last executing test programs: 5.226870378s ago: executing program 4 (id=2393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) accept4(r1, 0x0, 0x0, 0x800) 4.887141609s ago: executing program 4 (id=2399): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180072e9a4b7010069616970000000000802028004001300"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.771433809s ago: executing program 4 (id=2401): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c0000000000000000000000000000000000000000000000003ef40f87de5f966052cf268e155aa4ffe739b35f8fe8561e97249b49c6e71800"/213], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0xfffffff5, @local, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x70}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700007000000040000000800040000000000e5ff00003236288f922c", @ANYRES32=0x0, @ANYBLOB="05000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '!$\\\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r13, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r13, 0x4) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f00000001c0)=0x7ff) 3.696895404s ago: executing program 4 (id=2409): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x85, 0x0, &(0x7f00000004c0)) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="fb14646e87593fe2fe22fbf483e4931e1c6c876197f11363ab5214525bec4c9692f641619b2d11c776e3eea301"], 0x4c}}, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r9, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x40802) 3.466919157s ago: executing program 4 (id=2412): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x1001) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x541b, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x220, 0x30, 0x51b, 0x0, 0x0, {}, [{0x20c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xf8, 0x3ffd, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x43}}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010103}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x220}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f72024fc60", 0x14}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.385363095s ago: executing program 4 (id=2415): unshare(0x6a040000) unshare(0x44000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) listen(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x40b, 0x0, 0x0, 0x74}]}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x48}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2.784933773s ago: executing program 0 (id=2425): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x1b, 0x4, 0x0, 0x4, 0x74, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local, {[@timestamp_addr={0x44, 0x3c, 0xbd, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@private=0xa010100, 0x6}, {@private=0xa010101, 0x8}, {@multicast1, 0x4c6}, {@broadcast, 0x2850}, {@loopback, 0x81}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xa177}]}, @timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x703d6da5}, {@local, 0x9}, {@multicast1}]}]}}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000680)=""/171}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r4, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x60}}, 0x41) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040081}, 0x24004000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) (async) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x0, {}, 0xfd}, 0x18) (async, rerun: 64) connect$can_j1939(r9, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) (async, rerun: 64) sendmsg$can_j1939(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='\'', 0xfffffd21}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000038000103"], 0x14}}, 0x0) 2.522792236s ago: executing program 0 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.202856147s ago: executing program 0 (id=2433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r8 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000100)=0x209, 0x4) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 64) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @window={0x3, 0x2, 0x75}, @timestamp, @sack_perm], 0x8) (async) sendto$inet(r10, &(0x7f0000000440)="25d7fe75fa3496bb8e75411fe8ffffffffffffff0000000000", 0x19, 0x4000041, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r10, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4048000) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.731283614s ago: executing program 0 (id=2439): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x80000) getpeername(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x80) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008854}, 0x44081) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x17, "94858220a17f098427e43ede288df2697ce37ace97cd95"}, &(0x7f0000000300)=0x1f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={r5, 0x8}, 0x8) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000400)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x14000040}, 0x40004) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000500)="b74be270d83dd4ab176a7e13a50eb8bdf40fbde411ab63d056a034cd4981b025b47d71a6b968b548332ba779ecfdb23a9c3b0a4ae16c390779c5fbfb9253ad14ab64d94948596401dbe74e5d277aae91d1f12b41f78edf6b76f65303ecd7f6bb20c3e88c8a887dab476fbbb6d75652a1c42bb3976cf83d80613e17a17695b300c8a0a322bea44acd27114a95", 0x8c}, {&(0x7f00000005c0)="ce93fd4f27bd375dbb6f4f4e6aa59e55a6fe04c449e32428bf89ad3d93453e795022f61efbc9718030238625caf48adaae6314c1bb233b7cab62b9cbf85cd8d3dd28a3b31e2cf4126ab35ac7e0266e56f2bd686f4a6ed3aefcfcda587c5bd695fb3ecb194b541c463d9a2034c90eb22ccf2d6a3f925148c977", 0x79}, {&(0x7f0000000640)="b040aedf0e201e93d1719d3428fe3bc2598ba1fc0174263d93e2a78c474b384e158b58ff345e8bf572966fcc6e16a7c8f1f236fa8b8d7aef0dc1711ec659321dfd2e2cb8fd6cb977d5cec91893a6abd7e1854aa39c7016603d5437cfc630030cc17fc3cd9ca813129cd80c40567ddd18b32825b38de5806b83e04bbdb72e677b5c697a0efa6efd9ae9c27d9ed1d3b7cdb449a63cf3a1b379caf7e0242fef729591eed2710676b1bd0609df3cbd440bcddf134fc3a03460d44689bbdbfc139e55bd988a947973be4a86af6b86da287e516f95e1a1534754", 0xd7}, {&(0x7f0000000740)="d2ca05e92544248be31c5c80077f9d1ed4fc17def44954f4fffa1d6e11e07a13b9cb9e342dc4892633a66228c1", 0x2d}], 0x4) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r7, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x0) pwritev(r4, &(0x7f0000001a40)=[{&(0x7f0000000900)="191abacc058d557482245704b0da5f50c8f0ca4cf01953367d29620daf178fb95f4846e243267e79b92115f42ff8380ee4ccf47059d74c9a2643758268e48e92c95f3e478f878b832cffc2a53665f188cbe7f7413ec63c3c3b2b3fcb524c8b5d1917e0092afa38aeec7213a35b0eaf3451977b63e38b8e3a543790eac2e18a1b6044", 0x82}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="ac55c7a4910f66441408fb52e7cc69a1e27d23b7e113d70ce4e3898afc390ffbf34f7a6fe4cf778f456174fa06e36013e6ddddc3cf4e442f2aa77d36b5673972c672160d29cca10688fb748cf1dbc91456755465513a00c401a16f81fa8e7b683e0e", 0x62}], 0x3, 0x40, 0x8805) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f0000001a80)={0x2, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000001b40)={0x1, 'vlan0\x00', {}, 0x8}) splice(r0, &(0x7f0000001b80)=0xb, r9, &(0x7f0000001bc0)=0x3, 0x128, 0x7) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) read$nci(r10, &(0x7f0000001c40)=""/72, 0x48) writev(r0, &(0x7f0000003040)=[{&(0x7f0000001cc0)="308efc445a8e23755893cef8afa3d33ddeec65a9c983815c25a46327f3fe0a9263597d967c8e8269a04990673a3e74d688e453443c352d8ab5c780ad3d8e07fb260ea0afdab152d700bca2c1bccf7a99dae6ed340d3c00a26991e7479d28915515ac7ed1b0c420305d1c9955ccf219ef9a0258580bbc1440ac05655815de78aeb226672ebd4825af3dcb10", 0x8b}, {&(0x7f0000001d80)="76d0436887cd3bea1b33c7b912a88bdf5d673b7d56d4f45a217f40e0fecdd2f00fd066da197899cd8b586bdaff6065c624bc8ec40ff61529878ae86ac669f2ff246b0801c94de989f4f6511b02cb663a5e52be61c267a8b3b2a9167e7b58f54cceb17f800a6e90964df24af30b0cf8d1f62f4f378b33d1f9ba922e628d6d90d1eb41455f241e61ad5dbe18e8ba55093d3f8bd221", 0x94}, {&(0x7f0000001e40)="165897fcfd234ebcce85095336183bee5ee74aac3c544743d4da34a47492d21fa0a031c5b8dccc6d92c7656dd8de5f023ade612214827ec7b20a77c33532c64639aaa8d61a54717c4b4a854c7758d39854552f96a131a2501ed9e6593be4d57bc39d2717b8ea49e19fdab2bdae19b6a92c2cf427cc11724c9e9a5931564e64abfeba6978f7e3ba26c195c5a0ae44c9ea0183ed214669f9425ee1ea9a7b318ecdfe1ec65930dba1d0e7c1b337f7021da591cf8903ac4b622924ccab1ed334ef85f16e503f0749acdd33903069d646cdc00fbebfede3cdc067650e2aa940c0f48608096e1934d54277470383a46a8827e23f45c7c2b27be66804699404742609923da91464205da8d231042116b7ba6e8efbc15b31b0d92a8cfb0d8b755863776748c68f8f7188a076a01122bf05810ef3b3708f29ef52845a671ef7f36a1d38ed25af36f4f00d32229befe96429defb49c796cf4d3942487086ddaedfc90dd4621bbef57927096be1c5f462caad80210ba94d53ef976528d7e99b01c05d5ef468fb042cb1ca8dcd41c63775401f8a5ca1aba124fb5f3f81e2b717aa711f7ff48d0b32e10aba9c35ec5b4e7bedf2d33c4be13ecbcbbf89f17f499574d99e25c066ca410c551483eef69ff51014a5a06fdaa125360952b0d48c3a9accadc0aa3a28e28ffea0ecb1a0b176357505c3b959c21261754819953b099b039247b3609e5069c92d32881c6ee58d707195cec20f928633fa2f66ecc4e33183c382d91e632241a4d7d9ac09cf775aad8c0b7fc7f40eb53a10839a7e81716ccf605a4a395207ad459ef1b75ce35645a9635617897fe64be4c81fae46176f6226c20a38950711a25f92cc7088ff16f59031e5f805fc3349656a32cd6e4d40bbf998d65d7f9fc1acdb130ccc64d3ba9f4e09d99fbd602e465d2641334855804b3efbaa72e5d1964b54783e4fd1bccd2c3d6321c9f31849e23bc9833b5dec54c641a8b7d1c84fffe9085684b6086b9159fb5323f355ceed93bf68d96686d08c91f92766620a4c6d940a9d2dec0cd79521003a7bf289953cacd0b04509e6f3ff9361cff036518658e1d8baa624ba6523ca4f3b894ad1052f20f3ccda7dea4693b2398e44cabd470101d673027913c9f77461ed99c8a6df72e00092bba76d7034868557cdcc744dfc1723544459dcf5c975f074cae2711c914c7508506d9ec5e7bfd9aed87c201cbc905f48e87d57194974833d79c4a62302d3fe9143a69b14fb2480068a496f6c44f9d8f5dbbb6ee5ed51deb89e576b7353313c04025f50be3ad9964273f7d8ab86de7c51174f656bf06f34a224896d2f982c1ba1b281984143abdb1d2c2e9e553307d7b4f08da73eb248280c5538f2d3f84c3cf8eee9dee0552c5abcb182e7becaf1c070326634c797c4063946f1bfacf70fb806fd6d6eee8eadcb715afae716a06e8dda6be13fd24f4d0e4ec1c3739c6796aca4792f1639aeb83f28d9af0a37d0702d49e05d6be1e589c24d34e53998e82737dfc6b34d9f0492410ead4303cec202dea17e6c471ee769fb8a1a8725375f5e8d6c6dda94e691cd0738272b80c2865a7aa7906ddc845257306f7c9a8cb3a2f08a8eafd4413b4acc3706169827c864a7abd83d4d75126ea8b08c86513d7e217f095c8f593ce051bcb13803d7aa722198cf2ebc5e42a603e43ded5afd77bef66ba69c005e67d5cd17313fdbb9917fd2f8bee8123a80af37d3dcc115312ad19e997209825fdae7faabe1ff69d5d8b47fd35f48c452bd997fa336345b6fe31504271802a47bbcb413d5bfb0ab2bc255f84b87f755ce293b1bcb10ec3b4d1330f8db371016c9ce939991f6c6208a13728570ed315a829ba793aa0c621b2f7ef7ca8fd806b0662ef872deb029b03e31a72cf3c465ccd38ae3c004ccbc0136d9407b92b224ab646046b14839ecc16c0d7d1837193391273fb7b0e0089182f931b0e37a2754247bb36f378be6753939e18db479638d08c29d39afabbad0cfbc779aa96539667fabbea999f4ff7e58fb9e3a9645d34eb56c4f065541307c1b75f43bbf96a0209b5a232a66dd9215697b19334e55b48e195877b0495154ab0481dc9452d189018fad4e7bd3b8da660a859e6fcb778e4ec4f144c738d8647f56d5492be5bcd862a71511f87216e6aa2c331a69f48179305109e6ac244878e33a185b5b8113ed3978ed106de7f7e93d1bd9a34738d090279dbe0780dcc29d4cff135d0bbfc268db1a3863f0d4ee66bee503ed48e98b000b6de52ec5bc7818f61a6fea29b7e5f9c2d23bc119908b7627b7e84d7aae086d1d05ea37af94c097fbb034097514c5db9363a761ee70f009e2408d30012110c308b2905c99f8f9d91a5b73d2cab5ec592a415561a2cbf0ba6714d38b399c8806b7d3c6caa513947e1a057e32fe9823b141284952e0d35c7a58a89c377a96393d318d78df7681964c0eaff62ebc24d9e463625a93c27d80586a432c4a403bfea9c74e04c0bd23844460b74703c0eed4d31ea801d19684ea10685700486ac3b5ea94c0eabc15dcaf0340a7a3f211d59a1d7a8eb9deb4c35587539ccb972d5340fcff73f89d4741c3b8fe6e46ab42e0abda138677a5022cbdc10722d7c7dddf1e0b2d2ed8d1e2940a23c22dc819f270028da486299a419b7b29c322dcc4e2753edc4f91fc76dde5a178b174ca194556e61983e6d37ed0418a87b785c3a78fe601f63615fe4ef5987d532511be85fb91fa17746ee088ce78a92289588d1bfebd7a5126fdcb3922a698adbb9eed1306cc4facb11c330c7cee4d81408613fb4a35b1574269680103c0dbedfc51d94c1bf4be8d62ac40e71602670c86489184e3358866ed260094436d37512727bbc6f3a6756429720cae59b123029d5b56829a05c223898af70826d8b5672bdd4b3c070064d586efe41422f36fc56dbbc0d74067892836d20669280618018bd5795feafedd428badc27370ff1b29c3830db576b96ff99e04cb3ededa913c17dd6b02ad99b780b34340d044f97ab450f548320d74ea32dfae6cd5be89135f63db7e3746f66278553da16a5dd5cede938b17115115e60db641ee545a92dfd786cae3cf66514fdc116e78ef22e4fe3b3828ff076e86920584599da64547909f3df843b6d2e4b63c2461bfe4caad1cbf64a4eb68c20f396cb29c53e2a03c864831758f880f101144baeaca5671f4cabd2e8a82db6e2cb8c63ff309d9e00fdb8267fa1a5b39cf8fb2a74288a26034289f66fbb3f5637cac2d37f03db2c1ee303d081b8d551abeb7034bd2ddd8db83520d0fc715c6d3413e9663fece5b96b9407d7464e97dfb194ced8b9166c8e7a95e8344b71fba9be8a8a4918f6e8097f4447be10a87cea44a8d8da1a0d561c3c9ebf9941825d5c662834c419dff55acf4fdba5cf3e75a07a79165c0988d2199141167fb2e73ab8b87f262ec4ddae9ab218dcc4cda3659f2fceffa942ee7f0811754e6f95e92c0ae855d7c0ae9405b832c07c0680141f1787013378baef3df41c17053c219bd262b10c106cd21d89cc96b25ce342ebd31bea828bd53861b23242bc43dcef41c1e6f1006475ab938c0eeee47efcfec0f7d6c68432c34207cd751893264daf4151918b321b6af737caa49f8e1e43e540ebac1b2285e496afdb9a10f6f70c31b17d88bcc15fa6cb3d4e198b7714e5fe91430ba91cea143a4e5e55dfec5c6c606e8cdb3838039138c26aa351ffa86aa007e1360114dd2179e3dc832baf7e2d6388c22d4676d161899a8fc39783017d6df552dd62b38093b26b222481bb96b751dcb28c190d0c838c602b527b1159d3c758e5eaa68c97d10afc14ae9c64b51505a90ac1361f68efe5f6dc5cb12546bc464603f5a650610bf4ab98455fee157b6b1334f6562a3f2e5f883b1695520d32f4050041c8e8916436f8b36719849b9594b400f46a4b6dfff42da75b603024b08b1c38270beed17b6d3a95ba4ec298018cef47e04fe6ec885d2c6c11ee229705d1eaae7fecff045176e58465765b8458829bcd0cafb1fdafb9c4d9df62757a1e553a427e89c11d0e4370945d563759fd9e1c4825c73570e944c7ec5f538802cc0e161229d4236287c9c2e86df5ebe60815ef5e28f0c3e85c25450ffb662f7fffe648da7e08b6ab9e9f571847f8b853fdfeba6286e15c19c070a8148db89992dcf5f9ac7410e7d5b5a9e8ee95e86345a555c2f2a47530d5a0d7e2f583f2e412d5cd82834f7a1ee982fd4c0308eb60ce884ea3a26a2ddb147adbfa0667852b93e4b9e0b3af6f7c7638b731a1dc67abd1c02a3ecdc8b0ef075641d593658ff6496938fa5320c369f4b0ee6335c8d0ae9fca99b727107cd3bf701f62e2d88acad92815ac06cef1835fa7679b108828f35ec891b44d6f8bfd6be66f00b22b17d34ec74455a7a79f2b8736016c071c9bb64269502721338efe46b8a1cf7f7341c52448ce85f31eb9f9f8c2e1024d04f279d5b20d6fa7ad5bef9e59bf846787fc042fcb59019b794b76b87f0bf0ef10e26d3bb1b163c1873f585d76cbdd60a3bf0dae429f31c61b93db60540edefdf46a04f6034b82d4d4bc24891e78049c408590ddf5ad46f8f3b942524f84b46621236111766e9fafc9b65b80631d7d0faa8bfcee3c8d9171051dbe7ed6e5fe1e98231be2e5b16c6cccbc6c0002a8d2842cfdb18f99191019744558c0024256742fca351b5f0243cb89302c59daa7bacfe6ee176ae600adaccd70dddfa42bb7b832b69036443b4a925cf920b1bf2fa2b1a5da363642cda1f606481d6192df2277dbafb378d38b454a11f2fd2b7b53b8b7775cc066dd85984e2d225079a3e33779ce45e9d6b128066632f5967255ef5d243b27898fb79cbbdf94ac6041054f33f9ede3806ca267161e3b2b39266243d5d041866c7b90ec03d25b585c66a0e7603ac6db190b3c6ed7678d4104c4b51beb3e418c7cd104195daca9081eac42d16062822c7ba8e3e50b6ff9c7919e779494afdc50a360f7cf390db88061fa1fba35c4f852effadce6e0186251377eff7f0a8bc721c5f8d8ef5de08db48221a9fb97787c804366d56c0bb48ea51af997f547da7713dd0ad8e1958345a819af4716bac3bb57bc9fa989a307daa88558bbae221f4d6e4a74f024eef9f1d97f6968e0d17f1951abf650719b6ab6f55f73a3687287f7d1f91ca1cdee661d8be7ae09ee89718815ec8b0084acb8caf0d1d08916d60004892f11ec5d3ed557c6553de9e10fd55d2e7642116bda1b6b820846b015f16f11c12247b0f81ebdad66b26f37ce5af26bf7d8d5dbc80d376149af05087066e38c9c0f51d9b251e6118739d7b5c768e020cb522ede63c0faf88896785bd738e86e964c36f1f57084ab7080109a6883b592398c65125b80c04d00edd8c5fd2ae98405f1328a1ebd0bbc4dc18b7dce7cfef5dc17c9345bb4329ca23da099ae87d80e1d5e39142c650f6dd0f76a8e4c5b690de825537968916f4991288cccc426654fa845e92d3afab82589175c4eb9bcba32694130366c91bba65dd972024b74fe6cdae1451f709b0fa00fb561b5f9ec92523ced582ef599779639e5b255b4ae706faf80d29bae316a2998d0860c30df18b694cf634d36ef8bce8888146d8c92b5af8364c91fb361d06388e39b15d28dcd0ec539f5d2f64230a0aa822dc2e085c24f3c6eb65b64063a69b1b352f83ffa35396662b089d02894eba8098fb702eba407ba4b09bb8a4355a768c9abb79fc126cbef02fe9e0803abafe496e2647048c54c0eb52d51163ddc2899678ec02637e1b49d113d9151863a4cc10", 0x1000}, {&(0x7f0000002e40)="8fcce7b62ad2bd291f85d4aab4e70720a111a0479b6422e1f8c5ec70f7f6eff22fc27b9b1491d12b26649ffbb9b384702991eb83f9312d01d536d096cf806db493583ec08622a1f844d1f60388f736d99b3f17ea031b6a11b2529a4cb095d56fdd453b63f47b639c488df1fbfe92cd9107859d81c4", 0x75}, {&(0x7f0000002ec0)="eb61c12bef19c242e501c770119bf983c20d1653de1e1053efbac175b89b54aab2e18d5b2fc86f3886a85aef7e1ebc3b16c5fbc88588c0c5c621dd83bb77f4af82cd13b3b924c69ce3ffebe68784f0db8a5805b40e5e370c6d848d28e0c6c6585a5bed7afaf79c1b8fee2e7ee36b3e6bcc5b1126253deb0bf72a4cd14d480e55e5d9f25c7ae700f3719b47dc3eeeaefe347a7b18698b83e10492d99dd818b9f939cf0e5e113aa57baf27fa050a0b837aea437cf571009d772e89e6146166b78a372b35", 0xc3}, {&(0x7f0000002fc0)="13561ec1d24b9621d318d190fbacaf865d558482b5003c19675d3c6d9b19de91921e571b20edce955e3062a92fa9c2597a9b256d24bdb82b11ecb23c270383cb5f0ff75c7f", 0x45}], 0x6) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003100), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x44, r11, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfd}]}, 0x44}}, 0x20000090) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x2c, r12, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8881) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000003380)=0x2, 0x4) socket$inet(0x2, 0x4, 0xa66) socket$netlink(0x10, 0x3, 0x1) 1.69891692s ago: executing program 1 (id=2440): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) (async) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5ffc", 0x2}], 0x1}, 0x40001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40000120) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x409, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x2, 0x20}}, 0x20}}, 0x24048020) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@dellink={0x20, 0x11, 0x409, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x2, 0x20}}, 0x20}}, 0x24048020) 1.638053266s ago: executing program 2 (id=2441): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000030900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c0004802800018007000100637400001c0002800800014000000001080002400000000805000300040000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x5090}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0xfffe, 0x0, 0x0, 0x2, 0x0, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@empty, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x7fff, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf7001000800000000000000000000000000000374d99f400000000000000000000000000013c0040af44ae88673c"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB=' \x00\t\x00', @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x844}, 0x800) syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2f, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x89, 0x0, @private, @local}}}}}}, 0x0) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000440)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x80000) (async) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000440)={0x9, @remote}, &(0x7f00000004c0)=0x12, 0x80000) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000500)={0x54, "4c41d32d9615353500074170b1cea82ef2b0235d581f554213e3fd542b0f5659ce2bd79aed1a2c1aa303c85be11829887aa3628a8af4aa5e06e9b754bc7ef568f89c8d791525fbe25e73182fac5b0ad3a88887bba956a2734faf22853cd7c2227cb819f9b8cd7944ec200891cce17da9996afb443c7f5d28aa1bf1a5470803db"}) (async) ioctl$SIOCX25GCALLUSERDATA(r5, 0x89e4, &(0x7f0000000500)={0x54, "4c41d32d9615353500074170b1cea82ef2b0235d581f554213e3fd542b0f5659ce2bd79aed1a2c1aa303c85be11829887aa3628a8af4aa5e06e9b754bc7ef568f89c8d791525fbe25e73182fac5b0ad3a88887bba956a2734faf22853cd7c2227cb819f9b8cd7944ec200891cce17da9996afb443c7f5d28aa1bf1a5470803db"}) 1.514687316s ago: executing program 3 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_dellink={0x2c, 0x11, 0x1, 0xffffffef, 0x0, {0x7, 0x0, 0x0, r3, 0xc440, 0x40000}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc844}, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r6, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$caif_stream(0x25, 0x1, 0x3) connect$caif(r10, &(0x7f0000000040)=@rfm={0x25, 0x3, "c0da39aca361d597e012abce1de99643"}, 0x18) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r9) 1.12471334s ago: executing program 1 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, 0x0, &(0x7f0000000040)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x1c, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x2}, 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000d09d6cafcf6bd47074140c11ad239d58e821e0d220d3783a639fca6144810e94451e7d6c0fe4bba4c4315e0402fa8d36ecfcea4af4a833483b3eace847fda4c315e269ecb15605a90555877322245447b31e7699303adcea41b1de3ed9a44a1632f2967515701482e28871d38f7ea5211a49ac8214b8492467e8648e9d7015dfc7a3b77af4d6f3946ef06daa58327899c9079101c7fb5a8f0321dfa51a99867e94e98370442e02dfc846c40941b53cd8d02c8fc06fc7aa6d67367281be1f98d4326c6ff4b61d3c9cd5c6dccb92a2ecaa5b9495eed93f203036a166502a5800b7d8ed7934500e", @ANYRES16=r5, @ANYBLOB="08002dbd7000fcdbdf2514000000080017000600000005000b000100000005000c000000000008000a0005000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) poll(&(0x7f0000000000)=[{r3, 0x1}, {r1, 0x44}, {r1, 0xc020}, {r3, 0x1000}, {r1, 0x106}], 0x5, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x6, 'rdma'}, {0x2d, 'io'}, {0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x0, 'pids'}]}, 0x21) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="6230cef06a086737408aa40e0ac4ff0000000071102800000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x7c) 1.12211149s ago: executing program 3 (id=2445): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) sendto$inet(r0, &(0x7f0000000440)="217aae43", 0x4, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 1.002984078s ago: executing program 2 (id=2446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1dc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "d4c17f5b598a4f70f3c4"}, @NL80211_ATTR_FILS_ERP_RRK={0x35, 0xfc, "5dd33d1a76cfd408489c3eaa7ca74439e1e82810aaf27e18a325225094ce6ce83f7961deddcfbca6c6b2492196b75e1065"}, @NL80211_ATTR_FILS_ERP_REALM={0x60, 0xfa, "aa1175766d1069b7459e0ec3dacaf02196e11672a0d570723310801c268c49dabcd0d0ffba5eb5077acee27125ddd0a6cfe603f28b97553f716d7409a6397804c05e0197ea1a04ce1e89de3df8467bf1fc6f28418ae8e0a2c5011e72"}, @NL80211_ATTR_FILS_ERP_REALM={0xf7, 0xfa, "6257e7912ef376d13f2990eab83a17abb1502a2ad8b50b092464a578a223d65f54697d1e705fbbce32136db36ea709f1e4b01ef2addd3df9667a67e3928406b18190e993bd7250c252b38507a6562d44ce16a1269857a52732d92f3284db572771e6d8f63dae624e6226b486bae7b90ed012e891ad2feb74ff6be639457c8b8cdd246857769596b7e99eaec8c84be780bcd3546f753cd3f75fbe9039d1bec573ff16296900562333f481912d5a4da5db4e7b4cb982b3391f54fca68ebeff103299a3f0c5d11d620c2d8ab4a12639ba5c33b4d57794f2868fe5fd5a24b24c715502c715a0e0029a114d59271e1a39309eace5af"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}]]}, 0x1dc}}, 0x0) 923.351647ms ago: executing program 1 (id=2447): r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)}, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x2a, 0x4, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4008000) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x4008000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, &(0x7f0000000100)) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) 866.477042ms ago: executing program 2 (id=2448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x0) 783.062733ms ago: executing program 1 (id=2449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x200000000000011a, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004ea9481b43b940b61"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r3) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r2, 0x0, 0x0}, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000040000020900010073797a30000000004c00003fdaa768fd7530eac0af4500090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006480000000c0a01030000000000000000070000070900020073797a31000000000900010073797a30000000001c0003801800008008000340000000020900090073797a300000000014000000ff7f000000"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 781.407191ms ago: executing program 3 (id=2450): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002401886c30128000000000a05000000000000000000010000080900010073797a310000000008000240000000011400000011000100"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x0, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x909'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x4788}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000010003b15240100"/20, @ANYRES32=0x0, @ANYBLOB="c190000000000000"], 0x20}}, 0x48010) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES16=r9, @ANYBLOB="00000000000000d615a848c879bfb80c59be22fe000000000000000000000000003b125040b0da88067fd86a1a13ebabf5db4fa09eab72eddcfff2e8e32c802bb3bf9a6f55ed2e76dd325aa8505e6a91c65f45791bce3cb9621487fd41c4c33be43ad7ac08454e5719ebe953d461bfc372e649b5ab5b53f4e676bbbc52528ef159c76d838bd52ff79063d583d0f5a0b2c6082c765a321c11b5a23743b1664c788c7fdda50f10f0dd7b99d3da54a37ce9f7303eeda2d8f9cfa4316f436c7d99c4b7f3714c9c90243a869b2c633109ab6039e56227da7532f6c4a9f4f257318856e790e679ac1c8488f470814f9695e69aeae8e33b", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0200000081ffefffffffffff729a41e9665be96f430efe7dfc967e6c00ddddece9cc0b2a00"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r10, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3386dd600000000014060000000000000000000000ffff00000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b3c96a54100000a2780000"], 0x0) listen(r2, 0xe) listen(r2, 0x80) 701.211132ms ago: executing program 0 (id=2451): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) accept4(r1, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg$qrtr(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) (async) 529.130591ms ago: executing program 2 (id=2452): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000100)) r4 = socket(0x10, 0x3, 0x0) sendto$isdn(r4, &(0x7f0000000100)={0x9, 0x50ee}, 0x8, 0xc044, &(0x7f0000000080)={0x22, 0x2, 0x7, 0x40, 0x7}, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x200004, r7}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) r8 = accept$ax25(r0, &(0x7f0000000000)={{0x3, @netrom}, [@default, @bcast, @netrom, @netrom, @rose, @rose, @default, @netrom]}, &(0x7f0000000080)=0x48) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000000140)) setsockopt$ax25_int(r8, 0x101, 0x5, &(0x7f00000000c0)=0xde5, 0x4) 410.949534ms ago: executing program 1 (id=2453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@remote, @local, @private}, &(0x7f0000000080)=0xc) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1700000000000000010000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c57cd33a84478214368f937900da2e302812a16dbef7000001008b4f2bb0eb6cf165110640a67d723023e9a003d73216208929d69dceaf57e1522bd35a7d1531ea8d36e6a84d9dd1d0c0c5b042a4ccdf9572a13c4210c9d96cde872432eda23c5a834fec50ea3653293a59b4935ab9e50bb504843b561562493574ea9737a0d1a84687bd"], 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) socket$kcm(0x29, 0x7, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8}}]}, 0x30}}, 0x0) 408.780815ms ago: executing program 0 (id=2454): r0 = socket(0x23, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r0, &(0x7f0000001380)={0xa, 0x4e22, 0x7, @private0, 0x9b}, 0x1c) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_vlan\x00', 0xa78}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0xfe6d, 0x65, 0x0, 0x1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @empty}}}}}}, 0x26) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) socket$packet(0x11, 0xa, 0x300) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendmmsg$inet6(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r7, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r8, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r8, 0x8001, 0x10, 0x2, 0x4}, &(0x7f0000000080)=0x18) 373.973565ms ago: executing program 3 (id=2455): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x4a, 0x0, 0xf, 0x1}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 343.739335ms ago: executing program 2 (id=2456): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000d06010100000000000000000a000009050005000000000005000500160000000500050007000000050005000700000011000300686173683a3145742c6e6574000000000c000340686173683a6970000500050003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x9, 0x4) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf251b00000010002e800c00305a79097eab6b0daaaa08000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000014}, 0x2008c084) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000500)={&(0x7f0000000240), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x81) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xe674c000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0300000600000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r9}, 0x38) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4080) (async) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r6) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r11, @ANYBLOB="000126bd70dffedbdf25170000002c0001800300020069702b6772653000000000000000000014000200670001800800030081000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="3400018008000100", @ANYRES32=r8, @ANYBLOB="140002007767300000000000000000000000000014000200677265300000000000000000000000001c000180080003000300000008000300010000000800030000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0) (async) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc) 190.966374ms ago: executing program 1 (id=2457): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth1_macvtap\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x2, 0x10, 0x3, [0x4, 0x0, 0x4]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) epoll_pwait(r3, &(0x7f0000000280)=[{}], 0x1, 0x7, 0x0, 0x0) shutdown(r2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r5, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x3) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) 158.904962ms ago: executing program 3 (id=2458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1dc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "d4c17f5b598a4f70f3c4"}, @NL80211_ATTR_FILS_ERP_RRK={0x35, 0xfc, "5dd33d1a76cfd408489c3eaa7ca74439e1e82810aaf27e18a325225094ce6ce83f7961deddcfbca6c6b2492196b75e1065"}, @NL80211_ATTR_FILS_ERP_REALM={0x60, 0xfa, "aa1175766d1069b7459e0ec3dacaf02196e11672a0d570723310801c268c49dabcd0d0ffba5eb5077acee27125ddd0a6cfe603f28b97553f716d7409a6397804c05e0197ea1a04ce1e89de3df8467bf1fc6f28418ae8e0a2c5011e72"}, @NL80211_ATTR_FILS_ERP_REALM={0xf7, 0xfa, "6257e7912ef376d13f2990eab83a17abb1502a2ad8b50b092464a578a223d65f54697d1e705fbbce32136db36ea709f1e4b01ef2addd3df9667a67e3928406b18190e993bd7250c252b38507a6562d44ce16a1269857a52732d92f3284db572771e6d8f63dae624e6226b486bae7b90ed012e891ad2feb74ff6be639457c8b8cdd246857769596b7e99eaec8c84be780bcd3546f753cd3f75fbe9039d1bec573ff16296900562333f481912d5a4da5db4e7b4cb982b3391f54fca68ebeff103299a3f0c5d11d620c2d8ab4a12639ba5c33b4d57794f2868fe5fd5a24b24c715502c715a0e0029a114d59271e1a39309eace5af"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}], @chandef_params]}, 0x1dc}}, 0x0) 116.446072ms ago: executing program 2 (id=2459): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) (async) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xc38, @private1, 0x6}, 0x20) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$cgroup_ro(r3, &(0x7f0000000440)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="571a1a2b0b5cada65dffa5a356a83a5b69e9d836413b0844aa842d494fe8fcfecd99b94365f1485be0df79ea41fab40577e99d2a61b6ade2701701e803432db1527068656b455ec0e088dee9446d7c00"/93, @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf25030000000c00018008000100", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) shutdown(r1, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x70, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x4800) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r11, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x2a}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x4c}}, 0x0) (async) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f00000003c0)=""/57, 0x126000, 0x800, 0x8, 0x1}, 0x20) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x2}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{}, {0x0, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=2460): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) listen(r7, 0x80000003) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): : using max 26 ests per chain, 62400 per kthread [ 138.715517][ T6757] raw_sendmsg: syz.0.227 forgot to set AF_INET. Fix it! [ 138.763077][ T6759] netlink: 'syz.3.228': attribute type 3 has an invalid length. [ 139.549099][ T6794] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 139.656367][ T6796] trusted_key: syz.3.239 sent an empty control message without MSG_MORE. [ 139.820839][ T6802] tipc: Enabled bearer , priority 0 [ 139.845080][ T6802] syzkaller0: entered promiscuous mode [ 139.861022][ T6802] syzkaller0: entered allmulticast mode [ 139.937672][ T6802] tipc: Resetting bearer [ 139.943616][ T6802] syzkaller0: tun_net_xmit 90 [ 139.948688][ T6802] syzkaller0: tun_net_xmit 90 [ 139.988933][ T6801] tipc: Resetting bearer [ 140.013225][ T6801] tipc: Disabling bearer [ 140.033023][ T6808] IPVS: Error joining to the multicast group [ 140.226251][ T6819] netlink: 'syz.1.247': attribute type 12 has an invalid length. [ 140.601082][ T6839] Bluetooth: MGMT ver 1.23 [ 140.631128][ T6842] netlink: 'syz.0.254': attribute type 10 has an invalid length. [ 140.679787][ T6842] team0: Device ipvlan1 failed to register rx_handler [ 141.425496][ T6871] __nla_validate_parse: 11 callbacks suppressed [ 141.425519][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 141.448592][ T6875] netlink: 'syz.1.267': attribute type 29 has an invalid length. [ 141.730820][ T6885] syz.3.269 uses old SIOCAX25GETINFO [ 141.994481][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 142.038823][ T6903] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 142.252029][ T6909] vlan2: entered allmulticast mode [ 142.301121][ T6909] hsr0: entered allmulticast mode [ 142.331427][ T6909] hsr_slave_0: entered allmulticast mode [ 142.355065][ T6909] hsr_slave_1: entered allmulticast mode [ 142.379098][ T6917] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 142.478566][ T6917] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 142.995940][ T6953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.287'. [ 143.336976][ T6964] tipc: Enabled bearer , priority 0 [ 143.349822][ T6964] syzkaller0: entered promiscuous mode [ 143.363644][ T6964] syzkaller0: entered allmulticast mode [ 143.397428][ T6970] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 143.414449][ T6972] netlink: 'syz.0.290': attribute type 39 has an invalid length. [ 143.449116][ T6971] netlink: 7 bytes leftover after parsing attributes in process `syz.4.294'. [ 143.461477][ T6970] netlink: 236 bytes leftover after parsing attributes in process `syz.2.293'. [ 143.493170][ T6971] erspan0: entered promiscuous mode [ 143.511655][ T6964] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 143.533465][ T6979] netlink: 'syz.3.295': attribute type 16 has an invalid length. [ 143.549688][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 143.578738][ T6964] tipc: Resetting bearer [ 143.596475][ T6964] netlink: 'syz.0.290': attribute type 1 has an invalid length. [ 143.604414][ T6964] netlink: 224 bytes leftover after parsing attributes in process `syz.0.290'. [ 143.686828][ T6961] tipc: Resetting bearer [ 143.751140][ T6961] tipc: Disabling bearer [ 143.827981][ T6989] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'. [ 143.993124][ T6996] netlink: 'syz.0.302': attribute type 11 has an invalid length. [ 144.027410][ T6996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.302'. [ 144.096157][ T6997] netlink: 124 bytes leftover after parsing attributes in process `syz.4.301'. [ 144.544279][ T7023] syzkaller1: entered promiscuous mode [ 144.564268][ T7023] syzkaller1: entered allmulticast mode [ 144.929173][ T7037] veth0: entered promiscuous mode [ 144.969096][ T7037] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.062366][ T7047] netlink: 'syz.4.318': attribute type 12 has an invalid length. [ 145.102518][ T7047] netlink: 'syz.4.318': attribute type 12 has an invalid length. [ 145.102537][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.138860][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.151373][ T7036] veth0: left promiscuous mode [ 145.159556][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.198336][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.541073][ T7076] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 145.562060][ T7062] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.579500][ T7077] IPv6: sit1: Disabled Multicast RS [ 145.588326][ T7077] sit1: entered allmulticast mode [ 145.677536][ T7083] openvswitch: netlink: Flow key attr not present in new flow. [ 146.373288][ T7111] tipc: Enabled bearer , priority 0 [ 146.403399][ T7111] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 146.449138][ T7111] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 146.477194][ T7116] __nla_validate_parse: 10 callbacks suppressed [ 146.477214][ T7116] netlink: 36 bytes leftover after parsing attributes in process `syz.1.338'. [ 146.491672][ T7114] netlink: 'syz.4.339': attribute type 7 has an invalid length. [ 146.519741][ T7114] : entered promiscuous mode [ 146.706306][ T7132] openvswitch: netlink: Key type 272 is out of range max 32 [ 147.035232][ T7152] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 147.051062][ T7152] netlink: 244 bytes leftover after parsing attributes in process `syz.4.351'. [ 147.096576][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 147.300367][ T7168] veth2: entered promiscuous mode [ 147.315004][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 147.345827][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 147.455174][ T7177] netlink: 'syz.4.358': attribute type 21 has an invalid length. [ 147.690171][ T7185] netlink: 96 bytes leftover after parsing attributes in process `syz.4.361'. [ 147.703516][ T7185] 8021q: VLANs not supported on gre0 [ 147.781261][ T7190] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 147.808027][ T7192] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 147.821924][ T7192] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 148.033857][ T7206] netlink: 'syz.4.367': attribute type 3 has an invalid length. [ 148.136038][ T7204] tipc: Enabling of bearer rejected, failed to enable media [ 148.591150][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b583000: rx timeout, send abort [ 148.600867][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b583000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 149.414216][ T7272] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.429163][ T7273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.387'. [ 149.745349][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 149.815396][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.397'. [ 149.908618][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.398'. [ 149.921292][ T7299] netlink: 'syz.4.398': attribute type 14 has an invalid length. [ 149.932662][ T7299] netlink: 'syz.4.398': attribute type 13 has an invalid length. [ 150.022254][ T7307] openvswitch: netlink: Multiple metadata blocks provided [ 150.722249][ T7346] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 150.750577][ T7349] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 151.744393][ T5872] Bluetooth: hci4: link tx timeout [ 151.750271][ T5872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.760444][ T5872] Bluetooth: hci4: link tx timeout [ 151.766131][ T5872] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.896820][ T7422] tipc: Enabled bearer , priority 10 [ 152.128752][ T7439] __nla_validate_parse: 7 callbacks suppressed [ 152.128778][ T7439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.437'. [ 152.391787][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.444'. [ 152.643003][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805baa0000: rx timeout, send abort [ 152.682518][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 152.750780][ T7472] bridge_slave_1: left allmulticast mode [ 152.758485][ T7472] bridge_slave_1: left promiscuous mode [ 152.765631][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.823970][ T7472] bridge_slave_0: left allmulticast mode [ 152.843250][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.887576][ T7485] netlink: 256 bytes leftover after parsing attributes in process `syz.0.450'. [ 153.018477][ T5959] tipc: Node number set to 1624703372 [ 153.121348][ T7495] vlan3: entered allmulticast mode [ 153.130315][ T7495] hsr0: entered allmulticast mode [ 153.142119][ T7495] hsr_slave_0: entered allmulticast mode [ 153.147933][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805baa2c00: rx timeout, send abort [ 153.156750][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805baa0000: abort rx timeout. Force session deactivation [ 153.175521][ T7495] hsr_slave_1: entered allmulticast mode [ 153.303546][ T7492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.452'. [ 153.335246][ T7510] netlink: 14 bytes leftover after parsing attributes in process `syz.3.455'. [ 153.489606][ T7517] netlink: 'syz.1.457': attribute type 23 has an invalid length. [ 153.538405][ T7518] netem: change failed [ 153.648006][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805baa2c00: abort rx timeout. Force session deactivation [ 153.775660][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 153.875941][ T7535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.460'. [ 153.888641][ T7535] netlink: 52 bytes leftover after parsing attributes in process `syz.4.460'. [ 154.012655][ T7545] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 154.215596][ T7556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.227910][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.3.462'. [ 154.240623][ T7556] bond2: (slave bond3): making interface the new active one [ 154.250800][ T7556] bond2: (slave bond3): Enslaving as an active interface with an up link [ 154.263689][ T7567] netlink: 56 bytes leftover after parsing attributes in process `syz.0.467'. [ 154.277519][ T7545] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 154.340304][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.770934][ T7597] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 154.818194][ T7601] Bluetooth: MGMT ver 1.23 [ 154.853973][ T7597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.891739][ T7602] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.899718][ T7602] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.912477][ T7602] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 155.018432][ T7601] sit1: entered promiscuous mode [ 155.050610][ T7601] sit1: entered allmulticast mode [ 155.077781][ T7604] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 155.094448][ T7604] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 155.158909][ T7597] veth3: entered promiscuous mode [ 156.445027][ T7671] netlink: 'syz.0.488': attribute type 33 has an invalid length. [ 156.461174][ T7671] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 157.069347][ T7699] tipc: Started in network mode [ 157.076512][ T7699] tipc: Node identity 8681eb8ee4ac, cluster identity 4711 [ 157.083901][ T7699] tipc: Enabled bearer , priority 0 [ 157.139379][ T7699] __nla_validate_parse: 11 callbacks suppressed [ 157.139401][ T7699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 157.171735][ T7699] syzkaller0: entered promiscuous mode [ 157.178250][ T7699] syzkaller0: entered allmulticast mode [ 157.197972][ T7703] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.494'. [ 157.209524][ T7699] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 157.315013][ T7706] tipc: Resetting bearer [ 157.346551][ T7697] tipc: Resetting bearer [ 157.411742][ T7697] tipc: Disabling bearer [ 157.437826][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.498'. [ 157.717470][ T7731] xt_l2tp: v2 tid > 0xffff: 1114244 [ 157.733170][ T7731] netlink: 'syz.3.502': attribute type 1 has an invalid length. [ 157.858973][ T7731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.971039][ T7738] veth5: entered promiscuous mode [ 157.992865][ T7743] netlink: 'syz.0.507': attribute type 3 has an invalid length. [ 158.009613][ T7751] netlink: 'syz.1.509': attribute type 21 has an invalid length. [ 158.018653][ T7743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.507'. [ 158.021524][ T7751] netlink: 156 bytes leftover after parsing attributes in process `syz.1.509'. [ 158.077364][ T7753] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.509'. [ 158.746580][ T7784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.872354][ T7791] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 158.912217][ T7793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.958453][ T7791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.014770][ T7791] bond1: (slave geneve2): making interface the new active one [ 159.031425][ T7791] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 159.064135][ T7798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 159.168229][ T7802] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.425072][ T7819] netlink: 'syz.1.530': attribute type 2 has an invalid length. [ 159.427952][ T7817] macvtap1: entered promiscuous mode [ 159.454776][ T7819] netlink: 'syz.1.530': attribute type 8 has an invalid length. [ 159.463223][ T7819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.530'. [ 159.469730][ T7817] vlan0: entered promiscuous mode [ 159.483363][ T7817] macvtap1: entered allmulticast mode [ 159.493027][ T7817] vlan0: entered allmulticast mode [ 159.512306][ T7817] veth0_vlan: entered allmulticast mode [ 159.532591][ T7813] macvtap2: entered promiscuous mode [ 159.538358][ T7813] macvtap2: entered allmulticast mode [ 160.064826][ T7853] netlink: 'syz.2.541': attribute type 13 has an invalid length. [ 160.094889][ T7853] veth0_macvtap: left promiscuous mode [ 160.147069][ T7853] macvtap0: entered allmulticast mode [ 160.169058][ T7853] macvtap0: refused to change device tx_queue_len [ 160.222462][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 160.354851][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 160.858356][ T7893] ksmbd: Unknown IPC event: 10, ignore. [ 160.990488][ T7895] netlink: 'syz.4.557': attribute type 1 has an invalid length. [ 161.174717][ T7913] netlink: 'syz.2.562': attribute type 11 has an invalid length. [ 161.197187][ T7913] netlink: 'syz.2.562': attribute type 11 has an invalid length. [ 161.506661][ T7926] netlink: 'syz.2.568': attribute type 12 has an invalid length. [ 161.538103][ T7925] netlink: 'syz.2.568': attribute type 12 has an invalid length. [ 181.786231][ T7961] __nla_validate_parse: 6 callbacks suppressed [ 181.786254][ T7961] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 181.868109][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 181.895932][ T7968] bridge_slave_1: left allmulticast mode [ 181.914335][ T7968] bridge_slave_1: left promiscuous mode [ 181.931147][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.963644][ T7968] bridge_slave_0: left allmulticast mode [ 181.972631][ T7975] netlink: 'syz.4.582': attribute type 33 has an invalid length. [ 181.975523][ T7968] bridge_slave_0: left promiscuous mode [ 181.991975][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.144824][ T7980] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 182.176555][ T7980] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.369281][ T7994] netlink: 'syz.3.588': attribute type 2 has an invalid length. [ 182.402445][ T7994] netlink: 'syz.3.588': attribute type 10 has an invalid length. [ 182.428529][ T7999] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 182.437082][ T7995] tipc: Enabled bearer , priority 0 [ 182.455598][ T7994] batman_adv: batadv0: Adding interface: team0 [ 182.461815][ T7994] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.490827][ T8000] netlink: 348 bytes leftover after parsing attributes in process `syz.3.588'. [ 182.500564][ T8001] netlink: 348 bytes leftover after parsing attributes in process `syz.3.588'. [ 182.510747][ T7994] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 182.522452][ T7995] syzkaller0: entered promiscuous mode [ 182.535238][ T7995] syzkaller0: entered allmulticast mode [ 182.552579][ T7999] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 182.649157][ T7995] tipc: Resetting bearer [ 182.691361][ T7992] tipc: Resetting bearer [ 182.766391][ T7992] tipc: Disabling bearer [ 183.123038][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 183.169974][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 183.400531][ T8048] netlink: 'syz.0.602': attribute type 3 has an invalid length. [ 183.411807][ T8048] netlink: 32 bytes leftover after parsing attributes in process `syz.0.602'. [ 183.572195][ T8058] openvswitch: netlink: IPv6 tunnel dst address is zero [ 183.639923][ T8062] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 183.770671][ T8070] netlink: 256 bytes leftover after parsing attributes in process `syz.1.610'. [ 183.852393][ T8074] netlink: 'syz.4.612': attribute type 29 has an invalid length. [ 183.873907][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 183.949521][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 183.966471][ T8079] netlink: 'syz.3.613': attribute type 6 has an invalid length. [ 183.998095][ T8083] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 184.027782][ T8082] xt_socket: unknown flags 0xd0 [ 184.156990][ T8076] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 184.495854][ T8110] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 184.845150][ T8118] syz.3.627 (8118) used greatest stack depth: 16696 bytes left [ 184.981205][ T8141] dvmrp0: entered allmulticast mode [ 184.998437][ T8140] dvmrp0: left allmulticast mode [ 185.260966][ T8160] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 185.373898][ T8169] netlink: 'syz.1.643': attribute type 15 has an invalid length. [ 186.620296][ T8249] bond0: entered promiscuous mode [ 186.628053][ T8249] bond_slave_0: entered promiscuous mode [ 186.633968][ T8249] bond_slave_1: entered promiscuous mode [ 186.642456][ T8249] dummy0: entered promiscuous mode [ 186.707874][ T8253] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 186.875239][ T8259] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 187.363129][ T8286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.485871][ T8293] macvtap3: entered allmulticast mode [ 187.512646][ T8293] veth0_macvtap: entered allmulticast mode [ 187.571596][ T8298] __nla_validate_parse: 14 callbacks suppressed [ 187.571615][ T8298] netlink: 284 bytes leftover after parsing attributes in process `syz.0.685'. [ 187.600611][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'. [ 187.611197][ T8306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'. [ 187.688828][ T8305] team0: Device vti0 is of different type [ 187.747196][ T30] audit: type=1107 audit(1759105068.062:2): pid=8312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='´Î4YÍÌnQÁ)âäB×ïÂ5Ùkâ9.M…' [ 187.773923][ T8318] validate_nla: 3 callbacks suppressed [ 187.773943][ T8318] netlink: 'syz.0.691': attribute type 1 has an invalid length. [ 187.940537][ T8324] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 187.973250][ T8323] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.072372][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 188.108313][ T8332] netlink: 2 bytes leftover after parsing attributes in process `syz.4.696'. [ 188.180102][ T8338] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 188.254521][ T8338] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.284689][ T8338] gretap1: entered promiscuous mode [ 188.298797][ T8338] gretap1: entered allmulticast mode [ 188.337863][ T8341] vlan2: entered promiscuous mode [ 188.343515][ T8341] bridge0: entered promiscuous mode [ 188.364855][ T8353] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20000 [ 188.391412][ T8354] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20000 [ 188.404301][ T8351] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 188.411994][ T8351] netlink: 244 bytes leftover after parsing attributes in process `syz.1.701'. [ 188.435832][ T8351] netlink: 64 bytes leftover after parsing attributes in process `syz.1.701'. [ 188.709183][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 188.878827][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'. [ 189.141432][ T8397] netlink: 112 bytes leftover after parsing attributes in process `syz.0.716'. [ 189.290916][ T8402] rdma_op ffff88801175e9f0 conn xmit_rdma 0000000000000000 [ 189.363542][ T8408] tipc: Enabled bearer , priority 0 [ 189.391970][ T8408] syzkaller0: entered promiscuous mode [ 189.421976][ T8408] syzkaller0: entered allmulticast mode [ 189.448693][ T8408] tipc: Resetting bearer [ 189.483118][ T8407] tipc: Resetting bearer [ 189.537803][ T8407] tipc: Disabling bearer [ 189.839327][ T8429] netlink: 'syz.1.727': attribute type 10 has an invalid length. [ 189.869286][ T8429] bond0: (slave wlan1): Opening slave failed [ 190.140435][ T8446] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 190.189243][ T8446] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 190.275381][ T8447] : entered promiscuous mode [ 190.333160][ T8461] geneve3: entered promiscuous mode [ 190.421295][ T8451] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 190.444648][ T8451] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 190.672393][ T8477] netlink: 'syz.4.741': attribute type 29 has an invalid length. [ 190.724692][ T8477] netlink: 'syz.4.741': attribute type 29 has an invalid length. [ 190.891464][ T8485] netlink: 'syz.2.744': attribute type 1 has an invalid length. [ 190.943378][ T8490] tipc: Enabled bearer , priority 0 [ 190.984345][ T8485] bond1: (slave bridge1): making interface the new active one [ 190.992954][ T8485] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 191.014546][ T8490] syzkaller0: entered promiscuous mode [ 191.030561][ T8490] syzkaller0: entered allmulticast mode [ 191.102399][ T8490] tipc: Resetting bearer [ 191.112729][ T8488] tipc: Resetting bearer [ 191.156286][ T8488] tipc: Disabling bearer [ 191.553620][ T8534] tc_dump_action: action bad kind [ 191.603985][ T8534] tc_dump_action: action bad kind [ 191.631879][ T8534] tc_dump_action: action bad kind [ 191.652698][ T8534] tc_dump_action: action bad kind [ 191.659378][ T8534] tc_dump_action: action bad kind [ 191.673614][ T8534] tc_dump_action: action bad kind [ 191.684832][ T8534] tc_dump_action: action bad kind [ 191.725880][ T8534] tc_dump_action: action bad kind [ 191.734670][ T8534] tc_dump_action: action bad kind [ 191.742540][ T8534] tc_dump_action: action bad kind [ 191.748449][ T8534] tc_dump_action: action bad kind [ 191.754324][ T8534] tc_dump_action: action bad kind [ 191.759968][ T8534] tc_dump_action: action bad kind [ 191.767238][ T8534] tc_dump_action: action bad kind [ 191.772556][ T8534] tc_dump_action: action bad kind [ 191.787517][ T8534] tc_dump_action: action bad kind [ 191.792904][ T8534] tc_dump_action: action bad kind [ 191.801355][ T8534] tc_dump_action: action bad kind [ 191.811660][ T8534] tc_dump_action: action bad kind [ 191.818655][ T8534] tc_dump_action: action bad kind [ 191.823957][ T8534] tc_dump_action: action bad kind [ 191.833106][ T8534] tc_dump_action: action bad kind [ 191.840167][ T8534] tc_dump_action: action bad kind [ 191.852887][ T8534] tc_dump_action: action bad kind [ 191.861131][ T8534] tc_dump_action: action bad kind [ 191.875892][ T8534] tc_dump_action: action bad kind [ 191.891437][ T8534] tc_dump_action: action bad kind [ 191.904446][ T8534] tc_dump_action: action bad kind [ 191.919159][ T8534] tc_dump_action: action bad kind [ 191.955784][ T8534] tc_dump_action: action bad kind [ 191.966817][ T8534] tc_dump_action: action bad kind [ 191.984548][ T8534] tc_dump_action: action bad kind [ 191.992928][ T8534] tc_dump_action: action bad kind [ 192.491186][ T8578] veth1_macvtap: left promiscuous mode [ 192.503214][ T8578] macsec0: entered promiscuous mode [ 192.512763][ T8578] macsec0: entered allmulticast mode [ 192.568098][ T8584] tap0: tun_chr_ioctl cmd 2148553947 [ 192.590820][ T8586] veth1_macvtap: entered promiscuous mode [ 192.620205][ T8586] veth1_macvtap: entered allmulticast mode [ 192.656991][ T8586] macsec0: left promiscuous mode [ 192.674352][ T8586] macsec0: left allmulticast mode [ 192.679478][ T8586] veth1_macvtap: left allmulticast mode [ 192.716248][ T8592] netlink: 'syz.0.778': attribute type 1 has an invalid length. [ 192.730134][ T8593] __nla_validate_parse: 14 callbacks suppressed [ 192.730157][ T8593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.777'. [ 192.793437][ T8592] ip6erspan0: entered promiscuous mode [ 192.810275][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.777'. [ 193.118360][ T8616] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 193.118376][ T8609] netlink: 'syz.2.784': attribute type 14 has an invalid length. [ 193.180004][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 193.220762][ T8616] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.289334][ T8627] netlink: 9 bytes leftover after parsing attributes in process `syz.0.790'. [ 193.368692][ T8627] gretap0: entered promiscuous mode [ 193.553713][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 193.716261][ T8653] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 193.760058][ T8663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.950045][ T8671] netlink: 'syz.2.804': attribute type 10 has an invalid length. [ 194.030425][ T8671] team0: Device hsr_slave_0 failed to register rx_handler [ 194.060651][ T8677] netlink: 44 bytes leftover after parsing attributes in process `syz.3.805'. [ 194.077210][ T8669] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 194.115444][ T8674] pim6reg1: entered promiscuous mode [ 194.120803][ T8674] pim6reg1: entered allmulticast mode [ 194.177328][ T8683] netlink: 'syz.2.807': attribute type 12 has an invalid length. [ 194.290099][ T8688] netlink: 'syz.3.808': attribute type 4 has an invalid length. [ 194.383042][ T8694] netlink: 'syz.3.810': attribute type 11 has an invalid length. [ 194.400370][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 194.409608][ T8694] tc_dump_action: action bad kind [ 194.560616][ T8703] netlink: 'syz.2.813': attribute type 21 has an invalid length. [ 194.583919][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.610702][ T8703] netlink: 156 bytes leftover after parsing attributes in process `syz.2.813'. [ 194.818790][ T8723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.817'. [ 195.618040][ T8767] netlink: 'syz.4.832': attribute type 6 has an invalid length. [ 195.656334][ T8767] netlink: 'syz.4.832': attribute type 7 has an invalid length. [ 196.721189][ T8831] bond2: entered promiscuous mode [ 196.727837][ T8831] bond2: entered allmulticast mode [ 196.733462][ T8831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 196.855966][ T8831] nbd0: detected capacity change from 0 to 127 [ 196.867277][ T5877] block nbd0: Receive control failed (result -32) [ 197.566500][ T8868] syzkaller1: entered promiscuous mode [ 197.591132][ T8868] syzkaller1: entered allmulticast mode [ 197.719852][ T8875] netlink: 'syz.2.865': attribute type 11 has an invalid length. [ 197.759241][ T8875] netlink: 'syz.2.865': attribute type 11 has an invalid length. [ 197.799769][ T8875] __nla_validate_parse: 11 callbacks suppressed [ 197.799792][ T8875] netlink: 152 bytes leftover after parsing attributes in process `syz.2.865'. [ 197.948875][ T8882] netlink: 104 bytes leftover after parsing attributes in process `syz.3.868'. [ 198.103692][ T8885] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 198.153420][ T8885] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.869'. [ 198.350369][ T8896] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.873'. [ 198.387885][ T8901] ip6gre1: entered allmulticast mode [ 199.140506][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 199.204029][ T8936] bond0: (slave dummy0): Releasing backup interface [ 199.231993][ T8936] dummy0 (unregistering): left promiscuous mode [ 199.410679][ T8957] validate_nla: 3 callbacks suppressed [ 199.410699][ T8957] netlink: 'syz.0.889': attribute type 6 has an invalid length. [ 199.519408][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 199.540831][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.547915][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.585048][ T8957] netlink: 44 bytes leftover after parsing attributes in process `syz.0.889'. [ 199.611319][ T8963] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 199.644539][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.657447][ T8974] netlink: 'syz.1.895': attribute type 21 has an invalid length. [ 199.688657][ T8974] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.895'. [ 199.900642][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 199.940534][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 200.226847][ T9004] xt_l2tp: invalid flags combination: 0 [ 200.772448][ T9042] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 200.802317][ T9044] netlink: 'syz.1.917': attribute type 1 has an invalid length. [ 200.912996][ T9044] bond1 (unregistering): Released all slaves [ 200.931094][ T9052] syz.2.919: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.969426][ T9052] CPU: 0 UID: 0 PID: 9052 Comm: syz.2.919 Not tainted syzkaller #0 PREEMPT(full) [ 200.969458][ T9052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 200.969479][ T9052] Call Trace: [ 200.969489][ T9052] [ 200.969503][ T9052] dump_stack_lvl+0x189/0x250 [ 200.969541][ T9052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.969569][ T9052] ? __pfx__printk+0x10/0x10 [ 200.969602][ T9052] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.969630][ T9052] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.969659][ T9052] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 200.969689][ T9052] warn_alloc+0x214/0x310 [ 200.969726][ T9052] ? stack_depot_save_flags+0x40/0x860 [ 200.969764][ T9052] ? __pfx_warn_alloc+0x10/0x10 [ 200.969802][ T9052] ? kasan_save_track+0x4f/0x80 [ 200.969832][ T9052] ? xskq_create+0x56/0x170 [ 200.969853][ T9052] ? xsk_init_queue+0xb0/0x110 [ 200.969871][ T9052] ? xsk_setsockopt+0x4dc/0x8d0 [ 200.969903][ T9052] ? do_sock_setsockopt+0x179/0x1b0 [ 200.969928][ T9052] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 200.969953][ T9052] ? do_syscall_64+0xfa/0x3b0 [ 200.969977][ T9052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.970019][ T9052] __vmalloc_node_range_noprof+0x125/0x12f0 [ 200.970090][ T9052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.970132][ T9052] ? __kasan_kmalloc+0x93/0xb0 [ 200.970167][ T9052] vmalloc_user_noprof+0xad/0xf0 [ 200.970201][ T9052] ? xskq_create+0xbf/0x170 [ 200.970224][ T9052] xskq_create+0xbf/0x170 [ 200.970250][ T9052] xsk_init_queue+0xb0/0x110 [ 200.970275][ T9052] xsk_setsockopt+0x4dc/0x8d0 [ 200.970313][ T9052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.970349][ T9052] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.970388][ T9052] ? aa_sock_opt_perm+0xff/0x1b0 [ 200.970415][ T9052] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 200.970439][ T9052] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.970476][ T9052] do_sock_setsockopt+0x179/0x1b0 [ 200.970509][ T9052] __x64_sys_setsockopt+0x13f/0x1b0 [ 200.970544][ T9052] do_syscall_64+0xfa/0x3b0 [ 200.970567][ T9052] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.970590][ T9052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.970612][ T9052] ? clear_bhb_loop+0x60/0xb0 [ 200.970640][ T9052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.970661][ T9052] RIP: 0033:0x7f3c4ed8eec9 [ 200.970687][ T9052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.970706][ T9052] RSP: 002b:00007f3c4fbc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.970729][ T9052] RAX: ffffffffffffffda RBX: 00007f3c4efe5fa0 RCX: 00007f3c4ed8eec9 [ 200.970746][ T9052] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 200.970759][ T9052] RBP: 00007f3c4ee11f91 R08: 0000000000000004 R09: 0000000000000000 [ 200.970773][ T9052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.970786][ T9052] R13: 00007f3c4efe6038 R14: 00007f3c4efe5fa0 R15: 00007ffd9c2c8618 [ 200.970822][ T9052] [ 200.973217][ T9052] Mem-Info: [ 201.176347][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.213468][ T9058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.220170][ T9052] active_anon:4652 inactive_anon:0 isolated_anon:0 [ 201.220170][ T9052] active_file:3080 inactive_file:39903 isolated_file:0 [ 201.220170][ T9052] unevictable:768 dirty:80 writeback:0 [ 201.220170][ T9052] slab_reclaimable:11550 slab_unreclaimable:98769 [ 201.220170][ T9052] mapped:29179 shmem:1358 pagetables:1116 [ 201.220170][ T9052] sec_pagetables:0 bounce:0 [ 201.220170][ T9052] kernel_misc_reclaimable:0 [ 201.220170][ T9052] free:1329478 free_pcp:13483 free_cma:0 [ 201.355861][ T9051] ip6tnl1: entered promiscuous mode [ 201.364169][ T9051] ip6tnl1: entered allmulticast mode [ 201.391155][ T9052] Node 0 active_anon:18608kB inactive_anon:0kB active_file:12320kB inactive_file:159408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120216kB dirty:316kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12444kB pagetables:4212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.424748][ T9052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.467655][ T9052] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.501172][ T9052] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 201.528987][ T9052] Node 0 DMA32 free:1412188kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18564kB inactive_anon:0kB active_file:12320kB inactive_file:157840kB unevictable:1536kB writepending:316kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:39672kB local_pcp:18584kB free_cma:0kB [ 201.588962][ T9052] lowmem_reserve[]: 0 0 1 1 1 [ 201.593768][ T9052] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 201.623673][ T9052] lowmem_reserve[]: 0 0 0 0 0 [ 201.630575][ T9052] Node 1 Normal free:3890540kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14752kB local_pcp:5408kB free_cma:0kB [ 201.710281][ T9052] lowmem_reserve[]: 0 0 0 0 0 [ 201.717576][ T9052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.739744][ T9052] Node 0 DMA32: 802*4kB (UME) 529*8kB (UME) 128*16kB (UM) 736*32kB (UME) 204*64kB (UME) 47*128kB (UM) 11*256kB (UM) 11*512kB (UM) 6*1024kB (ME) 5*2048kB (UM) 326*4096kB (M) = 1412240kB [ 201.781600][ T9052] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 201.803865][ T9052] Node 1 Normal: 179*4kB (UE) 58*8kB (UME) 39*16kB (UME) 91*32kB (UME) 24*64kB (UME) 4*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3890540kB [ 201.827019][ T9052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.839026][ T9052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.851615][ T9052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.869160][ T9052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.880371][ T9052] 44337 total pagecache pages [ 201.887688][ T9052] 0 pages in swap cache [ 201.893524][ T9052] Free swap = 124996kB [ 201.898107][ T9052] Total swap = 124996kB [ 201.912296][ T9052] 2097051 pages RAM [ 201.916331][ T9052] 0 pages HighMem/MovableOnly [ 201.921033][ T9052] 425673 pages reserved [ 201.926091][ T9052] 0 pages cma reserved [ 202.067152][ T9090] tipc: Can't bind to reserved service type 1 [ 202.112103][ T9090] veth0_to_bond: entered allmulticast mode [ 202.437486][ T9117] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 202.451485][ T9117] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 202.630588][ T9122] vlan2: left allmulticast mode [ 202.638427][ T9122] hsr0: left allmulticast mode [ 202.643763][ T9122] hsr_slave_0: left allmulticast mode [ 202.659250][ T9122] hsr_slave_1: left allmulticast mode [ 202.667995][ T9122] macvtap1: left allmulticast mode [ 202.673829][ T9122] macvtap2: left allmulticast mode [ 202.682924][ T9122] vlan0: left allmulticast mode [ 202.688730][ T9122] veth0_vlan: left allmulticast mode [ 202.697223][ T9122] macvtap3: left allmulticast mode [ 202.702413][ T9122] veth0_macvtap: left allmulticast mode [ 202.710656][ T9122] bond2: left allmulticast mode [ 202.737443][ T9131] FAULT_INJECTION: forcing a failure. [ 202.737443][ T9131] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 202.771631][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.2.939 Not tainted syzkaller #0 PREEMPT(full) [ 202.771661][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.771674][ T9131] Call Trace: [ 202.771682][ T9131] [ 202.771691][ T9131] dump_stack_lvl+0x189/0x250 [ 202.771728][ T9131] ? __pfx____ratelimit+0x10/0x10 [ 202.771752][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.771777][ T9131] ? __pfx__printk+0x10/0x10 [ 202.771807][ T9131] ? __might_fault+0xb0/0x130 [ 202.771850][ T9131] should_fail_ex+0x414/0x560 [ 202.771889][ T9131] _copy_from_user+0x2d/0xb0 [ 202.771919][ T9131] ___sys_sendmsg+0x158/0x2a0 [ 202.771950][ T9131] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.772017][ T9131] ? __fget_files+0x2a/0x420 [ 202.772036][ T9131] ? __fget_files+0x3a0/0x420 [ 202.772065][ T9131] __x64_sys_sendmsg+0x19b/0x260 [ 202.772096][ T9131] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.772136][ T9131] ? __pfx_ksys_write+0x10/0x10 [ 202.772172][ T9131] ? do_syscall_64+0xbe/0x3b0 [ 202.772199][ T9131] do_syscall_64+0xfa/0x3b0 [ 202.772222][ T9131] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.772244][ T9131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.772266][ T9131] ? clear_bhb_loop+0x60/0xb0 [ 202.772292][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.772313][ T9131] RIP: 0033:0x7f3c4ed8eec9 [ 202.772332][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.772350][ T9131] RSP: 002b:00007f3c4fb81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.772372][ T9131] RAX: ffffffffffffffda RBX: 00007f3c4efe6180 RCX: 00007f3c4ed8eec9 [ 202.772387][ T9131] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 202.772401][ T9131] RBP: 00007f3c4fb81090 R08: 0000000000000000 R09: 0000000000000000 [ 202.772414][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.772426][ T9131] R13: 00007f3c4efe6218 R14: 00007f3c4efe6180 R15: 00007ffd9c2c8618 [ 202.772459][ T9131] [ 202.986612][ T9130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 203.044036][ T9130] netlink: 'syz.0.940': attribute type 23 has an invalid length. [ 203.170387][ T9143] netlink: 'syz.2.944': attribute type 1 has an invalid length. [ 203.292974][ T9145] bond2: (slave bridge2): making interface the new active one [ 203.348853][ T9145] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 203.369399][ T9160] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 203.383434][ T5959] IPVS: starting estimator thread 0... [ 203.394848][ T9164] __nla_validate_parse: 38 callbacks suppressed [ 203.394867][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 203.410779][ T9147] tipc: Started in network mode [ 203.416073][ T9147] tipc: Node identity 8a2b89225cfd, cluster identity 4711 [ 203.423457][ T9147] tipc: Enabled bearer , priority 0 [ 203.432646][ T9161] syzkaller0: entered promiscuous mode [ 203.438685][ T9161] syzkaller0: entered allmulticast mode [ 203.447987][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 203.476916][ T9159] IPVS: using max 25 ests per chain, 60000 per kthread [ 203.486148][ T9166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.949'. [ 203.492053][ T9145] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 203.518412][ T9147] tipc: Resetting bearer [ 203.596944][ T9145] bond2: (slave bridge4): Enslaving as an active interface with a down link [ 203.608715][ T9146] tipc: Resetting bearer [ 203.638694][ T9146] tipc: Disabling bearer [ 203.668407][ T9145] bond2: (slave bridge5): Enslaving as an active interface with a down link [ 203.703998][ T9170] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 203.717111][ T9170] tipc: Enabled bearer , priority 10 [ 203.740029][ T9145] bond2: (slave bridge6): Enslaving as an active interface with a down link [ 203.821600][ T9145] bond2: (slave bridge7): Enslaving as an active interface with a down link [ 203.891680][ T9145] bond2: (slave bridge8): Enslaving as an active interface with a down link [ 203.932726][ T9186] FAULT_INJECTION: forcing a failure. [ 203.932726][ T9186] name failslab, interval 1, probability 0, space 0, times 1 [ 203.951193][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.1.954 Not tainted syzkaller #0 PREEMPT(full) [ 203.951225][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.951239][ T9186] Call Trace: [ 203.951248][ T9186] [ 203.951258][ T9186] dump_stack_lvl+0x189/0x250 [ 203.951290][ T9186] ? __pfx____ratelimit+0x10/0x10 [ 203.951314][ T9186] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.951341][ T9186] ? __pfx__printk+0x10/0x10 [ 203.951379][ T9186] ? __pfx___might_resched+0x10/0x10 [ 203.951405][ T9186] should_fail_ex+0x414/0x560 [ 203.951444][ T9186] should_failslab+0xa8/0x100 [ 203.951486][ T9186] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.951518][ T9186] ? __alloc_skb+0x112/0x2d0 [ 203.951548][ T9186] __alloc_skb+0x112/0x2d0 [ 203.951577][ T9186] netlink_sendmsg+0x5c6/0xb30 [ 203.951614][ T9186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.951643][ T9186] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.951667][ T9186] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.951692][ T9186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.951717][ T9186] __sock_sendmsg+0x219/0x270 [ 203.951756][ T9186] ____sys_sendmsg+0x505/0x830 [ 203.951791][ T9186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.951830][ T9186] ? import_iovec+0x74/0xa0 [ 203.951864][ T9186] ___sys_sendmsg+0x21f/0x2a0 [ 203.951895][ T9186] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.951965][ T9186] ? __fget_files+0x2a/0x420 [ 203.951984][ T9186] ? __fget_files+0x3a0/0x420 [ 203.952016][ T9186] __x64_sys_sendmsg+0x19b/0x260 [ 203.952048][ T9186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.952088][ T9186] ? __pfx_ksys_write+0x10/0x10 [ 203.952115][ T9186] ? rcu_is_watching+0x15/0xb0 [ 203.952143][ T9186] ? do_syscall_64+0xbe/0x3b0 [ 203.952173][ T9186] do_syscall_64+0xfa/0x3b0 [ 203.952201][ T9186] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.952224][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.952246][ T9186] ? clear_bhb_loop+0x60/0xb0 [ 203.952273][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.952294][ T9186] RIP: 0033:0x7f5423f8eec9 [ 203.952314][ T9186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.952332][ T9186] RSP: 002b:00007f54221f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.952355][ T9186] RAX: ffffffffffffffda RBX: 00007f54241e5fa0 RCX: 00007f5423f8eec9 [ 203.952371][ T9186] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000004 [ 203.952386][ T9186] RBP: 00007f54221f6090 R08: 0000000000000000 R09: 0000000000000000 [ 203.952399][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.952412][ T9186] R13: 00007f54241e6038 R14: 00007f54241e5fa0 R15: 00007ffc7b9fb998 [ 203.952447][ T9186] [ 204.299871][ T9145] bond2: (slave bridge9): Enslaving as an active interface with a down link [ 204.567960][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 204.586533][ T9211] netlink: 'syz.3.963': attribute type 3 has an invalid length. [ 204.599649][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 204.610946][ T9214] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 204.621154][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 204.621197][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 204.640465][ T9215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.964'. [ 204.835096][ T5995] tipc: Node number set to 2842796689 [ 205.696704][ T9275] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 205.786351][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 205.959962][ T9289] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 206.157969][ T9300] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 206.184000][ T9300] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 206.202988][ T9300] netlink: 'syz.4.989': attribute type 2 has an invalid length. [ 206.501382][ T9323] vlan2: entered allmulticast mode [ 206.517902][ T9323] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 207.038629][ T9358] xt_l2tp: invalid flags combination: 8 [ 207.050687][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.290066][ T9372] team0: No ports can be present during mode change [ 207.460979][ T9379] veth1_to_batadv: mtu less than device minimum [ 207.536660][ T9379] nbd1: detected capacity change from 0 to 127 [ 207.545116][ T5877] block nbd1: Receive control failed (result -32) [ 208.293559][ T9429] netlink: 'syz.4.1026': attribute type 83 has an invalid length. [ 208.464441][ T9442] __nla_validate_parse: 11 callbacks suppressed [ 208.464463][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 208.506552][ T9431] team0 (unregistering): Port device team_slave_0 removed [ 208.520517][ T9431] team0 (unregistering): Port device team_slave_1 removed [ 208.607904][ T9441] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1030'. [ 208.625945][ T9441] netlink: zone id is out of range [ 208.632535][ T9441] netlink: zone id is out of range [ 208.653217][ T9441] netlink: zone id is out of range [ 208.669357][ T9441] netlink: get zone limit has 8 unknown bytes [ 208.679927][ T9450] netlink: ct family unspecified [ 208.685136][ T9450] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.698856][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'. [ 208.869029][ T9459] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.888277][ T9458] openvswitch: netlink: Actions may not be safe on all matching packets [ 208.923920][ T9459] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 208.932728][ T9458] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 208.941586][ T9459] bond0: (slave wlan1): Opening slave failed [ 208.949496][ T9458] bond0: (slave wlan1): Opening slave failed [ 208.960176][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 208.969572][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1037'. [ 209.112500][ T9469] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 209.125609][ T9473] x_tables: ip_tables: udp match: only valid for protocol 17 [ 209.164451][ T9474] tipc: Enabled bearer , priority 0 [ 209.180031][ T9474] syzkaller0: entered promiscuous mode [ 209.204226][ T9474] syzkaller0: entered allmulticast mode [ 209.230709][ T9474] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.259474][ T9474] tipc: Resetting bearer [ 209.285062][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 209.300319][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 209.336398][ T9472] tipc: Resetting bearer [ 209.385064][ T9472] tipc: Disabling bearer [ 209.652049][ T9496] netlink: 'syz.4.1050': attribute type 25 has an invalid length. [ 210.172166][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 210.235870][ T9521] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 210.471670][ T9532] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 210.488471][ T9521] veth5: entered promiscuous mode [ 210.588842][ T9527] tipc: Enabled bearer , priority 0 [ 210.605852][ T9524] syzkaller0: entered promiscuous mode [ 210.626983][ T9524] syzkaller0: entered allmulticast mode [ 210.651763][ T9543] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1061'. [ 210.666583][ T9535] tipc: Resetting bearer [ 210.787323][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 210.813585][ T9546] Bluetooth: MGMT ver 1.23 [ 210.868073][ T9523] tipc: Resetting bearer [ 210.906548][ T9523] tipc: Disabling bearer [ 211.225246][ T9559] netlink: 'syz.0.1068': attribute type 1 has an invalid length. [ 211.539106][ T9592] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 211.561263][ T9592] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 211.635081][ T9603] veth0_to_bridge: entered promiscuous mode [ 211.840242][ T9599] veth0_to_bridge: left promiscuous mode [ 211.858274][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 211.864643][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.865248][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 211.870818][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.936168][ T9619] netlink: 'syz.1.1082': attribute type 2 has an invalid length. [ 211.944388][ T30] audit: type=1107 audit(1759105092.242:3): pid=9616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 212.222334][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.376430][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.393924][ T9633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.409284][ T9633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.416977][ T9642] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 212.425360][ T9642] netlink: 'syz.1.1092': attribute type 2 has an invalid length. [ 212.426478][ T9633] batman_adv: batadv0: Removing interface: team0 [ 213.315651][ T9677] ip6gre1: entered allmulticast mode [ 213.807947][ T9695] __nla_validate_parse: 12 callbacks suppressed [ 213.807968][ T9695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1109'. [ 214.033526][ T9714] syzkaller0: create flow: hash 2031264782 index 1 [ 214.169916][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 214.196246][ T37] syzkaller0: tun_net_xmit 76 [ 214.201690][ T37] syzkaller0: tun_net_xmit 48 [ 214.224864][ T5873] syzkaller0: tun_net_xmit 76 [ 214.342296][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.364305][ T5873] syzkaller0: tun_net_xmit 76 [ 214.380077][ T9729] nbd: socks must be embedded in a SOCK_ITEM attr [ 214.398267][ T9706] syzkaller0: delete flow: hash 2031264782 index 1 [ 215.753824][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 215.841563][ T9748] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 215.854459][ T9748] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 216.032584][ T9759] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1128'. [ 216.500758][ T9782] team0: No ports can be present during mode change [ 216.512792][ T5873] IPVS: starting estimator thread 0... [ 216.604342][ T9783] IPVS: using max 27 ests per chain, 64800 per kthread [ 216.637077][ T9785] vlan5: entered promiscuous mode [ 216.654244][ T9785] bridge0: entered promiscuous mode [ 216.793995][ T9796] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 217.140195][ T9810] sctp: [Deprecated]: syz.0.1144 (pid 9810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.140195][ T9810] Use struct sctp_sack_info instead [ 217.238649][ T9822] netlink: 'syz.2.1147': attribute type 2 has an invalid length. [ 217.263617][ T9822] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1147'. [ 217.290546][ T9822] nbd: must specify a device to reconfigure [ 217.312919][ T9823] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1148'. [ 217.348040][ T9826] sctp: [Deprecated]: syz.1.1149 (pid 9826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.348040][ T9826] Use struct sctp_sack_info instead [ 217.528527][ T9833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1151'. [ 217.844811][ T9847] tipc: Enabled bearer , priority 0 [ 217.869398][ T9847] syzkaller0: entered promiscuous mode [ 217.887371][ T9847] syzkaller0: entered allmulticast mode [ 217.976351][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 218.114922][ T9863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1162'. [ 218.309097][ T9845] tipc: Resetting bearer [ 218.364657][ T9845] tipc: Disabling bearer [ 218.463104][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.850537][ T9906] __nla_validate_parse: 4 callbacks suppressed [ 218.850557][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 218.970257][ T9906] hsr_slave_0 (unregistering): left promiscuous mode [ 218.990745][ T9912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1177'. [ 219.211715][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 219.415337][ T9932] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1184'. [ 220.658112][ T9998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1200'. [ 220.721389][ T9987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.011951][T10012] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1205'. [ 221.038180][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 221.052073][T10015] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 221.061597][T10016] netlink: 'syz.2.1205': attribute type 30 has an invalid length. [ 221.070096][T10012] netlink: 'syz.2.1205': attribute type 30 has an invalid length. [ 221.080939][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1207'. [ 221.319470][T10035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.387466][T10038] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 221.561930][T10055] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 221.622679][T10055] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.631210][T10059] ip6gre0: Master is either lo or non-ether device [ 221.652766][T10061] bond2: (slave geneve2): making interface the new active one [ 221.663029][T10061] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 221.837940][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'. [ 221.848204][T10072] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1223'. [ 222.148997][T10086] netlink: 'syz.0.1227': attribute type 13 has an invalid length. [ 222.383985][T10097] sctp: [Deprecated]: syz.3.1231 (pid 10097) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.383985][T10097] Use struct sctp_sack_info instead [ 222.596711][T10112] xt_policy: too many policy elements [ 222.655127][ T5959] IPVS: starting estimator thread 0... [ 222.731263][T10125] Dead loop on virtual device ip6_vti0, fix it urgently! [ 222.757567][T10119] IPVS: using max 26 ests per chain, 62400 per kthread [ 222.893102][T10136] openvswitch: netlink: IPv4 tun info is not correct [ 222.915666][T10138] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 223.455067][ T5188] Bluetooth: hci0: command tx timeout [ 223.639397][T10178] sctp: [Deprecated]: syz.0.1259 (pid 10178) Use of int in max_burst socket option deprecated. [ 223.639397][T10178] Use struct sctp_assoc_value instead [ 223.958194][T10195] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 223.969973][T10195] __nla_validate_parse: 11 callbacks suppressed [ 223.969994][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1268'. [ 224.090594][T10208] netlink: 'syz.4.1273': attribute type 3 has an invalid length. [ 224.095362][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1272'. [ 224.099240][T10208] netlink: 'syz.4.1273': attribute type 1 has an invalid length. [ 224.158732][T10200] : entered promiscuous mode [ 224.411820][T10215] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 224.552677][T10228] netlink: 'syz.3.1278': attribute type 2 has an invalid length. [ 224.574752][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 225.162173][T10249] !: renamed from dummy0 (while UP) [ 225.322242][T10254] netlink: 'syz.0.1285': attribute type 10 has an invalid length. [ 225.373521][T10254] netlink: 'syz.0.1285': attribute type 10 has an invalid length. [ 225.399366][T10254] bond0: (slave 0!): Enslaving as an active interface with an up link [ 225.437760][T10257] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 225.589441][T10265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.663118][T10272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1289'. [ 225.786484][T10279] netlink: 'syz.0.1295': attribute type 1 has an invalid length. [ 225.795250][T10275] sctp: [Deprecated]: syz.4.1293 (pid 10275) Use of int in max_burst socket option. [ 225.795250][T10275] Use struct sctp_assoc_value instead [ 225.829217][T10284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1296'. [ 225.848994][T10279] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.859636][T10275] ªªªªªª: renamed from vlan0 (while UP) [ 225.863482][T10279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1295'. [ 225.905766][T10279] veth5: entered promiscuous mode [ 225.916885][T10279] bond3: (slave veth5): Enslaving as an active interface with a down link [ 226.316099][T10313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1304'. [ 226.806292][T10337] netlink: 'syz.4.1314': attribute type 1 has an invalid length. [ 226.839525][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 226.901145][T10327] infiniband syz1: set active [ 226.908090][T10327] infiniband syz1: added bond0 [ 226.989189][T10327] RDS/IB: syz1: added [ 226.994024][T10327] smc: adding ib device syz1 with port count 1 [ 227.000964][T10327] smc: ib device syz1 port 1 has pnetid [ 227.030069][T10337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.056014][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 227.088943][T10348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 227.225805][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.251642][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.620377][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1322'. [ 227.641654][T10366] veth0_vlan: entered allmulticast mode [ 227.720229][ T9] IPVS: starting estimator thread 0... [ 227.727080][T10372] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20000 [ 227.828638][T10366] veth0_vlan: left promiscuous mode [ 227.837065][T10375] IPVS: using max 27 ests per chain, 64800 per kthread [ 227.857945][T10366] veth0_vlan: entered promiscuous mode [ 227.887877][T10366] team0: Device veth0_vlan failed to register rx_handler [ 228.035996][ T1156] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.070226][ T1156] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.124177][ T1156] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.158130][ T1156] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.438400][T10401] openvswitch: netlink: IP tunnel dst address not specified [ 228.829965][T10415] bridge0: port 3(ipvlan2) entered blocking state [ 228.840614][T10415] bridge0: port 3(ipvlan2) entered disabled state [ 228.848080][T10415] ipvlan2: entered allmulticast mode [ 228.863154][T10415] bridge0: entered allmulticast mode [ 228.871880][T10415] ipvlan2: left allmulticast mode [ 228.877148][T10415] bridge0: left allmulticast mode [ 229.530875][T10446] validate_nla: 2 callbacks suppressed [ 229.530898][T10446] netlink: 'syz.2.1345': attribute type 2 has an invalid length. [ 229.563776][T10446] netlink: 'syz.2.1345': attribute type 2 has an invalid length. [ 229.738830][T10452] __nla_validate_parse: 70 callbacks suppressed [ 229.738852][T10452] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1348'. [ 229.793126][T10452] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 230.001598][T10463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1351'. [ 230.020484][T10454] netlink: 'syz.4.1349': attribute type 39 has an invalid length. [ 230.055220][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 230.436471][T10494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 230.447194][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 230.491961][T10497] netlink: 'syz.2.1359': attribute type 142 has an invalid length. [ 230.663568][T10511] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 230.679263][T10509] tipc: New replicast peer: 255.255.255.255 [ 230.696055][T10509] tipc: Enabled bearer , priority 10 [ 230.739384][T10509] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.893656][T10524] netlink: 'syz.2.1368': attribute type 24 has an invalid length. [ 230.930497][T10524] netlink: 'syz.2.1368': attribute type 24 has an invalid length. [ 230.975895][T10529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1370'. [ 231.197839][T10541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.207879][T10539] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.341057][T10553] netlink: 'syz.1.1376': attribute type 16 has an invalid length. [ 231.350133][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1376'. [ 231.417029][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 231.617595][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1379'. [ 231.647753][T10570] openvswitch: netlink: Missing valid actions attribute. [ 231.656618][T10570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.769183][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 231.783016][T10575] netlink: 'syz.1.1380': attribute type 20 has an invalid length. [ 231.808744][ T7689] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.819258][ T7689] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.828691][ T7689] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.846550][ T1156] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.090408][ T5188] block nbd2: Receive control failed (result -32) [ 232.571292][T10614] sctp: [Deprecated]: syz.0.1394 (pid 10614) Use of int in max_burst socket option deprecated. [ 232.571292][T10614] Use struct sctp_assoc_value instead [ 232.636457][T10619] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 232.659312][T10619] 0ªî{X¹¦: entered allmulticast mode [ 232.672322][T10619] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 232.914396][T10634] netlink: zone id is out of range [ 232.919603][T10634] netlink: zone id is out of range [ 232.924964][T10634] netlink: get zone limit has 8 unknown bytes [ 232.973106][T10637] bridge_slave_1: left allmulticast mode [ 232.988848][T10637] bridge_slave_1: left promiscuous mode [ 233.002439][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.031062][T10637] bridge_slave_0: left allmulticast mode [ 233.048977][T10637] bridge_slave_0: left promiscuous mode [ 233.056506][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.321843][ T1156] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.351682][ T1156] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.392519][ T3549] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.416002][ T3549] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.508843][T10667] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 233.551339][T10667] netlink: 'syz.4.1409': attribute type 4 has an invalid length. [ 233.721724][T10660] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.770659][T10660] netdevsim netdevsim0 veth0_virt_wifi: renamed from netdevsim0 [ 233.841333][T10679] batadv_slave_0: entered promiscuous mode [ 233.860292][T10679] batadv_slave_1: entered promiscuous mode [ 233.879472][T10679] hsr1: Slave A (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.905756][T10679] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.088344][T10701] syz_tun: entered allmulticast mode [ 234.100826][T10700] syz_tun: left allmulticast mode [ 234.261161][T10710] tipc: Enabled bearer , priority 0 [ 234.483186][T10710] syzkaller0: entered promiscuous mode [ 234.515712][T10710] syzkaller0: entered allmulticast mode [ 234.537774][T10710] tipc: Resetting bearer [ 234.620716][T10708] tipc: Resetting bearer [ 234.760314][T10739] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 235.354295][ T7450] tipc: Node number set to 3604384034 [ 236.162940][T10708] tipc: Disabling bearer [ 236.187640][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d9c9800: rx timeout, send abort [ 236.196325][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d9c9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.210932][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802918b800: rx timeout, send abort [ 236.221723][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802918b800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 236.334857][ T7689] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 236.362890][T10771] __nla_validate_parse: 50 callbacks suppressed [ 236.362906][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1437'. [ 236.403944][T10774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1436'. [ 236.506118][T10781] gretap0: left promiscuous mode [ 236.561820][T10781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.576630][T10778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1439'. [ 236.586549][T10779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1439'. [ 236.619661][T10778] bridge_slave_0: left allmulticast mode [ 236.625583][T10778] bridge_slave_0: left promiscuous mode [ 236.631625][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.647471][T10778] bridge_slave_1: left allmulticast mode [ 236.653461][T10778] bridge_slave_1: left promiscuous mode [ 236.662429][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.679912][T10778] bond0: (slave bond_slave_0): Releasing backup interface [ 236.711917][T10778] bond0: (slave bond_slave_1): Releasing backup interface [ 236.749658][T10778] team0: Port device team_slave_0 removed [ 236.777336][T10778] team0: Port device team_slave_1 removed [ 236.786448][T10778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.794664][T10778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.808591][T10778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.819468][T10778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.853231][T10778] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 237.242943][T10803] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1443'. [ 237.408479][T10822] validate_nla: 2 callbacks suppressed [ 237.408501][T10822] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 237.466561][T10822] bond0: (slave wlan1): Opening slave failed [ 237.578400][T10828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 237.624591][T10829] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 237.635026][T10834] netlink: 152064 bytes leftover after parsing attributes in process `syz.4.1452'. [ 237.652538][T10834] netlink: zone id is out of range [ 237.672390][T10834] netlink: zone id is out of range [ 237.681177][T10834] netlink: zone id is out of range [ 237.707747][T10834] netlink: zone id is out of range [ 237.728950][T10838] netlink: 'syz.2.1454': attribute type 11 has an invalid length. [ 237.729101][T10834] netlink: zone id is out of range [ 237.737160][T10838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1454'. [ 237.755041][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 237.768713][T10834] netlink: zone id is out of range [ 237.788375][T10834] netlink: zone id is out of range [ 238.091655][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 238.131136][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 238.276628][T10868] netlink: 'syz.1.1464': attribute type 21 has an invalid length. [ 238.987844][T10917] netlink: 'syz.4.1477': attribute type 1 has an invalid length. [ 240.913682][T10956] bond4: entered promiscuous mode [ 240.940284][T10956] bond4: entered allmulticast mode [ 240.946948][T10956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 241.108831][ T3549] syzkaller0: tun_net_xmit 76 [ 241.122064][ T3549] syzkaller0: tun_net_xmit 48 [ 241.129634][T10971] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 241.137591][ T9] syzkaller0: tun_net_xmit 76 [ 241.151810][T10971] syzkaller0: Linktype set failed because interface is up [ 241.170558][T10971] netlink: 'syz.3.1492': attribute type 11 has an invalid length. [ 241.839586][T10996] __nla_validate_parse: 7 callbacks suppressed [ 241.839608][T10996] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1498'. [ 242.046915][T11005] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 242.166811][T11010] netlink: 'syz.2.1500': attribute type 1 has an invalid length. [ 242.178303][T11010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1500'. [ 242.433671][T11014] netlink: 'syz.4.1501': attribute type 28 has an invalid length. [ 242.442314][T11014] netlink: 'syz.4.1501': attribute type 3 has an invalid length. [ 242.450270][T11014] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1501'. [ 243.074906][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 243.271070][T11018] IPv6: Can't replace route, no match found [ 243.284216][T11016] syz_tun: entered allmulticast mode [ 243.303728][T11016] syz_tun: left allmulticast mode [ 243.425055][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 243.431354][T11031] netlink: 'syz.1.1504': attribute type 9 has an invalid length. [ 244.108535][T11062] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 244.118782][T11063] netlink: 'syz.1.1516': attribute type 1 has an invalid length. [ 244.212880][T11061] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 244.226127][T11061] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 244.300133][T11062] vlan2: entered allmulticast mode [ 244.305549][T11062] bridge0: entered allmulticast mode [ 244.312080][T11062] bond4: (slave vlan2): Opening slave failed [ 244.352631][T11071] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1519'. [ 244.562872][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 244.567260][T11084] netlink: 'syz.4.1523': attribute type 6 has an invalid length. [ 244.582694][T11084] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1523'. [ 244.587164][T11083] tc_dump_action: action bad kind [ 244.618896][T11086] Unknown options in mask b7f2 [ 244.645280][T11083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1522'. [ 244.839389][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 245.008531][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'. [ 245.168372][T11108] tipc: Enabled bearer , priority 10 [ 245.282929][T11118] net_ratelimit: 222 callbacks suppressed [ 245.282953][T11118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.606518][ T5188] Bluetooth: hci4: link tx timeout [ 245.611694][ T5188] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 245.707314][T11136] netlink: 'syz.0.1541': attribute type 1 has an invalid length. [ 245.718364][T11136] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 245.733230][T11142] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.825807][T11140] tipc: Enabling of bearer rejected, already enabled [ 245.982623][T11156] netlink: 'syz.3.1549': attribute type 9 has an invalid length. [ 246.008417][T11156] netlink: 'syz.3.1549': attribute type 6 has an invalid length. [ 246.888911][T11223] pimreg: entered allmulticast mode [ 246.904806][T11224] pimreg: left allmulticast mode [ 247.048709][T11226] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 247.320650][T11245] __nla_validate_parse: 4 callbacks suppressed [ 247.320670][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 247.694305][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 248.082846][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 248.127536][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'. [ 248.323125][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 248.357836][T11299] validate_nla: 5 callbacks suppressed [ 248.357855][T11299] netlink: 'syz.0.1590': attribute type 7 has an invalid length. [ 248.403324][T11303] nbd: nbd1 already in use [ 248.411394][T11299] netlink: 'syz.0.1590': attribute type 8 has an invalid length. [ 248.438639][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1590'. [ 248.552377][T11305] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 248.622219][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 248.622740][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bc95400: rx timeout, send abort [ 248.639830][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bc95400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 248.652421][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 248.910887][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 248.925866][T11323] netlink: 'syz.0.1597': attribute type 1 has an invalid length. [ 248.941416][T11323] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1597'. [ 248.951897][T11321] macvlan0: entered promiscuous mode [ 248.971929][T11321] batadv_slave_1: entered promiscuous mode [ 249.014455][T11321] debugfs: 'hsr1' already exists in 'hsr' [ 249.032140][T11321] Cannot create hsr debugfs directory [ 249.091705][T11328] ipvlan5: entered promiscuous mode [ 249.201125][T11337] macvtap1: entered promiscuous mode [ 249.212862][T11337] vlan0: entered promiscuous mode [ 249.230149][T11337] macvtap1: entered allmulticast mode [ 249.242233][T11337] vlan0: entered allmulticast mode [ 249.284934][T11337] veth0_vlan: entered allmulticast mode [ 249.325504][T11345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 249.357190][T11347] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 249.371803][T11347] netlink: 'syz.4.1604': attribute type 1 has an invalid length. [ 249.387741][T11347] netlink: 'syz.4.1604': attribute type 4 has an invalid length. [ 249.396467][T11347] NCSI netlink: No device for ifindex 830110067 [ 249.963791][T11386] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20004 [ 250.192247][T11401] netlink: 'syz.0.1619': attribute type 10 has an invalid length. [ 250.285839][T11401] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 250.865176][T11428] netlink: 'syz.0.1627': attribute type 4 has an invalid length. [ 252.697894][T11561] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 254.517296][T11590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.687932][T11625] __nla_validate_parse: 9 callbacks suppressed [ 254.687953][T11625] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1681'. [ 254.707907][T11625] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1681'. [ 254.906859][T11638] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 255.094484][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1687'. [ 255.166903][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 255.202240][T11652] vlan0: entered promiscuous mode [ 255.232139][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 255.259042][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1691'. [ 255.282188][T11658] netlink: 58 bytes leftover after parsing attributes in process `syz.0.1691'. [ 255.353642][T11665] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 255.366051][T11665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1694'. [ 255.430291][T11671] netlink: 'syz.4.1696': attribute type 11 has an invalid length. [ 255.853060][T11693] xt_socket: unknown flags 0xe4 [ 256.080890][T11712] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 256.087932][T11716] tipc: Enabling of bearer rejected, already enabled [ 256.098574][T11716] netlink: 'syz.2.1706': attribute type 28 has an invalid length. [ 256.106881][T11716] netlink: 'syz.2.1706': attribute type 3 has an invalid length. [ 256.141641][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1706'. [ 256.183473][T11721] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 256.243666][T11712] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.282406][T11715] bond8: (slave gretap2): making interface the new active one [ 256.299549][T11715] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 256.486193][T11731] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1711'. [ 256.721600][T11745] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 256.740476][T11745] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 257.329554][T11772] syzkaller1: entered promiscuous mode [ 257.345031][T11772] syzkaller1: entered allmulticast mode [ 257.721591][T11795] vlan0: entered allmulticast mode [ 257.741755][T11795] veth0_vlan: entered allmulticast mode [ 258.759689][T11858] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2 [ 258.820403][T11858] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€ [ 258.888379][T11864] veth1_macvtap: left promiscuous mode [ 259.530914][T11900] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 259.577641][T11900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.631553][T11907] nbd: must specify at least one socket [ 259.638403][T11907] block nbd2: NBD_DISCONNECT [ 259.643253][T11907] block nbd2: Send disconnect failed -32 [ 259.654560][T11907] block nbd2: shutting down sockets [ 259.672502][T11904] veth7: entered promiscuous mode [ 259.711416][T11904] bond4: (slave veth7): Enslaving as an active interface with a down link [ 259.736163][T11900] bond4: entered allmulticast mode [ 259.842128][T11919] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 259.866726][T11919] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 259.881024][T11919] __nla_validate_parse: 8 callbacks suppressed [ 259.881049][T11919] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1761'. [ 260.009154][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1762'. [ 260.036948][T11930] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.102106][T11932] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 260.112499][T11932] netlink: 'syz.1.1764': attribute type 2 has an invalid length. [ 260.237183][T11938] tipc: Enabled bearer , priority 0 [ 260.312287][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1768'. [ 260.342817][T11943] netlink: 'syz.2.1768': attribute type 1 has an invalid length. [ 260.509301][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1768'. [ 260.543075][T11951] 8021q: adding VLAN 0 to HW filter on device bond8 [ 260.595909][T11951] bond7: (slave bond8): making interface the new active one [ 260.620484][T11963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.647088][T11951] bond7: (slave bond8): Enslaving as an active interface with an up link [ 260.709655][T11968] netlink: 'syz.1.1773': attribute type 21 has an invalid length. [ 260.718253][T11968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1773'. [ 260.749776][T11943] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 260.786361][T11953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.889748][T11963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 260.904003][T11963] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.981590][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.053097][T11963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.070718][T11963] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.137951][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1774'. [ 261.283381][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1780'. [ 261.300254][T11963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.321968][T11963] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.485886][T11963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 261.500845][T11963] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.708728][T11998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.872936][T11998] vlan0: left allmulticast mode [ 261.880453][T11998] veth0_vlan: left allmulticast mode [ 261.886058][T11998] vlan0: left promiscuous mode [ 261.900762][ T3549] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.911403][ T3549] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.946395][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.078381][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.090208][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.098920][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.112363][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.171778][ T3549] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.189767][ T3549] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.257872][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 262.279492][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.306071][T12014] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 262.314290][T12014] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 262.362205][T12027] tipc: Enabled bearer , priority 10 [ 262.369373][T12028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1788'. [ 262.732055][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'. [ 262.852126][T12053] netlink: 'syz.2.1796': attribute type 12 has an invalid length. [ 262.957000][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 263.004781][T12057] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 263.012206][T12057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.209567][T12076] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 263.355048][ T5995] tipc: Node number set to 1647176590 [ 263.829867][T12110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.129252][T12130] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 264.490244][T12155] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 264.790589][T12164] ip6tnl1: entered promiscuous mode [ 264.796187][T12164] ip6tnl1: entered allmulticast mode [ 265.038246][T12187] __nla_validate_parse: 7 callbacks suppressed [ 265.038267][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'. [ 265.301544][T12200] openvswitch: netlink: EtherType 0 is less than min 600 [ 265.402530][T12209] tipc: Resetting bearer [ 265.675146][T12223] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1850'. [ 265.699362][T12224] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1849'. [ 265.701956][T12226] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1851'. [ 265.709394][T12221] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1849'. [ 265.881282][T12233] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1852'. [ 265.921596][T12233] erspan0: entered promiscuous mode [ 266.439871][T12258] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1861'. [ 266.667180][T12276] netlink: 'syz.4.1866': attribute type 12 has an invalid length. [ 266.732365][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1867'. [ 267.119218][T12298] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 267.136769][T12302] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1871'. [ 267.155219][T12302] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 267.170745][T12302] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 267.191127][T12304] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1871'. [ 267.203011][T12303] 8021q: VLANs not supported on caif0 [ 267.220970][T12304] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 267.257240][T12304] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 267.751952][T12335] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 267.808169][T12335] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 267.836484][T12335] gretap1: entered promiscuous mode [ 267.850774][T12335] gretap1: entered allmulticast mode [ 267.928605][T12352] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 268.438562][T12384] netlink: 'syz.2.1895': attribute type 33 has an invalid length. [ 268.901982][T12406] netlink: 'syz.1.1902': attribute type 13 has an invalid length. [ 268.917101][T12406] netlink: 'syz.1.1902': attribute type 13 has an invalid length. [ 269.128071][T12413] tipc: Enabled bearer , priority 0 [ 269.141871][T12410] syzkaller0: entered promiscuous mode [ 269.147737][T12410] syzkaller0: entered allmulticast mode [ 269.202914][T12410] tipc: Resetting bearer [ 269.234559][T12408] tipc: Resetting bearer [ 269.325129][T12408] tipc: Disabling bearer [ 269.418266][T12422] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 269.447883][T12422] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.818039][T12446] ip6gre1: entered allmulticast mode [ 269.856375][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.885508][T12439] syzkaller1: entered promiscuous mode [ 269.891059][T12439] syzkaller1: entered allmulticast mode [ 270.259653][T12468] !€ÿ: renamed from bond_slave_0 (while UP) [ 270.272475][T12469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.277293][T12468] __nla_validate_parse: 22 callbacks suppressed [ 270.277318][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 270.283986][T12469] bridge0: port 1(veth0_to_bridge) entered blocking state [ 270.305057][T12469] bridge0: port 1(veth0_to_bridge) entered disabled state [ 270.312669][T12469] veth0_to_bridge: entered allmulticast mode [ 270.324151][T12469] veth0_to_bridge: entered promiscuous mode [ 270.488008][T12473] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 270.500923][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1922'. [ 270.514994][T12473] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 270.525471][T12473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1922'. [ 270.543501][T12476] delete_channel: no stack [ 270.582565][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 270.609079][T12476] bridge_slave_1: left allmulticast mode [ 270.637476][T12476] bridge_slave_1: left promiscuous mode [ 270.654562][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.693217][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 270.719990][T12479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 270.741547][T12476] bridge_slave_0: left allmulticast mode [ 270.748886][T12476] bridge_slave_0: left promiscuous mode [ 270.763595][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.847185][T12493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1924'. [ 270.932256][T12482] syzkaller1: entered promiscuous mode [ 270.938370][T12482] syzkaller1: entered allmulticast mode [ 271.368793][T12515] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1935'. [ 271.521009][T12517] lo: entered promiscuous mode [ 271.579423][T12517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.705429][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 272.059784][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1944'. [ 272.199919][T12548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.257127][T12545] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 272.522693][T12567] netlink: 'syz.3.1951': attribute type 9 has an invalid length. [ 273.298863][T12617] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 273.434297][T12617] bond5: entered promiscuous mode [ 273.439975][T12617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.468689][T12626] bond0: (slave 1!€ÿ): Releasing backup interface [ 273.481150][T12626] !€ÿ: left promiscuous mode [ 273.500302][T12626] bond0: (slave bond_slave_1): Releasing backup interface [ 273.510069][T12626] bond_slave_1: left promiscuous mode [ 273.547376][T12626] team0: Port device C removed [ 273.566602][T12626] team0: Port device team_slave_1 removed [ 273.573500][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.581388][T12626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.590379][T12626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.598422][T12626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.618096][T12626] bond1: (slave bridge1): Releasing active interface [ 273.631705][T12626] bond2: (slave bridge2): Releasing active interface [ 273.639614][T12626] bond2: (slave bridge2): the permanent HWaddr of slave - 3e:ea:80:dd:8d:9b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.667625][T12626] bond2: (slave bridge3): Releasing active interface [ 273.689830][T12626] bond2: (slave bridge4): Releasing active interface [ 273.706053][T12626] bond2: (slave bridge5): Releasing active interface [ 273.718476][T12626] bond2: (slave bridge6): Releasing active interface [ 273.732143][T12626] bond2: (slave bridge7): Releasing active interface [ 273.746075][T12626] bond2: (slave bridge8): Releasing active interface [ 273.757702][T12626] bond2: (slave bridge9): Releasing active interface [ 273.791512][T12626] bond7: (slave bond8): Releasing backup interface [ 273.800246][T12626] bond7: (slave bond8): the permanent HWaddr of slave - 0a:f3:38:05:1d:60 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.820190][T12626] bond7: (slave gretap0): making interface the new active one [ 273.842152][T12626] bond7: (slave gretap0): Releasing backup interface [ 273.885615][T12624] pim6reg1: entered promiscuous mode [ 273.898878][T12624] pim6reg1: entered allmulticast mode [ 274.072437][T12637] erspan0: entered promiscuous mode [ 274.080354][T12637] erspan0: entered allmulticast mode [ 274.090694][T12639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.378887][T12663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.509798][T12668] netlink: 'syz.0.1982': attribute type 33 has an invalid length. [ 274.551784][T12671] netlink: 'syz.2.1984': attribute type 3 has an invalid length. [ 274.560709][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.977562][T12698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.515654][T12722] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 275.528502][T12722] __nla_validate_parse: 17 callbacks suppressed [ 275.528524][T12722] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2001'. [ 275.533194][T12723] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 275.535343][T12722] netlink: 'syz.4.2001': attribute type 2 has an invalid length. [ 275.563591][T12722] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 275.601043][T12723] bond5 (unregistering): Released all slaves [ 275.667998][T12729] ip6tnl1: entered promiscuous mode [ 275.682428][T12729] ip6tnl1: entered allmulticast mode [ 275.752314][T12731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.767774][T12731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.874181][T12741] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 275.882486][T12741] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.971329][T12731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.992848][T12731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.099999][T12744] geneve2: entered promiscuous mode [ 276.107249][T12744] geneve2: entered allmulticast mode [ 276.118504][ T36] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.155942][T12731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.169711][T12731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.230540][T12750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.241381][T12750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.285513][ T36] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.296782][ T36] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 276.406381][T12731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.416936][T12731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.515736][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2014'. [ 276.533713][T12772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2015'. [ 276.552214][T12768] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 276.563601][T12768] debugfs: 'hsr1' already exists in 'hsr' [ 276.571686][T12773] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2014'. [ 276.573955][T12768] Cannot create hsr debugfs directory [ 276.590605][T12768] hsr1: entered promiscuous mode [ 276.615159][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2014'. [ 276.772205][ T37] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.801659][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.830543][ T37] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.856423][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.896535][ T1112] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.913327][ T1112] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.943552][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 277.008835][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.017741][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.247573][T12806] netlink: 'syz.2.2023': attribute type 10 has an invalid length. [ 277.287579][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 277.512670][T12824] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 277.608004][T12828] tipc: Bearer : already 2 bearers with priority 10 [ 277.619070][T12828] tipc: Bearer : trying with adjusted priority [ 277.627370][T12828] tipc: Enabled bearer , priority 9 [ 277.794812][T12840] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 277.802927][T12750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.832725][T12750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.840573][T12840] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2033'. [ 277.861594][T12750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 277.905612][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 278.140420][T12750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.177070][T12750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.250014][T12750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.341264][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2038'. [ 278.360078][T12861] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 278.370157][T12750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.382438][T12750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.393302][T12750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 278.439162][T12860] xfrm1: entered allmulticast mode [ 278.552016][T12865] bond5: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.565392][T12865] bond5: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 278.576531][T12865] bond5: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode [ 278.799483][ T37] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.811216][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 278.826913][ T37] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.887681][ T37] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.900664][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 278.913622][ T37] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.926397][ T37] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.936057][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 278.947685][ T37] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 278.973193][ T37] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.983951][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 278.997215][ T37] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 279.141441][T12904] batadv0: entered allmulticast mode [ 279.352140][T12908] pim6reg: entered allmulticast mode [ 279.760822][T12940] netlink: 'syz.3.2061': attribute type 1 has an invalid length. [ 279.863053][T12940] netlink: 'syz.3.2061': attribute type 9 has an invalid length. [ 280.358420][T12975] tipc: Enabling of bearer rejected, already enabled [ 280.744461][T13011] __nla_validate_parse: 7 callbacks suppressed [ 280.744482][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2079'. [ 280.966460][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2083'. [ 280.982617][T13025] tc_dump_action: action bad kind [ 281.017231][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2083'. [ 281.041756][T13025] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 281.062372][T13025] veth1_macvtap: left promiscuous mode [ 281.093464][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2085'. [ 281.257492][T13042] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 281.266374][T13042] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 281.282194][T13042] netlink: 'syz.1.2088': attribute type 4 has an invalid length. [ 281.292148][T13042] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2088'. [ 281.302536][T13042] NCSI netlink: No device for ifindex 830110067 [ 281.431148][T13051] IPVS: set_ctl: invalid protocol: 22 224.0.0.1:20003 [ 281.864669][T13068] ip6gre0: Master is either lo or non-ether device [ 281.889319][T13071] tipc: Enabled bearer , priority 0 [ 281.897768][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2099'. [ 281.898941][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 281.911505][T13071] syzkaller0: entered promiscuous mode [ 281.923110][T13071] syzkaller0: entered allmulticast mode [ 281.953179][T13071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2100'. [ 282.007866][T13070] tipc: Resetting bearer [ 282.030870][T13077] netlink: 'syz.2.2102': attribute type 11 has an invalid length. [ 282.032613][T13070] tipc: Disabling bearer [ 282.039636][T13077] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2102'. [ 282.186526][T13085] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2104'. [ 282.238001][T13085] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 282.259048][T13085] syzkaller0: entered promiscuous mode [ 282.270650][T13085] syzkaller0: entered allmulticast mode [ 282.330385][T13090] netlink: 'syz.2.2108': attribute type 11 has an invalid length. [ 282.342115][T13090] netlink: 'syz.2.2108': attribute type 11 has an invalid length. [ 282.379188][T13094] 8021q: adding VLAN 0 to HW filter on device bond10 [ 282.553252][T13107] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 282.629434][T13107] bond11 (unregistering): Released all slaves [ 282.681097][T13115] ip6tnl2: entered promiscuous mode [ 282.686991][T13115] ip6tnl2: entered allmulticast mode [ 283.041483][T13142] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 283.143059][T13142] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 284.019611][T13205] netlink: 'syz.4.2143': attribute type 1 has an invalid length. [ 284.097685][T13205] bond6: entered promiscuous mode [ 284.105708][T13205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 284.177985][T13205] bond6: (slave bridge5): making interface the new active one [ 284.186443][T13205] bridge5: entered promiscuous mode [ 284.193589][T13205] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 284.321119][T13222] vlan1: entered allmulticast mode [ 284.330577][T13222] bond0: entered allmulticast mode [ 285.285500][T13276] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 285.315359][T13276] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 285.440487][T13281] IPv6: NLM_F_REPLACE set, but no existing node found! [ 285.711704][T13304] tipc: Enabling of bearer rejected, already enabled [ 285.762116][T13304] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 285.878971][T13312] __nla_validate_parse: 14 callbacks suppressed [ 285.878994][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2169'. [ 286.048807][T13316] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 286.391082][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 286.588502][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 286.803340][T13366] netlink: 'syz.0.2188': attribute type 64 has an invalid length. [ 286.831170][T13366] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2188'. [ 286.942791][T13379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2192'. [ 287.601898][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2202'. [ 287.843318][T13424] tls_set_device_offload_rx: netdev not found [ 287.897568][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 288.100850][T13436] tipc: Enabling of bearer rejected, already enabled [ 288.119155][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 288.403120][T13455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2214'. [ 288.663378][T13473] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 288.797615][T13469] tipc: Resetting bearer [ 288.970658][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 289.758901][T13491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.882858][ T3549] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.922426][ T3549] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 289.944135][ T3549] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.953173][ T3549] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.995010][ T3549] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 290.003509][ T3549] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.043612][ T3549] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.084813][ T3549] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 290.093318][ T3549] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.128921][ T3549] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.153056][ T3549] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 290.164770][ T3549] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 290.402473][T13534] tipc: Enabled bearer , priority 0 [ 290.416869][T13534] syzkaller0: entered promiscuous mode [ 290.422405][T13534] syzkaller0: entered allmulticast mode [ 290.451397][T13538] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 290.469617][T13534] tipc: Resetting bearer [ 290.478348][T13532] tipc: Resetting bearer [ 290.527201][T13532] tipc: Disabling bearer [ 290.554743][T13540] 8021q: VLANs not supported on ip6_vti0 [ 290.743193][T13553] macvtap2: entered promiscuous mode [ 290.774952][T13553] vlan0: entered promiscuous mode [ 290.780524][T13553] macvtap2: entered allmulticast mode [ 290.786003][T13570] xt_socket: unknown flags 0xd0 [ 290.806710][T13553] vlan0: entered allmulticast mode [ 290.811886][T13553] veth0_vlan: entered allmulticast mode [ 290.858142][T13555] macvtap3: entered promiscuous mode [ 290.863502][T13555] macvtap3: entered allmulticast mode [ 291.100680][T13586] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 291.189299][T13582] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.253451][T13591] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 291.289413][T13591] netlink: 'syz.2.2248': attribute type 1 has an invalid length. [ 291.311909][T13591] netlink: 'syz.2.2248': attribute type 4 has an invalid length. [ 291.322894][T13591] __nla_validate_parse: 4 callbacks suppressed [ 291.322917][T13591] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2248'. [ 291.349840][T13591] NCSI netlink: No device for ifindex 830110067 [ 291.740183][T13624] netlink: 'syz.0.2261': attribute type 30 has an invalid length. [ 316.801936][T13664] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 316.827188][T13664] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2273'. [ 317.101597][T13688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2279'. [ 317.160383][T13690] netlink: 'syz.3.2280': attribute type 8 has an invalid length. [ 317.239609][T13690] IPv6: sit3: Disabled Multicast RS [ 317.246719][T13690] sit3: entered allmulticast mode [ 317.351958][T13703] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 317.453685][T13707] IPVS: set_ctl: invalid protocol: 57 172.30.0.4:20002 [ 317.474689][T13707] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.493102][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 317.494518][T13709] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.505643][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 317.509990][T13712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.565319][T13712] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 317.579013][T13712] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 317.591243][T13712] gretap2: entered promiscuous mode [ 317.599558][T13712] gretap2: entered allmulticast mode [ 317.759184][T13717] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2291'. [ 318.561759][T13756] dvmrp1: entered allmulticast mode [ 318.690561][T13713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2287'. [ 319.425926][T13779] netlink: 'syz.4.2311': attribute type 11 has an invalid length. [ 319.600338][T13786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2313'. [ 319.640738][T13790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.666319][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2315'. [ 319.815363][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2317'. [ 319.848853][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 319.925998][T13805] netlink: 'syz.3.2320': attribute type 13 has an invalid length. [ 319.952894][T13805] tipc: Resetting bearer [ 319.977629][T13805] erspan0: left promiscuous mode [ 320.109702][T13805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.119870][T13805] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.131877][T13805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.296662][T13826] netlink: 'syz.4.2326': attribute type 58 has an invalid length. [ 320.443160][T13828] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 321.053623][T13849] netlink: 'syz.3.2333': attribute type 39 has an invalid length. [ 321.821953][T13881] 0ªî{X¹¦: entered promiscuous mode [ 321.837966][T13881] 0ªî{X¹¦: left allmulticast mode [ 321.961010][T13884] __nla_validate_parse: 10 callbacks suppressed [ 321.961032][T13884] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2343'. [ 322.010263][T13884] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 322.031250][T13884] 1ªî{X¹¦: left promiscuous mode [ 322.038989][T13884] 1ªî{X¹¦: entered allmulticast mode [ 322.051106][T13896] netlink: 'syz.3.2348': attribute type 39 has an invalid length. [ 322.062546][T13884] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 322.321059][T13906] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 322.332792][T13906] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 322.340658][T13906] gretap2: entered promiscuous mode [ 322.354226][T13906] gretap2: entered allmulticast mode [ 322.421041][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.745164][T13928] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.2358'. [ 322.869239][T13933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2360'. [ 322.892635][T13935] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 [ 322.931695][T13937] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2362'. [ 322.952408][T13937] xt_policy: neither incoming nor outgoing policy selected [ 322.971614][T13940] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2364'. [ 323.128865][T13945] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 323.298589][T13945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.502906][T13974] netlink: 'syz.2.2372': attribute type 1 has an invalid length. [ 323.512006][T13974] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2372'. [ 323.522236][T13974] nbd: illegal input index 1048576 [ 323.816910][T13986] netlink: 'syz.1.2370': attribute type 29 has an invalid length. [ 324.298437][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2380'. [ 324.493477][T14012] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 324.583261][T14012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.700374][T14020] bond5: (slave geneve2): making interface the new active one [ 324.738370][T14020] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 324.758552][ T1112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.810751][ T1112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.820449][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 324.860718][ T1112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.407075][T14049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2389'. [ 325.728402][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 326.083183][T14079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2400'. [ 326.267595][T14083] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 326.292795][T14083] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 326.316988][T14087] macvlan2: entered promiscuous mode [ 326.322371][T14087] macvlan2: entered allmulticast mode [ 326.950050][T14101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 327.023095][T14101] __nla_validate_parse: 3 callbacks suppressed [ 327.023120][T14101] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2405'. [ 327.066203][T14105] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2405'. [ 327.136453][T14101] tipc: Resetting bearer [ 327.143313][T14101] gretap0: entered promiscuous mode [ 327.150974][T14105] 0ªî{X¹¦: renamed from gretap0 [ 327.163263][T14105] tipc: Disabling bearer [ 327.169329][T14114] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 327.178122][T14105] 0ªî{X¹¦: left promiscuous mode [ 327.183279][T14105] 0ªî{X¹¦: entered allmulticast mode [ 327.192325][T14105] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 327.234427][T14101] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 327.615422][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2416'. [ 327.637428][T14141] netlink: 'syz.0.2417': attribute type 1 has an invalid length. [ 327.985327][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2422'. [ 328.011728][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 328.064286][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 328.073384][T14167] netlink: 'syz.1.2423': attribute type 20 has an invalid length. [ 328.136420][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2423'. [ 328.161555][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2423'. [ 328.184632][T14167] netlink: 'syz.1.2423': attribute type 20 has an invalid length. [ 328.204576][T14176] pim6reg1: entered promiscuous mode [ 328.209939][T14176] pim6reg1: entered allmulticast mode [ 328.408500][T14188] Illegal XDP return value 4294967274 on prog (id 803) dev N/A, expect packet loss! [ 328.823404][T14200] syzkaller0: entered promiscuous mode [ 328.831361][T14200] syzkaller0: entered allmulticast mode [ 329.247740][T14224] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2441'. [ 329.261754][T14228] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2442'. [ 329.295659][T14221] vlan0 (unregistering): left allmulticast mode [ 329.316785][T14221] veth0_vlan: left allmulticast mode [ 329.336662][T14221] vlan0 (unregistering): left promiscuous mode [ 329.552951][T14226] team0 (unregistering): Port device team_slave_0 removed [ 329.571444][T14226] team0 (unregistering): Port device team_slave_1 removed [ 329.813368][T14242] syzkaller0: entered allmulticast mode [ 330.223092][T14262] netlink: 'syz.3.2450': attribute type 3 has an invalid length. [ 330.518132][T14270] sctp: [Deprecated]: syz.0.2454 (pid 14270) Use of int in max_burst socket option deprecated. [ 330.518132][T14270] Use struct sctp_assoc_value instead [ 330.540287][T14271] netlink: 'syz.1.2453': attribute type 4 has an invalid length. [ 330.568216][T14274] netlink: 'syz.3.2455': attribute type 1 has an invalid length. [ 330.833577][T14287] [ 330.835972][T14287] ============================================ [ 330.842128][T14287] WARNING: possible recursive locking detected [ 330.848295][T14287] syzkaller #0 Not tainted [ 330.852723][T14287] -------------------------------------------- [ 330.858880][T14287] syz.1.2457/14287 is trying to acquire lock: [ 330.864955][T14287] ffff88807ee0cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 330.875963][T14287] [ 330.875963][T14287] but task is already holding lock: [ 330.883422][T14287] ffff88807ee0cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 330.893302][T14287] and the lock comparison function returns 0: [ 330.899381][T14287] [ 330.899381][T14287] other info that might help us debug this: [ 330.907535][T14287] Possible unsafe locking scenario: [ 330.907535][T14287] [ 330.914999][T14287] CPU0 [ 330.918299][T14287] ---- [ 330.921585][T14287] lock(&dev_instance_lock_key#20); [ 330.926904][T14287] lock(&dev_instance_lock_key#20); [ 330.932325][T14287] [ 330.932325][T14287] *** DEADLOCK *** [ 330.932325][T14287] [ 330.940596][T14287] May be due to missing lock nesting notation [ 330.940596][T14287] [ 330.948931][T14287] 2 locks held by syz.1.2457/14287: [ 330.954135][T14287] #0: ffffffff8f53a248 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 330.963139][T14287] #1: ffff88807ee0cd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 330.973450][T14287] [ 330.973450][T14287] stack backtrace: [ 330.979369][T14287] CPU: 0 UID: 0 PID: 14287 Comm: syz.1.2457 Not tainted syzkaller #0 PREEMPT(full) [ 330.979397][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.979418][T14287] Call Trace: [ 330.979428][T14287] [ 330.979439][T14287] dump_stack_lvl+0x189/0x250 [ 330.979469][T14287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.979490][T14287] ? __pfx__printk+0x10/0x10 [ 330.979517][T14287] ? print_lock_name+0xde/0x100 [ 330.979543][T14287] print_deadlock_bug+0x28b/0x2a0 [ 330.979564][T14287] validate_chain+0x1a3f/0x2140 [ 330.979583][T14287] ? __lock_acquire+0xab9/0xd20 [ 330.979618][T14287] __lock_acquire+0xab9/0xd20 [ 330.979648][T14287] ? __netdev_update_features+0xcb1/0x1be0 [ 330.979672][T14287] lock_acquire+0x120/0x360 [ 330.979702][T14287] ? __netdev_update_features+0xcb1/0x1be0 [ 330.979733][T14287] __mutex_lock+0x187/0x1350 [ 330.979752][T14287] ? __netdev_update_features+0xcb1/0x1be0 [ 330.979778][T14287] ? stack_trace_save+0x9c/0xe0 [ 330.979800][T14287] ? __pfx_stack_trace_save+0x10/0x10 [ 330.979821][T14287] ? stack_depot_save_flags+0x40/0x860 [ 330.979848][T14287] ? __netdev_update_features+0xcb1/0x1be0 [ 330.979874][T14287] ? __pfx___mutex_lock+0x10/0x10 [ 330.979893][T14287] ? bond_fix_features+0x191/0x1d0 [ 330.979920][T14287] __netdev_update_features+0xcb1/0x1be0 [ 330.979952][T14287] ? __pfx___netdev_update_features+0x10/0x10 [ 330.979977][T14287] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 330.979993][T14287] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 330.980015][T14287] ? __wake_up_common_lock+0x190/0x1f0 [ 330.980039][T14287] ? consume_skb+0xce/0xf0 [ 330.980058][T14287] ? netlink_broadcast_filtered+0x1216/0x12c0 [ 330.980080][T14287] netdev_change_features+0x72/0xd0 [ 330.980105][T14287] ? __pfx_netdev_change_features+0x10/0x10 [ 330.980128][T14287] ? cfg80211_netdev_notifier_call+0x1ee/0x1450 [ 330.980153][T14287] ? netif_set_tso_max_size+0x10e/0x1d0 [ 330.980176][T14287] bond_compute_features+0x615/0x680 [ 330.980207][T14287] ? __pfx_bond_compute_features+0x10/0x10 [ 330.980239][T14287] bond_netdev_event+0x72e/0xe80 [ 330.980264][T14287] ? __pfx_bond_netdev_event+0x10/0x10 [ 330.980286][T14287] ? inetdev_event+0x464/0x15b0 [ 330.980312][T14287] ? igmp_netdev_event+0x7c/0x770 [ 330.980339][T14287] notifier_call_chain+0x1b3/0x3e0 [ 330.980361][T14287] netdev_features_change+0x85/0xc0 [ 330.980378][T14287] ? __pfx_netdev_features_change+0x10/0x10 [ 330.980397][T14287] ? security_capable+0x7e/0x2e0 [ 330.980427][T14287] dev_ethtool+0x1536/0x19b0 [ 330.980456][T14287] ? __pfx_dev_ethtool+0x10/0x10 [ 330.980485][T14287] ? dev_load+0x21/0x1f0 [ 330.980503][T14287] dev_ioctl+0x392/0x1150 [ 330.980521][T14287] sock_do_ioctl+0x22c/0x300 [ 330.980549][T14287] ? __pfx_sock_do_ioctl+0x10/0x10 [ 330.980574][T14287] ? __lock_acquire+0xab9/0xd20 [ 330.980606][T14287] sock_ioctl+0x576/0x790 [ 330.980632][T14287] ? __pfx_sock_ioctl+0x10/0x10 [ 330.980657][T14287] ? __fget_files+0x2a/0x420 [ 330.980671][T14287] ? __fget_files+0x3a0/0x420 [ 330.980686][T14287] ? __fget_files+0x2a/0x420 [ 330.980710][T14287] ? bpf_lsm_file_ioctl+0x9/0x20 [ 330.980734][T14287] ? __pfx_sock_ioctl+0x10/0x10 [ 330.980758][T14287] __se_sys_ioctl+0xf9/0x170 [ 330.980782][T14287] do_syscall_64+0xfa/0x3b0 [ 330.980802][T14287] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.980819][T14287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.980837][T14287] ? clear_bhb_loop+0x60/0xb0 [ 330.980857][T14287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.980875][T14287] RIP: 0033:0x7f5423f8eec9 [ 330.980892][T14287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.980909][T14287] RSP: 002b:00007f54221d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.980928][T14287] RAX: ffffffffffffffda RBX: 00007f54241e6090 RCX: 00007f5423f8eec9 [ 330.980941][T14287] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 330.980953][T14287] RBP: 00007f5424011f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.980965][T14287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.980975][T14287] R13: 00007f54241e6128 R14: 00007f54241e6090 R15: 00007ffc7b9fb998 [ 330.980996][T14287]