last executing test programs: 2.691980426s ago: executing program 4 (id=3436): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d60a00000000000061110c0000000000180000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x29, 0x0, 0x1, 0x43}, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@empty, 0x14, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40000, 0x2}, 0x10}, 0x94) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xee6b, 0x6}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x64f2b3277155f64}, 0x44000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000009c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x5, 0xfff, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r8}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={r8, 0x8, 0x1fca, 0x1, 0x10001, 0x7}, &(0x7f00000001c0)=0x14) 1.784498616s ago: executing program 4 (id=3451): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c000000396f23b1e195149bfed7de32198388a78a7ed1ee08841a1de527b200f58222fa29e1272097efbd18222489765711121dad7402bbd0952f07399dae23f6535c0f2d3cf02fb174fd8a5da0f832f3a99d55f15d45b1bf034ee52b96ce14c023750de903eef86e50e87f99bf36eb1b27c3b0cedf64e13ff3d8bd8fe396f5b414bd83ff2658bebe66412597844bf5755fc1", @ANYRES16=r3, @ANYBLOB="010027bd7000000000000c000000180001801400020076657468315f746f5f62617461647600200003801c0003801800018008000100020000000c000200657468746f6f6c00"], 0x4c}}, 0x804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x101}, 0x40000) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000400)={'wg0\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0x0, [0x3, 0xffffff49, 0x7, 0x1, 0xc5, 0x3, 0x100, 0x1, 0x8, 0xd, 0x8, 0x1, 0x5, 0x3, 0xfff, 0x4, 0xba, 0x7, 0x2, 0x1, 0x9aff, 0x18, 0x4, 0x1, 0x2, 0xb8e00, 0xfe9, 0x6, 0x10, 0x1, 0xffffffff, 0x9, 0x10001, 0x5, 0x1, 0x5, 0x3, 0x0, 0x60, 0x6, 0x0, 0x6fb1, 0x1, 0x4e, 0xd2c, 0x5, 0x2, 0xd, 0x8, 0x1, 0x9, 0x6, 0xb, 0x5, 0x8, 0xef18, 0x7f, 0x8fae, 0xfffffffa, 0xfffffffb, 0x4, 0x9, 0x1, 0x8, 0x100, 0x4, 0x4, 0x5, 0x0, 0x8, 0xffffffff, 0x5, 0x9, 0x2, 0x8, 0x4f0, 0x0, 0x9, 0x1, 0xfffffffc, 0x7, 0x401, 0x5, 0x7fffffff, 0x80000000, 0x8, 0x8, 0x7, 0x28, 0xff, 0x600000, 0x8001, 0x5, 0x2, 0x4, 0x6, 0x0, 0x3, 0x1000, 0x1, 0xdfe, 0x9, 0x5, 0x7, 0xa0, 0x1, 0x8, 0x9, 0x2, 0x8, 0x5, 0x4, 0x80, 0x0, 0x30, 0xff, 0x1ff, 0x3, 0xad, 0x0, 0xfffffaac, 0xdfde, 0x5, 0x7fff, 0x1, 0x0, 0x1, 0x1ff], "4fcda0e4a4d2abf122654b940232250f5189550fc4ed8bde666013590497d43ae4e7cd2657779889a7f0a627d6c6c28e8e19372c47d7811520bae2b43bd6a105dcaa2b803a98588f48e985c2e21138edf03fe0dbf0cfd84e01c1895d361f9d7f8ca8c61ca8a601c18f5690b02d105cddbc430f3bbf2d8bd4c845a167c8945d4db3ed756cdabee507151ccbc4eecf99199430fc3822"}}) 1.661994082s ago: executing program 0 (id=3454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x89}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffd, @mcast1, 0x18}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7951}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40001}, 0x400c090) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001000000000007f35b4660000000000000009a000fe0000000095"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) 1.594397555s ago: executing program 3 (id=3455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r0, 0xb5d6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaf45}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}]}, 0x40}}, 0x4000) 1.468168725s ago: executing program 4 (id=3456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0}) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.464466699s ago: executing program 0 (id=3458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r4}) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008680)={&(0x7f0000008640)={0x18, 0x1401, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x40000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r4}) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008680)={&(0x7f0000008640)={0x18, 0x1401, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='wlan0\x00', 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) 1.336706407s ago: executing program 3 (id=3460): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @empty, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="6a50585ae56e9577cadaca453cb1e76ee39ce6010271f7358c2c602ff57f7b9faaeb87ef7492f14d0d3cbef205aecd90d512840a31c127f957ee97ee239d08c65407f603aca9e840af71380c9508593e28cbe0923d5c9f4fd5218737771a66ad98bd93c582e56e2cb0e1925d8c70667e715d90922bcee6d864250312ab645b4246566df29da59242b6a98b3c8dc47383"}, {&(0x7f0000000380)="760e4b435aa53fb353dc64507963edc146a9767782848b6b64ba9cef0c2e75cb8cc3155bc6f16935fd6752f5a45c478ec899403459287a332491a65fcfa75c573945591b83be319d9c38ecf960194eb8c06dd4613f385af3fd37ffc7cdc3aae454630000991c894507ce637fb236f115f4f8954195474f81d5a0e0214b60f7823f54f4a04451fd2986c981f457801de2d0c2ec3a6d14be4fed10948d911e04b07565e20a411acc94e9917615a3a68b29a85ce5bd1920e77954126629e4fcf011"}, {&(0x7f0000000100)="ba80ddfde6a40c78b619946d9c4d02641a2f1c59a43b6d3437f71243163fdaff7c72c969bed46abcdd5c600e8931e66838d98253ec91dd36a2bb96ff4a30f00e45b9b2039786944bfa7d309f959417b87fa21f96bbc3f4de5defad1b0c47d95f6557c3296c2dcafd"}, {&(0x7f00000001c0)="518840924f28f4e0"}, {&(0x7f0000000300)="5565c63e717319c592351f92151dce2ac97de513c6a7c3edb80d378d89ece3ace8b7876b5de51a2b2d57c565cfe0a0a36a66a8e1378b4774eba20686d19623fe25cd62b22f66ea9ec91c0b5f1ba142f5195a7084290e6094f5ff96870d1f50883a792aa6b088ae8d376857e2be803d244db106a6c8471383"}, {&(0x7f0000000200)="f8a155e5f9e95d28f3c70b6aaadf7dbe62aff3399a62b3d2031b4f5b8f0fc0f3d352d75c96656d15b74c4f91e330dda8e2e26bcb746cbc594f8753c3d4c7ae01a06206483359885c7c26d3504c39dced517e2cfa4956ba0e05e9c1ba"}], 0x3, 0x0, 0xfffffeea}, 0x0) 1.285015937s ago: executing program 4 (id=3461): r0 = socket(0x27, 0x4, 0x2000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r2, 0x104, 0x6ba05eb0794edd29, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3ff, @default, @bpq0, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 1.136388314s ago: executing program 4 (id=3463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) (async) 992.0068ms ago: executing program 0 (id=3465): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) unshare(0x20000400) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYRES64=r1], &(0x7f0000000580)='syzkaller\x00', 0xb32b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') ioctl$FIBMAP(r6, 0x1, &(0x7f0000000800)=0x6d) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="000e00"}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f00000001c0)=0xc) (async) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000000000000000800c300741300000800c4001a"], 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000800) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xbe0091b84e59f082}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf255700000008000300", @ANYRES32=r9, @ANYBLOB="fe839611e0fc62c9d5f0c47c3b6fee7d02994aa5d1f27b52fc509a01bed0a70d0000000000000045bd4e66894f6ea310fd45a6854a9bfceddf2b4d6a062724642882da4be94f5c00"/87], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20044000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0) 960.445101ms ago: executing program 4 (id=3466): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="240022291fcb8ebd0e00003a00000400000000fddbdf25020000000000000b0000000006001c004e220000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) unshare(0x26020480) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x28000000) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40) r8 = socket$caif_stream(0x25, 0x1, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f0000000500)=0xe44) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x4104}, 0x10) (async) recvmmsg$unix(r5, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) (async) write(r0, &(0x7f0000000100)="14008380b976b34be0f3ddce000a52004f7fb3e4", 0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x24000805}, 0x44004) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x24, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x1100, 0x2}}]}, 0x24}}, 0x0) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)={0x20, 0x5e, 0xe25, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}]}, @nested={0x4, 0x1}]}, 0x20}], 0x1}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) 818.763721ms ago: executing program 0 (id=3468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140e, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc4}, 0x20000004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x140f, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x6b, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x7, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 741.340124ms ago: executing program 2 (id=3469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x28}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x2c}}, 0x8080) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x22, 0x80808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r5 = accept$alg(r4, 0x0, 0x0) write(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1}, 0x3}], 0x1, 0x2100, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000070096f7575bcdee1f453015c896387fc14c7215096de680a12e4c7bf8be154330cc993d17302601d2c27aff27a7115b31ae06835d13e27c767640fc4625695f803d469f96e54b71e0023ff8dde669a3886b39592c4ae10943ffe2ceffb7d2f303290a984858542a3455b119c272d35b2f371247eae78db7d33daff7f77a828d5b", @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="1c005a80180001801400030006000200fdff030003000500ca000600"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r6, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r6], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400004000fcffffff000003e4", @ANYRES32=r6, @ANYBLOB="0000000002000000200012800800010073697400140002800800140001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRES16=r11, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="086600901501b7e42e37572000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x808) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r11, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000071400012cbd7000fbdbdf2505005400000000000900020073797a31000000000800010000000000080001007c2580be904601000000080001000000", @ANYRES32=r12, @ANYBLOB='\b\x00D\x00', @ANYRES32=r13, @ANYRES64=r10], 0x4c}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) openat$cgroup_ro(r13, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000140)=[{0x2, 0x12, 0x9, 0x5}]}, 0x10) 729.406648ms ago: executing program 1 (id=3470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket(0xf, 0x1, 0xfffffff8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_DELTABLE={0x338, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xfe, 0x6, "602c8ec82c3c1ca71b0a4d89442bb90220409e4e73448104537ba7d0093ac3615b420e48ae24d7b7de12cab4dd34e0bb7e6536c156f820da6db46685bf2e3e72fa257ec621ce6b2514614efb9a232537153affee335181e760860a07ceb476711cdd98802dac3fa96e10b83cc3b1811d9b5639ea496e436a7c22391462f4f8df673723e9d8dc733b8b7feb9f53a30d276cc4259a3c63469f8fc605b1c318ce2a6fadaf8810f1f49d1c316272fb4cf79a0726feebc6d93636c45c7f3f6aab88603eb314169448d3fb21cfb81ce0e765ff00f7e0bca3d35f27b2c8bef7c8fb7d77d64bb71a4648791d45f47af3542f90e6aac240fd3beea7e701cc"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x46, 0x6, "a29bb79279970f115ce821d84d0a2c1e0046c9f8b13f7dbe2125bafaa68ce73e8478acaf18eb7ec51a031ab52d711cc4fa13afc2fe5ebd50ff89a39abfc50b61405e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "9f649b2a0b30d7751fd2832108d39fb23645426ed17bfcd272450ae5af4ba6c60b186b118e2bce7343132887dfe7783db2a6cd2795d0fe0e6176324a9ffc4f616807bf9ce3bc4a51a87dbe2d6170c856e5f69bc6793175bf68056a5bb9c2ebb5e65b3a2702767d4faefb5d58191fd6a50d631bca88fe29"}, @NFTA_TABLE_USERDATA={0x65, 0x6, "34040e2a45cc0df88ef4a3a3f433df4829c9422283d3bad6d63605f10f2403fdede0863c3067e9f56320fb613eefee95515c3b9aebe3737e75132404a2f41624f96d1238a19464b5081f48c5ee5c58ade07dd6f72f925bf27c888a8b44f2b054db"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xc6, 0x6, "c7a3356b4c4569f671beead02888f2487ee879a612503663bae36a8ef0083b0a02466e543c83a99f5f8c6772e6becef65ad8e6e66a671479222950e03294c83e2ac01cff0c4bcb47a98388504d3964e294acf348c6394dc9f35eaa0afefc95c8b431ff82596836bc350dff99e3d1d529fed7d0808093a8a71de41587aea9b174aec635e524ca495032066aaea13986d8d193a49ec244610629f1f5c34ef74915deab7ecd3ab5d24214f77da53e7cb395e9d1fb798c3b3e6e7b6ec2fdd421cbca455b"}]}], {0x14}}, 0x360}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) 618.812204ms ago: executing program 3 (id=3471): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800002e4c049e93831f0879c5b3e930b364cc615f67f7606a2c34bdd2fc6bf9c2e12ae7c3e4b9944daa17b5e5b9461154e0cc39522ee9a1cbc8d079105f8f903c7e505c29b40063fef3f68f8b815b020549974163c6de4c2e0751de10d6cf5952a80a739c871f6e36f85c14ffee33f9ac5385fa98a9faa8cae90a7fb2f8c36c3d4271a0678363738c6a88bf64028434aa997881ad94e5a7076556a4a846ba77ee86f368a90415547171e29d4f5ceb5303334bfb65a8dda0488200"/199, @ANYRES16=r4, @ANYBLOB="050000000000fddbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="1c00e7004dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"], 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffe0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x24000001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0xd, 0x10}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 618.551937ms ago: executing program 1 (id=3472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000002000000040000000400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) 617.911345ms ago: executing program 0 (id=3473): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x26020480) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000001900)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x28000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x40) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r7, 0x89e6, &(0x7f0000000080)) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x11) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 617.583865ms ago: executing program 2 (id=3474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e27, 0xe, @remote, 0x167}}, 0x1a) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000300)) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000000a0605d4290000001b0000000000000005000100070000000900020073797a3000000000040007"], 0x2c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000000)=0x7, 0x6, &(0x7f0000000040), &(0x7f0000000280)}) 480.09464ms ago: executing program 1 (id=3475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x19b}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b3", 0x56}], 0x2}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)={0x24, r2, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '[\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 478.528597ms ago: executing program 2 (id=3476): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x4}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x2c, 0x0, &(0x7f00000000c0)=0xffffffffffffffc3) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x4}) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x2c, 0x0, &(0x7f00000000c0)=0xffffffffffffffc3) (async) 438.05199ms ago: executing program 2 (id=3477): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, 0x1, 0x1, [@multicast2]}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000015c0)={{0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x4000, &(0x7f0000000300)={@align=0x1, {0x73e, 0x6, 0x8, 0x7}}, 0x5, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xc5}, {[0x3, 0x4, 0x0, 0x9]}, 0xfffffffd, 0x16, &(0x7f00000003c0)=""/22}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0xfffffffe}}, 0x10) bind$tipc(r4, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) write$cgroup_subtree(r3, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0xfe33) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000080)="4d0da79f380cecf028b4a0a250590c7eeea96779f5c4c9f96a1ed0ba973af53b40eacdf023a8399a026757a9941ffd252941385427034682791168f20ecca327135c8b5841a1c355a3277009b36ef544e9dacc6121c8ebabc5671f6599ddd63b5e058c5afb9193d734d950d2068c93a20f0ef9277c1452e8b5c0be5e797ab5c1df96dbfb242e632994f535ed1996530165035d9094211f68ed9b3d06e523a2aef09ac7aa204e45b5ffaf0f754300"/184, 0xb8}, {&(0x7f0000000140)="8228f88108e84db9c6c54a69a497c3995164b83b1e359778ece303e9c0a252e6f4936137b57b6ef2f9b2e16edc81d95aee41d1b85d56882fef3ab99f08a8bb1e3066a232e0bc223ec94035b8fdcf7598026d2acf5ff0ed5534d37509a5a250cb9950f6689103bbd722727ac7a309ad8c8c16c8f2a0f28f609f39280a24a299e1bc74deb70300a58b0d62f384ed96118663d734967d63715a9310d1df960b0147089e19ba99f26a808bdcf94a742d4d08c5b51a8cdce3c36e4fbc2bcdecdbc7f6987b723f3d3c8852772af409479e3245870362932929e3da2de5a55122", 0xdd}, {&(0x7f0000000000)="943a717f98e976d1a21d4149aea2abda3bde15438a0a0508dbee6ba78100b2d2843b080aa6023dfce1898a48ccfb89da65c189ee7ee23f", 0x37}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="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", 0xfc}], 0x5}, 0x41000) 424.66876ms ago: executing program 0 (id=3478): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x2e}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40014) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0xf0b, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x188, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd71}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x39}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x153}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x41}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x188}}, 0x20004050) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async, rerun: 32) r5 = socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="73c4435029ef", 'ip6gre0\x00'}}, 0x1e) (async) r6 = socket(0x18, 0x0, 0x0) close(r6) socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000020000000005000000f47e6a"], &(0x7f0000000100)=0x2d) 324.397949ms ago: executing program 3 (id=3479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00001000390400010100000000002100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc000000000000000000000000000001"], 0x5c}}, 0x0) 324.176382ms ago: executing program 1 (id=3480): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x48}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$l2tp(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) 294.13984ms ago: executing program 2 (id=3481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00792984"], 0x4c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f0000000280)={0xe00000000, 0x10000, 0x80000001, 0x0, 0x9, 0x6, 0x0, &(0x7f00000001c0)=[{0xb, 0xfe, 0x7c}, {0x9, 0xfe, 0x1}, {0x1a, 0x101, 0x3}, {0x0, 0x101, 0x3}, {0x4, 0xfe, 0x3}, {0x7, 0xfe}]}) shutdown(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x4}, &(0x7f0000000180)=0x8) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) 230.278996ms ago: executing program 3 (id=3482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003080500000000000000000000000000050003008400210014000480080007400000000008000640000000000600024000000000"], 0x38}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003080500000000000000000000000000050003008400210014000480080007400000000008000640000000000600024000000000"], 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000008c0)=@gcm_128={{0x303}, "ce8d1c91499b74be", "050176e0dda87463d0c67a9e6d510c94", "77cd9195", "aaec637dc558c1e8"}, 0x28) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001040)="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", 0xfb}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "7c80690ea8c8123e", "f92dafad9e3b473a1eaac151fe41ea97", "ee367a98", "74aff2072572aca8"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bind$alg(r2, 0x0, 0x0) (async) bind$alg(r2, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "190037d70600", "b7b6c5b29ca2b838d41ac3fc7ddf972d", '\x00', "3610000000000001"}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0xb) 144.851245ms ago: executing program 1 (id=3483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010076ff0000060001000009000000d10e7f05230000000000"], 0x3c}, 0x1, 0xba01}, 0x0) 85.553257ms ago: executing program 2 (id=3484): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf42}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) r5 = socket(0xb, 0x3, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf42}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) (async) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) (async) socket(0xb, 0x3, 0x40000) (async) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 77.048905ms ago: executing program 3 (id=3485): r0 = socket$inet6(0x10, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f00000001200130700000000fc5bdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000087000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x8, 0x20, 0x0}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffcb}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) write(r0, &(0x7f00000007c0)="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", 0xfc) 0s ago: executing program 1 (id=3486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="c26ecef6eae95f89bae081b749a0fd9983e69d96acfc07659f0c2b55175674a382ff67fcbea3ffe24bb80a2650ed23e1bb5f7803b23e2a152fa912b3f8743704eb0033fd9a9d665b16d1df0048cece6a2116e59a9a3c37c14a0a93e76e4dd8d48ef1208644a3ca07fc07c05d6deff6442b86a077f9616b9800dfe10a4c7f22f54ca56b15c82c3bca2dd768668772023fb99c71d34686fe2389b7c0fc6b1c87a785f92ea486486fbd2db079e4", 0xac}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device team0 [ 224.426004][T12993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.454230][T12987] macvlan2: entered promiscuous mode [ 224.467563][T12987] macvlan2: entered allmulticast mode [ 224.477527][T12987] bond6: entered promiscuous mode [ 224.483324][T12987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.507421][T12987] bond6: left promiscuous mode [ 225.115963][T13053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.320863][T13061] IPVS: set_ctl: invalid protocol: 8 172.30.1.5:20004 [ 225.372888][T13071] __nla_validate_parse: 16 callbacks suppressed [ 225.372907][T13071] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1957'. [ 225.488617][T13071] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1957'. [ 225.503876][T13080] netlink: 'syz.1.1959': attribute type 3 has an invalid length. [ 225.674426][T13091] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1963'. [ 225.822745][T13104] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 226.035447][T13119] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 226.054858][T13117] netlink: 'syz.3.1970': attribute type 1 has an invalid length. [ 226.153479][T13125] bond8: (slave gretap3): making interface the new active one [ 226.164033][T13125] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 226.235601][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1976'. [ 226.305607][T13135] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 226.552545][T13140] vlan2: entered promiscuous mode [ 226.582144][T13140] geneve1: entered promiscuous mode [ 226.602924][T13140] vlan2: entered allmulticast mode [ 226.628214][T13140] geneve1: entered allmulticast mode [ 226.889033][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1988'. [ 227.116419][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1992'. [ 228.340078][ T5821] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 228.372451][T13219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.443617][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 228.443643][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 228.443653][ T5821] Call Trace: [ 228.443659][ T5821] [ 228.443667][ T5821] dump_stack_lvl+0xe8/0x150 [ 228.443696][ T5821] dump_header+0xd3/0x4c0 [ 228.443718][ T5821] oom_kill_process+0x3ab/0x970 [ 228.443740][ T5821] out_of_memory+0x106c/0x1410 [ 228.443757][ T5821] ? percpu_ref_put+0x19/0x180 [ 228.443778][ T5821] ? __pfx___mutex_lock+0x10/0x10 [ 228.443808][ T5821] ? __pfx_out_of_memory+0x10/0x10 [ 228.443823][ T5821] ? do_raw_spin_unlock+0xf5/0x210 [ 228.443850][ T5821] try_charge_memcg+0xc53/0x1560 [ 228.443887][ T5821] ? __pfx_try_charge_memcg+0x10/0x10 [ 228.443933][ T5821] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 228.443958][ T5821] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 228.443981][ T5821] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 228.444004][ T5821] __swap_cache_prepare_and_add+0xe8/0x760 [ 228.444036][ T5821] ? page_rmappable_folio+0x9a/0x170 [ 228.444065][ T5821] swap_cache_alloc_folio+0xf1/0x240 [ 228.444093][ T5821] swap_cluster_readahead+0x369/0x690 [ 228.444116][ T5821] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 228.444144][ T5821] ? get_vma_policy+0x27b/0x3c0 [ 228.444165][ T5821] swapin_readahead+0x196/0xc50 [ 228.444187][ T5821] ? __pfx_swapin_readahead+0x10/0x10 [ 228.444207][ T5821] ? swap_table_get+0x1e/0x260 [ 228.444225][ T5821] ? swap_table_get+0x1e/0x260 [ 228.444241][ T5821] ? swap_table_get+0x1e/0x260 [ 228.444260][ T5821] ? swap_table_get+0x216/0x260 [ 228.444279][ T5821] ? swap_cache_get_folio+0x513/0x520 [ 228.444302][ T5821] do_swap_page+0x56f/0x5a20 [ 228.444338][ T5821] ? do_swap_page+0x127/0x5a20 [ 228.444355][ T5821] ? __pfx_do_swap_page+0x10/0x10 [ 228.444372][ T5821] ? __pte_offset_map+0x1ae/0x240 [ 228.444388][ T5821] ? pte_offset_map_rw_nolock+0xea/0x160 [ 228.444403][ T5821] handle_mm_fault+0x12d2/0x3310 [ 228.444433][ T5821] ? handle_mm_fault+0xee/0x3310 [ 228.444458][ T5821] ? __pfx_handle_mm_fault+0x10/0x10 [ 228.444476][ T5821] ? lock_vma_under_rcu+0x45a/0x500 [ 228.444510][ T5821] do_user_addr_fault+0xa73/0x1340 [ 228.444533][ T5821] ? rcu_is_watching+0x15/0xb0 [ 228.444551][ T5821] ? trace_page_fault_user+0x84/0x210 [ 228.444570][ T5821] exc_page_fault+0x6a/0xc0 [ 228.444587][ T5821] asm_exc_page_fault+0x26/0x30 [ 228.444600][ T5821] RIP: 0033:0x7fac4395d04e [ 228.444615][ T5821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.444626][ T5821] RSP: 002b:00007fff1fe99fa8 EFLAGS: 00010246 [ 228.444639][ T5821] RAX: 0000000000000000 RBX: 00005555650be500 RCX: 00007fac4395d04e [ 228.444649][ T5821] RDX: 00007fff1fe9a000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.444658][ T5821] RBP: 00007fff1fe9a06c R08: 0000000000000000 R09: 0000000000000000 [ 228.444666][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 228.444674][ T5821] R13: 00000000000927c0 R14: 00000000000376ba R15: 00007fff1fe9a0c0 [ 228.444697][ T5821] [ 228.444708][ T5821] memory: usage 307200kB, limit 307200kB, failcnt 559 [ 228.495538][T13227] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2001'. [ 228.667195][ T5821] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 228.861326][T13233] block nbd0: Unsupported socket: should be TCP or UNIX. [ 228.959044][ T5821] kmem: usage 306864kB, limit 9007199254740988kB, failcnt 0 [ 229.006826][ T5821] Memory cgroup stats for /syz0: [ 229.007290][ T5821] cache 0 [ 229.015217][ T5821] rss 0 [ 229.042408][ T5821] rss_huge 0 [ 229.045667][ T5821] shmem 0 [ 229.072825][T13237] IPv6: sit4: Disabled Multicast RS [ 229.077515][ T5821] mapped_file 0 [ 229.079366][T13237] sit4: entered allmulticast mode [ 229.081526][ T5821] dirty 0 [ 229.120173][ T5821] writeback 0 [ 229.123511][ T5821] workingset_refault_anon 19 [ 229.156638][ T5821] workingset_refault_file 0 [ 229.176650][ T5821] swap 45056 [ 229.179909][ T5821] swapcached 262144 [ 229.196660][ T5821] pgpgin 36371 [ 229.200083][ T5821] pgpgout 36370 [ 229.203548][ T5821] pgfault 86598 [ 229.276722][ T5821] pgmajfault 18 [ 229.280238][ T5821] inactive_anon 4096 [ 229.284158][ T5821] active_anon 0 [ 229.308214][ T5821] inactive_file 0 [ 229.311906][ T5821] active_file 0 [ 229.315237][T13245] syzkaller1: entered promiscuous mode [ 229.315370][ T5821] unevictable 0 [ 229.344714][T13245] syzkaller1: entered allmulticast mode [ 229.385390][ T5821] hierarchical_memory_limit 314572800 [ 229.396104][ T5821] hierarchical_memsw_limit 9223372036854771712 [ 229.424928][ T5821] total_cache 0 [ 229.428832][ T5821] total_rss 0 [ 229.432134][ T5821] total_rss_huge 0 [ 229.435865][ T5821] total_shmem 0 [ 229.458826][ T5821] total_mapped_file 0 [ 229.477353][ T5821] total_dirty 0 [ 229.480870][ T5821] total_writeback 0 [ 229.511711][ T5821] total_workingset_refault_anon 19 [ 229.532974][ T5821] total_workingset_refault_file 0 [ 229.548202][ T5821] total_swap 45056 [ 229.557736][ T5821] total_swapcached 262144 [ 229.581842][ T5821] total_pgpgin 36371 [ 229.616632][ T5821] total_pgpgout 36370 [ 229.620668][ T5821] total_pgfault 86598 [ 229.624673][ T5821] total_pgmajfault 18 [ 229.646144][T13257] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 229.659536][ T5821] total_inactive_anon 4096 [ 229.669714][ T5821] total_active_anon 0 [ 229.670254][T13257] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 229.673814][ T5821] total_inactive_file 0 [ 229.716953][ T5821] total_active_file 0 [ 229.720997][ T5821] total_unevictable 0 [ 229.724994][ T5821] anon_cost 0 [ 229.746676][ T5821] file_cost 0 [ 229.750021][ T5821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1975,pid=13123,uid=0 [ 229.788444][T13256] netlink: 'syz.2.2009': attribute type 16 has an invalid length. [ 229.806807][ T5821] Memory cgroup out of memory: OOM victim 13123 (syz.0.1975) is already exiting. Skip killing the task [ 229.825650][T13256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'. [ 230.444717][T13291] sctp: [Deprecated]: syz.1.2015 (pid 13291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.444717][T13291] Use struct sctp_sack_info instead [ 231.093768][T13320] netlink: 'syz.4.2026': attribute type 1 has an invalid length. [ 231.144574][T13320] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2026'. [ 231.237356][T13325] netlink: 'syz.4.2026': attribute type 2 has an invalid length. [ 231.410943][T13343] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2031'. [ 231.655858][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2034'. [ 231.850673][T13354] macvtap1: entered promiscuous mode [ 231.856028][T13354] vlan0: entered promiscuous mode [ 231.911091][T13354] macvtap1: entered allmulticast mode [ 231.928900][T13354] vlan0: entered allmulticast mode [ 231.944002][T13354] veth0_vlan: entered allmulticast mode [ 231.961753][T13360] netlink: 'syz.0.2036': attribute type 12 has an invalid length. [ 232.350357][T13385] Cannot find del_set index 49151 as target [ 232.379559][T13386] Cannot find del_set index 49151 as target [ 233.015668][T13420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2053'. [ 233.056950][T13420] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2053'. [ 233.820646][T13473] syzkaller0: entered promiscuous mode [ 233.833124][T13475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.853753][T13473] syzkaller0: entered allmulticast mode [ 234.292336][T13498] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2074'. [ 234.363549][T13500] syzkaller0: entered promiscuous mode [ 234.371113][T13505] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 234.596266][T13527] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 234.632998][T13531] netlink: 'syz.2.2084': attribute type 15 has an invalid length. [ 234.702783][T13525] syzkaller0: entered promiscuous mode [ 234.713505][T13525] syzkaller0: entered allmulticast mode [ 235.318982][T13550] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2088'. [ 235.365615][T13552] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 236.577642][T13547] vlan2: entered allmulticast mode [ 236.582836][T13547] bond0: entered allmulticast mode [ 236.592565][T13547] bond_slave_0: entered allmulticast mode [ 236.601152][T13547] bond_slave_1: entered allmulticast mode [ 236.680410][T13550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.692406][T13550] bond_slave_0: left allmulticast mode [ 236.705284][T13550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.716083][T13550] bond_slave_1: left allmulticast mode [ 236.723526][T13550] bond0 (unregistering): Released all slaves [ 236.735634][T13554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.747999][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2094'. [ 236.839415][T13565] team0: Device gtp0 is up. Set it down before adding it as a team port [ 236.944794][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2098'. [ 236.956090][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2098'. [ 237.605739][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 237.680784][T13624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2108'. [ 237.717397][T13626] bond0: left promiscuous mode [ 237.722683][T13626] bond0: left allmulticast mode [ 237.723445][T13623] netlink: 412 bytes leftover after parsing attributes in process `syz.1.2107'. [ 237.787267][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2110'. [ 237.874122][T13638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2112'. [ 238.045345][T13645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2114'. [ 238.191969][T13653] wg1 speed is unknown, defaulting to 1000 [ 238.290869][T13659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.497377][T13674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2124'. [ 239.095900][T13716] bridge0: port 3(ipvlan3) entered blocking state [ 239.122719][T13716] bridge0: port 3(ipvlan3) entered disabled state [ 239.130027][T13716] ipvlan3: entered allmulticast mode [ 239.135349][T13716] bridge0: entered allmulticast mode [ 239.143577][T13716] ipvlan3: left allmulticast mode [ 239.158483][T13716] bridge0: left allmulticast mode [ 239.506988][T13747] IPv6: addrconf: prefix option has invalid lifetime [ 239.513785][T13747] IPv6: addrconf: prefix option has invalid lifetime [ 239.796986][T13764] syzkaller1: entered promiscuous mode [ 239.802513][T13764] syzkaller1: entered allmulticast mode [ 239.923704][T13775] : entered promiscuous mode [ 240.040920][T13779] bond8: entered promiscuous mode [ 240.067114][T13779] bond8: entered allmulticast mode [ 240.079690][T13779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 240.342394][T13803] sctp: [Deprecated]: syz.0.2162 (pid 13803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.342394][T13803] Use struct sctp_sack_info instead [ 240.465184][T13807] xt_hashlimit: size too large, truncated to 1048576 [ 240.787751][T13826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.254494][T13850] xt_hashlimit: size too large, truncated to 1048576 [ 241.593792][T13866] netlink: 'syz.1.2184': attribute type 83 has an invalid length. [ 241.790146][T13875] netlink: 'syz.1.2188': attribute type 1 has an invalid length. [ 241.805271][T13875] __nla_validate_parse: 6 callbacks suppressed [ 241.805293][T13875] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2188'. [ 241.832669][T13880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.857973][T13875] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2188'. [ 241.899008][T13883] netlink: 'syz.1.2188': attribute type 4 has an invalid length. [ 242.169941][T13906] : renamed from veth1_to_bridge [ 242.436976][T13929] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2203'. [ 242.469830][T13931] netlink: 'syz.2.2205': attribute type 1 has an invalid length. [ 242.526151][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 242.554762][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 242.579461][T13925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2203'. [ 242.599043][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 242.638127][T13931] 8021q: adding VLAN 0 to HW filter on device bond9 [ 242.874384][T13957] raw_sendmsg: syz.2.2210 forgot to set AF_INET. Fix it! [ 243.039212][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 243.073205][T13925] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 243.095808][T13925] vlan0: left allmulticast mode [ 243.102500][T13925] veth0_vlan: left allmulticast mode [ 243.108275][T13925] vlan0: left promiscuous mode [ 243.139256][ T1308] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 243.150714][T13937] wg1 speed is unknown, defaulting to 1000 [ 243.200395][ T1308] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 243.218969][ T1308] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 243.270480][ T1308] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 243.333586][T13974] netlink: 'syz.1.2215': attribute type 1 has an invalid length. [ 243.355542][T13974] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 243.363538][T13969] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 243.397794][T13974] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.2215'. [ 243.457106][T13978] netlink: 'syz.0.2217': attribute type 19 has an invalid length. [ 243.665660][T13986] tipc: Enabling of bearer rejected, media not registered [ 243.743881][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 243.771996][T13995] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 243.788391][T13995] netlink: 'syz.2.2223': attribute type 2 has an invalid length. [ 243.809415][T13998] netlink: 'syz.0.2224': attribute type 1 has an invalid length. [ 243.927431][T13998] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.963019][T14015] : entered promiscuous mode [ 243.992136][T13994] bond2: entered allmulticast mode [ 244.259209][T14033] syz.4.2233: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 244.281960][T14033] CPU: 0 UID: 0 PID: 14033 Comm: syz.4.2233 Not tainted syzkaller #0 PREEMPT(full) [ 244.281987][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.282001][T14033] Call Trace: [ 244.282008][T14033] [ 244.282016][T14033] dump_stack_lvl+0xe8/0x150 [ 244.282048][T14033] warn_alloc+0x249/0x340 [ 244.282071][T14033] ? stack_trace_save+0xa9/0x100 [ 244.282099][T14033] ? __pfx_warn_alloc+0x10/0x10 [ 244.282126][T14033] ? kasan_save_track+0x4f/0x80 [ 244.282145][T14033] ? kasan_save_track+0x3e/0x80 [ 244.282163][T14033] ? __kasan_kmalloc+0x93/0xb0 [ 244.282185][T14033] ? __kmalloc_cache_noprof+0x31c/0x660 [ 244.282226][T14033] ? xskq_create+0x56/0x170 [ 244.282248][T14033] ? xsk_setsockopt+0x54c/0x990 [ 244.282267][T14033] ? do_sock_setsockopt+0x17c/0x1b0 [ 244.282291][T14033] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 244.282312][T14033] ? do_syscall_64+0x14d/0xf80 [ 244.282341][T14033] __vmalloc_node_range_noprof+0x132/0x1730 [ 244.282395][T14033] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.282424][T14033] ? __kasan_kmalloc+0x93/0xb0 [ 244.282454][T14033] vmalloc_user_noprof+0xad/0xe0 [ 244.282476][T14033] ? xskq_create+0xbf/0x170 [ 244.282500][T14033] xskq_create+0xbf/0x170 [ 244.282526][T14033] xsk_init_queue+0x8a/0xe0 [ 244.282551][T14033] xsk_setsockopt+0x54c/0x990 [ 244.282575][T14033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.282595][T14033] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.282629][T14033] ? aa_sock_opt_perm+0xff/0x1a0 [ 244.282663][T14033] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 244.282686][T14033] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.282709][T14033] do_sock_setsockopt+0x17c/0x1b0 [ 244.282738][T14033] __x64_sys_setsockopt+0x13d/0x1b0 [ 244.282768][T14033] do_syscall_64+0x14d/0xf80 [ 244.282792][T14033] ? trace_irq_disable+0x3b/0x150 [ 244.282810][T14033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.282830][T14033] ? clear_bhb_loop+0x40/0x90 [ 244.282853][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.282872][T14033] RIP: 0033:0x7f033339c819 [ 244.282892][T14033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.282909][T14033] RSP: 002b:00007f03342ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.282931][T14033] RAX: ffffffffffffffda RBX: 00007f0333615fa0 RCX: 00007f033339c819 [ 244.282946][T14033] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 244.282958][T14033] RBP: 00007f0333432c91 R08: 0000000000000004 R09: 0000000000000000 [ 244.282969][T14033] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.282982][T14033] R13: 00007f0333616038 R14: 00007f0333615fa0 R15: 00007ffd95edf358 [ 244.283014][T14033] [ 244.283046][T14033] Mem-Info: [ 244.576929][T14033] active_anon:6049 inactive_anon:1 isolated_anon:0 [ 244.576929][T14033] active_file:3081 inactive_file:39996 isolated_file:0 [ 244.576929][T14033] unevictable:768 dirty:124 writeback:0 [ 244.576929][T14033] slab_reclaimable:11706 slab_unreclaimable:106465 [ 244.576929][T14033] mapped:30416 shmem:1374 pagetables:1610 [ 244.576929][T14033] sec_pagetables:0 bounce:0 [ 244.576929][T14033] kernel_misc_reclaimable:0 [ 244.576929][T14033] free:1308917 free_pcp:17461 free_cma:0 [ 244.703502][T14033] Node 0 active_anon:24196kB inactive_anon:4kB active_file:12324kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121564kB dirty:492kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13648kB pagetables:5996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.780897][T14033] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.812308][T14033] Node 0 DMA free:15352kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 244.843401][T14033] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 244.849829][T14033] Node 0 DMA32 free:1309424kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24296kB inactive_anon:4kB active_file:12324kB inactive_file:159784kB unevictable:1536kB writepending:492kB zspages:0kB present:3129332kB managed:2552612kB mlocked:0kB bounce:0kB free_pcp:38612kB local_pcp:22004kB free_cma:0kB [ 244.885226][T14033] lowmem_reserve[]: 0 0 0 0 0 [ 244.909691][T14033] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 244.997998][T14033] lowmem_reserve[]: 0 0 0 0 0 [ 245.028184][T14033] Node 1 Normal free:3910964kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31508kB local_pcp:31508kB free_cma:0kB [ 245.050345][T14068] openvswitch: netlink: Flow key attr not present in new flow. [ 245.150712][T14033] lowmem_reserve[]: 0 0 0 0 0 [ 245.175569][T14033] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 2*4096kB (M) = 15352kB [ 245.200971][T14033] Node 0 DMA32: 5966*4kB (UM) 3481*8kB (UME) 1817*16kB (UME) 281*32kB (UM) 451*64kB (UME) 501*128kB (UM) 485*256kB (UME) 393*512kB (UM) 283*1024kB (UM) 168*2048kB (U) 41*4096kB (UM) = 1309936kB [ 245.222860][T14033] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 245.264963][T14033] Node 1 Normal: 2*4kB (U) 6*8kB (UM) 17*16kB (UM) 7*32kB (UM) 5*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 953*4096kB (M) = 3911016kB [ 245.288836][T14033] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.338277][T14033] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.406778][T14033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.430262][T14033] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.442594][T14033] 44447 total pagecache pages [ 245.453321][T14033] 0 pages in swap cache [ 245.458208][T14033] Free swap = 124996kB [ 245.470918][T14033] Total swap = 124996kB [ 245.475225][T14033] 2097051 pages RAM [ 245.479188][T14033] 0 pages HighMem/MovableOnly [ 245.524430][T14033] 427064 pages reserved [ 245.542396][T14033] 0 pages cma reserved [ 245.788921][T14113] sctp: [Deprecated]: syz.4.2253 (pid 14113) Use of struct sctp_assoc_value in delayed_ack socket option. [ 245.788921][T14113] Use struct sctp_sack_info instead [ 246.449654][T14157] : entered promiscuous mode [ 246.847963][T14183] __nla_validate_parse: 14 callbacks suppressed [ 246.847981][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 247.171888][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2274'. [ 247.180929][T14204] tipc: Enabled bearer , priority 0 [ 247.488129][T14222] TCP: TCP_TX_DELAY enabled [ 247.725463][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2289'. [ 247.835614][T14237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 248.115115][T14262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2297'. [ 248.318961][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2299'. [ 248.368578][T14280] validate_nla: 4 callbacks suppressed [ 248.368598][T14280] netlink: 'syz.2.2300': attribute type 1 has an invalid length. [ 248.382732][T14280] netlink: 'syz.2.2300': attribute type 4 has an invalid length. [ 248.392915][T14280] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2300'. [ 248.439795][T14284] netlink: 'syz.0.2302': attribute type 1 has an invalid length. [ 248.480410][T14287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2303'. [ 248.643956][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2304'. [ 248.766891][T14313] netlink: 'syz.3.2310': attribute type 10 has an invalid length. [ 248.805117][T14313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2310'. [ 248.826161][T14313] dummy0: entered promiscuous mode [ 248.853269][T14313] team0: Port device dummy0 removed [ 248.899789][T14313] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 249.026859][T14326] netlink: 'syz.0.2313': attribute type 1 has an invalid length. [ 249.355080][T14354] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 249.365046][T14354] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 249.453814][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.490622][T14362] veth0_to_bond: entered allmulticast mode [ 249.510092][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.520959][T14362] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 249.581147][T14359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 249.620471][T14367] netlink: 'syz.3.2328': attribute type 1 has an invalid length. [ 249.661905][T14367] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.683567][T14367] bond10: (slave bridge3): making interface the new active one [ 249.704283][T14367] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 249.889929][T14387] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 249.898789][T14387] netlink: 'syz.3.2330': attribute type 2 has an invalid length. [ 249.907205][T14387] netlink: 'syz.3.2330': attribute type 1 has an invalid length. [ 249.915185][T14387] netlink: 'syz.3.2330': attribute type 3 has an invalid length. [ 250.103713][T14403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.807467][T14451] team0: Port device team_slave_0 removed [ 251.069157][T14471] sch_fq: defrate 0 ignored. [ 251.340747][T14493] bond0: entered allmulticast mode [ 251.455671][T14500] macvlan0: entered promiscuous mode [ 251.876412][T14537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.895634][T14542] ip6t_REJECT: ECHOREPLY is not supported [ 251.902877][T14533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.917299][T14537] __nla_validate_parse: 17 callbacks suppressed [ 251.917319][T14537] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2372'. [ 252.110991][T14550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2374'. [ 252.843746][T14597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2388'. [ 252.867951][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2388'. [ 253.004708][T14613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2390'. [ 254.720928][T14627] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 254.732539][T14629] syzkaller1: entered promiscuous mode [ 254.743875][T14629] syzkaller1: entered allmulticast mode [ 254.808278][T14635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2399'. [ 254.819966][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'. [ 254.829840][T14640] validate_nla: 8 callbacks suppressed [ 254.829859][T14640] netlink: 'syz.4.2398': attribute type 12 has an invalid length. [ 254.877251][T14638] openvswitch: netlink: Flow actions attr not present in new flow. [ 254.886110][T14644] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'. [ 255.497117][T14686] bond2: option mode: unable to set because the bond device has slaves [ 255.506464][T14686] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 255.832441][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967168][T14710] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 256.081466][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2420'. [ 256.198608][T14725] netlink: 'syz.2.2422': attribute type 83 has an invalid length. [ 256.302238][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2424'. [ 256.341493][T14725] syzkaller0: entered promiscuous mode [ 256.359628][T14725] syzkaller0: entered allmulticast mode [ 256.565900][T14745] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 258.344801][T14758] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 258.391404][T14760] netlink: 'syz.4.2434': attribute type 1 has an invalid length. [ 258.392458][T14764] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 258.482014][T14772] netlink: 'syz.2.2436': attribute type 10 has an invalid length. [ 258.496279][T14772] __nla_validate_parse: 1 callbacks suppressed [ 258.496296][T14772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2436'. [ 258.496962][T14760] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.544999][T14770] bond5: (slave geneve3): making interface the new active one [ 258.554831][T14770] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 258.564528][T14772] dummy0: entered promiscuous mode [ 258.570822][T14772] bridge0: port 3(dummy0) entered blocking state [ 258.580145][T14772] bridge0: port 3(dummy0) entered disabled state [ 258.587513][T14772] dummy0: entered allmulticast mode [ 258.595679][T14772] bridge0: port 3(dummy0) entered blocking state [ 258.602240][T14772] bridge0: port 3(dummy0) entered forwarding state [ 258.616965][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.640094][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.654716][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.677630][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 258.820294][T14794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2443'. [ 258.851810][T14791] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2441'. [ 259.199434][T14823] xt_nat: multiple ranges no longer supported [ 259.298076][T14829] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 259.321704][T14829] bond6 (unregistering): Released all slaves [ 259.538981][T14839] netlink: 'syz.2.2454': attribute type 1 has an invalid length. [ 259.592249][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2458'. [ 259.605975][T14839] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.617488][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 259.627318][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 259.643457][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 259.696159][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2456'. [ 259.741958][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 259.747021][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 259.940115][T14868] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 260.203661][T14889] syzkaller0: entered promiscuous mode [ 260.209268][T14889] syzkaller0: entered allmulticast mode [ 260.217851][T14889] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 260.285443][T14898] netlink: 'syz.4.2473': attribute type 10 has an invalid length. [ 260.881878][T14935] bond11: option mode: invalid value (133) [ 260.890007][T14935] bond11 (unregistering): Released all slaves [ 260.925085][T14942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.986445][T14944] chnl_net:caif_netlink_parms(): no params data found [ 261.320680][T14962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.332940][T14964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.417199][T14971] xt_l2tp: v2 doesn't support IP mode [ 261.863979][T14996] bond0: (slave gre0): refused to change device type [ 261.879250][T14996] bond2: option mode: unable to set because the bond device has slaves [ 261.929903][ T49] syzkaller0: tun_net_xmit 76 [ 261.932525][T15000] syzkaller0: create flow: hash 671241637 index 1 [ 261.935469][ T49] syzkaller0: tun_net_xmit 48 [ 261.957116][ T5892] syzkaller0: tun_net_xmit 76 [ 261.957324][T14996] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 262.071363][T15009] syzkaller0: delete flow: hash 671241637 index 1 [ 262.773305][T15037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.599802][T15027] macvlan0: left promiscuous mode [ 263.616709][T15034] __nla_validate_parse: 15 callbacks suppressed [ 263.616732][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 263.765530][T15047] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2515'. [ 263.975817][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'. [ 264.018795][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2518'. [ 264.033122][T15063] pimreg: entered allmulticast mode [ 264.152127][T15079] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.2527'. [ 264.153212][T15074] netlink: 'syz.3.2524': attribute type 1 has an invalid length. [ 264.174140][T15079] openvswitch: netlink: Flow actions attr not present in new flow. [ 264.280126][T15074] 8021q: adding VLAN 0 to HW filter on device bond11 [ 264.366298][T15089] bond11: (slave veth9): Enslaving as an active interface with a down link [ 264.410718][T15074] dummy0: left promiscuous mode [ 264.418588][T15089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2524'. [ 264.449306][T15074] bond11: (slave dummy0): making interface the new active one [ 264.461975][T15074] dummy0: entered promiscuous mode [ 264.475571][T15074] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 264.519230][T15089] bond11: (slave dummy0): Releasing active interface [ 264.536761][T15089] dummy0 (unregistering): left promiscuous mode [ 264.602815][T15107] netlink: 9060 bytes leftover after parsing attributes in process `syz.0.2533'. [ 264.695004][T15110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2535'. [ 264.729551][T15113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2537'. [ 264.900926][T15124] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 264.909582][T15124] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2542'. [ 264.919926][T15124] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 264.934851][T15124] netlink: 'syz.0.2542': attribute type 8 has an invalid length. [ 265.423098][T15176] netlink: 'syz.1.2553': attribute type 1 has an invalid length. [ 265.432108][T15176] netlink: 'syz.1.2553': attribute type 3 has an invalid length. [ 265.440537][T15176] netlink: 'syz.1.2553': attribute type 7 has an invalid length. [ 265.449050][T15176] netlink: 'syz.1.2553': attribute type 8 has an invalid length. [ 265.457250][T15176] NCSI netlink: No device for ifindex 131092 [ 265.540820][T15180] xt_hashlimit: size too large, truncated to 1048576 [ 265.648871][T15190] netlink: 'syz.3.2558': attribute type 1 has an invalid length. [ 265.872205][T15209] sock: sock_set_timeout: `syz.0.2562' (pid 15209) tries to set negative timeout [ 265.950295][T15199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.538604][T15258] netlink: 'syz.2.2575': attribute type 11 has an invalid length. [ 266.558601][T15258] netlink: 'syz.2.2575': attribute type 11 has an invalid length. [ 266.594648][T15258] netem: incorrect gi model size [ 266.606951][T15258] netem: change failed [ 267.212984][T15301] vlan3: entered allmulticast mode [ 267.238702][T15298] syzkaller0: entered promiscuous mode [ 267.244348][T15298] syzkaller0: entered allmulticast mode [ 267.323163][T15307] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.589734][T15330] IPVS: length: 147 != 286893288872 [ 267.653129][T15333] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.755103][T15336] netlink: 'syz.4.2602': attribute type 11 has an invalid length. [ 267.778010][T15336] netlink: 'syz.4.2602': attribute type 11 has an invalid length. [ 267.794571][T15337] netlink: 'syz.2.2603': attribute type 4 has an invalid length. [ 267.816974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.223342][T15373] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 268.277650][T15380] IPVS: sh: FWM 3 0x00000003 - no destination available [ 268.382697][T15388] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 268.663260][T15412] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 268.696771][T15412] __nla_validate_parse: 51 callbacks suppressed [ 268.696789][T15412] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2622'. [ 268.769561][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2623'. [ 269.152525][T15456] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 269.193587][T15456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.207272][T15456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.367765][T15469] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.387414][T15470] bond7: (slave geneve4): making interface the new active one [ 269.403860][T15470] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 269.426990][ T486] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.452054][ T486] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.471228][ T486] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.480367][ T486] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 269.585874][T15485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2641'. [ 269.658507][T15492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.677591][T15492] batman_adv: batadv0: Removing interface: gretap1 [ 269.695656][T15492] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 269.714323][T15492] batman_adv: batadv0: Removing interface: ipvlan2 [ 269.930899][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 269.990008][T15520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2652'. [ 270.135214][T15531] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2655'. [ 270.146134][T15531] syzkaller0: entered promiscuous mode [ 270.152249][T15531] syzkaller0: entered allmulticast mode [ 270.207767][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2657'. [ 270.219200][T15537] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2657'. [ 270.228887][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2657'. [ 270.267048][T15538] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2657'. [ 270.490897][T15558] validate_nla: 6 callbacks suppressed [ 270.490917][T15558] netlink: 'syz.0.2663': attribute type 2 has an invalid length. [ 270.648815][T15555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.701031][T15561] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.761497][T15561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.902015][T15555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.960810][T15589] IPVS: Error connecting to the multicast addr [ 271.065932][T15555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.098814][T15602] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 271.160497][T15555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.264535][T15602] x_tables: duplicate underflow at hook 2 [ 271.280759][T15614] xt_ecn: cannot match TCP bits for non-tcp packets [ 271.321230][ T3507] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.339549][ T3507] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.416724][ T3507] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.424991][ T3507] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.511191][T15629] netlink: 'syz.4.2684': attribute type 1 has an invalid length. [ 271.555735][T15633] netlink: 'syz.2.2685': attribute type 3 has an invalid length. [ 271.873661][T15652] syzkaller0: entered promiscuous mode [ 271.890421][T15652] syzkaller0: entered allmulticast mode [ 271.910455][T15658] netlink: 'syz.1.2695': attribute type 1 has an invalid length. [ 271.952671][T15656] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 271.984474][T15656] bond12 (unregistering): Released all slaves [ 272.082900][T15665] netlink: 'syz.1.2697': attribute type 1 has an invalid length. [ 272.583817][T15714] netlink: 'syz.1.2707': attribute type 21 has an invalid length. [ 272.596506][T15714] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.615152][T15714] netlink: 'syz.1.2707': attribute type 1 has an invalid length. [ 272.803414][T15731] syzkaller0: entered promiscuous mode [ 272.827176][T15731] syzkaller0: entered allmulticast mode [ 272.836123][T15731] FAULT_INJECTION: forcing a failure. [ 272.836123][T15731] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 272.900349][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.2.2710 Not tainted syzkaller #0 PREEMPT(full) [ 272.900373][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 272.900382][T15731] Call Trace: [ 272.900389][T15731] [ 272.900396][T15731] dump_stack_lvl+0xe8/0x150 [ 272.900424][T15731] should_fail_ex+0x412/0x560 [ 272.900458][T15731] _copy_from_iter+0x1d3/0x1670 [ 272.900485][T15731] ? __pfx__copy_from_iter+0x10/0x10 [ 272.900500][T15731] ? sock_alloc_send_pskb+0x896/0x990 [ 272.900528][T15731] ? __pfx__copy_from_iter+0x10/0x10 [ 272.900548][T15731] ? page_copy_sane+0x16a/0x270 [ 272.900566][T15731] copy_page_from_iter+0xdd/0x170 [ 272.900594][T15731] skb_copy_datagram_from_iter+0x306/0x710 [ 272.900625][T15731] packet_sendmsg+0x37e4/0x50f0 [ 272.900655][T15731] ? __lock_acquire+0x6b5/0x2cf0 [ 272.900684][T15731] ? __lock_acquire+0x6b5/0x2cf0 [ 272.900721][T15731] ? aa_sk_perm+0x6d5/0x900 [ 272.900744][T15731] ? __pfx_packet_sendmsg+0x10/0x10 [ 272.900768][T15731] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 272.900790][T15731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 272.900817][T15731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.900835][T15731] ? __pfx_packet_sendmsg+0x10/0x10 [ 272.900853][T15731] __sys_sendto+0x672/0x710 [ 272.900873][T15731] ? __pfx___sys_sendto+0x10/0x10 [ 272.900889][T15731] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 272.900921][T15731] ? __fget_files+0x3a0/0x420 [ 272.900947][T15731] ? ksys_write+0x242/0x270 [ 272.900967][T15731] ? __pfx_ksys_write+0x10/0x10 [ 272.900990][T15731] __x64_sys_sendto+0xde/0x100 [ 272.901013][T15731] do_syscall_64+0x14d/0xf80 [ 272.901035][T15731] ? trace_irq_disable+0x3b/0x150 [ 272.901050][T15731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.901067][T15731] ? clear_bhb_loop+0x40/0x90 [ 272.901088][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.901106][T15731] RIP: 0033:0x7f697d19c819 [ 272.901124][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.901138][T15731] RSP: 002b:00007f697dfa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 272.901157][T15731] RAX: ffffffffffffffda RBX: 00007f697d415fa0 RCX: 00007f697d19c819 [ 272.901170][T15731] RDX: 000000000000fd1e RSI: 00002000000002c0 RDI: 0000000000000004 [ 272.901181][T15731] RBP: 00007f697dfa5090 R08: 0000200000000140 R09: 0000000000000014 [ 272.901192][T15731] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 272.901201][T15731] R13: 00007f697d416038 R14: 00007f697d415fa0 R15: 00007fffc6b9c5a8 [ 272.901228][T15731] [ 272.910231][T15740] wg1 speed is unknown, defaulting to 1000 [ 273.423041][T15740] wg1 speed is unknown, defaulting to 1000 [ 273.563723][T15740] wg1 speed is unknown, defaulting to 1000 [ 273.625984][T15775] netlink: 'syz.1.2719': attribute type 6 has an invalid length. [ 273.651066][T15775] netlink: 'syz.1.2719': attribute type 5 has an invalid length. [ 273.773249][T15785] __nla_validate_parse: 17 callbacks suppressed [ 273.773267][T15785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2722'. [ 273.844405][T15789] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20003 [ 273.861288][T15771] wg1 speed is unknown, defaulting to 1000 [ 273.878163][T15793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2722'. [ 274.169082][T15808] openvswitch: netlink: IP tunnel dst address not specified [ 274.325853][T15820] syzkaller0: entered promiscuous mode [ 274.334123][T15820] syzkaller0: entered allmulticast mode [ 274.354057][T15814] FAULT_INJECTION: forcing a failure. [ 274.354057][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.372796][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.1.2729 Not tainted syzkaller #0 PREEMPT(full) [ 274.372820][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.372831][T15814] Call Trace: [ 274.372843][T15814] [ 274.372851][T15814] dump_stack_lvl+0xe8/0x150 [ 274.372887][T15814] should_fail_ex+0x412/0x560 [ 274.372918][T15814] _copy_from_iter+0x1d3/0x1670 [ 274.372948][T15814] ? __pfx__copy_from_iter+0x10/0x10 [ 274.372963][T15814] ? sock_alloc_send_pskb+0x896/0x990 [ 274.372991][T15814] ? __pfx__copy_from_iter+0x10/0x10 [ 274.373012][T15814] ? page_copy_sane+0x16a/0x270 [ 274.373031][T15814] copy_page_from_iter+0xdd/0x170 [ 274.373054][T15814] skb_copy_datagram_from_iter+0x306/0x710 [ 274.373088][T15814] packet_sendmsg+0x37e4/0x50f0 [ 274.373121][T15814] ? __lock_acquire+0x6b5/0x2cf0 [ 274.373153][T15814] ? __lock_acquire+0x6b5/0x2cf0 [ 274.373190][T15814] ? aa_sk_perm+0x6d5/0x900 [ 274.373213][T15814] ? __pfx_packet_sendmsg+0x10/0x10 [ 274.373240][T15814] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 274.373263][T15814] ? aa_sock_msg_perm+0xf1/0x1b0 [ 274.373290][T15814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.373309][T15814] ? __pfx_packet_sendmsg+0x10/0x10 [ 274.373330][T15814] __sys_sendto+0x672/0x710 [ 274.373353][T15814] ? __pfx___sys_sendto+0x10/0x10 [ 274.373370][T15814] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 274.373404][T15814] ? __fget_files+0x3a0/0x420 [ 274.373430][T15814] ? ksys_write+0x242/0x270 [ 274.373459][T15814] ? __pfx_ksys_write+0x10/0x10 [ 274.373483][T15814] __x64_sys_sendto+0xde/0x100 [ 274.373505][T15814] do_syscall_64+0x14d/0xf80 [ 274.373527][T15814] ? trace_irq_disable+0x3b/0x150 [ 274.373542][T15814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.373560][T15814] ? clear_bhb_loop+0x40/0x90 [ 274.373581][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.373602][T15814] RIP: 0033:0x7fd53bf9c819 [ 274.373620][T15814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.373634][T15814] RSP: 002b:00007fd53cf34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 274.373653][T15814] RAX: ffffffffffffffda RBX: 00007fd53c215fa0 RCX: 00007fd53bf9c819 [ 274.373666][T15814] RDX: 000000000000fd1e RSI: 00002000000002c0 RDI: 0000000000000004 [ 274.373677][T15814] RBP: 00007fd53cf34090 R08: 0000200000000140 R09: 0000000000000014 [ 274.373688][T15814] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 274.373698][T15814] R13: 00007fd53c216038 R14: 00007fd53c215fa0 R15: 00007fff59e56328 [ 274.373727][T15814] [ 274.705627][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 274.718350][T15827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2734'. [ 274.855203][T15834] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2738'. [ 274.880398][T15834] netem: invalid attributes len -24 [ 274.886868][T15834] netem: change failed [ 274.897725][T15838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2736'. [ 274.908889][T15840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2737'. [ 274.958273][T15838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2736'. [ 275.087959][T15846] xt_hashlimit: size too large, truncated to 1048576 [ 275.993739][T15879] syzkaller0: entered promiscuous mode [ 275.999575][T15879] syzkaller0: entered allmulticast mode [ 276.101025][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2749'. [ 276.269929][T15902] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.2754'. [ 276.318290][T15907] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.437736][T15917] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 276.709953][T15934] syzkaller0: entered promiscuous mode [ 276.715614][T15934] syzkaller0: entered allmulticast mode [ 277.487557][T15959] validate_nla: 1 callbacks suppressed [ 277.487578][T15959] netlink: 'syz.2.2774': attribute type 16 has an invalid length. [ 277.511269][T15959] netlink: 'syz.2.2774': attribute type 17 has an invalid length. [ 277.550984][T15987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.564380][T15981] delete_channel: no stack [ 277.586120][T15959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.989582][T16019] netlink: 'syz.4.2789': attribute type 61 has an invalid length. [ 278.661556][T16053] ip6t_srh: unknown srh match flags 4000 [ 278.765851][T16058] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 278.842272][T16063] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 278.991414][T16073] __nla_validate_parse: 8 callbacks suppressed [ 278.991432][T16073] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2804'. [ 279.034331][T16073] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.211631][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2811'. [ 279.221115][T16088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 279.353650][T16088] vlan3: entered allmulticast mode [ 279.359078][T16088] bridge0: entered allmulticast mode [ 279.684483][T16125] netlink: 'syz.4.2821': attribute type 1 has an invalid length. [ 279.702610][T16125] netlink: 'syz.4.2821': attribute type 11 has an invalid length. [ 279.749371][T16125] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2821'. [ 279.758547][T16129] netlink: 'syz.4.2821': attribute type 10 has an invalid length. [ 279.786368][T16129] wlan1: mtu greater than device maximum [ 279.806471][T16129] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 279.827626][T16123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.179132][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2827'. [ 280.329183][T16167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.363456][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 280.945371][T16198] syzkaller1: entered promiscuous mode [ 280.967953][T16198] syzkaller1: entered allmulticast mode [ 281.099901][T16204] syzkaller0: entered promiscuous mode [ 281.107532][T16204] syzkaller0: entered allmulticast mode [ 281.185593][T16209] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2844'. [ 281.373565][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2847'. [ 281.431487][T16232] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 281.613899][T16239] syzkaller0: entered promiscuous mode [ 281.630075][T16239] syzkaller0: entered allmulticast mode [ 281.646245][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 281.696931][T16244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2854'. [ 303.825509][T16271] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 303.866926][T16266] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 304.004898][T16283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2864'. [ 304.014779][T16283] hsr0: Caught tx_queue_len zero misconfig [ 304.129676][T16285] syzkaller0: entered allmulticast mode [ 304.241371][T16299] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2869'. [ 304.446525][T16319] netlink: 'syz.0.2872': attribute type 1 has an invalid length. [ 304.465819][T16322] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2875'. [ 304.620612][T16328] netlink: 'syz.0.2877': attribute type 2 has an invalid length. [ 304.821113][T16353] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2883'. [ 304.834730][T16353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.030461][T16363] bond9: option min_links: invalid value (18446744073709551614) [ 305.056686][T16363] bond9: option min_links: allowed values 0 - 2147483647 [ 305.069789][T16363] bond9 (unregistering): Released all slaves [ 305.173150][T16373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2888'. [ 305.265389][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2890'. [ 305.278951][T16379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 305.432480][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2892'. [ 305.498460][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2895'. [ 305.662724][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 305.835411][T16416] netlink: 'syz.4.2902': attribute type 1 has an invalid length. [ 305.844822][T16416] bridge0: Device is already in use. [ 306.079877][T16428] xt_hashlimit: overflow, rate too high: 0 [ 306.279557][ T5145] block nbd2: Receive control failed (result -1) [ 306.330406][ T6186] wg1 speed is unknown, defaulting to 1000 [ 306.557818][T16446] openvswitch: netlink: IPv4 tun info is not correct [ 307.555344][T16518] syzkaller1: entered promiscuous mode [ 307.576795][T16518] syzkaller1: entered allmulticast mode [ 307.661593][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.710669][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.721822][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.747069][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.751331][T16524] syzkaller0: entered promiscuous mode [ 307.762457][T16524] syzkaller0: entered allmulticast mode [ 307.772645][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.801506][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.809485][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.824912][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.876742][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.901309][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.096464][T16545] netlink: 'syz.2.2937': attribute type 21 has an invalid length. [ 308.118353][T16525] wg1 speed is unknown, defaulting to 1000 [ 308.156122][ T486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.169465][ T486] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 308.318626][ T486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.341126][ T486] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 308.405098][T16547] pim6reg1: entered promiscuous mode [ 308.410723][T16547] pim6reg1: entered allmulticast mode [ 308.461184][ T486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.472330][ T486] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 308.549676][T16559] syzkaller0: entered promiscuous mode [ 308.562401][T16559] syzkaller0: entered allmulticast mode [ 308.613899][ T486] batman_adv: batadv0: Removing interface: netdevsim0 [ 308.624453][ T486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.636783][ T486] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 309.120044][T16594] __nla_validate_parse: 9 callbacks suppressed [ 309.120058][T16594] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2953'. [ 309.153521][T16594] sctp: [Deprecated]: syz.4.2953 (pid 16594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.153521][T16594] Use struct sctp_sack_info instead [ 309.347050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.613662][ T486] bond1 (unregistering): (slave geneve2): Releasing active interface [ 309.989160][ T5145] Bluetooth: hci5: command tx timeout [ 310.012031][ T486]  (unregistering): Released all slaves [ 310.021870][ T486] bond1 (unregistering): Released all slaves [ 310.041394][ T486] bond0 (unregistering): Released all slaves [ 310.055196][ T486] bond2 (unregistering): Released all slaves [ 310.071142][ T486] bond3 (unregistering): Released all slaves [ 310.094259][ T486] bond4 (unregistering): Released all slaves [ 310.160098][T16525] chnl_net:caif_netlink_parms(): no params data found [ 310.268270][ T486] : left promiscuous mode [ 310.352781][T16633] netlink: 'syz.1.2959': attribute type 28 has an invalid length. [ 310.380092][T16633] netlink: 'syz.1.2959': attribute type 3 has an invalid length. [ 310.408045][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2959'. [ 310.484196][T16594] wg1 speed is unknown, defaulting to 1000 [ 310.695867][T16525] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.708489][T16525] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.715985][T16525] bridge_slave_0: entered allmulticast mode [ 310.738219][T16525] bridge_slave_0: entered promiscuous mode [ 310.842711][T16641] syzkaller0: entered promiscuous mode [ 310.859632][T16641] syzkaller0: entered allmulticast mode [ 310.867150][T16525] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.874513][T16525] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.882298][T16525] bridge_slave_1: entered allmulticast mode [ 310.890600][T16525] bridge_slave_1: entered promiscuous mode [ 311.029607][T16525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.059998][T16525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.061334][ T5145] Bluetooth: hci5: command tx timeout [ 313.048705][T16525] team0: Port device team_slave_0 added [ 313.074702][T16525] team0: Port device team_slave_1 added [ 313.237599][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 313.318135][T16689] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2970'. [ 313.355217][T16525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.385367][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.503709][T16525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.644384][T16700] netlink: 'syz.1.2972': attribute type 1 has an invalid length. [ 313.670193][T16700] netlink: 2108 bytes leftover after parsing attributes in process `syz.1.2972'. [ 313.720842][T16525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.729371][T16525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.786621][T16525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.929125][T16708] veth0: entered promiscuous mode [ 313.954503][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 314.034251][T16525] hsr_slave_0: entered promiscuous mode [ 314.064521][T16525] hsr_slave_1: entered promiscuous mode [ 314.084452][T16525] debugfs: 'hsr0' already exists in 'hsr' [ 314.105997][T16525] Cannot create hsr debugfs directory [ 314.149722][ T5145] Bluetooth: hci5: command tx timeout [ 314.173303][T16707] veth0: left promiscuous mode [ 314.320447][ T486] hsr_slave_0: left promiscuous mode [ 314.327058][ T486] hsr_slave_1: left promiscuous mode [ 314.365180][ T486] pimreg (unregistering): left allmulticast mode [ 314.550506][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2981'. [ 315.700725][T16760] bond_slave_0: Caught tx_queue_len zero misconfig [ 315.960623][T16774] bond2: (slave lo): Releasing backup interface [ 315.977171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.008300][T16774] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 316.070004][T16774] bond0: (slave bridge0): Releasing backup interface [ 316.103480][T16774] bridge0: port 3(batadv0) entered disabled state [ 316.150832][T16774] bridge_slave_0: left promiscuous mode [ 316.167343][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.184822][T16774] bridge_slave_1: left allmulticast mode [ 316.206723][T16774] bridge_slave_1: left promiscuous mode [ 316.212543][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.234766][ T5145] Bluetooth: hci5: command tx timeout [ 316.247503][T16774] bond0: (slave bond_slave_0): Releasing backup interface [ 316.255979][T16789] netlink: 'syz.3.2991': attribute type 1 has an invalid length. [ 316.279896][T16774] bond0: (slave bond_slave_1): Releasing backup interface [ 316.300547][T16774] team0: Port device team_slave_0 removed [ 316.319241][T16774] team0: Port device team_slave_1 removed [ 316.325584][T16774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.358611][T16774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.382551][T16774] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.416382][T16778] team0: Mode changed to "random" [ 316.589157][T16789] bond12: entered promiscuous mode [ 316.612658][T16789] 8021q: adding VLAN 0 to HW filter on device bond12 [ 316.696118][T16791] bond12: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.759763][T16791] bond12: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 316.803432][T16791] bond12: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 316.955126][ T486] IPVS: stop unused estimator thread 0... [ 317.270456][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.271345][T16831] syzkaller0: entered promiscuous mode [ 317.282536][T16831] syzkaller0: entered allmulticast mode [ 317.415531][T16525] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.471419][T16525] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.508199][T16525] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.550693][T16525] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.754149][T16525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.811326][T16525] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.833305][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.840530][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.902243][T15175] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.909446][T15175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.016715][T16870] sctp: [Deprecated]: syz.1.3008 (pid 16870) Use of int in max_burst socket option. [ 318.016715][T16870] Use struct sctp_assoc_value instead [ 318.109002][T16871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.118419][T16871] bond0: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 318.150961][T16871] bond0: (slave ip6tnl1): Error -95 calling set_mac_address [ 318.169400][T16881] netlink: 'syz.1.3010': attribute type 1 has an invalid length. [ 318.191526][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'. [ 318.230152][T16881] netlink: 'syz.1.3010': attribute type 1 has an invalid length. [ 318.498430][T16525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.537996][T16903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3013'. [ 318.727328][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 318.734488][T16525] veth0_vlan: entered promiscuous mode [ 318.788386][T16525] veth1_vlan: entered promiscuous mode [ 318.887341][T16525] veth0_macvtap: entered promiscuous mode [ 318.922859][T16525] veth1_macvtap: entered promiscuous mode [ 318.975496][T16525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.002968][T16930] netlink: 'syz.2.3020': attribute type 9 has an invalid length. [ 319.004818][T16525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.051202][T16930] netlink: 'syz.2.3020': attribute type 11 has an invalid length. [ 319.053974][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 319.072003][ T486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.089197][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 319.090074][T16930] netlink: 'syz.2.3020': attribute type 12 has an invalid length. [ 319.111683][ T486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.123423][T16934] netlink: 'syz.3.3022': attribute type 15 has an invalid length. [ 319.140021][ T486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.148944][ T486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.156688][T16930] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3020'. [ 319.167876][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 319.222159][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 319.244656][ T486] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 319.267514][ T486] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 319.286935][T16934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 319.295942][T16934] netlink: 'syz.3.3022': attribute type 15 has an invalid length. [ 319.331171][ T486] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 319.478891][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.487011][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.564765][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.583494][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.670671][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 319.681178][T16959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3028'. [ 320.005144][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.015388][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.024754][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.034243][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.049300][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.187489][T16971] wg1 speed is unknown, defaulting to 1000 [ 320.432944][ T3507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.464721][ T3507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 320.491406][ T3507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.530449][ T3507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 320.634421][T16998] netlink: 'syz.0.3036': attribute type 1 has an invalid length. [ 320.729450][ T3507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.755655][ T3507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 320.777172][ T3507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 320.819720][T17013] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3038'. [ 320.825690][ T3507] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.073476][ T3507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.104766][ T3507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 321.123823][ T3507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 321.141742][ T3507] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 321.214975][T16971] chnl_net:caif_netlink_parms(): no params data found [ 321.518414][T16971] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.525917][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.533289][T16971] bridge_slave_0: entered allmulticast mode [ 321.543675][T16971] bridge_slave_0: entered promiscuous mode [ 321.559215][T16971] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.567262][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.582709][T16971] bridge_slave_1: entered allmulticast mode [ 321.590994][T16971] bridge_slave_1: entered promiscuous mode [ 321.751002][T16971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.775204][T17055] syzkaller1: entered promiscuous mode [ 321.799426][T17055] syzkaller1: entered allmulticast mode [ 321.837340][T17076] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3050'. [ 321.881158][T16971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.914234][T17087] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 321.927159][T17076] syzkaller0: entered promiscuous mode [ 321.932688][T17076] syzkaller0: entered allmulticast mode [ 321.948072][T17087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3053'. [ 321.972020][T17087] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 322.137170][ T5145] Bluetooth: hci0: command tx timeout [ 322.190007][ T30] audit: type=1800 audit(1775722418.560:4): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3054" name="memory.events" dev="tmpfs" ino=3027 res=0 errno=0 [ 322.259227][ T30] audit: type=1804 audit(1775722418.580:5): pid=17098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3054" name="/newroot/591/memory.events" dev="tmpfs" ino=3027 res=1 errno=0 [ 322.391331][ T3507] bond8 (unregistering): (slave gretap3): Releasing active interface [ 322.416722][ T3507] bond7 (unregistering): (slave geneve3): Releasing active interface [ 322.428965][ T3507] bond2 (unregistering): (slave geneve2): Releasing active interface [ 322.530290][ T3507] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 322.542334][ T3507] bridge2 (unregistering): left promiscuous mode [ 322.549064][ T3507] bridge2 (unregistering): left allmulticast mode [ 322.609513][ T3507] bond10 (unregistering): (slave bridge3): Releasing active interface [ 322.711595][ T3507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.721671][ T3507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.731434][ T3507] bond0 (unregistering): Released all slaves [ 322.741830][ T3507] bond1 (unregistering): Released all slaves [ 322.757908][ T3507] bond2 (unregistering): Released all slaves [ 322.771015][ T3507] bond3 (unregistering): Released all slaves [ 322.784070][ T3507] bond4 (unregistering): Released all slaves [ 322.802823][ T3507] bond5 (unregistering): Released all slaves [ 322.815279][ T3507] bond6 (unregistering): Released all slaves [ 322.829038][ T3507] bond7 (unregistering): Released all slaves [ 322.845495][ T3507] bond8 (unregistering): Released all slaves [ 322.865207][ T3507] bond9 (unregistering): Released all slaves [ 322.877917][ T3507] bond10 (unregistering): Released all slaves [ 322.891762][ T3507] bond11 (unregistering): (slave veth9): Releasing active interface [ 322.907080][ T3507] bond11 (unregistering): Released all slaves [ 322.919992][ T3507] bond12 (unregistering): Released all slaves [ 322.934219][T16971] team0: Port device team_slave_0 added [ 322.945003][T17090] vlan2: entered allmulticast mode [ 322.951925][T17090] team_slave_0: entered allmulticast mode [ 323.059970][ T3507] : left promiscuous mode [ 323.175043][T16971] team0: Port device team_slave_1 added [ 323.227334][T17106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 323.236276][T17106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'. [ 323.246183][ T3507] : left promiscuous mode [ 323.381851][T16971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.398735][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.457016][T16971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.485257][ T3507] tipc: Disabling bearer [ 323.500233][ T3507] tipc: Left network mode [ 323.515345][T16971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.558041][T16971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.639127][T16971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.892312][T16971] hsr_slave_0: entered promiscuous mode [ 323.918523][T16971] hsr_slave_1: entered promiscuous mode [ 323.934797][T16971] debugfs: 'hsr0' already exists in 'hsr' [ 323.966339][T16971] Cannot create hsr debugfs directory [ 324.202495][T17146] syzkaller0: entered promiscuous mode [ 324.209688][T17146] syzkaller0: entered allmulticast mode [ 324.227297][ T5145] Bluetooth: hci0: command tx timeout [ 324.258859][T17152] wg1 speed is unknown, defaulting to 1000 [ 324.282029][T17162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3068'. [ 324.299555][T17046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.565270][T17170] netlink: 'syz.4.3069': attribute type 10 has an invalid length. [ 326.036363][T17161] delete_channel: no stack [ 326.146636][ T3507] hsr_slave_0: left promiscuous mode [ 326.155651][ T3507] hsr_slave_1: left promiscuous mode [ 326.198740][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 326.208584][T17177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3071'. [ 326.300876][ T5145] Bluetooth: hci0: command tx timeout [ 326.450047][ T3507] team0 (unregistering): Port device team_slave_1 removed [ 326.725507][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.750969][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.768945][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.823426][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.851846][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.905591][T17194] netlink: 'syz.1.3076': attribute type 1 has an invalid length. [ 326.922478][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.977388][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.020697][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.062655][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.125677][T17187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.270382][T17206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3078'. [ 327.330992][ T3507] IPVS: stop unused estimator thread 0... [ 327.391315][T17210] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3079'. [ 327.436719][T17210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3079'. [ 327.670747][T17225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 327.917681][T17235] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 327.956009][T17240] tipc: Resetting bearer [ 327.963493][T17240] tipc: Resetting bearer [ 327.971105][T17240] tipc: Resetting bearer [ 328.168719][T17247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3089'. [ 328.212396][ T3507] tipc: Resetting bearer [ 328.269687][T16971] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.323501][T16971] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.375983][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3092'. [ 328.387319][T17259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3092'. [ 328.396468][ T5145] Bluetooth: hci0: command tx timeout [ 328.418208][T16971] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.459505][T17266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3092'. [ 328.479885][T16971] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.701335][T17276] netlink: 'syz.0.3094': attribute type 16 has an invalid length. [ 328.715476][T17276] netlink: 'syz.0.3094': attribute type 17 has an invalid length. [ 328.854828][T16971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.913574][T16971] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.942924][T15175] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.950209][T15175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.002643][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.009864][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.230542][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3100'. [ 329.289290][ T30] audit: type=1107 audit(1775722425.640:6): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 329.500215][T16971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.629769][T17323] veth0: entered promiscuous mode [ 329.636003][T17323] veth0: left promiscuous mode [ 329.715503][T16971] veth0_vlan: entered promiscuous mode [ 329.748843][T16971] veth1_vlan: entered promiscuous mode [ 329.853957][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.861290][T17332] bridge0: port 2(bridge_slave_1) entered listening state [ 329.868744][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.876046][T17332] bridge0: port 1(bridge_slave_0) entered listening state [ 330.020228][T16971] veth0_macvtap: entered promiscuous mode [ 330.053500][T16971] veth1_macvtap: entered promiscuous mode [ 330.114961][T16971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.131840][T16971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.148218][T17352] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 330.223752][T17356] bond1: (slave geneve2): making interface the new active one [ 330.233053][T17356] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 330.246481][T15175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.286682][T15175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.301229][T17352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.327945][T15175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.367272][T15175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.394907][T15175] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.420944][T15175] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.499742][ T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.516511][ T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 330.534839][T17366] tipc: Started in network mode [ 330.545545][T17366] tipc: Node identity b6a9ce3e91c8, cluster identity 4711 [ 330.579099][T17366] tipc: Enabled bearer , priority 11 [ 330.762433][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.786663][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.901957][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.924482][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.435870][T17408] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 331.519553][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.536277][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.545066][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.555987][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.564254][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.728814][T17413] wg1 speed is unknown, defaulting to 1000 [ 331.738463][ T5933] tipc: Node number set to 660721214 [ 332.128964][T17446] __nla_validate_parse: 8 callbacks suppressed [ 332.128984][T17446] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3132'. [ 332.155998][T17446] netlink: 'syz.1.3132': attribute type 5 has an invalid length. [ 332.333342][T17453] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3134'. [ 332.363725][T17413] chnl_net:caif_netlink_parms(): no params data found [ 332.879950][T17413] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.887451][T17413] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.894707][T17413] bridge_slave_0: entered allmulticast mode [ 332.911158][T17413] bridge_slave_0: entered promiscuous mode [ 332.932573][T17413] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.967876][T17413] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.981954][T17413] bridge_slave_1: entered allmulticast mode [ 332.993852][T17413] bridge_slave_1: entered promiscuous mode [ 333.062864][T17413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.077722][T17413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.152066][T17413] team0: Port device team_slave_0 added [ 333.195502][T17413] team0: Port device team_slave_1 added [ 333.305753][T17413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.313784][T17542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3144'. [ 333.321181][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.371399][T17413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.408198][T17413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.415180][T17413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.441735][T17413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.550917][T15168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 333.564738][T15168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 333.580949][T15168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 333.631668][T15168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 333.649066][T17552] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3147'. [ 333.658297][ T5835] Bluetooth: hci4: command tx timeout [ 333.708863][T17413] hsr_slave_0: entered promiscuous mode [ 333.715580][T17413] hsr_slave_1: entered promiscuous mode [ 333.825216][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 334.341980][T17413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 334.377301][T17413] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.534461][T17413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 334.582682][T17413] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.589955][T17607] net_ratelimit: 26 callbacks suppressed [ 334.589972][T17607] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 334.761146][T17413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 334.782111][T17413] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 334.795153][T17621] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 334.820236][T17621] netlink: 'syz.1.3161': attribute type 3 has an invalid length. [ 334.842822][T17621] netlink: 'syz.1.3161': attribute type 7 has an invalid length. [ 334.872334][T17621] netlink: 'syz.1.3161': attribute type 8 has an invalid length. [ 334.882084][T17621] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3161'. [ 334.908055][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'. [ 334.919928][T17621] NCSI netlink: No device for ifindex 131092 [ 334.943397][T17614] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 334.963502][T17614] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.999440][T17630] netlink: 'syz.3.3166': attribute type 2 has an invalid length. [ 335.009755][T17638] sctp: [Deprecated]: syz.2.3165 (pid 17638) Use of int in max_burst socket option. [ 335.009755][T17638] Use struct sctp_assoc_value instead [ 335.025681][T17614] gretap2: entered promiscuous mode [ 335.025706][T17614] gretap2: entered allmulticast mode [ 335.039933][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3167'. [ 335.097881][T17413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 335.165213][T17413] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 335.516941][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3172'. [ 335.517366][T17667] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 335.613623][T17413] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.638028][T17673] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3174'. [ 335.667003][T17413] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.715143][T17413] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.746674][ T5835] Bluetooth: hci4: command tx timeout [ 335.775991][T17678] syzkaller0: entered promiscuous mode [ 335.781590][T17678] syzkaller0: entered allmulticast mode [ 335.798288][T17413] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.836127][T17686] team0: Cannot enslave team device to itself [ 335.837080][T17678] netdevsim netdevsim2: Direct firmware load for r1 failed with error -2 [ 335.852057][T17678] netdevsim netdevsim2: Falling back to sysfs fallback for: r1 [ 336.231577][T17413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.298754][T17413] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.331878][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.339084][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.382550][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.389731][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.685431][T17743] netlink: 'syz.3.3189': attribute type 3 has an invalid length. [ 337.084822][T17413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.248033][T17785] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 337.674508][T17802] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 337.816701][ T5835] Bluetooth: hci4: command tx timeout [ 338.624975][T17844] bond3: entered promiscuous mode [ 338.658502][T17844] bond3: entered allmulticast mode [ 338.664276][T17844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.688193][T17851] __nla_validate_parse: 3 callbacks suppressed [ 338.688211][T17851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3210'. [ 338.784530][T17858] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3208'. [ 338.802615][T17858] xt_hashlimit: size too large, truncated to 1048576 [ 338.829006][T17856] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3212'. [ 338.842492][T17413] veth0_vlan: entered promiscuous mode [ 338.892091][T17413] veth1_vlan: entered promiscuous mode [ 338.901876][T17864] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.928211][T17866] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3213'. [ 339.071403][T17857] wg1 speed is unknown, defaulting to 1000 [ 339.074056][T17413] veth0_macvtap: entered promiscuous mode [ 339.116115][T17413] veth1_macvtap: entered promiscuous mode [ 339.287816][T17413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.297570][T17879] veth0: entered promiscuous mode [ 339.316008][T17879] veth0: left promiscuous mode [ 339.349732][T17413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.364891][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.377356][T17877] Cannot find add_set index 2 as target [ 339.411337][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.473858][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 339.584069][T15169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.603468][T17897] FAULT_INJECTION: forcing a failure. [ 339.603468][T17897] name failslab, interval 1, probability 0, space 0, times 0 [ 339.616510][T17897] CPU: 1 UID: 0 PID: 17897 Comm: syz.0.3220 Not tainted syzkaller #0 PREEMPT(full) [ 339.616537][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.616554][T17897] Call Trace: [ 339.616561][T17897] [ 339.616568][T17897] dump_stack_lvl+0xe8/0x150 [ 339.616597][T17897] should_fail_ex+0x412/0x560 [ 339.616625][T17897] should_failslab+0xa8/0x100 [ 339.616648][T17897] ? dst_alloc+0x105/0x170 [ 339.616671][T17897] kmem_cache_alloc_noprof+0x87/0x650 [ 339.616695][T17897] ? __pfx_ip6_dst_gc+0x10/0x10 [ 339.616717][T17897] dst_alloc+0x105/0x170 [ 339.616744][T17897] ip6_pol_route+0xafb/0x13d0 [ 339.616761][T17897] ? ip6_pol_route+0x160/0x13d0 [ 339.616781][T17897] ? __pfx_ip6_pol_route+0x10/0x10 [ 339.616796][T17897] ? ip6t_do_table+0x1df/0x1560 [ 339.616816][T17897] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.616840][T17897] fib6_rule_lookup+0x556/0x730 [ 339.616854][T17897] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 339.616867][T17897] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 339.616888][T17897] ? ip6t_do_table+0x1df/0x1560 [ 339.616909][T17897] ip6_route_input+0x730/0xad0 [ 339.616927][T17897] ? __pfx_ip6_route_input+0x10/0x10 [ 339.616949][T17897] ? nf_nat_ipv6_in+0x203/0x2c0 [ 339.616979][T17897] ? ip6_rcv_finish_core+0x222/0x420 [ 339.616998][T17897] ip6_rcv_finish+0x141/0x280 [ 339.617019][T17897] NF_HOOK+0x336/0x3c0 [ 339.617037][T17897] ? skb_orphan+0x4f/0xd0 [ 339.617054][T17897] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 339.617069][T17897] ? NF_HOOK+0x9e/0x3c0 [ 339.617084][T17897] ? __pfx_NF_HOOK+0x10/0x10 [ 339.617101][T17897] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 339.617123][T17897] ? netif_receive_skb+0x102/0xc50 [ 339.617142][T17897] netif_receive_skb+0x278/0xc50 [ 339.617166][T17897] ? __pfx_netif_receive_skb+0x10/0x10 [ 339.617182][T17897] ? __lock_acquire+0x6b5/0x2cf0 [ 339.617210][T17897] ? tun_rx_batched+0x185/0x790 [ 339.617227][T17897] tun_rx_batched+0x1de/0x790 [ 339.617241][T17897] ? __build_skb+0x62/0x440 [ 339.617259][T17897] ? __pfx_tun_rx_batched+0x10/0x10 [ 339.617281][T17897] ? tun_get_user+0x2354/0x3dd0 [ 339.617295][T17897] ? __local_bh_enable_ip+0xd0/0x130 [ 339.617316][T17897] ? tun_get_user+0x2669/0x3dd0 [ 339.617329][T17897] tun_get_user+0x2a78/0x3dd0 [ 339.617358][T17897] ? aa_file_perm+0x50e/0x15e0 [ 339.617372][T17897] ? __pfx_tun_get_user+0x10/0x10 [ 339.617384][T17897] ? aa_file_perm+0x192/0x15e0 [ 339.617413][T17897] ? ref_tracker_alloc+0x35c/0x4c0 [ 339.617428][T17897] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 339.617446][T17897] ? tun_get+0x1c/0x2f0 [ 339.617464][T17897] ? tun_get+0x1c/0x2f0 [ 339.617478][T17897] ? tun_get+0x1c/0x2f0 [ 339.617495][T17897] tun_chr_write_iter+0x113/0x200 [ 339.617512][T17897] vfs_write+0x61d/0xb90 [ 339.617534][T17897] ? __pfx_vfs_write+0x10/0x10 [ 339.617556][T17897] ? __fget_files+0x2a/0x420 [ 339.617575][T17897] ksys_write+0x150/0x270 [ 339.617592][T17897] ? __pfx_ksys_write+0x10/0x10 [ 339.617615][T17897] do_syscall_64+0x14d/0xf80 [ 339.617631][T17897] ? trace_irq_disable+0x3b/0x150 [ 339.617643][T17897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.617657][T17897] ? clear_bhb_loop+0x40/0x90 [ 339.617673][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.617690][T17897] RIP: 0033:0x7fd99495d04e [ 339.617703][T17897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.617716][T17897] RSP: 002b:00007fd99589bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.617731][T17897] RAX: ffffffffffffffda RBX: 00007fd99589c6c0 RCX: 00007fd99495d04e [ 339.617740][T17897] RDX: 000000000000006e RSI: 0000200000000480 RDI: 00000000000000c8 [ 339.617749][T17897] RBP: 00007fd99589c090 R08: 0000000000000000 R09: 0000000000000000 [ 339.617757][T17897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.617765][T17897] R13: 00007fd994c16038 R14: 00007fd994c15fa0 R15: 00007ffe7e5a4ac8 [ 339.617787][T17897] [ 340.012586][T15169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.021787][T17888] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.029663][T17888] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3217'. [ 340.044701][ T5835] Bluetooth: hci4: command tx timeout [ 340.424390][T17920] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 340.483821][T15166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.507656][T15166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.526418][T17920] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3226'. [ 340.584084][T15164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.610272][T15164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.807367][T17939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3121'. [ 341.164720][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.174550][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.190693][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.207222][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.215447][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.345768][T17967] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.3235'. [ 341.379153][T17957] wg1 speed is unknown, defaulting to 1000 [ 341.425597][T17967] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.3235'. [ 341.778342][ T5830] syz_tun (unregistering): left allmulticast mode [ 341.868115][T17996] tipc: Failed to remove unknown binding: 66,1,1/660721214:3923397159/3923397161 [ 341.912942][T17996] tipc: Failed to remove unknown binding: 66,1,1/660721214:3923397159/3923397161 [ 341.986111][T15166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.037267][T15166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.039266][T17957] chnl_net:caif_netlink_parms(): no params data found [ 342.052123][T18005] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 342.236036][T18005] tap0: tun_chr_ioctl cmd 2148553947 [ 342.249140][T18004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.383930][T17957] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.418185][T17957] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.429069][T17957] bridge_slave_0: entered allmulticast mode [ 342.466968][T17957] bridge_slave_0: entered promiscuous mode [ 342.482656][T17957] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.507088][T17957] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.532458][T17957] bridge_slave_1: entered allmulticast mode [ 342.551625][T17957] bridge_slave_1: entered promiscuous mode [ 342.642727][T17957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.671599][T17957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.770356][T17957] team0: Port device team_slave_0 added [ 342.790629][T17957] team0: Port device team_slave_1 added [ 342.855965][T17957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.880485][T17957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.935764][T17957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.960492][T17957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.976511][T18050] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 342.978874][T17957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.040819][T17957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.118996][T18055] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.130535][T18055] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 343.264907][ T5145] Bluetooth: hci1: command tx timeout [ 343.272501][T18050] macvlan3: entered promiscuous mode [ 343.278416][T18050] macvlan3: entered allmulticast mode [ 343.284789][T18050] bond1: entered promiscuous mode [ 343.294291][T18050] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 343.304667][T18050] bond1: left promiscuous mode [ 343.345536][T17957] hsr_slave_0: entered promiscuous mode [ 343.366059][T17957] hsr_slave_1: entered promiscuous mode [ 343.400432][T17957] debugfs: 'hsr0' already exists in 'hsr' [ 343.424496][T17957] Cannot create hsr debugfs directory [ 343.705654][T18082] __nla_validate_parse: 4 callbacks suppressed [ 343.705673][T18082] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3254'. [ 343.807607][T17957] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.888465][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3257'. [ 343.910666][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3257'. [ 343.923979][T17957] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.021680][T17957] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.047443][T18110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3260'. [ 344.080011][T18103] netlink: 'syz.3.3258': attribute type 2 has an invalid length. [ 344.087919][T18103] tipc: Started in network mode [ 344.092790][T18103] tipc: Node identity 1340008, cluster identity 4711 [ 344.099773][T18103] tipc: Node number set to 20185096 [ 344.164187][T17957] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.171401][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3258'. [ 344.211395][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 344.294378][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 344.336231][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'. [ 344.460230][T17957] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.512719][T17957] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.524248][T18129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3265'. [ 344.545827][T17957] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.576448][T17957] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.635397][T18135] veth3: entered allmulticast mode [ 344.707963][T18149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3268'. [ 344.896449][T17957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.934255][T17957] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.025708][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.032902][T17501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.079741][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.086939][T15168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.118904][T18161] netem: change failed [ 345.349803][ T5145] Bluetooth: hci1: command tx timeout [ 345.386100][T18178] netlink: 'syz.4.3277': attribute type 4 has an invalid length. [ 345.435605][T18180] netlink: 'syz.3.3280': attribute type 11 has an invalid length. [ 345.453956][T18180] netlink: 'syz.3.3280': attribute type 11 has an invalid length. [ 345.584570][T17957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.694515][T17957] veth0_vlan: entered promiscuous mode [ 345.781417][T17957] veth1_vlan: entered promiscuous mode [ 345.789536][T18196] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 345.858960][T17957] veth0_macvtap: entered promiscuous mode [ 345.871731][T18199] netlink: 'syz.4.3286': attribute type 10 has an invalid length. [ 345.918062][T18199] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.925783][T18199] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.942797][T18199] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.950007][T18199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.957678][T18199] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.964834][T18199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.000162][T18199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 346.032127][T17957] veth1_macvtap: entered promiscuous mode [ 346.103155][T18215] bond2: option all_slaves_active: invalid value (222) [ 346.120100][T18215] bond2 (unregistering): Released all slaves [ 346.168350][T17957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.183425][T17957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.212671][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.241128][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.273829][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.284265][T18219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.312419][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.506250][T15168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.544804][T15168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.608486][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.619345][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.750800][T18243] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 346.761315][T18245] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 346.779034][T18243] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.899251][T18254] A: renamed from bridge_slave_0 (while UP) [ 346.940617][T18252] netlink: 'syz.3.3302': attribute type 9 has an invalid length. [ 347.141900][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.161336][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.170209][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.184335][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.188904][T18268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.204429][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.280694][T18264] wg1 speed is unknown, defaulting to 1000 [ 347.421689][ T5145] Bluetooth: hci1: command tx timeout [ 347.562931][T18283] syzkaller1: entered promiscuous mode [ 347.599128][T18283] syzkaller1: entered allmulticast mode [ 347.639681][T18289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.758895][T18264] chnl_net:caif_netlink_parms(): no params data found [ 347.845968][T18299] FAULT_INJECTION: forcing a failure. [ 347.845968][T18299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.859689][T18299] CPU: 1 UID: 0 PID: 18299 Comm: syz.4.3315 Not tainted syzkaller #0 PREEMPT(full) [ 347.859711][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.859721][T18299] Call Trace: [ 347.859728][T18299] [ 347.859736][T18299] dump_stack_lvl+0xe8/0x150 [ 347.859765][T18299] should_fail_ex+0x412/0x560 [ 347.859793][T18299] _copy_to_user+0x31/0xb0 [ 347.859814][T18299] simple_read_from_buffer+0xe1/0x170 [ 347.859842][T18299] proc_fail_nth_read+0x1bb/0x230 [ 347.859888][T18299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.859912][T18299] ? rw_verify_area+0x2a6/0x4d0 [ 347.859929][T18299] ? tun_chr_write_iter+0x18a/0x200 [ 347.859945][T18299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.859970][T18299] vfs_read+0x20c/0xa70 [ 347.859987][T18299] ? fdget_pos+0x246/0x320 [ 347.860007][T18299] ? __pfx___mutex_lock+0x10/0x10 [ 347.860037][T18299] ? __pfx_vfs_read+0x10/0x10 [ 347.860058][T18299] ? __fget_files+0x2a/0x420 [ 347.860078][T18299] ? __fget_files+0x3a0/0x420 [ 347.860093][T18299] ? __fget_files+0x2a/0x420 [ 347.860121][T18299] ksys_read+0x150/0x270 [ 347.860142][T18299] ? __pfx_ksys_read+0x10/0x10 [ 347.860172][T18299] do_syscall_64+0x14d/0xf80 [ 347.860192][T18299] ? trace_irq_disable+0x3b/0x150 [ 347.860206][T18299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.860221][T18299] ? clear_bhb_loop+0x40/0x90 [ 347.860239][T18299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.860254][T18299] RIP: 0033:0x7f5160b5d04e [ 347.860271][T18299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.860284][T18299] RSP: 002b:00007f5161a69fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.860303][T18299] RAX: ffffffffffffffda RBX: 00007f5161a6a6c0 RCX: 00007f5160b5d04e [ 347.860314][T18299] RDX: 000000000000000f RSI: 00007f5161a6a0a0 RDI: 0000000000000007 [ 347.860323][T18299] RBP: 00007f5161a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 347.860334][T18299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.860344][T18299] R13: 00007f5160e16038 R14: 00007f5160e15fa0 R15: 00007ffce63d9b78 [ 347.860373][T18299] [ 348.321929][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.331592][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.340038][T18264] bridge_slave_0: entered allmulticast mode [ 348.349446][T18264] bridge_slave_0: entered promiscuous mode [ 348.360402][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.368156][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.375528][T18264] bridge_slave_1: entered allmulticast mode [ 348.385591][T18264] bridge_slave_1: entered promiscuous mode [ 348.425415][T18264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.449939][T18264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.542557][T18264] team0: Port device team_slave_0 added [ 348.570575][T18264] team0: Port device team_slave_1 added [ 348.611448][T18264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.621436][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.649404][T18264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.678571][T18264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.688288][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.741454][T18264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.776707][T18343] __nla_validate_parse: 11 callbacks suppressed [ 348.776725][T18343] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3329'. [ 348.807544][T18343] 8021q: VLANs not supported on ip6_vti0 [ 348.873761][T18350] Bluetooth: MGMT ver 1.23 [ 348.948849][T18356] netlink: 'syz.4.3331': attribute type 2 has an invalid length. [ 348.975427][T18360] netlink: 'syz.0.3332': attribute type 1 has an invalid length. [ 349.010107][T18264] hsr_slave_0: entered promiscuous mode [ 349.035455][T18264] hsr_slave_1: entered promiscuous mode [ 349.051786][T18264] debugfs: 'hsr0' already exists in 'hsr' [ 349.070912][T18264] Cannot create hsr debugfs directory [ 349.094185][T18356] 9: entered promiscuous mode [ 349.159687][T18371] bond4: (slave gretap1): making interface the new active one [ 349.178644][T18371] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 349.189426][T18357] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 349.237527][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 349.259499][ T5145] Bluetooth: hci3: command tx timeout [ 349.269807][T18365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.281925][T18365] bond4: (slave bond5): Enslaving as a backup interface with an up link [ 349.354578][T18360] 8021q: adding VLAN 0 to HW filter on device bond4 [ 349.395117][T18379] netlink: 'syz.1.3336': attribute type 21 has an invalid length. [ 349.503042][ T5145] Bluetooth: hci1: command tx timeout [ 349.534061][T18379] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 349.581718][T18379] bond1 (unregistering): Released all slaves [ 349.611157][T18382] tc_dump_action: action bad kind [ 349.792137][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 349.813363][T18404] netlink: 'syz.1.3343': attribute type 33 has an invalid length. [ 349.821838][T18398] netlink: 'syz.3.3341': attribute type 30 has an invalid length. [ 349.821858][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3341'. [ 349.885382][T18404] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 349.918878][T18404] bond1 (unregistering): Released all slaves [ 349.961671][T18402] syzkaller0: entered promiscuous mode [ 349.992231][T18402] syzkaller0: entered allmulticast mode [ 350.026869][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 350.060056][T18264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.074190][T18264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 350.097264][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3345'. [ 350.192310][T18264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.203879][T18264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 350.238919][T18424] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3350'. [ 350.288231][T18424] bond1 (unregistering): Released all slaves [ 350.373428][T18422] netlink: 512 bytes leftover after parsing attributes in process `syz.3.3349'. [ 350.464967][T18264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.497063][T18264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 350.640093][T18264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.650624][T18264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 350.875013][T18457] netlink: 'syz.3.3361': attribute type 9 has an invalid length. [ 350.973618][T18264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.009230][T18264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.179042][T18477] xt_CT: No such helper "pptp" [ 351.203301][T18264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.248488][T18264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.338380][ T5145] Bluetooth: hci3: command tx timeout [ 351.379389][T18492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3368'. [ 351.405327][T18264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.452090][T18499] x_tables: duplicate entry at hook 3 [ 351.502689][T18264] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.540842][T18505] x_tables: duplicate underflow at hook 3 [ 351.568552][T15168] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.575739][T15168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.594721][T15168] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.601939][T15168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.698401][T18492] nbd3: detected capacity change from 0 to 63 [ 351.732748][ T5835] block nbd3: Receive control failed (result -104) [ 351.744395][ T5145] block nbd3: Receive control failed (result -32) [ 351.763145][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 351.930831][T18264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.005754][T18264] veth0_vlan: entered promiscuous mode [ 352.046300][T18264] veth1_vlan: entered promiscuous mode [ 352.116993][T18264] veth0_macvtap: entered promiscuous mode [ 352.140863][T18264] veth1_macvtap: entered promiscuous mode [ 352.182825][T18264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.209961][T18264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.255073][T15164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.278498][T15164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.317642][T15164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.341062][T15164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.433912][T18541] bond3: (slave bond_slave_1): Device is not our slave [ 352.441633][T18541] bond3: option active_slave: invalid value (bond_slave_1) [ 352.452558][T18541] bond3 (unregistering): Released all slaves [ 352.614079][T15168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.652746][T15168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.705723][T17517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.724328][T17517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.957228][T18572] netlink: 'syz.3.3393': attribute type 4 has an invalid length. [ 353.418195][ T5835] Bluetooth: hci3: command tx timeout [ 353.431197][T18605] netlink: 'syz.0.3397': attribute type 10 has an invalid length. [ 353.454022][T18605] veth0_vlan: left promiscuous mode [ 353.462576][T18605] veth0_vlan: entered promiscuous mode [ 353.472628][T18605] team0: Device veth0_vlan failed to register rx_handler [ 354.037333][T18644] __nla_validate_parse: 6 callbacks suppressed [ 354.037351][T18644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3414'. [ 354.083199][T18643] delete_channel: no stack [ 354.110824][ T24] IPVS: starting estimator thread 0... [ 354.226959][T18658] IPVS: using max 31 ests per chain, 74400 per kthread [ 354.292156][T18673] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 354.313018][T18666] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3418'. [ 354.628491][T18691] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 354.648597][T18691] bond1 (unregistering): Released all slaves [ 354.703942][T18696] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3424'. [ 354.941690][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3428'. [ 354.968458][T18706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.975757][T18706] IPv6: NLM_F_CREATE should be set when creating new route [ 354.991399][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'. [ 355.026074][T18709] bridge1: entered promiscuous mode [ 355.041508][T18709] bridge1: entered allmulticast mode [ 355.043753][T18715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3431'. [ 355.058344][T18715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3431'. [ 355.062545][T18709] team0: Port device bridge1 added [ 355.073060][T18715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3431'. [ 355.114420][T18715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3431'. [ 355.127368][T18715] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3431'. [ 355.408815][T18734] netlink: 'syz.2.3438': attribute type 1 has an invalid length. [ 355.496981][ T5835] Bluetooth: hci3: command tx timeout [ 355.543952][T18746] netlink: 'syz.0.3442': attribute type 24 has an invalid length. [ 355.605456][T18749] delete_channel: no stack [ 355.772774][T18757] bridge0: entered promiscuous mode [ 355.793996][T18755] bridge0: left promiscuous mode [ 355.957751][T18768] team0 (unregistering): Port device team_slave_0 removed [ 355.981134][T18768] team0 (unregistering): Port device team_slave_1 removed [ 356.048881][T18768] team0 (unregistering): Port device bridge1 removed [ 356.158773][ T5835] block nbd4: Receive control failed (result -32) [ 356.190623][T18781] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.324816][T18789] bond0: entered promiscuous mode [ 356.330502][T18789] bond_slave_0: entered promiscuous mode [ 356.336450][T18789] bond_slave_1: entered promiscuous mode [ 356.345709][T18789] gretap0: entered promiscuous mode [ 356.382119][T18789] hsr1: entered promiscuous mode [ 356.654344][T18751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.744974][T18822] xt_hashlimit: size too large, truncated to 1048576 [ 357.472569][T18862] team0: Port device team_slave_0 removed [ 357.580369][ T5835] Bluetooth: hci3: command tx timeout [ 357.753026][T18889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 357.785289][T18889] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 357.795970][T18889] gretap1: entered promiscuous mode [ 357.802975][T18889] gretap1: entered allmulticast mode [ 357.936005][T17501] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.953887][T18899] netlink: 'syz.3.3485': attribute type 12 has an invalid length. [ 357.968374][T18899] [ 357.970733][T18899] ====================================================== [ 357.977752][T18899] WARNING: possible circular locking dependency detected [ 357.984784][T18899] syzkaller #0 Not tainted [ 357.989191][T18899] ------------------------------------------------------ [ 357.996204][T18899] syz.3.3485/18899 is trying to acquire lock: [ 358.002268][T18899] ffffffff8e883780 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 358.011604][T18899] [ 358.011604][T18899] but task is already holding lock: [ 358.018968][T18899] ffff88807d768538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 358.028180][T18899] [ 358.028180][T18899] which lock already depends on the new lock. [ 358.028180][T18899] [ 358.038580][T18899] [ 358.038580][T18899] the existing dependency chain (in reverse order) is: [ 358.047583][T18899] [ 358.047583][T18899] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 358.055156][T18899] __mutex_lock+0x19f/0x1300 [ 358.060264][T18899] __ipv6_dev_mc_inc+0x4e/0xa50 [ 358.065625][T18899] addrconf_join_solict+0x104/0x190 [ 358.071376][T18899] __ipv6_dev_ac_inc+0x87b/0xaf0 [ 358.076833][T18899] ipv6_sock_ac_join+0x6a8/0x880 [ 358.082308][T18899] do_ipv6_setsockopt+0x2031/0x31c0 [ 358.088024][T18899] ipv6_setsockopt+0x59/0x170 [ 358.093218][T18899] do_sock_setsockopt+0x17c/0x1b0 [ 358.098761][T18899] __x64_sys_setsockopt+0x13d/0x1b0 [ 358.104473][T18899] do_syscall_64+0x14d/0xf80 [ 358.109661][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.116067][T18899] [ 358.116067][T18899] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 358.123801][T18899] lock_sock_nested+0x48/0x100 [ 358.129171][T18899] inet_shutdown+0x6a/0x390 [ 358.134211][T18899] nbd_mark_nsock_dead+0x2e9/0x560 [ 358.139837][T18899] recv_work+0x1c7f/0x1d90 [ 358.144766][T18899] process_scheduled_works+0xb6e/0x18c0 [ 358.150820][T18899] worker_thread+0xa53/0xfc0 [ 358.155933][T18899] kthread+0x388/0x470 [ 358.160538][T18899] ret_from_fork+0x51e/0xb90 [ 358.165638][T18899] ret_from_fork_asm+0x1a/0x30 [ 358.170919][T18899] [ 358.170919][T18899] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 358.178583][T18899] __mutex_lock+0x19f/0x1300 [ 358.183730][T18899] nbd_queue_rq+0x37b/0x1100 [ 358.188830][T18899] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 358.194912][T18899] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 358.201747][T18899] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 358.208237][T18899] blk_mq_run_hw_queue+0x348/0x4f0 [ 358.213862][T18899] blk_mq_dispatch_list+0xd16/0xe10 [ 358.219589][T18899] blk_mq_flush_plug_list+0x48d/0x570 [ 358.225468][T18899] __blk_flush_plug+0x3ed/0x4d0 [ 358.230839][T18899] __submit_bio+0x28d/0x580 [ 358.235853][T18899] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 358.241991][T18899] block_read_full_folio+0x599/0x830 [ 358.247785][T18899] filemap_read_folio+0x137/0x3b0 [ 358.253340][T18899] do_read_cache_folio+0x358/0x590 [ 358.258975][T18899] read_part_sector+0xb6/0x2b0 [ 358.264259][T18899] adfspart_check_ICS+0xa5/0xa40 [ 358.269714][T18899] bdev_disk_changed+0x7ba/0x1550 [ 358.275338][T18899] blkdev_get_whole+0x380/0x510 [ 358.280736][T18899] bdev_open+0x31e/0xd30 [ 358.285514][T18899] blkdev_open+0x470/0x610 [ 358.290443][T18899] do_dentry_open+0x785/0x14e0 [ 358.295779][T18899] vfs_open+0x3b/0x340 [ 358.300367][T18899] path_openat+0x2e08/0x3860 [ 358.305475][T18899] do_file_open+0x23e/0x4a0 [ 358.310484][T18899] do_sys_openat2+0x113/0x200 [ 358.315671][T18899] __x64_sys_openat+0x138/0x170 [ 358.321035][T18899] do_syscall_64+0x14d/0xf80 [ 358.326134][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.332535][T18899] [ 358.332535][T18899] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 358.339739][T18899] __mutex_lock+0x19f/0x1300 [ 358.344846][T18899] nbd_queue_rq+0xc6/0x1100 [ 358.349861][T18899] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 358.355911][T18899] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 358.362752][T18899] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 358.369246][T18899] blk_mq_run_hw_queue+0x348/0x4f0 [ 358.374862][T18899] blk_mq_dispatch_list+0xd16/0xe10 [ 358.380565][T18899] blk_mq_flush_plug_list+0x48d/0x570 [ 358.386449][T18899] __blk_flush_plug+0x3ed/0x4d0 [ 358.391824][T18899] __submit_bio+0x28d/0x580 [ 358.396851][T18899] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 358.403020][T18899] block_read_full_folio+0x599/0x830 [ 358.408863][T18899] filemap_read_folio+0x137/0x3b0 [ 358.414402][T18899] do_read_cache_folio+0x358/0x590 [ 358.420023][T18899] read_part_sector+0xb6/0x2b0 [ 358.425298][T18899] adfspart_check_ICS+0xa5/0xa40 [ 358.430745][T18899] bdev_disk_changed+0x7ba/0x1550 [ 358.436279][T18899] blkdev_get_whole+0x380/0x510 [ 358.441635][T18899] bdev_open+0x31e/0xd30 [ 358.446383][T18899] blkdev_open+0x470/0x610 [ 358.451309][T18899] do_dentry_open+0x785/0x14e0 [ 358.456619][T18899] vfs_open+0x3b/0x340 [ 358.461199][T18899] path_openat+0x2e08/0x3860 [ 358.466297][T18899] do_file_open+0x23e/0x4a0 [ 358.471314][T18899] do_sys_openat2+0x113/0x200 [ 358.476505][T18899] __x64_sys_openat+0x138/0x170 [ 358.481884][T18899] do_syscall_64+0x14d/0xf80 [ 358.486989][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.493393][T18899] [ 358.493393][T18899] -> #3 (set->srcu){.+.+}-{0:0}: [ 358.500501][T18899] __synchronize_srcu+0xca/0x300 [ 358.505953][T18899] elevator_switch+0x1e8/0x7a0 [ 358.511230][T18899] elevator_change+0x2cc/0x450 [ 358.516523][T18899] elevator_set_default+0x36c/0x430 [ 358.522242][T18899] blk_register_queue+0x366/0x430 [ 358.527780][T18899] __add_disk+0x677/0xd50 [ 358.532645][T18899] add_disk_fwnode+0xfb/0x480 [ 358.537855][T18899] nbd_dev_add+0x72c/0xb50 [ 358.542783][T18899] nbd_init+0x168/0x1f0 [ 358.547508][T18899] do_one_initcall+0x250/0x8d0 [ 358.552783][T18899] do_initcall_level+0x104/0x190 [ 358.558222][T18899] do_initcalls+0x59/0xa0 [ 358.563054][T18899] kernel_init_freeable+0x2a6/0x3e0 [ 358.568758][T18899] kernel_init+0x1d/0x1d0 [ 358.573596][T18899] ret_from_fork+0x51e/0xb90 [ 358.578691][T18899] ret_from_fork_asm+0x1a/0x30 [ 358.583963][T18899] [ 358.583963][T18899] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 358.591759][T18899] __mutex_lock+0x19f/0x1300 [ 358.596862][T18899] elevator_change+0x1b3/0x450 [ 358.602130][T18899] elevator_set_none+0xb5/0x140 [ 358.607513][T18899] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 358.613823][T18899] nbd_start_device+0x17f/0xb10 [ 358.619178][T18899] nbd_genl_connect+0x165b/0x1cf0 [ 358.624705][T18899] genl_family_rcv_msg_doit+0x22a/0x330 [ 358.630755][T18899] genl_rcv_msg+0x61c/0x7a0 [ 358.635772][T18899] netlink_rcv_skb+0x232/0x4b0 [ 358.641035][T18899] genl_rcv+0x28/0x40 [ 358.645521][T18899] netlink_unicast+0x80f/0x9b0 [ 358.650793][T18899] netlink_sendmsg+0x813/0xb40 [ 358.656059][T18899] ____sys_sendmsg+0x972/0x9f0 [ 358.661330][T18899] ___sys_sendmsg+0x2a5/0x360 [ 358.666508][T18899] __x64_sys_sendmsg+0x1bd/0x2a0 [ 358.671963][T18899] do_syscall_64+0x14d/0xf80 [ 358.677067][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.683466][T18899] [ 358.683466][T18899] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 358.692052][T18899] blk_alloc_queue+0x546/0x680 [ 358.697319][T18899] __blk_mq_alloc_disk+0x197/0x390 [ 358.702934][T18899] nbd_dev_add+0x499/0xb50 [ 358.707855][T18899] nbd_init+0x168/0x1f0 [ 358.712533][T18899] do_one_initcall+0x250/0x8d0 [ 358.717810][T18899] do_initcall_level+0x104/0x190 [ 358.723249][T18899] do_initcalls+0x59/0xa0 [ 358.728085][T18899] kernel_init_freeable+0x2a6/0x3e0 [ 358.733819][T18899] kernel_init+0x1d/0x1d0 [ 358.738651][T18899] ret_from_fork+0x51e/0xb90 [ 358.743758][T18899] ret_from_fork_asm+0x1a/0x30 [ 358.749051][T18899] [ 358.749051][T18899] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 358.756246][T18899] __lock_acquire+0x15a5/0x2cf0 [ 358.761640][T18899] lock_acquire+0xf0/0x2e0 [ 358.766571][T18899] fs_reclaim_acquire+0x71/0x100 [ 358.772023][T18899] __kmalloc_cache_noprof+0x40/0x660 [ 358.777822][T18899] __ipv6_dev_mc_inc+0x44f/0xa50 [ 358.783288][T18899] pndisc_constructor+0xe0/0x150 [ 358.788743][T18899] pneigh_create+0x246/0x4b0 [ 358.793847][T18899] neigh_add+0x6ea/0xf70 [ 358.798617][T18899] rtnetlink_rcv_msg+0x77e/0xbe0 [ 358.804062][T18899] netlink_rcv_skb+0x232/0x4b0 [ 358.809339][T18899] netlink_unicast+0x80f/0x9b0 [ 358.814619][T18899] netlink_sendmsg+0x813/0xb40 [ 358.819904][T18899] sock_write_iter+0x49b/0x4f0 [ 358.825174][T18899] vfs_write+0x61d/0xb90 [ 358.829954][T18899] ksys_write+0x150/0x270 [ 358.834797][T18899] do_syscall_64+0x14d/0xf80 [ 358.839912][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.846319][T18899] [ 358.846319][T18899] other info that might help us debug this: [ 358.846319][T18899] [ 358.856543][T18899] Chain exists of: [ 358.856543][T18899] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 358.856543][T18899] [ 358.869140][T18899] Possible unsafe locking scenario: [ 358.869140][T18899] [ 358.876597][T18899] CPU0 CPU1 [ 358.881970][T18899] ---- ---- [ 358.887340][T18899] lock(&idev->mc_lock); [ 358.891663][T18899] lock(sk_lock-AF_INET6); [ 358.898681][T18899] lock(&idev->mc_lock); [ 358.905522][T18899] lock(fs_reclaim); [ 358.909492][T18899] [ 358.909492][T18899] *** DEADLOCK *** [ 358.909492][T18899] [ 358.917621][T18899] 3 locks held by syz.3.3485/18899: [ 358.922803][T18899] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 358.932184][T18899] #1: ffffffff8fcfb9e0 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4b0 [ 358.941662][T18899] #2: ffff88807d768538 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 358.951311][T18899] [ 358.951311][T18899] stack backtrace: [ 358.957196][T18899] CPU: 1 UID: 0 PID: 18899 Comm: syz.3.3485 Not tainted syzkaller #0 PREEMPT(full) [ 358.957212][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 358.957220][T18899] Call Trace: [ 358.957226][T18899] [ 358.957232][T18899] dump_stack_lvl+0xe8/0x150 [ 358.957250][T18899] print_circular_bug+0x2e1/0x300 [ 358.957267][T18899] check_noncircular+0x12e/0x150 [ 358.957284][T18899] __lock_acquire+0x15a5/0x2cf0 [ 358.957298][T18899] ? trace_contention_end+0x3d/0x150 [ 358.957315][T18899] ? __mutex_lock+0x319/0x1300 [ 358.957329][T18899] ? kernel_text_address+0xa5/0xe0 [ 358.957342][T18899] lock_acquire+0xf0/0x2e0 [ 358.957355][T18899] ? __kmalloc_cache_noprof+0x40/0x660 [ 358.957368][T18899] ? in6_dev_get+0x1a/0x290 [ 358.957378][T18899] fs_reclaim_acquire+0x71/0x100 [ 358.957391][T18899] ? __kmalloc_cache_noprof+0x40/0x660 [ 358.957401][T18899] __kmalloc_cache_noprof+0x40/0x660 [ 358.957413][T18899] ? __ipv6_dev_mc_inc+0x44f/0xa50 [ 358.957423][T18899] __ipv6_dev_mc_inc+0x44f/0xa50 [ 358.957436][T18899] pndisc_constructor+0xe0/0x150 [ 358.957450][T18899] ? __pfx_pndisc_constructor+0x10/0x10 [ 358.957463][T18899] ? pneigh_create+0x15b/0x4b0 [ 358.957480][T18899] pneigh_create+0x246/0x4b0 [ 358.957496][T18899] neigh_add+0x6ea/0xf70 [ 358.957511][T18899] ? __pfx_neigh_add+0x10/0x10 [ 358.957528][T18899] ? __pfx_neigh_add+0x10/0x10 [ 358.957539][T18899] rtnetlink_rcv_msg+0x77e/0xbe0 [ 358.957552][T18899] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 358.957562][T18899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.957571][T18899] ? ref_tracker_free+0x693/0x840 [ 358.957582][T18899] ? __copy_skb_header+0xa3/0x4a0 [ 358.957595][T18899] ? __pfx_ref_tracker_free+0x10/0x10 [ 358.957607][T18899] netlink_rcv_skb+0x232/0x4b0 [ 358.957617][T18899] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 358.957628][T18899] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.957640][T18899] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.957651][T18899] netlink_unicast+0x80f/0x9b0 [ 358.957668][T18899] ? __pfx_netlink_unicast+0x10/0x10 [ 358.957682][T18899] ? netlink_sendmsg+0x650/0xb40 [ 358.957692][T18899] ? skb_put+0x11b/0x210 [ 358.957703][T18899] netlink_sendmsg+0x813/0xb40 [ 358.957718][T18899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.957729][T18899] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.957745][T18899] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.957758][T18899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.957767][T18899] sock_write_iter+0x49b/0x4f0 [ 358.957792][T18899] ? __pfx_sock_write_iter+0x10/0x10 [ 358.957821][T18899] ? bpf_lsm_file_permission+0x9/0x20 [ 358.957844][T18899] ? security_file_permission+0x75/0x260 [ 358.957861][T18899] vfs_write+0x61d/0xb90 [ 358.957875][T18899] ? __pfx_vfs_write+0x10/0x10 [ 358.957888][T18899] ? __fget_files+0x2a/0x420 [ 358.957898][T18899] ksys_write+0x150/0x270 [ 358.957910][T18899] ? __pfx_ksys_write+0x10/0x10 [ 358.957923][T18899] do_syscall_64+0x14d/0xf80 [ 358.957937][T18899] ? trace_irq_disable+0x3b/0x150 [ 358.957946][T18899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.957963][T18899] ? clear_bhb_loop+0x40/0x90 [ 358.957974][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.957985][T18899] RIP: 0033:0x7fd65c19c819 [ 358.957996][T18899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.958006][T18899] RSP: 002b:00007fd65d05a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.958019][T18899] RAX: ffffffffffffffda RBX: 00007fd65c415fa0 RCX: 00007fd65c19c819 [ 358.958027][T18899] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 0000000000000003 [ 358.958033][T18899] RBP: 00007fd65c232c91 R08: 0000000000000000 R09: 0000000000000000 [ 358.958040][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.958046][T18899] R13: 00007fd65c416038 R14: 00007fd65c415fa0 R15: 00007ffe51ffcc38 [ 358.958057][T18899] [ 359.348033][T17501] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.380588][T17501] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.407231][T18903] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 359.430810][T17501] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.147522][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 360.154723][ C0] bridge0: port 2(bridge_slave_1) entered learning state