last executing test programs: 1.863044841s ago: executing program 2 (id=4250): bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.786253223s ago: executing program 2 (id=4252): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x48) (async) r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff}, 0xfffffffffffffe9f) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4a13ff83da1dd1214139280e02c1022d9ae88cf44985572178f7c036855703be476a9d195c4ccc4c80755e151276329e21efa9fabd65d553d4a3dddb6341fe350926c64ed2a4bb48754212b656ca89e94d53b493f29be10b32f98521687167e7013563b86189d225c27a88e70f2052449d95be657f8ce37010f8f87f2921aee8e618927e3939a147ea40a92219891e31110de5abdc290d0154dfc95d93e232458aa5a6f6f3731a3e1a96ade34312fccec162f280a343cc7f"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYRES16], 0x4c}}, 0x4000880) (async) write$cgroup_pid(r2, &(0x7f0000000980), 0x20000992) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000008000000b2030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x2}) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xc, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)) (async) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) (async) pwritev(r8, &(0x7f0000000140)=[{&(0x7f0000000280)="00214717a78d70e8a36f7fa8543c2d9a43a4356d27e0", 0x16}], 0x1, 0x20000002, 0x0) 1.705226454s ago: executing program 1 (id=4253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25020000cb", @ANYRES32=r9, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x240408d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) listen(r5, 0xfffffffd) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x93, 0x9, @vifc_lcl_ifindex=r9, @multicast1}, 0x10) (async) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f00000002c0)=""/151, &(0x7f0000000100)=0x97) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="f9513154d103d59fd8bc9ee6ce56433e2382b87da84b53abd978dc4e2056f06be9599f520e444b9d53ec9caf19e64e952cb86aca8b71e86d98462fe6dda8909c487aa41d2d5bb505ecc4c44b5e39e4e3facc7e82a7a3c589b850699693cebe4301d67d551769a674564921fb4eb7d24579e98019750aca55e749ef26f03ce07e0acb5c22b1dee575316c6c5587206e4a90129e0b6d1c7f2e63936b8a73cfa7e8796b21b788fda08a374713433b305238fd3b5fce09eda17ec166d584b7db1ebd78cbf14604505eaf64a121c32fc63b55cab1103706991c42"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004804) 1.623302016s ago: executing program 2 (id=4255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x4c}, 0x28) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r3, 0x25, 0x2, @void}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = socket(0x1d, 0x2, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, 0x0, 0x5, {0x0, 0xf0, 0x2}, 0x1}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004cc0)={0x0, 0x989680}) r10 = socket$can_raw(0x1d, 0x3, 0x1) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r11, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getchain={0x5c, 0x66, 0x6, 0x70bd28, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0xb, 0x10}, {0xfff2, 0x10}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xffff8000}, {0x8, 0xb, 0x3fe}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0xd06}, {0x8, 0xb, 0x5ba2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004004}, 0x24008885) 1.489297737s ago: executing program 1 (id=4256): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x7, 0x1, 0x0, 0x51, 0xb55}}, {0x4}}]}]}, 0x5c}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4d6a7301ef7d6e2e}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000180001000f6d9206b6b7547c9c64ab2cbd7000000000000a001400fe04ff0600d49500"], 0x1c}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.29118076s ago: executing program 0 (id=4257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x2c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2, r2}, 0x14) 1.290916374s ago: executing program 3 (id=4258): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x2400c884}, 0x4008) 1.288478074s ago: executing program 1 (id=4259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800e000100696d6d65646961746500000024000280180002801400028008000340ebffffff07000180fffffffd08000140000000000900010073797a30000000000900020073797a32000000"], 0x90}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0xffffffff, 0xf0, 0x1d0, 0xf0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, 0xff000000, 0x0, 'veth0_to_team\x00', 'veth0_to_batadv\x00', {}, {}, 0x21, 0x2, 0x8}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x82}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x7}, {0x3, 0x4, 0x2}, 0x2, 0x81}}}, {{@ip={@rand_addr=0x64010100, @multicast1, 0xffffff00, 0xff000000, 'xfrm0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x5, 0x3, 0x4}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "00f5"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'vlan1\x00', {0xc18}}}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'veth1_virt_wifi\x00', 'vlan1\x00', {}, {}, 0x21, 0x1, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) (async) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b, r5}) (async) r7 = socket(0xa, 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000000)=0x8, 0x12) close(r9) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x14, r11, 0x1, 0x70bd27, 0xffffffff}, 0x14}}, 0x0) (async) r12 = socket$inet6(0xa, 0x800, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) (async) splice(r8, 0x0, r9, 0x0, 0x6, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r7, 0x8936, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f0000000100)={0x0, 0x8}) 1.288201248s ago: executing program 3 (id=4260): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) write(r4, &(0x7f00000001c0)="b4", 0x1) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000440)={0x5, 0x5}, 0x8) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 1.264243478s ago: executing program 0 (id=4262): socket(0x2, 0x80805, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1908100}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r5, 0x400, 0x7, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x10}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x3, 0x802e, 0x0, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x51}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x891}, 0x4840) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000808f9967f5d8b839c63e4dcc83d909124000440000000000900010073797a300000034000000001140000001100010000000000000000000000000a00000000ffae30ac7a71eccc43b91893ce24c12d36d99e77fb6709404b37d80e260130515b136e079502d76def487626"], 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a31000000000808f9967f5d8b839c63e4dcc83d909124000440000000000900010073797a300000034000000001140000001100010000000000000000000000000a00000000ffae30ac7a71eccc43b91893ce24c12d36d99e77fb6709404b37d80e260130515b136e079502d76def487626"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r2, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b24323cb4a75776", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) (async) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.26393778s ago: executing program 2 (id=4263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r3, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local}}, [0x5, 0x6, 0x10000, 0x1, 0xfffffffffffffbc3, 0x2, 0x5, 0x9, 0xa00e, 0xd, 0x6dd6, 0x9, 0x6, 0x30f2, 0x3]}, &(0x7f00000000c0)=0x100) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r4, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000040)={r5, 0x7a, 0x1e, "48c91e5605c0ccf6aaa0e510c12d25fa0a4b702f026bc9d3f4b632275035"}, 0x26) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 1.145300505s ago: executing program 3 (id=4265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmmsg$alg(r1, &(0x7f0000001c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24002894) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)={0x100, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0xa5, 0x7, 0x1, 0x0, "f3c7766f944683b3356b9ebb68868eb47490d70cd5cc6e41a0a0fd8069d192a2459bbc0c912d419ff4a7f40ea35723b2c6247024959350f04da857676d6980cf5fc1cab1e283760b117b98f456a312f977e7a5733f1f24a20afc61831286288c025b8d166375e3b4ac5f2954eabed28c2dac69e4ae6d1c71bf2093809da737a404b4d5e347808d13f01c8d3956afc30be249aea952f3134247608dfef594c1474b"}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}]}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x19, 0x7, 0x1, 0x0, "ed7180fbf71c993747fd82a7ab60545671a4b0f8b6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdc02, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041850}, 0x4000804) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x24}}, 0x4040000) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8814) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_newroute={0x14, 0x18, 0x200, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x5}}, 0x14}}, 0x0) 1.144996055s ago: executing program 1 (id=4266): r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000095"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a85009a10d943a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff81, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000980)={0x0, 0x3695, 0x1, [0x4, 0x3, 0x1, 0x2, 0x100], [0x7, 0x2, 0x6, 0x9, 0xd, 0x8, 0xfff, 0x4, 0x7ad, 0x0, 0x21f, 0x98, 0xfffffffffffffff9, 0x5, 0xfffffffffffffffa, 0x7, 0x7, 0x6, 0x80000001, 0xfffffffffffffffe, 0x0, 0x1, 0x8552, 0x1ff, 0x3, 0x0, 0x8, 0x3, 0x4, 0x1000, 0x800, 0xed5a, 0x7, 0xffffffffffffffc0, 0x40, 0xb, 0x15c4, 0x0, 0x7, 0xfffffffffffffffa, 0x5, 0x718, 0x1000, 0x800, 0x8, 0x800, 0xfffffffffffffffb, 0x4, 0x8f, 0xe66b, 0x0, 0x1, 0xa, 0x8000000000000001, 0x3, 0x6, 0x4, 0x1, 0x80000001, 0x4, 0x2, 0x336, 0x4, 0x2e, 0x0, 0x400, 0x856, 0x7, 0x4, 0x4d71, 0x0, 0x4, 0x3, 0x940, 0x1, 0xc3, 0x4, 0x4, 0x7, 0x0, 0x8, 0x9, 0x80, 0x7, 0x9, 0xb, 0xa, 0x1, 0x9, 0x0, 0x6, 0x16829b7, 0x3, 0xc9e8, 0x450, 0x7, 0x1, 0x70d0, 0x5, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x7, 0xfff, 0x3, 0x401, 0xc, 0x1, 0x8, 0x81, 0x3ff, 0x8, 0x2, 0x8, 0x81, 0x3, 0x4, 0xa1, 0x8, 0x8]}) unshare(0x40000080) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000dc0)={r3, 0x8, 0x1, [0xfffffffffffffffc, 0x1, 0x8, 0xffffffffffffffff, 0x8000], [0x3, 0x6, 0x10001, 0xc0000000000, 0x35400000, 0x7ff, 0x7, 0x1, 0x0, 0x0, 0x2, 0x7fff, 0x88, 0x2, 0x10000, 0xa, 0x6, 0xd, 0x5, 0xffffffffffc0d631, 0xfffffffffffffff1, 0x9, 0x4, 0x3e, 0x0, 0x9d28, 0x3, 0xb4f, 0x0, 0x5ee4e972, 0x7, 0x2, 0x8001, 0x7, 0x338, 0xc04, 0x7, 0xb, 0x2, 0x101, 0x7fff, 0x0, 0x9, 0x1, 0x5, 0x4, 0x2, 0x0, 0x1, 0x1, 0xb5ce, 0x0, 0x2, 0x80000000, 0xe, 0x0, 0x100000001, 0x377d, 0xffffffff, 0xff, 0x8, 0x96, 0xc0b, 0x2, 0x9, 0x77f, 0x846e, 0x800, 0x9, 0x1, 0x1, 0x8000000000000001, 0x9, 0xa37, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6, 0x4, 0x6, 0x75, 0x1, 0xc31, 0x2, 0x0, 0x4, 0x0, 0x5, 0x3, 0x7, 0x8000000000000000, 0x57, 0x8000000000000001, 0x280000, 0x3, 0x1, 0x0, 0x10, 0x7fffffff, 0x8, 0x6b98dc6d, 0x2, 0x1, 0x8, 0x7f, 0x9, 0x9, 0xf, 0xffffffffffffff52, 0x800, 0x8, 0xb1, 0xfffffffffffffe01, 0x6, 0x3, 0x0, 0x4a7, 0xa211, 0x6]}) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x44000}, 0x4000840) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff0000000000000000000000001e411591bb9b1059c53f2fd4be9922", @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b0001008a0000006e6c000014000280050009002900000008000100", @ANYRES32, @ANYRES32=r0], 0x4c}}, 0x0) 1.0626865s ago: executing program 2 (id=4267): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x1000000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4102}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x148, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x114, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xce, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1c85729597a3f"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 969.724652ms ago: executing program 4 (id=4268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="3800000000000029caac4e000000000008110000", @ANYRES32, @ANYBLOB="0007000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x67db80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r5], 0x1c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @var={0x3, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000440)=""/90, 0x44, 0x5a, 0x1, 0x3}, 0x28) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0xb791c1939ac22259, 0x0, 0x1, 0x2, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x5e, &(0x7f0000000340)=""/94, 0x41000, 0x10, '\x00', r5, @sched_cls=0x36, r6, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x3, 0x1000, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000600)=[r7], &(0x7f0000000680)=[{0x5, 0x2, 0x6, 0xc}, {0x1, 0x3, 0xd, 0x3}, {0x1, 0x4, 0x6, 0xb}, {0x0, 0xfffffff8, 0xe, 0x4}, {0x5, 0x1, 0xe, 0x9}], 0x10, 0xd3}, 0x94) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000500)={0x2a, 0x1}, 0xc) bind$qrtr(r8, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x10, r6}, 0x18) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) splice(r9, 0x0, r10, 0x0, 0x10500, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000008c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup=r10, 0xffffffffffffffff, 0x33, 0x30, 0x0, @void, @void, @void, @value=r11}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) 893.444751ms ago: executing program 3 (id=4269): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc4, 0x30, 0x20, 0x70bd2c, 0x25dfdbff, {0x10}, [@generic="8c45de632677606495b4d0aa1a08ce2126c34b70754becf019e3fe65cb97e8cc2cbab2db16bb58029fb4a31a5da8648134575f0b060efe93aa1cc371bfb937b98c6d92f42768e08f54fc3f7c97d997b53a4ed02dee00a0380fcb17cbf33ebef4bc9dccef109ab24a3165581faf9ec92cb39db6c10836d0698bda516f073fa75d25c59befa8d48af98daa86874724f54548e81614d607d651187e5ce9e1a5e9a69baacefd90396f2f60f07b1e29b1"]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000044) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x28, 0x20, 0x1, 0x401}, &(0x7f0000000280)=0x18) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3ff, 0xfffffffff7087adc}}]}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 885.426459ms ago: executing program 0 (id=4270): syz_emit_ethernet(0x324, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) 804.922468ms ago: executing program 4 (id=4271): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f0000000380)) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) listen(r1, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'gretap0\x00'}) 729.543444ms ago: executing program 0 (id=4272): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="01000000000007ca1e638c5773e608000300", @ANYRES64=r3], 0x80}}, 0x0) r4 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'b', ' *:* ', 'w\x00'}, 0x8) 717.113946ms ago: executing program 3 (id=4273): r0 = socket(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x5, 0x1, 0x9, 0x81, 0x7]}, &(0x7f00000000c0)=0x54) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020082395afa4d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 716.325268ms ago: executing program 4 (id=4274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000140)=0x401, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540217"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 633.778016ms ago: executing program 4 (id=4275): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x58) 540.806638ms ago: executing program 4 (id=4276): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000080)={@remote, @link_local, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@llc={0x4, {@llc={0xaa, 0xff, "81"}}}}}, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @remote, @bcast, @remote, @remote, @null, @default, @null]}, &(0x7f0000000080)=0x48, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 301.402599ms ago: executing program 0 (id=4277): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r2, 0x1, 0x0, 0x25dfdbff, {0x3a}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000140)=0x80) getsockopt$inet_tcp_int(r0, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4(r4, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x80000) 300.910263ms ago: executing program 2 (id=4278): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7d}, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket(0x21, 0x2, 0x10000000000002) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000008fcff", 0x58}], 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0xb0, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x98, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x86, 0x5, "140d84b077c7e4fd7aab6b684dc0945e869ba67fc7271650054dcf3a4b5b6acc59e0bc055c4dcf48504b1ce84cd57ccc4bf333cb4df346e5c51b5cf7284f65c4e2c83c4acba5c12ff0cb503f8898ced7af5e4d58582ec70ce663ea389d60cd92a904efb176811c471ebf901ee03edc76d07030feb887ef34863ac0d3df3d2a1e03df"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044094) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x4, 0xc}, 0x48) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000000400)={0x2, &(0x7f0000000880)=[{@fixed}, {@fixed}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRESOCT, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x1, [0x10]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) 251.192886ms ago: executing program 1 (id=4279): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0201000304000000000000000000000002000100000000000000f60c000000001cf2856606b03c4e46964603a7f84195"], 0x20}, 0x1, 0x7}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="00000000180000000000000029000000360000000800000000000000"], 0x40}}], 0x1, 0x4000014) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x0, @void}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r5, &(0x7f0000000080)="240000001a007f0214f9f4070009040803004000000000050002000008000f40fe00000e", 0x24) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@getchain={0x6c, 0x11, 0x300, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {}, {0xfff3}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xfffffffb}, {0x8, 0xb, 0x7}]}, 0x6c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f00000002c0)) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$fou(&(0x7f000000f1c0), r12) sendmsg$FOU_CMD_DEL(r12, &(0x7f000000f300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000f200)={0x14, r13, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4098) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYRES8=r3, @ANYRES32=r14, @ANYBLOB="f93787396a5f05075bd6cbbfaeb0108ed3b0ce6811bc8ee6c3e9994fd4a194df3f3021b8c36555eec3b746cb78dc9b9e39051859e355b322130235eac54f0e127c"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 174.079581ms ago: executing program 0 (id=4280): r0 = socket(0x26, 0xa, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x5, @private2, 0x9}]}, &(0x7f0000000080)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x4, 0x6, 0x80000001}, 0x10) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x4, 0x6, 0x80000001}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES16=r0, @ANYBLOB="d08d802daff9eaca19eeca63addd7efe6d235bc863"], 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES16=r0, @ANYBLOB="d08d802daff9eaca19eeca63addd7efe6d235bc863"], 0x28}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r10, &(0x7f0000001300)="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", 0x1000, 0x800, 0x0, 0x0) (async) sendto$inet6(r10, &(0x7f0000001300)="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", 0x1000, 0x800, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000005c0)={0x8, {{0x2, 0x4e23, @local}}}, 0x88) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f00000005c0)={0x8, {{0x2, 0x4e23, @local}}}, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x108, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xd4, 0x2, [@TCA_U32_ACT={0xac, 0x7, [@m_skbedit={0xa8, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x59, 0x6, "997dc98ad3edace647ff83ab50f8368d65614888bc2c5d2e627896a616160345e8eb6c72076a611c7f07ff505a2e5be6a9337ad9550e0402aca017fe4fbb573e7c2ac45313b81a86da215a98381a885217517ec0d8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x108}}, 0x24040084) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000240)=0x5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2c, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000844) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000078070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000401e26b78dfaa9492c00000018580000040000000000000000000000180000002c00000000000000fdffffffbf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000078070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000401e26b78dfaa9492c00000018580000040000000000000000000000180000002c00000000000000fdffffffbf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x13, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0x8000fff, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x100, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) (async) ioctl$sock_SIOCETHTOOL(r14, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x13, 0x3169, 0x9, 0x1, 0x6, 0x9, 0x8, 0x2, 0x8000fff, 0x10000, 0x4, 0x0, 0x4, 0x5, 0x4, 0x100, 0x5, 0x1, 0x2400, 0xf529, 0x9, 0xede, 0x80000000}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) 171.07484ms ago: executing program 3 (id=4281): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) recvfrom$ax25(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @null, @bpq0, 0x3, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000001780)=ANY=[@ANYBLOB="bc100000", @ANYRES16=r7, @ANYBLOB="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"/4278], 0x10bc}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYRES32=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0xa3, &(0x7f0000000540)=""/163, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r8, 0x0, 0x14, 0x83, &(0x7f0000000300)="213391c36909ebb32d1a56933f0c56d79361ffb0", &(0x7f0000000340)=""/131, 0x4, 0x0, 0x87, 0xc6, &(0x7f0000001540)="e911c1cb778de8975bf68b00f619e4247ad1fa337d7d2139d3f28f30536894fb9dc1dc0ba4c7f3330b7f1e6bd9a417af8bbac47057774e9d06e16be78ee18de291f45a783cf5075b88a635aeef2c64778637338124e4d83f74798b064ca01c0829b81de0a09b193fadc68a3af3f7a303030ac23280875ec50ac94d1b5a036e61b33b945d2b6d25", &(0x7f0000001600)="df34b50a7de6022e5f33533a1370090b3ab1e512b87e627e6ee28d61065f69fec21f76b6152bbaba4d51193ad90c75048ddaa27ce6716b6e2f63c8058f14586a37aef902830f71bc32fc89fc58c5cb4efd1790fd05f15397742ffb617b33454868bf5274829350e629334b849830b74bfe67b87b20aaf8ec795123978616058d9d6f671b0a3fcc232112471e6d760e3634adc83e76acc63bf003da9af0568e7f6dd04f36ac18feba584a9ce910dfd3c0597895bdf388aca9d1e8d33709d3afb6c022d813b7a2", 0xb}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r8, 0x0, 0x14, 0x83, &(0x7f0000000300)="213391c36909ebb32d1a56933f0c56d79361ffb0", &(0x7f0000000340)=""/131, 0x4, 0x0, 0x87, 0xc6, &(0x7f0000001540)="e911c1cb778de8975bf68b00f619e4247ad1fa337d7d2139d3f28f30536894fb9dc1dc0ba4c7f3330b7f1e6bd9a417af8bbac47057774e9d06e16be78ee18de291f45a783cf5075b88a635aeef2c64778637338124e4d83f74798b064ca01c0829b81de0a09b193fadc68a3af3f7a303030ac23280875ec50ac94d1b5a036e61b33b945d2b6d25", &(0x7f0000001600)="df34b50a7de6022e5f33533a1370090b3ab1e512b87e627e6ee28d61065f69fec21f76b6152bbaba4d51193ad90c75048ddaa27ce6716b6e2f63c8058f14586a37aef902830f71bc32fc89fc58c5cb4efd1790fd05f15397742ffb617b33454868bf5274829350e629334b849830b74bfe67b87b20aaf8ec795123978616058d9d6f671b0a3fcc232112471e6d760e3634adc83e76acc63bf003da9af0568e7f6dd04f36ac18feba584a9ce910dfd3c0597895bdf388aca9d1e8d33709d3afb6c022d813b7a2", 0xb}, 0x50) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000600)={'ipvlan1\x00', {0x2, 0x0, @empty}}) (async) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000600)={'ipvlan1\x00', {0x2, 0x0, @empty}}) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d000100756470f7ff797a32000000000c0002800800020013", @ANYBLOB="feae35b64aaaa877e296ad746366b3d6ea83736b5a3ae0252bcd58cb5916abd80eb93ab5f4a44a29bdf9cbd57be6bbc6c0ab085adec93f12ed4bf4b8f8d30bb86d331ee5e22f2f69f5844529b2a3604be8ec848f61af162e621bf05d992e963759b42c8fc187a4776f462491cb9cdbf1bddf3bef82903f0cb8f27327f0eea282a740bcda2adc4c8cf8959bc19513a8c0d2d38868f2518f65e50bd9ebee199306bee424edd1d1e941798d4c0718eef10b3b365e91245f5dc567f60fb61db441fc281964c4e75adfdf74b08defa7e6cb2acae963709662f2cef54efaf51e6339f879537907b3d81734810d6d01", @ANYRESHEX, @ANYRES8=r5, @ANYBLOB="3f7f682cd563166b319b6ea8fbee6cd636718997f5d7a5114b7bec0c50953d4a849fbfab36ab49bbe99576568d4869"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x240401c5) (async) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d000100756470f7ff797a32000000000c0002800800020013", @ANYBLOB="feae35b64aaaa877e296ad746366b3d6ea83736b5a3ae0252bcd58cb5916abd80eb93ab5f4a44a29bdf9cbd57be6bbc6c0ab085adec93f12ed4bf4b8f8d30bb86d331ee5e22f2f69f5844529b2a3604be8ec848f61af162e621bf05d992e963759b42c8fc187a4776f462491cb9cdbf1bddf3bef82903f0cb8f27327f0eea282a740bcda2adc4c8cf8959bc19513a8c0d2d38868f2518f65e50bd9ebee199306bee424edd1d1e941798d4c0718eef10b3b365e91245f5dc567f60fb61db441fc281964c4e75adfdf74b08defa7e6cb2acae963709662f2cef54efaf51e6339f879537907b3d81734810d6d01", @ANYRESHEX, @ANYRES8=r5, @ANYBLOB="3f7f682cd563166b319b6ea8fbee6cd636718997f5d7a5114b7bec0c50953d4a849fbfab36ab49bbe99576568d4869"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x240401c5) 121.217987ms ago: executing program 4 (id=4282): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r1) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xd, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x11, &(0x7f0000000400)=0x9, 0x4) accept$ax25(r2, &(0x7f0000000380)={{0x3, @null}, [@bcast, @default, @bcast, @netrom, @rose, @bcast, @remote, @null]}, &(0x7f0000000340)=0xfffffffffffffde5) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x40047440, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000002f80)=""/4116, 0x1d, 0x1014, 0x1}, 0x28) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd00000010000100050c10000000000000000000", 0x58}], 0x1) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x44, r11, 0xe20, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 0s ago: executing program 1 (id=4283): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000c30400"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="10000040010000000000004010020000d5bea2784d005b17"], 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x85) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x110c2300fe) sendmsg$nl_generic(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xfc, 0x42, 0x100, 0x70bd25, 0x25dfdbfb, {0xf}, [@generic="dc11688284dd82c8834d60e282ec0a7ab9ad896cbe324366416839508a308852b6b0e5c0c317700f2277fa602eb57b243d5da224908e0d82bd80efd018fbd7e62ac7664052a82302c5db5186faa920bf7585a284cb3973793e099fa93f2f97f822bae6a30dc120aca2d9fc33469d6e30bc117a9159d5d5e6cd5a11e7592b97e490", @generic="944a118d07880c4cc3b26a4177725896dbc0273d0c5110c7c75662e435066436dcff64212baec7dc493726eb9baf4c8c334505301cd68adc00ce9db3432ff9245f8fe70821ba8d2512e55f7f6e977dc8f5d11f682e7ed8ae07f0cfeb3315a75de7546775484d"]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x884) kernel console output (not intermixed with test programs): ac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.512231][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 381.523620][T15207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.542825][T15207] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 381.685791][T15219] bond4 (unregistering): Released all slaves [ 381.720608][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2628'. [ 381.826059][T15226] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 382.016914][T15253] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 382.041125][T15247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2632'. [ 382.872866][T15258] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 382.924242][T15272] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 382.961440][T15272] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 383.013262][T15273] netem: change failed [ 383.045174][T15283] TCP: TCP_TX_DELAY enabled [ 383.073953][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 383.083874][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2643'. [ 383.156771][T15285] bond10: option xmit_hash_policy: invalid value (64) [ 383.166958][T15285] bond10 (unregistering): Released all slaves [ 383.434499][T15308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 383.498811][T15308] tipc: Enabled bearer , priority 0 [ 383.511530][T15315] sctp: [Deprecated]: syz.0.2654 (pid 15315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.511530][T15315] Use struct sctp_sack_info instead [ 383.555128][T15308] tipc: Resetting bearer [ 383.784671][T15320] netlink: 'syz.3.2657': attribute type 11 has an invalid length. [ 384.027106][T15348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2660'. [ 384.045011][T15324] syzkaller1: entered promiscuous mode [ 384.067284][T15324] syzkaller1: entered allmulticast mode [ 384.275629][T15366] netlink: 'syz.2.2665': attribute type 39 has an invalid length. [ 384.430513][T15371] bond7: option resend_igmp: invalid value (32767) [ 384.437265][T15371] bond7: option resend_igmp: allowed values 0 - 255 [ 384.446266][T15371] bond7 (unregistering): Released all slaves [ 411.598415][T15388] __nla_validate_parse: 1 callbacks suppressed [ 411.598463][T15388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2670'. [ 412.020042][T15413] tipc: Enabled bearer , priority 0 [ 412.062031][T15413] syzkaller0: entered promiscuous mode [ 412.070014][T15420] SET target dimension over the limit! [ 412.088358][T15413] syzkaller0: entered allmulticast mode [ 412.311272][T15432] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2677'. [ 412.337016][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.388896][T15434] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.398524][T15434] netlink: 'syz.4.2681': attribute type 5 has an invalid length. [ 412.446368][T15435] tipc: Resetting bearer [ 412.465276][T15410] tipc: Resetting bearer [ 412.658531][T15410] tipc: Disabling bearer [ 412.780525][T15443] netlink: 'syz.3.2683': attribute type 15 has an invalid length. [ 412.832515][T15443] syzkaller1: entered promiscuous mode [ 412.838033][T15443] syzkaller1: entered allmulticast mode [ 413.050647][ T30] audit: type=1800 audit(1763731151.647:10): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2686" name="memory.events" dev="tmpfs" ino=2552 res=0 errno=0 [ 413.082580][T15451] syzkaller0: entered promiscuous mode [ 413.088100][T15451] syzkaller0: entered allmulticast mode [ 413.120236][ T30] audit: type=1804 audit(1763731151.647:11): pid=15454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2686" name="/newroot/499/memory.events" dev="tmpfs" ino=2552 res=1 errno=0 [ 413.127182][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2687'. [ 413.156976][T15458] netlink: 'syz.0.2688': attribute type 12 has an invalid length. [ 413.194747][T15456] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2687'. [ 413.220506][T15458] bond7: option primary_reselect: invalid value (255) [ 413.227663][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 413.241999][T15458] bond7 (unregistering): Released all slaves [ 413.270693][T15461] block nbd1: Unsupported socket: should be TCP or UNIX. [ 413.487911][T15456] syz.1.2687 (15456) used greatest stack depth: 17832 bytes left [ 413.590492][T15472] netlink: 'syz.1.2694': attribute type 63 has an invalid length. [ 413.683802][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2694'. [ 413.712927][T15484] ip6_vti0: entered allmulticast mode [ 413.788526][T15473] ip6_vti0: left allmulticast mode [ 413.853302][T15490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2700'. [ 413.873108][T15492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2701'. [ 413.962373][T15496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.122014][T15506] xt_hashlimit: size too large, truncated to 1048576 [ 414.660051][T15540] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 414.988967][T15564] syzkaller1: entered promiscuous mode [ 415.007728][T15564] syzkaller1: entered allmulticast mode [ 415.022915][T15569] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 415.491696][T15596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.603929][T15596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.709781][T15596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.827375][T15596] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.010561][T15607] hsr_slave_0 (unregistering): left promiscuous mode [ 416.074881][T15636] block nbd1: Unsupported socket: should be TCP or UNIX. [ 416.091232][T15636] nbd: must specify at least one socket [ 416.107684][T15636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.123465][ T7555] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.151237][ T7555] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.177424][ T7555] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.245913][ T7555] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.340583][T15647] netlink: 'syz.4.2749': attribute type 21 has an invalid length. [ 416.891914][T15688] netlink: 'syz.2.2759': attribute type 3 has an invalid length. [ 416.927526][T15690] netlink: 'syz.2.2759': attribute type 3 has an invalid length. [ 416.996355][T15699] tipc: Enabling of bearer rejected, failed to enable media [ 417.218788][T15707] bond7: entered promiscuous mode [ 417.229857][T15707] bond7: entered allmulticast mode [ 417.236808][T15707] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.245915][T15715] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 417.342118][T15720] netlink: 'syz.4.2766': attribute type 17 has an invalid length. [ 417.370859][T15720] __nla_validate_parse: 8 callbacks suppressed [ 417.370878][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.386343][T15729] netlink: 'syz.4.2766': attribute type 17 has an invalid length. [ 417.412842][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 417.422138][T15720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.426064][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.435593][T15731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'. [ 417.448223][T15729] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.463251][T15736] netlink: 'syz.0.2770': attribute type 2 has an invalid length. [ 417.464557][T15720] gretap0: entered promiscuous mode [ 417.482889][T15720] gretap0: left promiscuous mode [ 417.507782][T15729] gretap0: entered promiscuous mode [ 417.512427][T15737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2770'. [ 417.530600][T15729] gretap0: left promiscuous mode [ 417.576849][T15740] pimreg3: entered allmulticast mode [ 417.822371][T15761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2779'. [ 417.882768][T15767] netlink: 'syz.3.2780': attribute type 1 has an invalid length. [ 418.004022][T15767] 8021q: adding VLAN 0 to HW filter on device bond8 [ 418.024864][T15781] netlink: 'syz.0.2783': attribute type 5 has an invalid length. [ 418.038545][T15785] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 418.044640][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 418.092204][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2784'. [ 418.503327][T15814] bridge0: entered allmulticast mode [ 418.685920][T15826] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 419.042361][T15855] nbd: must specify at least one socket [ 419.048487][T15856] nbd: must specify at least one socket [ 419.063952][T15858] netlink: 'syz.1.2807': attribute type 8 has an invalid length. [ 419.259290][T15870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.061383][ T6583] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.092053][ T6583] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.107633][T15913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.138478][T15912] x_tables: unsorted entry at hook 1 [ 420.148489][T15910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.183268][T15917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.435415][T15924] 8021q: VLANs not supported on gre0 [ 420.509136][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.519438][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.540642][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.569349][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.579315][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.596463][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 420.608134][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 420.618566][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 420.629091][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 420.638618][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 420.989960][T15928] chnl_net:caif_netlink_parms(): no params data found [ 421.177474][T15966] netlink: 'syz.1.2837': attribute type 21 has an invalid length. [ 421.311616][T15928] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.323264][T15928] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.330692][T15928] bridge_slave_0: entered allmulticast mode [ 421.339188][T15928] bridge_slave_0: entered promiscuous mode [ 421.348901][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.356855][T15928] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.367053][T15928] bridge_slave_1: entered allmulticast mode [ 421.379906][T15928] bridge_slave_1: entered promiscuous mode [ 421.469544][T15928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.491986][T15977] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 421.500277][T15977] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 421.512557][T15928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.593599][T15987] netlink: 'syz.0.2843': attribute type 4 has an invalid length. [ 421.679249][T15928] team0: Port device team_slave_0 added [ 421.703033][T15928] team0: Port device team_slave_1 added [ 421.739362][T15991] delete_channel: no stack [ 421.835778][T15928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.843613][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.871866][T15928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.885223][T15928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.893008][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.921294][T15928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.081964][T15928] hsr_slave_0: entered promiscuous mode [ 422.101733][T15928] hsr_slave_1: entered promiscuous mode [ 422.112709][T15928] debugfs: 'hsr0' already exists in 'hsr' [ 422.125652][T15928] Cannot create hsr debugfs directory [ 422.395858][T16010] __nla_validate_parse: 15 callbacks suppressed [ 422.395879][T16010] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2852'. [ 422.530802][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 422.562591][T16020] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2856'. [ 422.610750][T15928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.626581][T15928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.672719][ T5839] Bluetooth: hci1: command tx timeout [ 422.713838][T16029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.764138][T15928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.794879][T15928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.851152][T16036] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2860'. [ 422.885981][T15928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.896467][T15928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.996138][T15928] bond0: (slave netdevsim0): Releasing backup interface [ 423.006516][T15928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.017331][T15928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.167077][T16054] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2866'. [ 423.264552][T15928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.285110][T15928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.319420][T15928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.336662][T15928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.515024][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 423.670534][T15928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.725213][T15928] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.731544][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 423.748594][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.755806][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.765274][T16097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 423.816104][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.823318][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.868556][T16103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 423.870864][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2877'. [ 423.921159][T16099] netlink: 'syz.0.2879': attribute type 64 has an invalid length. [ 424.448811][T15928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.477664][T16135] syzkaller1: entered promiscuous mode [ 424.494336][T16135] syzkaller1: entered allmulticast mode [ 424.601536][T15928] veth0_vlan: entered promiscuous mode [ 424.670962][T15928] veth1_vlan: entered promiscuous mode [ 424.746287][T15928] veth0_macvtap: entered promiscuous mode [ 424.752759][ T5839] Bluetooth: hci1: command tx timeout [ 424.777807][T15928] veth1_macvtap: entered promiscuous mode [ 424.810047][T15928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.847948][T15928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.899490][ T6583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.932239][ T6583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.971014][ T6583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.016660][ T6583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.072203][T16167] tipc: Disabling bearer [ 425.188906][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.197235][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.322401][ T7555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.351901][ T7555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.552087][T16188] netlink: 'syz.4.2906': attribute type 3 has an invalid length. [ 425.774411][T16208] sctp: [Deprecated]: syz.1.2909 (pid 16208) Use of int in maxseg socket option. [ 425.774411][T16208] Use struct sctp_assoc_value instead [ 425.834718][T16207] lo speed is unknown, defaulting to 1000 [ 425.841051][T16207] lo speed is unknown, defaulting to 1000 [ 425.849374][T16207] lo speed is unknown, defaulting to 1000 [ 425.931669][T16207] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 425.982626][T16207] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 426.013514][T16217] ip6t_srh: unknown srh invflags 4000 [ 426.048665][T16207] lo speed is unknown, defaulting to 1000 [ 426.059035][T16207] lo speed is unknown, defaulting to 1000 [ 426.066983][T16207] lo speed is unknown, defaulting to 1000 [ 426.075065][T16207] lo speed is unknown, defaulting to 1000 [ 426.082887][T16207] lo speed is unknown, defaulting to 1000 [ 426.090646][T16207] lo speed is unknown, defaulting to 1000 [ 426.134836][T16220] syzkaller1: entered promiscuous mode [ 426.141984][T16220] syzkaller1: entered allmulticast mode [ 426.206310][T16224] sock: sock_set_timeout: `syz.4.2917' (pid 16224) tries to set negative timeout [ 426.345908][T16225] pim6reg: entered allmulticast mode [ 426.411479][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.429092][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.440637][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.449045][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.458135][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.509927][T16228] lo speed is unknown, defaulting to 1000 [ 426.623127][T16236] xt_hashlimit: max too large, truncated to 1048576 [ 426.685651][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.765440][T16251] Bluetooth: MGMT ver 1.23 [ 426.781979][T16245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.820838][T16258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.842120][ T5839] Bluetooth: hci1: command tx timeout [ 426.881557][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.998825][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.162925][ T50] batman_adv: batadv0: Removing interface: netdevsim0 [ 427.178304][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.372603][T16228] chnl_net:caif_netlink_parms(): no params data found [ 427.544694][T16300] __nla_validate_parse: 9 callbacks suppressed [ 427.544815][T16300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2940'. [ 427.612665][ T50] bridge_slave_0: left allmulticast mode [ 427.619022][ T50] bridge_slave_0: left promiscuous mode [ 427.627649][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.640298][T16303] netlink: 'syz.4.2941': attribute type 9 has an invalid length. [ 427.987465][ T50] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 427.996216][ T50] geneve1 (unregistering): left promiscuous mode [ 428.142344][ T50] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 428.150983][ T50] bridge3 (unregistering): left promiscuous mode [ 428.511543][ T5839] Bluetooth: hci0: command tx timeout [ 428.626135][ T50] bond0 (unregistering): left promiscuous mode [ 428.632418][ T50] bond_slave_0: left promiscuous mode [ 428.637948][ T50] bond_slave_1: left promiscuous mode [ 428.645034][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.656063][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.668063][ T50] bond0 (unregistering): Released all slaves [ 428.767212][ T50] bond1 (unregistering): Released all slaves [ 428.867157][ T50] bond2 (unregistering): Released all slaves [ 428.880815][ T50] bond3 (unregistering): Released all slaves [ 428.893169][ T50] bond4 (unregistering): Released all slaves [ 428.905505][ T50] bond5 (unregistering): Released all slaves [ 428.911613][ T5839] Bluetooth: hci1: command tx timeout [ 428.924975][ T50] bond6 (unregistering): (slave lo): Releasing backup interface [ 428.934919][ T50] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 428.947771][ T50] bond6 (unregistering): Released all slaves [ 429.048973][ T50] bond7 (unregistering): Released all slaves [ 429.263637][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2944'. [ 429.338545][ T50] tipc: Disabling bearer [ 429.352050][ T50] tipc: Left network mode [ 429.357213][T16228] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.366139][T16228] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.374785][T16228] bridge_slave_0: entered allmulticast mode [ 429.399368][T16228] bridge_slave_0: entered promiscuous mode [ 429.424559][T16228] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.452404][T16228] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.470746][T16228] bridge_slave_1: entered allmulticast mode [ 429.478562][T16228] bridge_slave_1: entered promiscuous mode [ 429.478977][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2950'. [ 429.522980][T16334] nbd: must specify at least one socket [ 429.634376][T16228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.674967][T16340] netlink: 183184 bytes leftover after parsing attributes in process `syz.3.2952'. [ 429.713213][T16228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.743814][T16352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.972732][T16228] team0: Port device team_slave_0 added [ 429.991621][T16352] syzkaller1: entered promiscuous mode [ 429.997128][T16352] syzkaller1: entered allmulticast mode [ 430.022130][T16228] team0: Port device team_slave_1 added [ 430.102765][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2960'. [ 430.173130][ T50] batadv0: left promiscuous mode [ 430.196114][T16379] netlink: 'syz.3.2962': attribute type 1 has an invalid length. [ 430.220179][ T50] hsr_slave_1: left promiscuous mode [ 430.243574][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.266638][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.294782][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.303263][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.333092][ T50] veth1_macvtap: left promiscuous mode [ 430.339232][ T50] veth0_macvtap: left promiscuous mode [ 430.345274][ T50] veth1_vlan: left promiscuous mode [ 430.408502][T16394] netlink: 'syz.2.2965': attribute type 10 has an invalid length. [ 430.590399][ T5839] Bluetooth: hci0: command tx timeout [ 430.786122][ T50] batadv_slave_1 (unregistering): left allmulticast mode [ 430.856841][ T50] team0 (unregistering): Port device team_slave_1 removed [ 430.894445][ T50] team0 (unregistering): Port device team_slave_0 removed [ 431.315816][T16228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.322907][T16228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.349437][T16228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.362253][T16228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.369406][T16228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.397043][T16228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.457052][T16382] lo speed is unknown, defaulting to 1000 [ 431.599766][T16399] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2966'. [ 431.610943][T16228] hsr_slave_0: entered promiscuous mode [ 431.617724][T16228] hsr_slave_1: entered promiscuous mode [ 431.647542][T16401] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2967'. [ 431.660670][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2966'. [ 431.865507][ T50] IPVS: stop unused estimator thread 0... [ 431.977961][T16412] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 431.998267][T16412] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.2972'. [ 432.222629][T16423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 432.592298][ T30] audit: type=1107 audit(1763731171.187:12): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Sø§Ù ‚=¼l&GC¬•Vâúà»+cêÈiRqJ µF`@ñ¤±²¤ƒ×5éËL¥¡7Å‘Ê ”Ã!ØaZô' [ 432.600744][T16453] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 432.618745][T16228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.628146][T16453] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 432.654931][T16453] netlink: 'syz.4.2982': attribute type 2 has an invalid length. [ 432.656238][T16228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.669868][T16453] netlink: 'syz.4.2982': attribute type 2 has an invalid length. [ 432.679621][ T5839] Bluetooth: hci0: command tx timeout [ 432.689641][T16453] netlink: 'syz.4.2982': attribute type 2 has an invalid length. [ 432.699515][T16228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.708539][T16453] netlink: 'syz.4.2982': attribute type 1 has an invalid length. [ 432.712396][T16228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.723173][T16453] netlink: 'syz.4.2982': attribute type 2 has an invalid length. [ 432.898953][T16471] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.916627][T16228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.943214][T16228] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.998433][ T6601] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.005665][ T6601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.040785][ T6601] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.047975][ T6601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.138472][T16486] xt_ipcomp: unknown flags 1D [ 433.235905][T16492] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.435788][T16502] bond6: entered promiscuous mode [ 433.442060][T16502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 433.475181][T16228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.563060][T16508] __nla_validate_parse: 1 callbacks suppressed [ 433.563077][T16508] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2999'. [ 433.573954][T16228] veth0_vlan: entered promiscuous mode [ 433.592834][T16228] veth1_vlan: entered promiscuous mode [ 433.645513][T16228] veth0_macvtap: entered promiscuous mode [ 433.673814][T16228] veth1_macvtap: entered promiscuous mode [ 433.727386][T16228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.764184][T16228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.800965][ T7555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.822049][ T7555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.836730][ T7555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.873205][ T7555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.038222][T16521] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3004'. [ 434.049884][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.063992][T16521] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3004'. [ 434.088760][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.149166][ T7555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.165501][ T7555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.233520][T16528] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.438749][T16547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.487598][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 434.603686][T16550] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 434.752564][ T5839] Bluetooth: hci0: command tx timeout [ 434.842097][T16557] team0: Port device dummy0 added [ 435.097036][T16573] tipc: Started in network mode [ 435.130508][T16573] tipc: Node identity 0e1e585bdaee, cluster identity 4711 [ 435.149340][T16573] tipc: Enabled bearer , priority 0 [ 435.185070][T16578] syzkaller0: entered promiscuous mode [ 435.197283][T16578] syzkaller0: entered allmulticast mode [ 435.281168][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3020'. [ 435.304776][T16573] tipc: Resetting bearer [ 435.366508][T16572] tipc: Resetting bearer [ 435.378832][ T5148] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.388287][ T5148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.399538][ T5148] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.421805][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.440479][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.452307][T16572] tipc: Disabling bearer [ 435.485653][ T2912] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.555453][T16598] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 435.606015][ T2912] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.673611][T16588] lo speed is unknown, defaulting to 1000 [ 435.715046][ T2912] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 435.762350][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3026'. [ 435.887818][ T2912] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.123877][T16627] pimreg: entered allmulticast mode [ 436.266868][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 436.286397][T16633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 436.296593][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 436.362757][ T2912] bridge_slave_1: left allmulticast mode [ 436.375164][ T2912] bridge_slave_1: left promiscuous mode [ 436.397213][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.424576][ T2912] bridge_slave_0: left promiscuous mode [ 436.434841][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.784162][T16666] x_tables: unsorted underflow at hook 4 [ 436.888685][ T2912] bond3 (unregistering): (slave gretap1): Releasing active interface [ 436.957133][T16668] sctp: [Deprecated]: syz.4.3041 (pid 16668) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.957133][T16668] Use struct sctp_sack_info instead [ 437.242761][ T2912] bond3 (unregistering): (slave bridge4): Releasing active interface [ 437.300926][ T2912] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 437.422502][ T2912] bond9 (unregistering): (slave bridge8): Releasing active interface [ 437.471095][ T5839] Bluetooth: hci2: command tx timeout [ 437.759621][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.769746][ T2912] bond_slave_0: left promiscuous mode [ 437.775497][ T2912] bond_slave_0: left allmulticast mode [ 437.782881][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.792356][ T2912] bond_slave_1: left promiscuous mode [ 437.797844][ T2912] bond_slave_1: left allmulticast mode [ 437.804012][ T2912] bond0 (unregistering): Released all slaves [ 437.819315][ T2912] bond1 (unregistering): Released all slaves [ 437.832444][ T2912] bond2 (unregistering): Released all slaves [ 437.848606][ T2912] bond3 (unregistering): Released all slaves [ 437.861642][ T2912] bond4 (unregistering): Released all slaves [ 437.876007][ T2912] bond5 (unregistering): Released all slaves [ 437.894340][ T2912] bond6 (unregistering): Released all slaves [ 437.914343][ T2912] bond7 (unregistering): Released all slaves [ 438.017006][ T2912] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 438.028339][ T2912] bond8 (unregistering): Released all slaves [ 438.042883][ T2912] bond9 (unregistering): Released all slaves [ 438.065922][T16673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3043'. [ 438.079384][T16673] bridge_slave_1: entered allmulticast mode [ 438.118680][T16588] chnl_net:caif_netlink_parms(): no params data found [ 438.187034][ T2912] : left promiscuous mode [ 438.468480][ T2912] tipc: Disabling bearer [ 438.485892][ T2912] tipc: Left network mode [ 438.814426][T16588] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.839483][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.850437][T16588] bridge_slave_0: entered allmulticast mode [ 438.858785][T16588] bridge_slave_0: entered promiscuous mode [ 438.877864][T16713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3056'. [ 438.899839][T16588] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.920535][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.935040][T16588] bridge_slave_1: entered allmulticast mode [ 438.945173][T16588] bridge_slave_1: entered promiscuous mode [ 439.103043][T16588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.173728][T16588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.312252][T16739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.321426][ T6587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.343763][ T6587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.368214][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 439.421389][T16588] team0: Port device team_slave_0 added [ 439.437714][T16588] team0: Port device team_slave_1 added [ 439.515801][T16588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.538163][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.567907][ T5839] Bluetooth: hci2: command tx timeout [ 439.574485][T16588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.587783][T16588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.597927][T16588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.625723][T16588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.676420][ T2912] hsr_slave_0: left promiscuous mode [ 439.684275][ T2912] hsr_slave_1: left promiscuous mode [ 439.702390][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.714049][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.722394][ T2912] batman_adv: batadv0: Removing interface: vlan2 [ 439.743419][ T2912] pim6reg (unregistering): left allmulticast mode [ 439.761031][ T2912] pimreg3 (unregistering): left allmulticast mode [ 440.140657][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.347762][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 440.399862][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 440.511424][T16776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 441.072513][T16588] hsr_slave_0: entered promiscuous mode [ 441.091418][T16588] hsr_slave_1: entered promiscuous mode [ 441.097964][T16588] debugfs: 'hsr0' already exists in 'hsr' [ 441.126572][T16588] Cannot create hsr debugfs directory [ 441.135507][T16789] lo: entered promiscuous mode [ 441.151712][T16789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.174139][T16788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3074'. [ 441.488846][ T2912] IPVS: stop unused estimator thread 0... [ 441.518877][T16796] gtp3: entered promiscuous mode [ 441.633379][ T5148] Bluetooth: hci2: command tx timeout [ 441.718662][T16825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3085'. [ 441.740883][T16823] validate_nla: 3 callbacks suppressed [ 441.740902][T16823] netlink: 'syz.4.3083': attribute type 13 has an invalid length. [ 441.759256][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 441.771407][T16825] netlink: 'syz.1.3085': attribute type 28 has an invalid length. [ 441.779879][T16825] netlink: 'syz.1.3085': attribute type 3 has an invalid length. [ 441.790008][T16825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3085'. [ 441.839736][T16823] netlink: 'syz.4.3083': attribute type 17 has an invalid length. [ 441.844408][T16832] netlink: 'syz.3.3087': attribute type 1 has an invalid length. [ 441.927144][T16832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.935550][T16823] lo: left promiscuous mode [ 441.947729][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 441.957893][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3088'. [ 442.017032][T16823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.050004][T16836] veth3: entered promiscuous mode [ 442.058360][T16836] bond1: (slave veth3): Enslaving as an active interface with a down link [ 442.076732][T16832] bond1: entered allmulticast mode [ 442.095603][T16841] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 442.101254][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 442.284613][T16588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 442.326257][T16588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 442.343680][T16588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 442.384552][T16588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.511320][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 442.512847][ T5148] Bluetooth: hci0: command 0x0c1a tx timeout [ 442.531595][T16870] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 442.675242][T16588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.723761][T16588] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.740463][T16874] netlink: 'syz.4.3097': attribute type 11 has an invalid length. [ 442.756280][T16874] netlink: 'syz.4.3097': attribute type 11 has an invalid length. [ 442.859486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.866722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.884494][T16889] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 442.968006][T16894] netlink: 'syz.4.3104': attribute type 2 has an invalid length. [ 442.971081][ T7554] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.982933][ T7554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.013098][T16898] netlink: 'syz.4.3104': attribute type 2 has an invalid length. [ 443.396736][T16926] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003 [ 443.476520][T16588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.564266][T16588] veth0_vlan: entered promiscuous mode [ 443.577888][T16588] veth1_vlan: entered promiscuous mode [ 443.625371][T16588] veth0_macvtap: entered promiscuous mode [ 443.649076][T16588] veth1_macvtap: entered promiscuous mode [ 443.710267][ T5148] Bluetooth: hci2: command tx timeout [ 443.723437][T16588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.757397][T16588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.833508][ T6601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.846465][ T6601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.864812][ T6601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.896003][ T6601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.910780][T16943] syzkaller0: entered promiscuous mode [ 443.917392][T16943] syzkaller0: entered allmulticast mode [ 444.279291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.301411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.357906][ T6601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.377606][ T6601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.675372][T16977] Cannot find add_set index 0 as target [ 444.694181][T16979] openvswitch: netlink: nsh attr 0 has unexpected len 32768 expected 0 [ 444.713926][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.723953][T16975] __nla_validate_parse: 7 callbacks suppressed [ 444.723968][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3128'. [ 444.750853][T16981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.768132][T16979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.175948][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.187561][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.200172][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.212039][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.225690][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.273571][T16998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3132'. [ 445.538888][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 445.639964][T17014] vlan2: entered allmulticast mode [ 445.931394][T16990] chnl_net:caif_netlink_parms(): no params data found [ 446.278679][T17060] sctp: [Deprecated]: syz.3.3146 (pid 17060) Use of int in maxseg socket option. [ 446.278679][T17060] Use struct sctp_assoc_value instead [ 446.363415][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3148'. [ 446.551456][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.558908][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.582345][T16990] bridge_slave_0: entered allmulticast mode [ 446.612349][T16990] bridge_slave_0: entered promiscuous mode [ 446.637507][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.665844][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.680909][T16990] bridge_slave_1: entered allmulticast mode [ 446.702489][T16990] bridge_slave_1: entered promiscuous mode [ 446.727488][T17074] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3150'. [ 446.804360][T16990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.856996][T16990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.958275][T16990] team0: Port device team_slave_0 added [ 446.994331][T16990] team0: Port device team_slave_1 added [ 447.002874][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'. [ 447.052737][T17081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3152'. [ 447.113131][T16990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.136923][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.168143][T17087] netlink: 'syz.3.3153': attribute type 11 has an invalid length. [ 447.189632][T17087] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3153'. [ 447.230693][T16990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.303825][T16990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.313150][ T5148] Bluetooth: hci3: command tx timeout [ 447.335121][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.371119][T16990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.420804][T17094] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3155'. [ 447.451315][T17094] SET target dimension over the limit! [ 447.498722][T16990] hsr_slave_0: entered promiscuous mode [ 447.511932][T16990] hsr_slave_1: entered promiscuous mode [ 447.544940][T16990] debugfs: 'hsr0' already exists in 'hsr' [ 447.560173][T16990] Cannot create hsr debugfs directory [ 447.729653][ T7554] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e [ 448.022681][T16990] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.035565][T16990] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.098143][T17143] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 448.108005][T16990] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.120237][T16990] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.185718][T16990] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.196379][T16990] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.256167][T16990] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.266506][T16990] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.472458][T16990] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.516568][T16990] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.539427][T16990] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.585956][T16990] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.802938][T17168] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.858418][T17168] bond1 (unregistering): Released all slaves [ 448.938624][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3168'. [ 448.952838][T17169] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.196136][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.283342][T16990] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.307491][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.314782][ T7555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.372185][T17195] FAULT_INJECTION: forcing a failure. [ 449.372185][T17195] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 449.382087][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.392665][ T7555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.402692][ T5148] Bluetooth: hci3: command tx timeout [ 449.481858][T17195] CPU: 1 UID: 0 PID: 17195 Comm: syz.3.3177 Not tainted syzkaller #0 PREEMPT(full) [ 449.481886][T17195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.481899][T17195] Call Trace: [ 449.481907][T17195] [ 449.481915][T17195] dump_stack_lvl+0x189/0x250 [ 449.481946][T17195] ? __pfx____ratelimit+0x10/0x10 [ 449.481972][T17195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.481998][T17195] ? __pfx__printk+0x10/0x10 [ 449.482017][T17195] ? __might_fault+0xb0/0x130 [ 449.482052][T17195] should_fail_ex+0x414/0x560 [ 449.482085][T17195] _copy_from_iter+0x1de/0x1790 [ 449.482107][T17195] ? __lock_acquire+0xab9/0xd20 [ 449.482124][T17195] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 449.482152][T17195] ? __pfx__copy_from_iter+0x10/0x10 [ 449.482179][T17195] ? dev_get_by_index+0x22/0x2e0 [ 449.482202][T17195] ? dev_get_by_index+0x22/0x2e0 [ 449.482231][T17195] packet_sendmsg+0x3072/0x5080 [ 449.482258][T17195] ? aa_compat_map_file+0x978/0xe80 [ 449.482312][T17195] ? __pfx___might_resched+0x10/0x10 [ 449.482332][T17195] ? __lock_acquire+0xab9/0xd20 [ 449.482365][T17195] ? __pfx_packet_sendmsg+0x10/0x10 [ 449.482381][T17195] ? aa_sk_perm+0x81e/0x950 [ 449.482413][T17195] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 449.482449][T17195] ? aa_sock_msg_perm+0xf1/0x1d0 [ 449.482477][T17195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.482496][T17195] ? __pfx_packet_sendmsg+0x10/0x10 [ 449.482513][T17195] __sock_sendmsg+0x21c/0x270 [ 449.482542][T17195] __sys_sendto+0x3bd/0x520 [ 449.482564][T17195] ? __pfx___sys_sendto+0x10/0x10 [ 449.482579][T17195] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 449.482622][T17195] ? __fget_files+0x3a0/0x420 [ 449.482652][T17195] ? ksys_write+0x22a/0x250 [ 449.482681][T17195] ? __pfx_ksys_write+0x10/0x10 [ 449.482709][T17195] __x64_sys_sendto+0xde/0x100 [ 449.482730][T17195] do_syscall_64+0xfa/0xfa0 [ 449.482756][T17195] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.482783][T17195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.482801][T17195] ? clear_bhb_loop+0x60/0xb0 [ 449.482823][T17195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.482842][T17195] RIP: 0033:0x7f17fc58f749 [ 449.482860][T17195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.482878][T17195] RSP: 002b:00007f17fd362038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 449.482900][T17195] RAX: ffffffffffffffda RBX: 00007f17fc7e5fa0 RCX: 00007f17fc58f749 [ 449.482914][T17195] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 449.482927][T17195] RBP: 00007f17fd362090 R08: 0000200000000140 R09: 0000000000000014 [ 449.482940][T17195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.482951][T17195] R13: 00007f17fc7e6038 R14: 00007f17fc7e5fa0 R15: 00007ffc4c989ac8 [ 449.482984][T17195] [ 449.483514][T17198] validate_nla: 7 callbacks suppressed [ 449.483528][T17198] netlink: 'syz.2.3176': attribute type 1 has an invalid length. [ 449.787433][T17210] __nla_validate_parse: 3 callbacks suppressed [ 449.787453][T17210] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3180'. [ 450.014718][T17211] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 450.069431][T16990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.092761][T17219] x_tables: duplicate underflow at hook 1 [ 450.137306][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 450.154550][T16990] veth0_vlan: entered promiscuous mode [ 450.171898][T16990] veth1_vlan: entered promiscuous mode [ 450.197409][T17223] vxcan2: entered allmulticast mode [ 450.243057][T16990] veth0_macvtap: entered promiscuous mode [ 450.254566][T16990] veth1_macvtap: entered promiscuous mode [ 450.362550][T16990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.409564][T16990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.444018][ T6601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.472197][ T7554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.502433][ T7554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.552784][T17240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3188'. [ 450.554251][ T7554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.562690][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3188'. [ 450.922633][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3191'. [ 450.991952][ T12] wlan1: Trigger new scan to find an IBSS to join [ 451.074510][T17251] bond1: Removing last ns target with arp_interval on [ 451.148000][ T7555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.170426][ T7555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.266606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.290219][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.292008][T17273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3198'. [ 451.314201][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 451.470403][ T5148] Bluetooth: hci3: command tx timeout [ 451.628099][T17285] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3200'. [ 451.842692][T17294] netlink: 'syz.3.3204': attribute type 11 has an invalid length. [ 452.491082][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.509400][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.522304][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.533641][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.560992][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.712129][T17329] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3211'. [ 453.052514][T17339] netlink: 'syz.3.3213': attribute type 3 has an invalid length. [ 453.057043][T17322] chnl_net:caif_netlink_parms(): no params data found [ 453.133664][T17339] bond2: Unable to set down delay as MII monitoring is disabled [ 453.147081][T17339] bond2 (unregistering): Released all slaves [ 453.292799][ T5839] block nbd1: Receive control failed (result -32) [ 453.447760][T17322] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.447901][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3219'. [ 453.464417][T17322] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.531736][T17322] bridge_slave_0: entered allmulticast mode [ 453.540903][T17322] bridge_slave_0: entered promiscuous mode [ 453.557165][ T5839] Bluetooth: hci3: command tx timeout [ 453.569240][T17322] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.578433][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.588036][T17322] bridge_slave_1: entered allmulticast mode [ 453.598878][T17322] bridge_slave_1: entered promiscuous mode [ 453.749149][T17322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.804529][T17322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.871647][T17322] team0: Port device team_slave_0 added [ 453.884603][T17322] team0: Port device team_slave_1 added [ 453.961559][ T6587] wlan1: Trigger new scan to find an IBSS to join [ 453.978815][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.988651][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.035578][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.050345][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.067521][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.125703][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.236470][T17412] netlink: 'syz.2.3230': attribute type 9 has an invalid length. [ 454.496735][T17322] hsr_slave_0: entered promiscuous mode [ 454.513843][T17322] hsr_slave_1: entered promiscuous mode [ 454.527478][T17322] debugfs: 'hsr0' already exists in 'hsr' [ 454.540682][T17322] Cannot create hsr debugfs directory [ 454.592965][ T5839] Bluetooth: hci4: command tx timeout [ 454.632577][T17429] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 455.093422][T17322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.105182][T17322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.118140][T17322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.151947][T17459] __nla_validate_parse: 5 callbacks suppressed [ 455.151965][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 455.173689][T17459] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 455.252377][T17322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.272111][T17322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.284357][T17322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.305992][T17467] sch_tbf: burst 3504 is lower than device lo mtu (65550) ! [ 455.388865][T17322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.403550][T17322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.414500][T17322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 455.506254][T17479] netlink: 'syz.1.3253': attribute type 21 has an invalid length. [ 455.514810][T17479] IPv6: NLM_F_CREATE should be specified when creating new route [ 455.535753][T17479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.543097][T17479] IPv6: NLM_F_CREATE should be set when creating new route [ 455.550384][T17479] IPv6: NLM_F_CREATE should be set when creating new route [ 455.557655][T17479] IPv6: NLM_F_CREATE should be set when creating new route [ 455.983592][T17322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.219947][T17519] netlink: 408 bytes leftover after parsing attributes in process `syz.1.3260'. [ 456.405814][T17525] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3262'. [ 456.614228][T17322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.669388][T17322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.680160][ T5839] Bluetooth: hci4: command tx timeout [ 456.710457][T17322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.737779][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'. [ 456.862123][T17322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.888494][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 456.904936][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 456.908615][T17322] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.956068][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3266'. [ 456.966048][ T6587] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.967604][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3266'. [ 456.980450][ T6587] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.990467][ T12] wlan1: Trigger new scan to find an IBSS to join [ 457.015094][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.022330][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.064003][ T6587] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.073824][ T6587] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.088260][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.095531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.263659][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 457.286072][ T6583] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.292628][T17559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 457.297129][ T6583] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.322244][ T6583] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.333757][ T6583] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.524661][T17322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.778406][T17569] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 457.926992][ T12] wlan1: Creating new IBSS network, BSSID be:e6:b7:63:21:15 [ 457.999061][T17322] veth0_vlan: entered promiscuous mode [ 458.015211][T17592] syzkaller0: entered promiscuous mode [ 458.029016][T17592] syzkaller0: entered allmulticast mode [ 458.051486][T17322] veth1_vlan: entered promiscuous mode [ 458.209235][T17604] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 458.231809][T17322] veth0_macvtap: entered promiscuous mode [ 458.266640][T17322] veth1_macvtap: entered promiscuous mode [ 458.334394][T17609] tipc: New replicast peer: 255.255.255.255 [ 458.342507][T17609] tipc: Enabled bearer , priority 10 [ 458.349047][T17604] bridge0: port 1(bridge_slave_0) entered learning state [ 458.371803][T17322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.415289][T17322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.507165][ T6587] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.541115][ T6587] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.549988][ T6587] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.608178][ T6587] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.708620][T17628] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 458.750620][ T5839] Bluetooth: hci4: command tx timeout [ 458.777013][ T7554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.790607][ T7554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.842036][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.850901][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.351979][T17674] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 459.381064][T17674] bond2: (slave lo): Enslaving as a backup interface with an up link [ 459.393429][T17674] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 459.414018][T17675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.466796][T17627] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 459.488772][ T5897] tipc: Node number set to 3572521051 [ 459.613479][ T5897] IPVS: starting estimator thread 0... [ 459.711667][T17686] IPVS: using max 25 ests per chain, 60000 per kthread [ 459.835636][T17700] netlink: 'syz.2.3309': attribute type 6 has an invalid length. [ 460.537268][T17730] syzkaller0: entered promiscuous mode [ 460.561814][T17730] syzkaller0: entered allmulticast mode [ 460.576034][T17746] __nla_validate_parse: 4 callbacks suppressed [ 460.576054][T17746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3320'. [ 460.796168][T17761] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3325'. [ 460.832100][ T5839] Bluetooth: hci4: command tx timeout [ 461.032159][T17767] netlink: 'syz.4.3327': attribute type 1 has an invalid length. [ 461.039912][T17767] netlink: 'syz.4.3327': attribute type 11 has an invalid length. [ 461.048520][T17767] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3327'. [ 462.300370][T17763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3326'. [ 462.313116][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3329'. [ 462.334342][T17773] netlink: 'syz.1.3329': attribute type 30 has an invalid length. [ 462.425320][T17780] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3330'. [ 462.646714][T17786] tipc: Started in network mode [ 462.652100][T17786] tipc: Node identity 463e0c810cfe, cluster identity 4711 [ 462.668135][T17786] tipc: Enabled bearer , priority 0 [ 462.711782][T17795] syzkaller0: entered promiscuous mode [ 462.725925][T17795] syzkaller0: entered allmulticast mode [ 462.828810][T17786] tipc: Resetting bearer [ 462.858723][T17785] tipc: Resetting bearer [ 462.876412][T17785] tipc: Disabling bearer [ 462.891760][T17800] netem: change failed [ 462.898034][T17800] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3337'. [ 463.112031][T17815] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3343'. [ 463.337753][T17819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 463.431062][T17819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3344'. [ 464.009102][T17858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.058941][T17862] xt_CT: You must specify a L4 protocol and not use inversions on it [ 464.097439][T17862] netlink: 'syz.2.3357': attribute type 12 has an invalid length. [ 464.175430][ T5912] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 464.432832][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.479582][T17885] sch_fq: defrate 0 ignored. [ 464.612327][T17894] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 464.979522][T17910] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 465.043205][T17912] netlink: 'syz.0.3373': attribute type 3 has an invalid length. [ 465.129472][T17919] netlink: 'syz.4.3376': attribute type 1 has an invalid length. [ 465.414254][T17934] bond1: entered promiscuous mode [ 465.419455][T17934] bond1: entered allmulticast mode [ 465.425556][T17934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 465.487974][T17945] macvtap1: entered promiscuous mode [ 465.503733][T17945] macvtap1: entered allmulticast mode [ 465.751713][T17965] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001 [ 465.763908][T17966] __nla_validate_parse: 6 callbacks suppressed [ 465.763927][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 466.123060][T17986] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3397'. [ 466.361991][T18002] netlink: 'syz.2.3403': attribute type 4 has an invalid length. [ 466.379450][T18004] Cannot find del_set index 49151 as target [ 466.418714][T18008] netlink: 'syz.2.3403': attribute type 4 has an invalid length. [ 466.492279][T18013] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 466.523532][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 466.645313][T18026] syzkaller0: entered promiscuous mode [ 466.651032][T18026] syzkaller0: entered allmulticast mode [ 466.794378][T18026] tipc: Enabled bearer , priority 0 [ 466.837837][T18025] tipc: Resetting bearer [ 466.859800][T18025] tipc: Disabling bearer [ 466.912072][T18040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3414'. [ 466.925542][T18040] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 466.938445][T18040] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3414'. [ 467.038004][T18045] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 467.050861][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 467.080989][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 467.098915][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 467.108000][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 467.132899][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 467.400583][T18067] netlink: 'syz.3.3420': attribute type 4 has an invalid length. [ 467.876839][T18098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.174920][T18105] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 468.203429][T18105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.267900][T18121] netlink: 'syz.4.3438': attribute type 4 has an invalid length. [ 468.276927][T18121] netlink: 'syz.4.3438': attribute type 1 has an invalid length. [ 468.783546][ T50] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.814597][ T50] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.856441][ T50] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.887195][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.985407][T18161] tipc: Enabled bearer , priority 0 [ 469.074787][T18161] syzkaller0: entered promiscuous mode [ 469.080464][T18161] syzkaller0: entered allmulticast mode [ 469.086855][T18161] tipc: Resetting bearer [ 469.097309][T18158] tipc: Resetting bearer [ 469.437879][T18179] xt_limit: Overflow, try lower: 271964/0 [ 470.683891][T18158] tipc: Disabling bearer [ 470.750748][T18179] syzkaller0: entered promiscuous mode [ 470.756374][T18179] syzkaller0: entered allmulticast mode [ 472.806044][T18225] tipc: Enabled bearer , priority 0 [ 472.814753][T18227] syzkaller0: entered promiscuous mode [ 472.823234][T18227] syzkaller0: entered allmulticast mode [ 472.843482][T18233] __nla_validate_parse: 74 callbacks suppressed [ 472.843504][T18233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3470'. [ 472.912995][T18236] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 472.995150][T18227] tipc: Resetting bearer [ 473.109274][T18227] tipc: Disabling bearer [ 473.288825][T18258] netlink: 924 bytes leftover after parsing attributes in process `syz.2.3477'. [ 473.423007][T18265] lo: entered promiscuous mode [ 473.441485][T18265] netlink: 'syz.1.3480': attribute type 2 has an invalid length. [ 473.449435][T18265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.548317][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 473.600795][T18272] tipc: Enabled bearer , priority 0 [ 473.608802][T18272] syzkaller0: entered promiscuous mode [ 473.615024][T18272] syzkaller0: entered allmulticast mode [ 473.639358][T18272] tipc: Resetting bearer [ 473.663075][T18271] tipc: Resetting bearer [ 473.686647][T18271] tipc: Disabling bearer [ 473.808877][T18285] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 474.454860][T18308] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 474.465846][T18308] bond3: option packets_per_slave: allowed values 0 - 65535 [ 474.475992][T18308] bond3 (unregistering): Released all slaves [ 474.486469][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3495'. [ 474.664966][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'. [ 474.676075][T18325] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3498'. [ 474.685457][T18325] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3498'. [ 474.776899][ T9] IPVS: starting estimator thread 0... [ 474.783221][T18323] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 474.857898][T18332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 474.908835][T18330] IPVS: using max 26 ests per chain, 62400 per kthread [ 474.949138][T18336] bridge1: entered promiscuous mode [ 474.957829][T18336] bridge1: entered allmulticast mode [ 475.354662][T18367] netlink: 'syz.0.3512': attribute type 10 has an invalid length. [ 475.467068][T18367] team0: Port device dummy0 added [ 475.666628][T18385] netlink: 'syz.0.3517': attribute type 24 has an invalid length. [ 475.726068][T18385] netlink: 'syz.0.3517': attribute type 2 has an invalid length. [ 475.743102][T18387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3519'. [ 475.755151][T18388] netlink: 'syz.3.3518': attribute type 4 has an invalid length. [ 475.773699][T18385] netlink: 'syz.0.3517': attribute type 1 has an invalid length. [ 475.774769][T18388] netlink: 'syz.3.3518': attribute type 1 has an invalid length. [ 475.827282][T18388] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3518'. [ 476.022650][T18405] netlink: 'syz.4.3525': attribute type 4 has an invalid length. [ 476.084169][T18406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3525'. [ 476.388119][T18418] syzkaller0: entered promiscuous mode [ 476.395480][T18418] syzkaller0: entered allmulticast mode [ 476.422301][T18418] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 476.438226][T18418] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 476.460321][T18425] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 476.461619][T18426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 476.681914][T18428] bond1: (slave bridge2): making interface the new active one [ 476.715517][T18428] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 476.748260][T18443] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 476.795126][T18446] bridge0: port 3(ipvlan2) entered blocking state [ 476.813083][T18446] bridge0: port 3(ipvlan2) entered disabled state [ 476.834672][T18446] ipvlan2: entered allmulticast mode [ 476.852855][T18446] bridge0: entered allmulticast mode [ 476.872972][T18446] ipvlan2: left allmulticast mode [ 476.883261][T18446] bridge0: left allmulticast mode [ 476.909038][T18451] syzkaller0: entered promiscuous mode [ 476.930250][T18451] syzkaller0: entered allmulticast mode [ 476.938885][ T5912] IPVS: starting estimator thread 0... [ 477.022071][T18464] sctp: [Deprecated]: syz.1.3543 (pid 18464) Use of int in max_burst socket option deprecated. [ 477.022071][T18464] Use struct sctp_assoc_value instead [ 477.040260][T18461] IPVS: using max 27 ests per chain, 64800 per kthread [ 477.831942][T18525] Dead loop on virtual device ip6_vti0, fix it urgently! [ 478.190017][T18517] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.197547][T18517] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.539394][T18517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.561253][T18517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.963078][ T50] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.979949][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.020252][ T50] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.029176][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.073912][ T50] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.110620][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.119676][ T50] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.136632][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.281695][T18573] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 479.304472][T18573] bond2 (unregistering): Released all slaves [ 479.731647][T18613] validate_nla: 3 callbacks suppressed [ 479.731668][T18613] netlink: 'syz.1.3578': attribute type 10 has an invalid length. [ 479.802137][T18613] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 479.853717][T18618] __nla_validate_parse: 40 callbacks suppressed [ 479.853738][T18618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3580'. [ 479.875493][T18613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3578'. [ 480.765817][T18669] netlink: 'syz.3.3591': attribute type 4 has an invalid length. [ 480.775393][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 480.775836][T18667] tipc: Started in network mode [ 480.789326][T18669] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3591'. [ 480.799518][T18667] tipc: Node identity f2ceecdf8e4b, cluster identity 4711 [ 480.807380][T18667] tipc: Enabled bearer , priority 0 [ 480.838956][T18667] syzkaller0: entered promiscuous mode [ 480.846353][T18667] syzkaller0: entered allmulticast mode [ 480.917536][T18666] tipc: Resetting bearer [ 480.950643][T18666] tipc: Disabling bearer [ 480.983047][T18679] tipc: Started in network mode [ 481.008528][T18679] tipc: Node identity 52bcec6e547f, cluster identity 9 [ 481.024687][T18679] tipc: Enabled bearer , priority 0 [ 481.042427][T18680] syzkaller0: entered promiscuous mode [ 481.061780][T18680] syzkaller0: entered allmulticast mode [ 481.077942][ T2912] syzkaller0: tun_net_xmit 70 [ 481.094204][ T2912] tipc: Subscription rejected, illegal request [ 481.094981][T18679] tipc: Resetting bearer [ 481.106829][T18679] syzkaller0: tun_net_xmit 90 [ 481.357928][T18708] syzkaller0: entered promiscuous mode [ 481.367995][T18708] syzkaller0: entered allmulticast mode [ 481.368464][ C1] syzkaller0: tun_net_xmit 90 [ 481.414973][T18680] tipc: Resetting bearer [ 481.484393][T18680] tipc: Disabling bearer [ 481.734754][T18720] xt_socket: unknown flags 0x50 [ 481.745038][T18720] only policy match revision 0 supported [ 481.745058][T18720] unable to load match [ 481.955017][ T2912] wlan1: Selected IBSS BSSID be:e6:b7:63:21:15 based on configured SSID [ 481.973314][T18729] xt_hashlimit: overflow, try lower: 3/0 [ 482.117335][T18734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.595657][T18751] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 482.852761][T18767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3623'. [ 483.144850][T18774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3628'. [ 483.424126][T18788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3634'. [ 483.459166][T18790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3635'. [ 483.646876][T18797] netlink: 'syz.2.3639': attribute type 2 has an invalid length. [ 483.668362][T18797] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 483.729427][T18804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3640'. [ 483.748961][T18804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3640'. [ 484.073558][T18814] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 484.090804][T18814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.288632][T18771] warn_alloc: 1 callbacks suppressed [ 484.288655][T18771] syz.1.3627: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 484.344239][T18771] CPU: 0 UID: 0 PID: 18771 Comm: syz.1.3627 Not tainted syzkaller #0 PREEMPT(full) [ 484.344268][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 484.344282][T18771] Call Trace: [ 484.344290][T18771] [ 484.344300][T18771] dump_stack_lvl+0x189/0x250 [ 484.344336][T18771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.344364][T18771] ? __pfx__printk+0x10/0x10 [ 484.344385][T18771] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.344414][T18771] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 484.344444][T18771] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 484.344476][T18771] warn_alloc+0x214/0x310 [ 484.344512][T18771] ? __pfx_warn_alloc+0x10/0x10 [ 484.344553][T18771] ? __get_vm_area_node+0x28f/0x300 [ 484.344582][T18771] ? hash_netportnet_create+0x354/0xf90 [ 484.344611][T18771] __vmalloc_node_range_noprof+0x690/0x12d0 [ 484.344666][T18771] ? alloc_pages_mpol+0x3cd/0x4a0 [ 484.344687][T18771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 484.344726][T18771] ? rcu_is_watching+0x15/0xb0 [ 484.344750][T18771] ? hash_netportnet_create+0x354/0xf90 [ 484.344775][T18771] __kvmalloc_node_noprof+0x674/0x910 [ 484.344807][T18771] ? hash_netportnet_create+0x354/0xf90 [ 484.344829][T18771] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 484.344859][T18771] ? hash_netportnet_create+0x2fa/0xf90 [ 484.344888][T18771] hash_netportnet_create+0x354/0xf90 [ 484.344920][T18771] ? __nla_parse+0x40/0x60 [ 484.344947][T18771] ? __pfx_hash_netportnet_create+0x10/0x10 [ 484.344973][T18771] ip_set_create+0xa97/0x1940 [ 484.345004][T18771] ? ip_set_create+0x4a2/0x1940 [ 484.345045][T18771] ? __pfx_ip_set_create+0x10/0x10 [ 484.345108][T18771] nfnetlink_rcv_msg+0xb4d/0x1130 [ 484.345139][T18771] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 484.345187][T18771] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 484.345215][T18771] ? kasan_save_track+0x4f/0x80 [ 484.345300][T18771] netlink_rcv_skb+0x208/0x470 [ 484.345318][T18771] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.345348][T18771] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 484.345381][T18771] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.345413][T18771] ? bpf_lsm_capable+0x9/0x20 [ 484.345438][T18771] ? security_capable+0x7e/0x2e0 [ 484.345474][T18771] nfnetlink_rcv+0x282/0x2590 [ 484.345506][T18771] ? __dev_queue_xmit+0x27b/0x3b50 [ 484.345532][T18771] ? __dev_queue_xmit+0x1d79/0x3b50 [ 484.345554][T18771] ? kasan_save_track+0x3e/0x80 [ 484.345581][T18771] ? __kasan_slab_alloc+0x6c/0x80 [ 484.345620][T18771] ? __dev_queue_xmit+0x27b/0x3b50 [ 484.345658][T18771] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 484.345685][T18771] ? __pfx___dev_queue_xmit+0x10/0x10 [ 484.345725][T18771] ? ref_tracker_free+0x63a/0x7d0 [ 484.345746][T18771] ? __asan_memcpy+0x40/0x70 [ 484.345771][T18771] ? __pfx_ref_tracker_free+0x10/0x10 [ 484.345808][T18771] ? skb_clone+0x246/0x3a0 [ 484.345834][T18771] ? __netlink_deliver_tap+0x807/0x850 [ 484.345855][T18771] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.345881][T18771] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.345910][T18771] netlink_unicast+0x82f/0x9e0 [ 484.345956][T18771] ? __pfx_netlink_unicast+0x10/0x10 [ 484.345988][T18771] ? netlink_sendmsg+0x642/0xb30 [ 484.346008][T18771] ? skb_put+0x11b/0x210 [ 484.346031][T18771] netlink_sendmsg+0x805/0xb30 [ 484.346057][T18771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.346081][T18771] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.346108][T18771] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.346125][T18771] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.346145][T18771] __sock_sendmsg+0x21c/0x270 [ 484.346174][T18771] ____sys_sendmsg+0x505/0x830 [ 484.346201][T18771] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.346233][T18771] ? import_iovec+0x74/0xa0 [ 484.346264][T18771] ___sys_sendmsg+0x21f/0x2a0 [ 484.346286][T18771] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.346338][T18771] ? __fget_files+0x2a/0x420 [ 484.346358][T18771] ? __fget_files+0x3a0/0x420 [ 484.346388][T18771] __x64_sys_sendmsg+0x19b/0x260 [ 484.346413][T18771] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.346455][T18771] ? do_syscall_64+0xbe/0xfa0 [ 484.346490][T18771] do_syscall_64+0xfa/0xfa0 [ 484.346517][T18771] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.346547][T18771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.346566][T18771] ? clear_bhb_loop+0x60/0xb0 [ 484.346590][T18771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.346610][T18771] RIP: 0033:0x7ff41178f749 [ 484.346628][T18771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.346647][T18771] RSP: 002b:00007ff412677038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.346668][T18771] RAX: ffffffffffffffda RBX: 00007ff4119e5fa0 RCX: 00007ff41178f749 [ 484.346683][T18771] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 484.346695][T18771] RBP: 00007ff411813f91 R08: 0000000000000000 R09: 0000000000000000 [ 484.346709][T18771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.346721][T18771] R13: 00007ff4119e6038 R14: 00007ff4119e5fa0 R15: 00007ffc1eb5c2f8 [ 484.346756][T18771] [ 484.346898][T18771] Mem-Info: [ 484.860771][T18771] active_anon:4007 inactive_anon:0 isolated_anon:0 [ 484.860771][T18771] active_file:3271 inactive_file:40032 isolated_file:0 [ 484.860771][T18771] unevictable:768 dirty:59 writeback:0 [ 484.860771][T18771] slab_reclaimable:12152 slab_unreclaimable:182440 [ 484.860771][T18771] mapped:30067 shmem:1384 pagetables:1027 [ 484.860771][T18771] sec_pagetables:0 bounce:0 [ 484.860771][T18771] kernel_misc_reclaimable:0 [ 484.860771][T18771] free:1242571 free_pcp:14557 free_cma:0 [ 484.916412][T18771] Node 0 active_anon:16060kB inactive_anon:0kB active_file:13084kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120340kB dirty:236kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14060kB pagetables:4080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 484.956223][T18832] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 484.972035][T18771] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 485.003713][T18771] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.041866][T18771] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 485.047854][T18771] Node 0 DMA32 free:1061372kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15896kB inactive_anon:0kB active_file:13084kB inactive_file:159928kB unevictable:1536kB writepending:236kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:41260kB local_pcp:22736kB free_cma:0kB [ 485.087169][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 485.092540][T18771] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 485.125898][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 485.138961][T18771] Node 1 Normal free:3896248kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17600kB local_pcp:7840kB free_cma:0kB [ 485.139282][T18836] netlink: 'syz.3.3649': attribute type 1 has an invalid length. [ 485.173512][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 485.186088][T18771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 485.201502][T18840] __nla_validate_parse: 32 callbacks suppressed [ 485.201521][T18840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3649'. [ 485.227520][T18771] Node 0 DMA32: 483*4kB (UM) 54*8kB (UME) 129*16kB (UME) 246*32kB (UME) 113*64kB (UME) 46*128kB (UME) 19*256kB (UME) 86*512kB (UME) 46*1024kB (UME) 19*2048kB (UM) 220*4096kB (UM) = 1061452kB [ 485.248671][T18771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 485.261036][T18771] Node 1 Normal: 2*4kB (E) 6*8kB (UME) 8*16kB (UME) 102*32kB (UME) 33*64kB (UME) 12*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896248kB [ 485.284735][T18771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.294650][T18771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.304496][T18771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 485.314511][T18771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 485.324008][T18771] 44660 total pagecache pages [ 485.328798][T18771] 0 pages in swap cache [ 485.333080][T18771] Free swap = 124996kB [ 485.337317][T18771] Total swap = 124996kB [ 485.342283][T18771] 2097051 pages RAM [ 485.346108][T18771] 0 pages HighMem/MovableOnly [ 485.352470][T18771] 424122 pages reserved [ 485.353744][T18836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.356642][T18771] 0 pages cma reserved [ 485.395476][T18840] bond3: entered promiscuous mode [ 485.405417][T18840] bond3: entered allmulticast mode [ 486.231731][T18843] bond3: (slave dummy0): making interface the new active one [ 486.274401][T18843] dummy0: entered promiscuous mode [ 486.299634][T18843] dummy0: entered allmulticast mode [ 486.338986][T18843] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 486.743221][T18871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.847164][T18873] netlink: 'syz.1.3660': attribute type 1 has an invalid length. [ 487.012801][T18876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3660'. [ 487.090943][T18836] bond3 (unregistering): (slave dummy0): Releasing active interface [ 487.099008][T18836] dummy0: left promiscuous mode [ 487.104162][T18836] dummy0: left allmulticast mode [ 487.122645][T18836] bond3 (unregistering): Released all slaves [ 487.246023][T18874] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 487.314321][T18875] veth3: entered promiscuous mode [ 487.325597][T18875] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 487.338933][T18876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.347970][ T6583] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 487.491821][ T6583] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 487.586058][T18890] tipc: Enabling of bearer rejected, already enabled [ 487.754945][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3669'. [ 487.817629][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3670'. [ 487.853285][T18708] Set syz1 is full, maxelem 65536 reached [ 487.999569][T18910] syzkaller1: entered promiscuous mode [ 488.025329][T18910] syzkaller1: entered allmulticast mode [ 488.179269][T18927] netlink: 'syz.2.3678': attribute type 11 has an invalid length. [ 488.243816][T18932] netlink: 'syz.0.3679': attribute type 1 has an invalid length. [ 488.368265][T18932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.384168][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3681'. [ 488.405863][T18940] bridge_slave_1: left allmulticast mode [ 488.411911][T18940] bridge_slave_1: left promiscuous mode [ 488.417907][T18940] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.430687][T18940] bridge_slave_0: left allmulticast mode [ 488.436372][T18940] bridge_slave_0: left promiscuous mode [ 488.450790][T18940] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.579852][T18951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.580849][T18936] bond3: (slave gretap1): making interface the new active one [ 488.602566][T18936] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 488.764373][T18958] netlink: 'syz.0.3687': attribute type 3 has an invalid length. [ 488.773446][T18958] netlink: 'syz.0.3687': attribute type 3 has an invalid length. [ 488.908148][T18967] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 488.976972][T18967] bond4: entered promiscuous mode [ 488.982780][T18967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 488.992453][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 489.092533][T18991] xt_l2tp: invalid flags combination: 0 [ 489.424826][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'. [ 489.435955][T19007] Cannot find add_set index 0 as target [ 490.057233][T19034] ip6gre1: entered promiscuous mode [ 490.065292][T19034] ip6gre1: entered allmulticast mode [ 490.112998][T19045] netlink: 'syz.1.3709': attribute type 3 has an invalid length. [ 490.266587][T19051] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 490.301692][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 490.312246][T19054] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3710'. [ 490.322172][T19053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.382396][T19053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.487780][T19060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3713'. [ 490.819793][T19080] block nbd3: Unsupported socket: should be TCP or UNIX. [ 490.868095][T19084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3720'. [ 491.081904][T19102] ip6gre1: entered allmulticast mode [ 491.252296][T19115] syzkaller0: entered promiscuous mode [ 491.257964][T19115] syzkaller0: entered allmulticast mode [ 491.354199][T19124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3729'. [ 491.366606][T19124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3729'. [ 492.105779][T19144] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3732'. [ 492.491987][T19169] x_tables: duplicate underflow at hook 2 [ 492.512754][T19169] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20002 [ 492.546632][T19175] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.3737'. [ 492.839897][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'. [ 492.870427][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3741'. [ 493.093721][T19183] hsr_slave_0: left promiscuous mode [ 493.112061][T19183] hsr_slave_1: left promiscuous mode [ 493.296598][T19192] netlink: 'syz.3.3745': attribute type 23 has an invalid length. [ 493.430747][T19201] Unsupported ieee802154 address type: 0 [ 493.483007][T19201] ipt_REJECT: ECHOREPLY no longer supported. [ 493.963479][T19223] x_tables: unsorted entry at hook 3 [ 494.215879][T19237] ip6gre1: entered promiscuous mode [ 494.899366][T19274] bond3: entered allmulticast mode [ 494.906233][T19274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.980786][T19280] syzkaller0: entered promiscuous mode [ 494.989598][T19280] syzkaller0: entered allmulticast mode [ 495.001864][T19280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.266303][T19294] netlink: 'syz.2.3782': attribute type 7 has an invalid length. [ 495.403571][T19294] netlink: 'syz.2.3782': attribute type 7 has an invalid length. [ 495.425135][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.464917][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.508455][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.574485][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.608643][T19310] netlink: 'syz.3.3785': attribute type 1 has an invalid length. [ 495.670492][T19310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.837810][T19319] __nla_validate_parse: 9 callbacks suppressed [ 495.837829][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3787'. [ 495.859467][T19324] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 495.869563][T19324] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 495.888635][T19324] netlink: 'syz.0.3789': attribute type 1 has an invalid length. [ 495.901683][T19324] netlink: 'syz.0.3789': attribute type 2 has an invalid length. [ 495.915231][T19324] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3789'. [ 495.939152][T19329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3790'. [ 496.112166][ T5839] Bluetooth: hci4: command tx timeout [ 496.415260][T19363] syzkaller0: entered promiscuous mode [ 496.421060][T19363] syzkaller0: entered allmulticast mode [ 496.639849][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3800'. [ 496.667691][T19371] veth0_virt_wifi: renamed from veth1_vlan [ 496.832524][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3801'. [ 496.864830][T19383] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3802'. [ 496.874449][T19386] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20004 [ 496.908433][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3802'. [ 497.069269][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3806'. [ 497.098766][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'. [ 497.127407][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3802'. [ 497.138851][T19383] netlink: 'syz.4.3802': attribute type 13 has an invalid length. [ 497.269741][T19383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.288869][T19407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.297360][T19408] delete_channel: no stack [ 497.678130][T19433] netlink: 'syz.2.3819': attribute type 5 has an invalid length. [ 497.907282][T19449] x_tables: duplicate underflow at hook 1 [ 498.167372][T19464] sctp: [Deprecated]: syz.2.3830 (pid 19464) Use of int in max_burst socket option. [ 498.167372][T19464] Use struct sctp_assoc_value instead [ 498.649340][T19497] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 498.692021][ T12] bond2: (slave ip6gretap1): link status up again after 0 ms [ 498.723584][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 498.759766][T19504] netlink: 'syz.4.3844': attribute type 1 has an invalid length. [ 498.803001][T19504] team_slave_0: entered promiscuous mode [ 498.809107][T19504] team_slave_1: entered promiscuous mode [ 498.822618][T19504] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 498.885307][T19504] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 498.896170][T19516] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 498.945273][T19504] bond2 (unregistering): Released all slaves [ 499.111011][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.250563][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.360597][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.473591][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.602433][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 499.766972][T19569] netlink: 'syz.2.3862': attribute type 4 has an invalid length. [ 499.853639][T19572] veth1_to_bridge: entered promiscuous mode [ 499.859586][T19572] veth1_to_bridge: entered allmulticast mode [ 500.031704][ T7555] net_ratelimit: 2 callbacks suppressed [ 500.031725][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.190868][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.267186][T19605] Bluetooth: MGMT ver 1.23 [ 500.320343][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.441265][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.551133][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.569779][T19627] tc_dump_action: action bad kind [ 500.660851][ T2912] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.781546][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 500.974600][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.045158][T19654] __nla_validate_parse: 11 callbacks suppressed [ 501.045240][T19654] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3886'. [ 501.101476][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.161927][T19660] netlink: 'syz.1.3884': attribute type 1 has an invalid length. [ 501.211008][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 501.537884][T19667] dvmrp1: entered allmulticast mode [ 501.557647][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.898543][T19681] netlink: 'syz.1.3894': attribute type 83 has an invalid length. [ 502.345888][T19707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3900'. [ 502.359081][T19707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3900'. [ 502.631386][T19712] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 502.639642][T19712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.689215][T19728] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3906'. [ 502.719373][T19731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3907'. [ 502.769587][T19731] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3907'. [ 503.200942][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3915'. [ 503.236670][T19758] nbd: couldn't find device at index 204 [ 503.485358][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 503.494376][T19770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 505.247779][T19788] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3925'. [ 505.271866][T19792] netlink: 'syz.4.3926': attribute type 29 has an invalid length. [ 505.294658][ T6583] net_ratelimit: 16 callbacks suppressed [ 505.294679][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.420756][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.530784][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.671678][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.800765][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.878760][T19836] netlink: 'syz.0.3940': attribute type 1 has an invalid length. [ 505.899990][T19832] syzkaller0: entered promiscuous mode [ 505.923274][T19832] syzkaller0: entered allmulticast mode [ 505.962833][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 505.985869][T19846] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.078624][T19852] __nla_validate_parse: 4 callbacks suppressed [ 506.078644][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3943'. [ 506.105808][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.141629][T19852] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3943'. [ 506.164152][T19852] tipc: Enabled bearer , priority 0 [ 506.172320][T19852] syzkaller0: entered promiscuous mode [ 506.193888][T19852] syzkaller0: entered allmulticast mode [ 506.331708][T19850] tipc: Resetting bearer [ 506.365973][T19850] tipc: Disabling bearer [ 506.391669][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.460165][T19865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3948'. [ 506.498492][T19870] delete_channel: no stack [ 506.511726][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.657936][T19877] syzkaller1: entered promiscuous mode [ 506.667336][T19877] syzkaller1: entered allmulticast mode [ 506.680211][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 506.689443][T19877] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 506.978160][T19897] sctp: [Deprecated]: syz.1.3960 (pid 19897) Use of int in maxseg socket option. [ 506.978160][T19897] Use struct sctp_assoc_value instead [ 507.133052][T19912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3964'. [ 507.144300][T19911] netlink: 'syz.0.3964': attribute type 10 has an invalid length. [ 507.342407][T19925] netlink: 'syz.0.3969': attribute type 10 has an invalid length. [ 507.393510][T19929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3967'. [ 507.412622][T19929] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3967'. [ 507.526759][T19938] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3972'. [ 507.705231][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3975'. [ 507.728750][T19946] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3976'. [ 507.838974][T19955] IPVS: set_ctl: invalid protocol: 170 255.255.255.255:20004 [ 508.115569][T19959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3979'. [ 508.127963][T19959] block nbd3: Unsupported socket: should be TCP or UNIX. [ 508.575007][T19994] netlink: 'syz.4.3992': attribute type 10 has an invalid length. [ 508.811707][T20007] netlink: 'syz.4.3996': attribute type 63 has an invalid length. [ 508.820054][T20007] netlink: 'syz.4.3996': attribute type 63 has an invalid length. [ 509.116483][T20013] : entered promiscuous mode [ 509.254509][T20025] gretap1: entered promiscuous mode [ 509.530649][T20044] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 2, id = 0 [ 509.715031][T20053] netlink: 'syz.1.4011': attribute type 11 has an invalid length. [ 511.478367][T20069] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 511.501071][T20080] __nla_validate_parse: 12 callbacks suppressed [ 511.501108][T20080] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4018'. [ 511.590199][ T50] net_ratelimit: 25 callbacks suppressed [ 511.590228][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 511.651060][T20084] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 511.675198][T20086] sctp: [Deprecated]: syz.0.4021 (pid 20086) Use of int in max_burst socket option. [ 511.675198][T20086] Use struct sctp_assoc_value instead [ 511.740328][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 511.942942][T20094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.960484][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 511.983044][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.054568][T20104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4026'. [ 512.097722][T20113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4029'. [ 512.112274][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 512.340271][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 512.536195][T20134] sctp: [Deprecated]: syz.1.4035 (pid 20134) Use of int in max_burst socket option. [ 512.536195][T20134] Use struct sctp_assoc_value instead [ 512.764137][T20150] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 512.772803][T20150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4034'. [ 514.259043][T20146] netlink: 'syz.2.4037': attribute type 25 has an invalid length. [ 514.271010][T20150] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 514.287528][T20150] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 514.297400][T20150] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 514.354406][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.482452][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.539140][T20168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4044'. [ 514.630259][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.664196][T20174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 514.741777][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 514.828393][T20184] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4047'. [ 514.851942][T20186] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4048'. [ 514.892687][T18548] hid-generic 0005:0002:5508.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 515.020542][T20197] netlink: 'syz.1.4051': attribute type 1 has an invalid length. [ 515.111831][T20197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 515.582263][T20225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4055'. [ 516.125242][T20241] bridge3: entered promiscuous mode [ 516.132433][T20241] bridge3: entered allmulticast mode [ 516.155626][T20242] syzkaller1: entered promiscuous mode [ 516.162114][T20242] syzkaller1: entered allmulticast mode [ 516.214299][T20252] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 516.297481][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'. [ 516.315565][T20255] netlink: 'syz.1.4065': attribute type 11 has an invalid length. [ 516.678598][ T6583] net_ratelimit: 15 callbacks suppressed [ 516.678617][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 516.820767][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 516.871575][T20300] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 516.953358][T20300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.997182][T20310] netlink: 'syz.3.4080': attribute type 1 has an invalid length. [ 517.037843][T20306] bond5: (slave veth5): Enslaving as an active interface with a down link [ 517.136089][T20300] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 517.202644][T20306] bond5: (slave veth7): Enslaving as an active interface with a down link [ 517.212623][T20323] __nla_validate_parse: 6 callbacks suppressed [ 517.212640][T20323] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4085'. [ 517.231762][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.234377][T20322] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4085'. [ 517.306294][T20326] netlink: 'syz.3.4086': attribute type 1 has an invalid length. [ 517.384096][T20335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4087'. [ 517.457603][T20337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4086'. [ 517.506846][T20326] 8021q: adding VLAN 0 to HW filter on device bond5 [ 517.561410][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 517.590826][T20337] bond5: entered promiscuous mode [ 517.596038][T20337] bond5: entered allmulticast mode [ 517.617242][T20326] bond5: (slave dummy0): making interface the new active one [ 517.627796][T20326] dummy0: entered promiscuous mode [ 517.662674][T20326] dummy0: entered allmulticast mode [ 517.682412][T20326] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 517.792677][T20359] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4096'. [ 517.803065][T20359] openvswitch: netlink: Flow key attr not present in new flow. [ 517.937489][T20363] netlink: 'syz.4.4098': attribute type 11 has an invalid length. [ 517.948799][T20337] bond5 (unregistering): (slave dummy0): Releasing active interface [ 517.957985][T20337] dummy0: left promiscuous mode [ 517.968092][T20337] dummy0: left allmulticast mode [ 517.977127][T20337] bond5 (unregistering): Released all slaves [ 518.007505][T20365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 518.040410][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.150359][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.341015][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.470233][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.497966][T20381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4105'. [ 518.519817][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'. [ 518.617382][T20384] 8021q: VLANs not supported on syzkaller1 [ 518.625729][T20384] netlink: 'syz.4.4107': attribute type 21 has an invalid length. [ 518.636312][T20393] netlink: 'syz.1.4105': attribute type 15 has an invalid length. [ 518.644305][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 518.655689][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4105'. [ 518.686611][T20381] netlink: 'syz.1.4105': attribute type 15 has an invalid length. [ 518.700230][T20384] netlink: 'syz.4.4107': attribute type 6 has an invalid length. [ 518.707995][T20384] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4107'. [ 518.743528][T20394] syzkaller1: entered promiscuous mode [ 518.755197][T20394] syzkaller1: entered allmulticast mode [ 518.785716][ T1158] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 518.794771][ T1158] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 518.805078][T20381] netlink: 'syz.1.4105': attribute type 15 has an invalid length. [ 518.821973][ T1158] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 518.840976][T20393] netlink: 'syz.1.4105': attribute type 15 has an invalid length. [ 518.909095][ T1158] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 518.927014][T20409] geneve2: entered promiscuous mode [ 519.310678][T20433] veth0_to_bond: entered allmulticast mode [ 519.512851][T20456] netlink: 'syz.4.4127': attribute type 21 has an invalid length. [ 519.525541][T20459] tunl0: entered promiscuous mode [ 519.576733][T20456] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.586284][T20456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.593599][T20456] IPv6: NLM_F_CREATE should be set when creating new route [ 519.600895][T20456] IPv6: NLM_F_CREATE should be set when creating new route [ 519.608126][T20456] IPv6: NLM_F_CREATE should be set when creating new route [ 519.802845][T20471] bridge4: entered promiscuous mode [ 519.808296][T20471] bridge4: entered allmulticast mode [ 519.821872][T20471] team0: Port device bridge4 added [ 519.830035][T20475] bridge0: port 1(team0) entered blocking state [ 519.859730][T20475] bridge0: port 1(team0) entered disabled state [ 519.867011][T20475] team0: entered allmulticast mode [ 519.879506][T20475] team_slave_0: entered allmulticast mode [ 519.887373][T20475] team_slave_1: entered allmulticast mode [ 519.897342][T20475] team0: left allmulticast mode [ 519.903833][T20475] team_slave_0: left allmulticast mode [ 519.909328][T20475] team_slave_1: left allmulticast mode [ 519.916853][T20477] gretap0: entered promiscuous mode [ 520.011480][T20480] syzkaller0: entered promiscuous mode [ 520.017178][T20480] syzkaller0: entered allmulticast mode [ 521.043115][T20530] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.550262][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 523.770885][ T50] net_ratelimit: 26 callbacks suppressed [ 523.770907][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.907318][T20616] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 523.922160][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 523.979262][T20619] tipc: Started in network mode [ 523.988769][T20619] tipc: Node identity 82d9cba1f6ef, cluster identity 4711 [ 523.996639][T20619] tipc: Enabled bearer , priority 0 [ 524.059989][T20627] validate_nla: 1 callbacks suppressed [ 524.060018][T20627] netlink: 'syz.0.4176': attribute type 3 has an invalid length. [ 524.072364][T20628] __nla_validate_parse: 15 callbacks suppressed [ 524.072383][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'. [ 524.095238][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'. [ 524.111805][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4174'. [ 524.126295][T20619] syzkaller0: entered promiscuous mode [ 524.134506][T20619] syzkaller0: entered allmulticast mode [ 524.144059][T20630] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4177'. [ 524.154512][T20628] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.4174'. [ 524.165834][T20630] nbd: socks must be embedded in a SOCK_ITEM attr [ 524.173360][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 524.173503][T20619] tipc: Resetting bearer [ 524.184669][T20630] netlink: 'syz.4.4177': attribute type 16 has an invalid length. [ 524.197365][ T50] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 524.205282][T20630] netlink: 'syz.4.4177': attribute type 17 has an invalid length. [ 524.256058][T20618] tipc: Resetting bearer [ 524.265954][T20635] netlink: 'syz.1.4179': attribute type 2 has an invalid length. [ 524.274758][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4175'. [ 524.297788][T20638] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4180'. [ 524.375878][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 524.392050][T20642] netlink: 'syz.1.4181': attribute type 1 has an invalid length. [ 524.400162][T20642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4181'. [ 526.063613][T20618] tipc: Disabling bearer [ 526.093399][T20630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.124806][ T5897] tipc: Node number set to 1949748129 [ 526.160322][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.290703][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.400210][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.513793][T20676] netlink: 'syz.3.4188': attribute type 30 has an invalid length. [ 526.527931][T20676] netlink: 'syz.3.4188': attribute type 30 has an invalid length. [ 526.539068][T20676] netlink: 'syz.3.4188': attribute type 30 has an invalid length. [ 526.541967][ T2912] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.675122][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.792424][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 526.806973][T20702] nbd: socks must be embedded in a SOCK_ITEM attr [ 527.785776][T20756] netlink: 'syz.1.4215': attribute type 3 has an invalid length. [ 528.005477][T20765] netlink: 'syz.3.4217': attribute type 10 has an invalid length. [ 528.053534][T20765] team0: Port device geneve0 added [ 528.417607][T20790] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 528.814265][T20812] IPv6: NLM_F_REPLACE set, but no existing node found! [ 528.860204][ T6601] net_ratelimit: 15 callbacks suppressed [ 528.860227][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 528.990213][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 529.160763][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 531.409468][T20845] __nla_validate_parse: 15 callbacks suppressed [ 531.409488][T20845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4241'. [ 531.426527][T20848] tipc: Enabling of bearer rejected, failed to enable media [ 531.440702][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 531.641118][ T12] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 531.817185][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'. [ 531.879949][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.011034][T20908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4255'. [ 532.019309][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4257'. [ 532.020560][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.051591][T20913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4254'. [ 532.142624][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.209806][T20922] validate_nla: 2 callbacks suppressed [ 532.209823][T20922] netlink: 'syz.1.4259': attribute type 1 has an invalid length. [ 532.271403][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.366226][T20933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 532.397972][T20930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4262'. [ 532.407548][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 532.432586][T20933] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4262'. [ 532.443473][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 532.455382][T20946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4266'. [ 532.467720][T20930] netlink: 'syz.0.4262': attribute type 62 has an invalid length. [ 532.501604][T20933] tipc: Enabling of bearer rejected, failed to enable media [ 532.542851][T20949] tunl0: left promiscuous mode [ 532.576104][T20949] bridge_slave_0: left promiscuous mode [ 532.615672][T20949] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.655786][T20949] bridge_slave_1: left allmulticast mode [ 532.737008][T20949] bridge_slave_1: left promiscuous mode [ 532.776475][T20949] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.856496][T20949] bond0: (slave bond_slave_0): Releasing backup interface [ 532.910829][T20949] bond0: (slave bond_slave_1): Releasing backup interface [ 532.949606][T20949] team0: Port device team_slave_0 removed [ 533.015246][T20975] netlink: 'syz.4.4276': attribute type 64 has an invalid length. [ 533.027117][T20949] team0: Port device team_slave_1 removed [ 533.034953][T20949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.044007][T20949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.054019][T20949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.063431][T20949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.079498][T20949] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 533.497769][T20990] [ 533.500267][T20990] ====================================================== [ 533.507301][T20990] WARNING: possible circular locking dependency detected [ 533.514339][T20990] syzkaller #0 Not tainted [ 533.518766][T20990] ------------------------------------------------------ [ 533.525789][T20990] syz.3.4281/20990 is trying to acquire lock: [ 533.531871][T20990] ffffffff8f426a78 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 533.541382][T20990] [ 533.541382][T20990] but task is already holding lock: [ 533.548927][T20990] ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 533.558534][T20990] [ 533.558534][T20990] which lock already depends on the new lock. [ 533.558534][T20990] [ 533.568946][T20990] [ 533.568946][T20990] the existing dependency chain (in reverse order) is: [ 533.577969][T20990] [ 533.577969][T20990] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 533.585901][T20990] lock_acquire+0x120/0x360 [ 533.590941][T20990] _raw_spin_lock_bh+0x36/0x50 [ 533.596254][T20990] nr_rt_ioctl+0x390/0xd50 [ 533.601215][T20990] sock_do_ioctl+0xdc/0x300 [ 533.606261][T20990] sock_ioctl+0x576/0x790 [ 533.611127][T20990] __se_sys_ioctl+0xfc/0x170 [ 533.616265][T20990] do_syscall_64+0xfa/0xfa0 [ 533.621296][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.627704][T20990] [ 533.627704][T20990] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 533.635691][T20990] lock_acquire+0x120/0x360 [ 533.640977][T20990] _raw_spin_lock_bh+0x36/0x50 [ 533.646257][T20990] nr_rt_ioctl+0x193/0xd50 [ 533.651276][T20990] sock_do_ioctl+0xdc/0x300 [ 533.656303][T20990] sock_ioctl+0x576/0x790 [ 533.661171][T20990] __se_sys_ioctl+0xfc/0x170 [ 533.666303][T20990] do_syscall_64+0xfa/0xfa0 [ 533.671343][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.677756][T20990] [ 533.677756][T20990] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 533.685595][T20990] validate_chain+0xb9b/0x2140 [ 533.690883][T20990] __lock_acquire+0xab9/0xd20 [ 533.696081][T20990] lock_acquire+0x120/0x360 [ 533.701104][T20990] _raw_spin_lock_bh+0x36/0x50 [ 533.706412][T20990] nr_rt_device_down+0xa9/0x720 [ 533.711777][T20990] nr_device_event+0x137/0x150 [ 533.717065][T20990] notifier_call_chain+0x1b6/0x3e0 [ 533.722692][T20990] __dev_notify_flags+0x18d/0x2e0 [ 533.728228][T20990] netif_change_flags+0xe8/0x1a0 [ 533.733674][T20990] dev_change_flags+0x130/0x260 [ 533.739035][T20990] dev_ioctl+0x7b4/0x1150 [ 533.743882][T20990] sock_do_ioctl+0x22c/0x300 [ 533.749007][T20990] sock_ioctl+0x576/0x790 [ 533.753864][T20990] __se_sys_ioctl+0xfc/0x170 [ 533.758985][T20990] do_syscall_64+0xfa/0xfa0 [ 533.764043][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.770447][T20990] [ 533.770447][T20990] other info that might help us debug this: [ 533.770447][T20990] [ 533.780661][T20990] Chain exists of: [ 533.780661][T20990] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 533.780661][T20990] [ 533.794477][T20990] Possible unsafe locking scenario: [ 533.794477][T20990] [ 533.801922][T20990] CPU0 CPU1 [ 533.807294][T20990] ---- ---- [ 533.813024][T20990] lock(nr_neigh_list_lock); [ 533.817697][T20990] lock(&nr_node->node_lock); [ 533.824971][T20990] lock(nr_neigh_list_lock); [ 533.832163][T20990] lock(nr_node_list_lock); [ 533.836744][T20990] [ 533.836744][T20990] *** DEADLOCK *** [ 533.836744][T20990] [ 533.844959][T20990] 2 locks held by syz.3.4281/20990: [ 533.850151][T20990] #0: ffffffff8f2cbd48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 533.859057][T20990] #1: ffffffff8f426a18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 533.869169][T20990] [ 533.869169][T20990] stack backtrace: [ 533.875138][T20990] CPU: 0 UID: 0 PID: 20990 Comm: syz.3.4281 Not tainted syzkaller #0 PREEMPT(full) [ 533.875160][T20990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 533.875170][T20990] Call Trace: [ 533.875178][T20990] [ 533.875186][T20990] dump_stack_lvl+0x189/0x250 [ 533.875212][T20990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.875233][T20990] ? __pfx__printk+0x10/0x10 [ 533.875249][T20990] ? print_lock_name+0xde/0x100 [ 533.875265][T20990] print_circular_bug+0x2ee/0x310 [ 533.875286][T20990] check_noncircular+0x134/0x160 [ 533.875307][T20990] validate_chain+0xb9b/0x2140 [ 533.875328][T20990] ? rt6_disable_ip+0x6b3/0x720 [ 533.875354][T20990] ? __lock_acquire+0xab9/0xd20 [ 533.875370][T20990] __lock_acquire+0xab9/0xd20 [ 533.875387][T20990] ? nr_rt_device_down+0xa9/0x720 [ 533.875404][T20990] lock_acquire+0x120/0x360 [ 533.875419][T20990] ? nr_rt_device_down+0xa9/0x720 [ 533.875441][T20990] ? nr_rt_device_down+0xa9/0x720 [ 533.875459][T20990] _raw_spin_lock_bh+0x36/0x50 [ 533.875480][T20990] ? nr_rt_device_down+0xa9/0x720 [ 533.875498][T20990] nr_rt_device_down+0xa9/0x720 [ 533.875516][T20990] ? do_raw_spin_unlock+0x122/0x240 [ 533.875539][T20990] nr_device_event+0x137/0x150 [ 533.875556][T20990] notifier_call_chain+0x1b6/0x3e0 [ 533.875577][T20990] __dev_notify_flags+0x18d/0x2e0 [ 533.875595][T20990] ? __pfx___dev_notify_flags+0x10/0x10 [ 533.875609][T20990] ? __dev_change_flags+0x4cc/0x6d0 [ 533.875627][T20990] ? __pfx___dev_change_flags+0x10/0x10 [ 533.875642][T20990] ? strnlen+0x3f/0x90 [ 533.875656][T20990] ? full_name_hash+0x92/0xe0 [ 533.875675][T20990] netif_change_flags+0xe8/0x1a0 [ 533.875693][T20990] dev_change_flags+0x130/0x260 [ 533.875710][T20990] dev_ioctl+0x7b4/0x1150 [ 533.875734][T20990] sock_do_ioctl+0x22c/0x300 [ 533.875755][T20990] ? __pfx_sock_do_ioctl+0x10/0x10 [ 533.875786][T20990] sock_ioctl+0x576/0x790 [ 533.875805][T20990] ? __pfx_sock_ioctl+0x10/0x10 [ 533.875826][T20990] ? __fget_files+0x3a0/0x420 [ 533.875840][T20990] ? __fget_files+0x2a/0x420 [ 533.875855][T20990] ? bpf_lsm_file_ioctl+0x9/0x20 [ 533.875873][T20990] ? __pfx_sock_ioctl+0x10/0x10 [ 533.875892][T20990] __se_sys_ioctl+0xfc/0x170 [ 533.875912][T20990] do_syscall_64+0xfa/0xfa0 [ 533.875934][T20990] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.875956][T20990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.875971][T20990] ? clear_bhb_loop+0x60/0xb0 [ 533.875988][T20990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.876003][T20990] RIP: 0033:0x7f17fc58f749 [ 533.876018][T20990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.876034][T20990] RSP: 002b:00007f17fd362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.876049][T20990] RAX: ffffffffffffffda RBX: 00007f17fc7e5fa0 RCX: 00007f17fc58f749 [ 533.876061][T20990] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 533.876071][T20990] RBP: 00007f17fc613f91 R08: 0000000000000000 R09: 0000000000000000 [ 533.876081][T20990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.876091][T20990] R13: 00007f17fc7e6038 R14: 00007f17fc7e5fa0 R15: 00007ffc4c989ac8 [ 533.876110][T20990] [ 534.271294][T17745] net_ratelimit: 4 callbacks suppressed [ 534.271313][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.400919][ T1158] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.510502][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.620315][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.730234][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.840285][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 534.950281][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 535.060245][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 535.170426][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 535.280247][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.340402][T17745] net_ratelimit: 35 callbacks suppressed [ 539.340436][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.460285][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.570285][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.680731][ T6601] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.790272][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 539.900272][ T6583] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 540.010711][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 540.120294][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 540.230305][T17745] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 540.340748][ T7555] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 543.000927][T17745] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)