T13110] netlink: 'syz.4.2056': attribute type 10 has an invalid length. [ 276.738289][T13096] tipc: Resetting bearer [ 276.749957][T13112] netlink: 'syz.2.2057': attribute type 29 has an invalid length. [ 277.595824][ T958] tipc: Node number set to 2939464042 [ 278.269609][T13096] tipc: Disabling bearer [ 278.285251][T13110] batman_adv: batadv0: Adding interface: . [ 278.291333][T13110] batman_adv: batadv0: Interface activated: . [ 278.330384][T13113] wlan1 speed is unknown, defaulting to 1000 [ 278.506939][T13135] __nla_validate_parse: 19 callbacks suppressed [ 278.506961][T13135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2063'. [ 278.564925][T13135] bridge0: left allmulticast mode [ 279.083650][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 279.238918][T13160] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 279.255047][T13159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2069'. [ 279.267393][T13113] hsr0 speed is unknown, defaulting to 1000 [ 279.273708][T13160] netlink: 'syz.2.2070': attribute type 3 has an invalid length. [ 279.273729][T13160] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2070'. [ 279.273746][T13160] NCSI netlink: No device for ifindex 0 [ 279.367783][T13159] bond0: (slave bridge_slave_1): Releasing backup interface [ 280.346687][T13204] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2084'. [ 280.489451][T13213] net_ratelimit: 1 callbacks suppressed [ 280.489465][T13213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.995695][T13237] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2090'. [ 281.000731][T13244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 281.030197][T13244] netlink: 'syz.0.2093': attribute type 1 has an invalid length. [ 281.071432][T13244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2093'. [ 281.179918][T13252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.462110][ T6027] IPVS: starting estimator thread 0... [ 281.470436][T13272] IPVS: ip_vs_edit_dest(): server weight less than zero [ 281.572659][T13273] IPVS: using max 23 ests per chain, 55200 per kthread [ 281.857840][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 281.904573][T13291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2106'. [ 281.958642][T13300] netlink: 'syz.4.2107': attribute type 10 has an invalid length. [ 282.089439][T13297] syzkaller0: entered promiscuous mode [ 282.095276][T13297] syzkaller0: entered allmulticast mode [ 282.101565][T13305] netlink: 'syz.1.2112': attribute type 1 has an invalid length. [ 282.109857][T13305] netlink: 'syz.1.2112': attribute type 2 has an invalid length. [ 282.118503][T13306] tipc: Enabled bearer , priority 0 [ 282.125583][T13299] wlan1 speed is unknown, defaulting to 1000 [ 282.186004][T13306] tipc: Resetting bearer [ 282.199242][T13302] tipc: Disabling bearer [ 282.732254][T13299] hsr0 speed is unknown, defaulting to 1000 [ 282.898867][T13339] IPVS: set_ctl: invalid protocol: 4 172.30.0.4:20004 [ 283.117370][T13347] netlink: 'syz.3.2126': attribute type 1 has an invalid length. [ 284.528614][T13347] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 285.278347][T13396] __nla_validate_parse: 6 callbacks suppressed [ 285.278371][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 285.294765][T13400] netlink: 'syz.4.2143': attribute type 11 has an invalid length. [ 285.320243][T13400] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2143'. [ 285.338604][T13401] pimreg3: entered allmulticast mode [ 285.539548][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2146'. [ 285.622328][T13417] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2148'. [ 285.655919][T13417] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 285.801806][T13424] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 285.864447][T13424] netlink: 'syz.0.2149': attribute type 29 has an invalid length. [ 286.027011][T13434] netlink: 'syz.4.2152': attribute type 21 has an invalid length. [ 286.059350][T13439] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 286.096063][T13439] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 286.116096][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 286.145701][T13439] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 286.274859][T13451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 286.965254][T13483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2166'. [ 286.980248][T13483] openvswitch: netlink: Flow key attr not present in new flow. [ 287.181528][T13490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2168'. [ 287.214630][T13490] netlink: 'syz.0.2168': attribute type 10 has an invalid length. [ 287.224067][T13497] netlink: 152064 bytes leftover after parsing attributes in process `syz.3.2170'. [ 287.246078][T13497] netlink: zone id is out of range [ 287.254357][T13497] netlink: zone id is out of range [ 287.264021][T13490] geneve1: entered allmulticast mode [ 287.265571][T13494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2169'. [ 287.269435][T13497] netlink: zone id is out of range [ 287.292253][T13490] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 287.302384][T13497] netlink: zone id is out of range [ 287.308524][ T3542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.317096][ T3542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.333205][ T3542] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.341702][T13497] netlink: zone id is out of range [ 287.348583][T13492] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 287.351885][T13497] netlink: zone id is out of range [ 287.362054][ T3542] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.371069][T13497] netlink: zone id is out of range [ 287.376846][T13497] netlink: zone id is out of range [ 287.418324][T13500] wlan1 speed is unknown, defaulting to 1000 [ 287.559801][T13511] vlan2: entered promiscuous mode [ 287.588374][T13511] bridge0: entered promiscuous mode [ 287.719016][T13515] macvtap1: entered promiscuous mode [ 288.082897][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 288.318654][T13500] hsr0 speed is unknown, defaulting to 1000 [ 288.662083][T13567] tipc: Enabled bearer , priority 0 [ 288.678953][T13560] syzkaller0: entered promiscuous mode [ 288.685694][T13560] syzkaller0: entered allmulticast mode [ 288.709614][T13572] tunl0: entered promiscuous mode [ 288.721080][T13572] netlink: 'syz.0.2188': attribute type 3 has an invalid length. [ 288.751279][T13560] tipc: Resetting bearer [ 288.815425][T13559] tipc: Resetting bearer [ 288.882025][T13579] netlink: 'syz.3.2190': attribute type 1 has an invalid length. [ 288.904289][T13559] tipc: Disabling bearer [ 288.951047][T13576] syzkaller1: entered promiscuous mode [ 288.967725][T13576] syzkaller1: entered allmulticast mode [ 289.087128][T13579] bond5: entered promiscuous mode [ 289.096732][T13579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.136890][T13584] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.147073][T13584] bond5: (slave bond6): making interface the new active one [ 289.154984][T13584] bond6: entered promiscuous mode [ 289.160810][T13584] bond5: (slave bond6): Enslaving as an active interface with an up link [ 290.162600][ T5870] Bluetooth: hci4: command 0x0406 tx timeout [ 290.330468][T13659] __nla_validate_parse: 5 callbacks suppressed [ 290.330489][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2211'. [ 290.359820][T13658] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2211'. [ 290.478815][T13664] netlink: 'syz.1.2213': attribute type 12 has an invalid length. [ 290.496997][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'. [ 290.597343][T13672] netlink: 'syz.4.2217': attribute type 1 has an invalid length. [ 290.710031][T13680] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2219'. [ 290.813794][T13688] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 290.846428][T13682] netlink: 'syz.0.2221': attribute type 64 has an invalid length. [ 290.855039][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2221'. [ 290.869892][T13688] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 290.883771][T13686] netlink: 'syz.4.2222': attribute type 10 has an invalid length. [ 290.891723][T13686] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 291.018383][T13686] bond0: (slave bond_slave_0): Releasing backup interface [ 291.055997][T13686] bond0: (slave bond_slave_1): Releasing backup interface [ 291.088811][T13686] team_slave_0: left promiscuous mode [ 291.109341][T13686] team0: Port device team_slave_0 removed [ 291.131450][T13686] team0: Port device team_slave_1 removed [ 291.149235][T13686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.158664][T13686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.174493][T13713] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2230'. [ 291.175737][T13686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.195625][T13686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.209584][T13686] batman_adv: batadv0: Interface deactivated: . [ 291.221838][T13717] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2227'. [ 291.246137][T13686] batman_adv: batadv0: Removing interface: . [ 291.278429][T13686] geneve0: left promiscuous mode [ 291.305673][T13686] team0: Port device geneve0 removed [ 291.323674][T13686] bond1: (slave bond2): Releasing backup interface [ 291.332843][T13723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2232'. [ 291.342956][T13686] bond1: (slave bond2): the permanent HWaddr of slave - 32:39:fd:1f:9d:96 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 291.360221][T13686] bond1: (slave gretap1): making interface the new active one [ 291.389188][T13686] bond1: (slave gretap1): Releasing backup interface [ 291.445993][T13686] bond6: (slave veth5): Releasing backup interface [ 291.555904][T13729] IPVS: sync thread started: state = BACKUP, mcast_ifn = virt_wifi0, syncid = 1, id = 0 [ 291.609615][T13686] syz.4.2222 (13686) used greatest stack depth: 16624 bytes left [ 292.062814][T13762] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2243'. [ 292.118247][T13764] pim6reg1: entered promiscuous mode [ 292.124177][T13764] pim6reg1: entered allmulticast mode [ 292.373512][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'. [ 292.932131][T13808] net_ratelimit: 225 callbacks suppressed [ 292.932154][T13808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.714716][T13855] ================================================================== [ 293.722838][T13855] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 293.730934][T13855] Read of size 1 at addr ffff88805a9ebeb0 by task syz.4.2279/13855 [ 293.738856][T13855] [ 293.741206][T13855] CPU: 1 UID: 0 PID: 13855 Comm: syz.4.2279 Not tainted syzkaller #0 PREEMPT(full) [ 293.741232][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.741244][T13855] Call Trace: [ 293.741252][T13855] [ 293.741260][T13855] dump_stack_lvl+0x189/0x250 [ 293.741287][T13855] ? __kasan_check_byte+0x12/0x40 [ 293.741315][T13855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.741337][T13855] ? lock_release+0x4b/0x3e0 [ 293.741366][T13855] ? __virt_addr_valid+0x4a5/0x5c0 [ 293.741392][T13855] print_report+0xca/0x240 [ 293.741410][T13855] ? xfrm_state_find+0x2cf2/0x5400 [ 293.741428][T13855] kasan_report+0x118/0x150 [ 293.741454][T13855] ? xfrm_state_find+0x2cf2/0x5400 [ 293.741477][T13855] xfrm_state_find+0x2cf2/0x5400 [ 293.741495][T13855] ? unwind_get_return_address+0x4d/0x90 [ 293.741515][T13855] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 293.741548][T13855] ? xfrm_state_find+0x1da/0x5400 [ 293.741569][T13855] ? __pfx_xfrm_state_find+0x10/0x10 [ 293.741597][T13855] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 293.741632][T13855] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 293.741658][T13855] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 293.741692][T13855] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 293.741718][T13855] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 293.741742][T13855] ? __lock_acquire+0xab9/0xd20 [ 293.741784][T13855] ? xfrm_expand_policies+0x41f/0x6a0 [ 293.741808][T13855] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 293.741836][T13855] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 293.741859][T13855] ? __pfx_rcuref_put+0x10/0x10 [ 293.741888][T13855] xfrm_lookup_route+0x3c/0x1c0 [ 293.741912][T13855] tcp_v4_connect+0x846/0x1a00 [ 293.741947][T13855] ? __pfx_tcp_v4_connect+0x10/0x10 [ 293.741977][T13855] __inet_stream_connect+0x2ab/0xe80 [ 293.742006][T13855] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.742024][T13855] ? __pfx___inet_stream_connect+0x10/0x10 [ 293.742049][T13855] ? __local_bh_enable_ip+0x12d/0x1c0 [ 293.742067][T13855] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 293.742089][T13855] inet_stream_connect+0x66/0xa0 [ 293.742114][T13855] __sys_connect+0x316/0x440 [ 293.742133][T13855] ? __pfx___sys_connect+0x10/0x10 [ 293.742156][T13855] ? rcu_is_watching+0x15/0xb0 [ 293.742178][T13855] __x64_sys_connect+0x7a/0x90 [ 293.742195][T13855] do_syscall_64+0xfa/0x3b0 [ 293.742212][T13855] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.742238][T13855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.742257][T13855] ? clear_bhb_loop+0x60/0xb0 [ 293.742276][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.742294][T13855] RIP: 0033:0x7fd72cd8ebe9 [ 293.742311][T13855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.742328][T13855] RSP: 002b:00007fd72dbc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 293.742350][T13855] RAX: ffffffffffffffda RBX: 00007fd72cfc5fa0 RCX: 00007fd72cd8ebe9 [ 293.742365][T13855] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000005 [ 293.742377][T13855] RBP: 00007fd72ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 293.742388][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.742399][T13855] R13: 00007fd72cfc6038 R14: 00007fd72cfc5fa0 R15: 00007fff73372928 [ 293.742418][T13855] [ 293.742425][T13855] [ 294.065471][T13855] Allocated by task 11139: [ 294.069886][T13855] kasan_save_track+0x3e/0x80 [ 294.074567][T13855] __kasan_slab_alloc+0x6c/0x80 [ 294.079415][T13855] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 294.084872][T13855] xfrm_state_alloc+0x24/0x2f0 [ 294.089634][T13855] __find_acq_core+0x8a7/0x1c00 [ 294.094481][T13855] xfrm_find_acq+0x78/0xa0 [ 294.098894][T13855] xfrm_alloc_userspi+0x6b3/0xc90 [ 294.103919][T13855] xfrm_user_rcv_msg+0x7a0/0xab0 [ 294.108855][T13855] netlink_rcv_skb+0x205/0x470 [ 294.113616][T13855] xfrm_netlink_rcv+0x79/0x90 [ 294.118297][T13855] netlink_unicast+0x82c/0x9e0 [ 294.123075][T13855] netlink_sendmsg+0x805/0xb30 [ 294.127834][T13855] __sock_sendmsg+0x21c/0x270 [ 294.132509][T13855] ____sys_sendmsg+0x505/0x830 [ 294.137269][T13855] ___sys_sendmsg+0x21f/0x2a0 [ 294.141951][T13855] __x64_sys_sendmsg+0x19b/0x260 [ 294.146967][T13855] do_syscall_64+0xfa/0x3b0 [ 294.151470][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.157361][T13855] [ 294.159681][T13855] Freed by task 5954: [ 294.163651][T13855] kasan_save_track+0x3e/0x80 [ 294.168333][T13855] kasan_save_free_info+0x46/0x50 [ 294.173354][T13855] __kasan_slab_free+0x5b/0x80 [ 294.178119][T13855] kmem_cache_free+0x18f/0x400 [ 294.182886][T13855] xfrm_state_gc_task+0x52d/0x6b0 [ 294.187915][T13855] process_scheduled_works+0xae1/0x17b0 [ 294.193456][T13855] worker_thread+0x8a0/0xda0 [ 294.198043][T13855] kthread+0x70e/0x8a0 [ 294.202109][T13855] ret_from_fork+0x3fc/0x770 [ 294.206693][T13855] ret_from_fork_asm+0x1a/0x30 [ 294.211496][T13855] [ 294.213820][T13855] The buggy address belongs to the object at ffff88805a9ebb80 [ 294.213820][T13855] which belongs to the cache xfrm_state of size 928 [ 294.227781][T13855] The buggy address is located 816 bytes inside of [ 294.227781][T13855] freed 928-byte region [ffff88805a9ebb80, ffff88805a9ebf20) [ 294.241575][T13855] [ 294.243898][T13855] The buggy address belongs to the physical page: [ 294.250387][T13855] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a9ebb80 pfn:0x5a9e8 [ 294.260484][T13855] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.268988][T13855] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.276532][T13855] page_type: f5(slab) [ 294.280515][T13855] raw: 00fff00000000040 ffff88801a5308c0 dead000000000122 0000000000000000 [ 294.289090][T13855] raw: ffff88805a9ebb80 00000000800f000c 00000000f5000000 0000000000000000 [ 294.297673][T13855] head: 00fff00000000040 ffff88801a5308c0 dead000000000122 0000000000000000 [ 294.306339][T13855] head: ffff88805a9ebb80 00000000800f000c 00000000f5000000 0000000000000000 [ 294.315007][T13855] head: 00fff00000000002 ffffea00016a7a01 00000000ffffffff 00000000ffffffff [ 294.323674][T13855] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 294.332333][T13855] page dumped because: kasan: bad access detected [ 294.338739][T13855] page_owner tracks the page as allocated [ 294.344451][T13855] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6403, tgid 6402 (syz.2.107), ts 105938517440, free_ts 105699491791 [ 294.363636][T13855] post_alloc_hook+0x240/0x2a0 [ 294.368402][T13855] get_page_from_freelist+0x21e4/0x22c0 [ 294.373941][T13855] __alloc_frozen_pages_noprof+0x181/0x370 [ 294.379740][T13855] alloc_pages_mpol+0x232/0x4a0 [ 294.384599][T13855] allocate_slab+0x8a/0x370 [ 294.389097][T13855] ___slab_alloc+0xbeb/0x1420 [ 294.393776][T13855] kmem_cache_alloc_noprof+0x283/0x3c0 [ 294.399233][T13855] xfrm_state_alloc+0x24/0x2f0 [ 294.403991][T13855] pfkey_add+0x6e4/0x2e00 [ 294.408318][T13855] pfkey_sendmsg+0xbfe/0x1090 [ 294.413004][T13855] __sock_sendmsg+0x21c/0x270 [ 294.417680][T13855] ____sys_sendmsg+0x505/0x830 [ 294.422440][T13855] ___sys_sendmsg+0x21f/0x2a0 [ 294.427116][T13855] __x64_sys_sendmsg+0x19b/0x260 [ 294.432046][T13855] do_syscall_64+0xfa/0x3b0 [ 294.436560][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.442482][T13855] page last free pid 5931 tgid 5931 stack trace: [ 294.448891][T13855] __free_frozen_pages+0xbc4/0xd30 [ 294.454002][T13855] __slab_free+0x303/0x3c0 [ 294.458410][T13855] qlist_free_all+0x97/0x140 [ 294.463082][T13855] kasan_quarantine_reduce+0x148/0x160 [ 294.468557][T13855] __kasan_slab_alloc+0x22/0x80 [ 294.473408][T13855] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 294.478868][T13855] security_file_alloc+0x34/0x330 [ 294.483891][T13855] init_file+0x93/0x2f0 [ 294.488044][T13855] alloc_empty_file+0x6e/0x1d0 [ 294.492800][T13855] path_openat+0x107/0x3830 [ 294.497299][T13855] do_filp_open+0x1fa/0x410 [ 294.501801][T13855] do_sys_openat2+0x121/0x1c0 [ 294.506479][T13855] __x64_sys_openat+0x138/0x170 [ 294.511331][T13855] do_syscall_64+0xfa/0x3b0 [ 294.515841][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.521733][T13855] [ 294.524058][T13855] Memory state around the buggy address: [ 294.529698][T13855] ffff88805a9ebd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.537766][T13855] ffff88805a9ebe00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.545822][T13855] >ffff88805a9ebe80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.553876][T13855] ^ [ 294.559497][T13855] ffff88805a9ebf00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 294.567571][T13855] ffff88805a9ebf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.575715][T13855] ================================================================== [ 294.618606][T13855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.625853][T13855] CPU: 0 UID: 0 PID: 13855 Comm: syz.4.2279 Not tainted syzkaller #0 PREEMPT(full) [ 294.635232][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.645287][T13855] Call Trace: [ 294.648688][T13855] [ 294.651617][T13855] dump_stack_lvl+0x99/0x250 [ 294.656213][T13855] ? __asan_memcpy+0x40/0x70 [ 294.660807][T13855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.666004][T13855] ? __pfx__printk+0x10/0x10 [ 294.670601][T13855] vpanic+0x281/0x750 [ 294.674584][T13855] ? preempt_schedule+0xae/0xc0 [ 294.679462][T13855] ? __pfx_vpanic+0x10/0x10 [ 294.683970][T13855] ? preempt_schedule_common+0x83/0xd0 [ 294.689431][T13855] ? preempt_schedule+0xae/0xc0 [ 294.694286][T13855] ? __pfx_preempt_schedule+0x10/0x10 [ 294.699664][T13855] panic+0xb9/0xc0 [ 294.703499][T13855] ? __pfx_panic+0x10/0x10 [ 294.707952][T13855] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 294.713873][T13855] ? xfrm_state_find+0x2cf2/0x5400 [ 294.718997][T13855] check_panic_on_warn+0x89/0xb0 [ 294.723944][T13855] ? xfrm_state_find+0x2cf2/0x5400 [ 294.729064][T13855] end_report+0x78/0x160 [ 294.733310][T13855] kasan_report+0x129/0x150 [ 294.737819][T13855] ? xfrm_state_find+0x2cf2/0x5400 [ 294.742936][T13855] xfrm_state_find+0x2cf2/0x5400 [ 294.747871][T13855] ? unwind_get_return_address+0x4d/0x90 [ 294.753502][T13855] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 294.759663][T13855] ? xfrm_state_find+0x1da/0x5400 [ 294.764716][T13855] ? __pfx_xfrm_state_find+0x10/0x10 [ 294.770018][T13855] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 294.776215][T13855] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 294.782140][T13855] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 294.788740][T13855] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 294.794643][T13855] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 294.800642][T13855] ? __lock_acquire+0xab9/0xd20 [ 294.805512][T13855] ? xfrm_expand_policies+0x41f/0x6a0 [ 294.810886][T13855] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 294.816354][T13855] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 294.822159][T13855] ? __pfx_rcuref_put+0x10/0x10 [ 294.827015][T13855] xfrm_lookup_route+0x3c/0x1c0 [ 294.831879][T13855] tcp_v4_connect+0x846/0x1a00 [ 294.836659][T13855] ? __pfx_tcp_v4_connect+0x10/0x10 [ 294.841892][T13855] __inet_stream_connect+0x2ab/0xe80 [ 294.847180][T13855] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.852567][T13855] ? __pfx___inet_stream_connect+0x10/0x10 [ 294.858374][T13855] ? __local_bh_enable_ip+0x12d/0x1c0 [ 294.863742][T13855] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 294.869463][T13855] inet_stream_connect+0x66/0xa0 [ 294.874401][T13855] __sys_connect+0x316/0x440 [ 294.878992][T13855] ? __pfx___sys_connect+0x10/0x10 [ 294.884102][T13855] ? rcu_is_watching+0x15/0xb0 [ 294.888885][T13855] __x64_sys_connect+0x7a/0x90 [ 294.893647][T13855] do_syscall_64+0xfa/0x3b0 [ 294.898149][T13855] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.903378][T13855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.909538][T13855] ? clear_bhb_loop+0x60/0xb0 [ 294.914215][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.920104][T13855] RIP: 0033:0x7fd72cd8ebe9 [ 294.924518][T13855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.944124][T13855] RSP: 002b:00007fd72dbc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 294.952538][T13855] RAX: ffffffffffffffda RBX: 00007fd72cfc5fa0 RCX: 00007fd72cd8ebe9 [ 294.960706][T13855] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000005 [ 294.968696][T13855] RBP: 00007fd72ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 294.976685][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.984666][T13855] R13: 00007fd72cfc6038 R14: 00007fd72cfc5fa0 R15: 00007fff73372928 [ 294.992656][T13855] [ 294.995944][T13855] Kernel Offset: disabled [ 295.000263][T13855] Rebooting in 86400 seconds..