last executing test programs: 2.716885832s ago: executing program 2 (id=2711): bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6208c4ff000000007110bc00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095", @ANYRES32], 0x0}, 0x94) syz_emit_ethernet(0x96, &(0x7f0000000140)={@link_local, @empty, @val={@void, {0x8100, 0x5, 0x1}}, {@llc={0x4, {@llc={0x0, 0xb4, "9a", "222ef133a91db6d9b25c3bd4ee44bb8857a034f73a140f2c6a8bd2e65c3af473a983ec40edba74ce75a692e8c743186f68c8d691e6dde36e90247d476c0816eef59a019736df45a302be6ac6c289b16f0ef0fd5328cf7bc26f4601ad5d4c699411d9ee09dc635b8b9b0b0d40bc1e60b6324dad6f8254aba14e6c517351b50c6a99"}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x17}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) socket$inet6(0xa, 0x80002, 0x88) socket$inet6(0xa, 0x80002, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) epoll_create1(0x80000) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r2, r3, 0x2f}, 0x20) 2.52338692s ago: executing program 2 (id=2714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x3, 0x1, 0x4, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup=r2, r0, 0x1b, 0x0, 0x0, @void, @value=r0, @void, @void, r1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendto$packet(r5, &(0x7f0000000240)="113546b2a8a55a86eb0bb6c3f35690ef60852640c65f66829a77ab5443956fe35d9820058c451572e47e217a729791800a88efc25aa503461203279d2a9cafaeb667ae490507850d8b99fe5db2c4403d6ba8df70fe78e0bfdffeee8dc20729d1bb5a314564aef52138b6ad4d62af52993a1529030068066da3945032035e16ca46cc37432bb0e39676becd21a7010a02409f42d8e83a7f4395f5b8800b18212a989675c2953a802357fe2789a72adc98d74bbb7d81b3f8faee565fac8752b71057e5fc92dfac83be53cfd4cca11beba9acb22586cca4a25f1b49be", 0xdb, 0x20004001, &(0x7f00000003c0)={0x11, 0x1c, r8, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r9, 0x89f5, &(0x7f0000000000)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) sendto$inet6(r11, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x4890, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0) 2.40395395s ago: executing program 4 (id=2716): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket(0x2d, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a80)={'veth1_vlan\x00', &(0x7f0000000440)=@ethtool_flash={0x26, 0x8000000, './file0\x00'}}) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x41, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@getchain={0x2c, 0x66, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf}, {0x9, 0x9}, {0x9, 0xe}}, [{0x8, 0xb, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r3 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000014, 0x2010, r4, 0x6116d000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.12770228s ago: executing program 4 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4041) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) recvfrom$phonet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x240000d0) 2.044229087s ago: executing program 0 (id=2723): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="61032820050105228bfbccd68373095bbb440ac90d8866119ee1843edd9b59873632370e9c20071ef32202"], 0x2b) 1.955487432s ago: executing program 4 (id=2725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) 1.82540371s ago: executing program 0 (id=2727): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f00000000c0)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51c9bbc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) 1.667314822s ago: executing program 4 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16}, 0x6b) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x2b, 0x0, 0xfff3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000010000020000000000000900000000060015000200000014001680100008800c00038004000400"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="64010000", @ANYRES16=r5, @ANYBLOB="08002bbd7000fedbdf250100000010010c8044000b8008000a001c58000008000900c93be86008000900ea48020b08000a00d5ed000008000aaf547b7f00706c000008000a00bab3000008000900272dd656080009006aa8936b4c000b8008000a00ca6100000800090010cd487708000acd0000001141000008000a00a019000008000900bcdbaf0f08000900930e6c34080009006976112b1c000b8008000900f360af5a08000a0060030000080009002eb802255fae05a39d0a00119800004c000b8008000a00418c000008000900de62294508000a005fc1000008000a00217a0000080009006118375b08000a00704f0000080009009472e12908000a002c390000080009003489890308000100020000002400048005000300020000000500030001000000dded0500030005000000050003000600000004000c80080002000300000008000100010051f8b701fb311b2470a00ac76429ced026ce36519133e82336990fae0ba6a2fef413df7cdb7d67df77e89ca3fae37403d4873fe28793631b5b8b63d37f7bc4a5de78ae6de486b88786e3b027ac521501"], 0x164}, 0x1, 0x0, 0x0, 0x20048010}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100001a0000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000024000000090a010400000000000000000700000008000a4000000000080005400000001d060000000b0a05000000000000000000070000000900010073797a30000000000c0010400000000000000001140000001000010000000000000000000084000a"], 0x98}}, 0x0) 1.62627976s ago: executing program 0 (id=2731): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x40}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f0000000000)=0xfd, 0x4) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r2, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) 1.467004539s ago: executing program 0 (id=2734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'batadv0\x00', {0x4}}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x2c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 1.175746413s ago: executing program 3 (id=2737): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="61032820050105228bfbccd68373095bbb440ac90d8866119ee1843edd9b59873632370e9c20071ef32202"], 0x2b) 1.16543135s ago: executing program 0 (id=2738): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) 1.096072233s ago: executing program 1 (id=2739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5a5e}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000400)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r3, r1}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000580)="b475", 0x2}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 1.014562577s ago: executing program 2 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848190000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="081c5281c1487c2294319545a73af3e708e4ad0fd76abd2e9a65750ec1701b71e2164817212c113422f564e1f36fb32a913b51c99630dd19cd6ad5cb007a19d88d0728558f0cd4adf7f498cf1664c3b0cd0aedd5a031d7d8", 0x58}, {&(0x7f0000000080)="9046d920e146404b15cc27312f04cd1d24d274aeeaacecdc4bdaf06c0d41b7c9f9a489159bad7e22461a11691c49bb3415d894e815278dcbc6890930272a271fa610c64632fe0a703e815929260a46e2fa5a96dab55debdc74c6af3cdada67d2c0da77e79942838f0b09b9a9397ec299b8567b8552de78913c3bccf01ce6e6ce517d4dda6701fbe8e65e4fa4a6bfe87736e19517b69c1692e733ceecebfdffa0a93adb5fe85cc8e77ce06aa8d473a014a05be5b5f2254f2f9f9d511021b7c679d5acb6be15129f2d75247887fb42f7ecb751b8f49405f677df393277b8e899", 0xdf}], 0x2, &(0x7f00000002c0)=[@hopopts={{0xb0, 0x29, 0x36, {0x8, 0x12, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x6, [0x1, 0xd, 0x10, 0x3ff, 0xffffffffffff0000]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0xdb, 0x9, [0xa]}}, @jumbo={0xc2, 0x4, 0xd}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x400000}, @ra={0x5, 0x2, 0x58c}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}]}}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x21}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x3c, 0xa, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x38, {0x0, 0xc, 0x7, 0xd, [0x97a, 0x1, 0x4, 0x4, 0x6, 0x3]}}]}}}], 0x180}}], 0x1, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20004040}, 0xc088) 958.335296ms ago: executing program 1 (id=2741): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f20000651993f0853aaea2bc0100"/25, 0x19) (async, rerun: 32) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x44854) (async) recvmsg(r1, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7bf00001", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf255c00000008000300", @ANYRES32=r4, @ANYBLOB="08006b00b4000000"], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x78, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x54, 0x33, @beacon={{{}, {0x99f}, @device_a, @device_a, @random="aa05d423b2e9"}, 0x3, @random=0x1, 0x1, @void, @val, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x1}}, @void, @void, @val={0x25, 0x3, {0x1, 0xa, 0x1}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x21, 0x2, 0x34, 0x7}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x12, 0xf6, 0x40}}, @val={0x76, 0x6, {0x5, 0x10, 0x2a, 0x402}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4001) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) (async) sendto$inet6(r8, &(0x7f0000000580)='\a', 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6, @rand_addr, 0x97}, 0x1c) shutdown(r8, 0x1) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 879.647148ms ago: executing program 0 (id=2742): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x150, 0x111, 0x4b4, 0x150, 0x700, 0x260, 0x278, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [0x0, 0x0, 0xff000000], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x31, 0xb, 0x2}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1, [0xff000000], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x20, 0x7, 0xd, 0x7, {{0x39, 0x4, 0x2, 0x9, 0xe4, 0x66, 0x0, 0x66, 0x4, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x47, 0x3, [{0x7, 0xd, "97825bc48b9bb652408438"}, {0x0, 0x9, "3dcd34e346afc3"}, {0x3, 0x4, "8f01"}, {0x2ddaae8e07fbafb3, 0xe, "d6d97bb40f50a01cdba4d00f"}, {0x2, 0x10, "d8dcfc32009016a89b99e051cf06"}, {0x5, 0x9, "4598e55c6e3e87"}]}, @timestamp_prespec={0x44, 0x34, 0xdc, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x6c0c}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xd2a2}, {@loopback, 0x40}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x5}]}, @rr={0x7, 0x13, 0x9, [@dev={0xac, 0x14, 0x14, 0x2f}, @empty, @private=0xa010102, @remote]}, @cipso={0x86, 0x9, 0x3, [{0x6, 0x3, '}'}]}, @end, @lsrr={0x83, 0x23, 0x9f, [@local, @multicast2, @multicast2, @multicast2, @rand_addr=0x64010100, @remote, @local, @rand_addr=0x64010100]}, @rr={0x7, 0x13, 0x2c, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @remote, @remote]}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr=0x64010100, @in6=@remote, 0x4e23, 0x2, 0x4e21, 0x0, 0x2, 0xa0, 0xa0, 0x16, r7, 0xffffffffffffffff}, {0x5, 0xffff, 0x100, 0x0, 0x6, 0x8, 0x41, 0x80000000}, {0xfffffffffffffffb, 0x7, 0x5, 0x7ff}, 0x3, 0x6e6bb9, 0x0, 0x1, 0x2, 0x2}, {{@in=@loopback, 0x4d5, 0xff}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x3500, 0x0, 0x2, 0x4, 0x9594, 0xc29}}, 0xe8) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000045000900000000000200000002000000080002"], 0x1c}}, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r8, 0x5460, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x228, 0x228, 0x0, 0x2c0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x190}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0x11}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0xc2ddb5edb7ba9069, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 879.319376ms ago: executing program 3 (id=2743): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x4010, r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x107}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 850.422983ms ago: executing program 2 (id=2744): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100db800003"], 0x14}}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c110}, 0x4008001) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r5, &(0x7f00000000c0), 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4004801, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100db800003"], 0x14}}, 0x0) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c110}, 0x4008001) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r5, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) writev(r5, &(0x7f00000000c0), 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x4004801, 0x0, 0x0) (async) 801.433368ms ago: executing program 1 (id=2745): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x40005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) r6 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={r7, 0x6}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) socketpair(0x5, 0x2, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0x931, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xb}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) 680.048347ms ago: executing program 3 (id=2746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x707, 0x8, 0x5, 0x7, {{0x1f, 0x4, 0x2, 0x4, 0x7c, 0x67, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@lsrr={0x83, 0xf, 0xe6, [@remote, @empty, @multicast1]}, @timestamp_addr={0x44, 0x2c, 0xb6, 0x1, 0x5, [{@private=0xa010101, 0x6}, {@multicast1, 0x8d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x7}, {@multicast2, 0x6}]}, @lsrr={0x83, 0xb, 0xd7, [@empty, @multicast1]}, @end, @timestamp={0x44, 0x14, 0x5e, 0x0, 0x3, [0x0, 0x1, 0x4, 0x100]}, @generic={0x86, 0xc, "44e07fa3916616784b36"}]}}}}}) 679.597583ms ago: executing program 4 (id=2747): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_open_procfs$namespace(r2, 0x0) 661.578913ms ago: executing program 2 (id=2748): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x6cb, 0x101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000007080004400000000f0800014000000000180005800e000100696d6d656469617465000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a00"], 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000400)=0x1) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r4, @ANYBLOB="01002abd7000ffdbdf250100000700000180080002e843000180"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000ffdbdf25080000000c000280080002006c3700004400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d616376746170000000080b0300020000001400020076657468315f746f5f626174616476000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x40) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0xfff1, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=@delchain={0x2c, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8808}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="195fd3b2a40beee2d7b57997ddf157f3596aa59b82", @ANYRES16=r4, @ANYBLOB="200029bd7000fedbdf250500000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, &(0x7f0000000480)=0x10) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0xf847, 0x8, 0x4, 0xfffffffc, {{0xb, 0x4, 0x2, 0x31, 0x2c, 0x67, 0x0, 0xc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4, 0xd8, 0x3, 0x5}, @timestamp_addr={0x44, 0x14, 0xcf, 0x1, 0x0, [{@loopback, 0x3ff}, {@remote, 0x8}]}]}}}}}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x3, 0xd, 0x36c, 0x3, 0x100000001, 0xfffffffffffffffb}, {0x38cac22, 0xfffffffb, 0x9, 0x9, 0x1, 0x10001}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0xfffffffffffffeea, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 533.961946ms ago: executing program 3 (id=2749): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) write(r0, &(0x7f0000000080)="0d7574d649778c0f9f898bd10e6d94542035dd413bd62dbfecf4986b58ea0b3fb1bad3ef7d1c1fae27db950b40cc24c17780f1007d921d6beef2fb8431ba3fcf448846513bb741082eff19dfd56a3f555b2da941741f7a", 0x57) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000180)=0x80) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req={0x9b7, 0x1, 0x3, 0x3b8}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000240), 0x2, 0x0) r4 = accept$phonet_pipe(r1, &(0x7f0000000280), &(0x7f00000002c0)=0x10) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000300)=0x1, 0x4) connect$ax25(r1, &(0x7f0000000340)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000003c0)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000400)={0x6}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40408c0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000540)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}, 0x8) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r7, 0x5421, &(0x7f0000000580)=0x49e) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000005c0)=0x38194, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0xf4, 0x9, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_USERDATA={0xbb, 0xd, 0x1, 0x0, "e8d356208342ae4abf4f2391cb2fcb4335fce28fca7e192d37e1361980320285594c3854c6f7fe42e35be8bbd76d82808835dd9a3168eed4b234d535f0ac89acb0b6b94b73b28b93461d925ce74d46b25af21993d5447a1ba42afcb5721d904f7a1d2ffaaec5ba0cfc411d1b1adbc8a2d2ef81beaf325b23a6cbce965f895c1045ba0664e1641a575c7e569574d8bb8d8cbcfcc3afdd25628f9e96f4265fcf3df455a8418ffa886d8f5dbb37f2cbee329a303af81fd92d"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x100}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x93, 0xc, "0f9294f12c1d219a44d764ffe6a3c19bbbad1e2cf5301adb18532387fc221b0c1230cfc9475464b163216a34595ea2bea0ee34444522dab0540574e82f3f18828df434635254e247eb0b0b8a32163c6cedd15dce374b5a4bb08dc3cf42c0ec22fbbca3cd116e757526d078a6f794e3e6e6c9cf89a1820d8ab29601380fc30c63812d20abe882dda4b1235df9514381"}]}, @NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xf}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x374}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x34}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x4) sendmsg$nl_route(r1, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@bridge_delneigh={0x80, 0x1d, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x0, r11, 0x0, 0x6, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x9, 0x6289, 0xa, 0xefa}}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_CACHEINFO={0x14, 0x3, {0x401, 0x6, 0x6, 0x6}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x861e}, @NDA_FDB_EXT_ATTRS={0x20, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_SRC_VNI={0x8, 0xb, 0xfff}]}, 0x80}, 0x1, 0x0, 0x0, 0x5}, 0x2000c0d0) r12 = socket$netlink(0x10, 0x3, 0x4) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000dc0), 0x4) ppoll(&(0x7f0000000e00)=[{r4, 0x4400}, {r0, 0x4}, {r2, 0x6847c014d02713a0}, {r12, 0x9101}, {r13, 0x420}, {r8, 0x8eb6}, {r8, 0x20}], 0x7, &(0x7f0000000e40)={0x0, 0x989680}, &(0x7f0000000e80)={[0x5]}, 0x8) 447.917809ms ago: executing program 1 (id=2750): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x53, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x18, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x64000) openat$tun(0xffffffffffffff9c, 0x0, 0x18103, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0xb, 0x81}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x4e) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x44, r0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x56773be4052dacb4) 416.747054ms ago: executing program 4 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv4_newaddr={0x80, 0x14, 0x100, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x8, 0xff, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x3, 0x3}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'pimreg1\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0xffff4d11, 0xb, 0x80}}, @IFA_LABEL={0x14, 0x3, 'lo\x00'}, @IFA_FLAGS={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7f}]}, 0x80}, 0x1, 0x0, 0x0, 0x240408c4}, 0x0) 328.308063ms ago: executing program 3 (id=2752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001800000000000000000002000100008077020000001b00"/38], 0x40}}, 0x0) 267.105066ms ago: executing program 2 (id=2753): socket(0x2a, 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r1, 0x1) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (rerun: 32) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) listen(r2, 0x4) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r3, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x27}}}]}, 0x38}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x32, 0x10}, 0x20) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x131986e985dac249}, 0x40010) 234.798794ms ago: executing program 1 (id=2754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4040000) 175.63553ms ago: executing program 3 (id=2755): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f67fe4)={0xa, 0x4e22, 0x2000000, @private1}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80001}, {0xfbfffffa, 0xa23e}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="620ac4ff0000000071104d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000043000701fefffffffcdbdf25037c0000040045803800018004001d80300064802c00cd8008003d00", @ANYRES32=0x0, @ANYBLOB="0400628014009000ff02000000000000000000000000000108004500", @ANYRES32, @ANYBLOB="e2e1e2"], 0x50}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111b600000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 1 (id=2756): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x1a0, 0xe138, 0x198, 0x1a0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x408, 0x318, 0xd0, 0x200, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0x0, 0xff], [0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x6, 0x0, 0x14}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x1c, 0x1}}, @common=@hl={{0x28}, {0x1, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0xffffffffffffffff}, 0xfffffffc}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, [0xffffffff], [0xffffffff, 0x0, 0xffffff00], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x0, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xffffffffffffffff}, 0x3, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x200000}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) kernel console output (not intermixed with test programs): ce. Skipping batadv-on-batadv check for gretap1 [ 130.969956][ T7591] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 130.980039][ T7591] gretap1: entered promiscuous mode [ 130.999110][ T7591] gretap1: entered allmulticast mode [ 131.009778][ T7595] lo speed is unknown, defaulting to 1000 [ 131.029538][ T7597] team0: Device vti0 is of different type [ 131.046497][ T7600] IPVS: set_ctl: invalid protocol: 4 10.1.1.2:20001 [ 131.067929][ T7595] lo speed is unknown, defaulting to 1000 [ 131.095306][ T7595] lo speed is unknown, defaulting to 1000 [ 131.123456][ T7595] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 131.147762][ T7602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.150842][ T7595] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 131.275346][ T7602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.313510][ T7595] lo speed is unknown, defaulting to 1000 [ 131.323189][ T7595] lo speed is unknown, defaulting to 1000 [ 131.331523][ T7595] lo speed is unknown, defaulting to 1000 [ 131.381644][ T7595] lo speed is unknown, defaulting to 1000 [ 131.424105][ T7595] lo speed is unknown, defaulting to 1000 [ 131.549350][ T7623] team0: Device vti0 is of different type [ 131.571194][ T7617] netlink: 'syz.4.446': attribute type 1 has an invalid length. [ 132.693124][ T7666] __nla_validate_parse: 15 callbacks suppressed [ 132.693144][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.461'. [ 132.720229][ T7671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.463'. [ 132.768903][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 133.004011][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 133.358745][ T7700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.474'. [ 133.400458][ T7701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 133.454018][ T7701] bond0: entered promiscuous mode [ 133.459242][ T7701] bond_slave_0: entered promiscuous mode [ 133.467608][ T7701] bond_slave_1: entered promiscuous mode [ 133.505772][ T7701] bond0: left promiscuous mode [ 133.510723][ T7701] bond_slave_0: left promiscuous mode [ 133.538916][ T7701] bond_slave_1: left promiscuous mode [ 133.557670][ T7710] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 133.675856][ T7721] netlink: 'syz.3.475': attribute type 7 has an invalid length. [ 133.684831][ T7711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.687493][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.475'. [ 133.788607][ T7727] netlink: 'syz.0.480': attribute type 1 has an invalid length. [ 133.804486][ T7715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.813794][ T7715] bond4: (slave bond5): making interface the new active one [ 133.821876][ T7715] bond4: (slave bond5): Enslaving as an active interface with an up link [ 133.895403][ T7716] bond1: entered promiscuous mode [ 134.032178][ T7735] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 134.106785][ T7735] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 134.128610][ T7735] gretap2: entered promiscuous mode [ 134.142451][ T7735] gretap2: entered allmulticast mode [ 134.155825][ T7744] veth0: entered promiscuous mode [ 134.176476][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 134.198629][ T7733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.267084][ T7733] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.321844][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 134.371562][ T7744] veth0: left promiscuous mode [ 134.854291][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 135.380472][ T7823] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 135.404875][ T7823] team0: Port device dummy0 added [ 135.640401][ T7833] tipc: Enabled bearer , priority 0 [ 135.723779][ T7833] tipc: Resetting bearer [ 135.793359][ T7832] tipc: Disabling bearer [ 137.067943][ T7909] x_tables: duplicate underflow at hook 4 [ 137.104518][ T7908] x_tables: duplicate underflow at hook 4 [ 137.267012][ T7924] trusted_key: syz.4.524 sent an empty control message without MSG_MORE. [ 137.692032][ T7946] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 137.704395][ T7950] sctp: [Deprecated]: syz.0.529 (pid 7950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.704395][ T7950] Use struct sctp_sack_info instead [ 137.730918][ T7949] __nla_validate_parse: 5 callbacks suppressed [ 137.730936][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 137.826207][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 137.848231][ T7952] ip6gre0: Master is either lo or non-ether device [ 137.856018][ T7952] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 137.876200][ T7954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 137.885524][ T7954] netlink: 43 bytes leftover after parsing attributes in process `syz.2.534'. [ 137.894889][ T7954] netlink: 'syz.2.534': attribute type 5 has an invalid length. [ 137.904996][ T7954] netlink: 43 bytes leftover after parsing attributes in process `syz.2.534'. [ 137.999770][ T7959] openvswitch: netlink: Duplicate key (type 1). [ 138.105808][ T7966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.126624][ T5894] lo speed is unknown, defaulting to 1000 [ 138.137439][ T7966] netlink: 'syz.2.537': attribute type 2 has an invalid length. [ 138.311978][ T7971] netlink: 224 bytes leftover after parsing attributes in process `syz.3.540'. [ 138.328795][ T7971] ksmbd: Unknown IPC event: 3, ignore. [ 138.746010][ T7992] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 138.782691][ T7997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.891514][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 138.948350][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 138.963199][ T8002] veth0: entered promiscuous mode [ 138.970136][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'. [ 139.245652][ T8015] tipc: Enabled bearer , priority 0 [ 139.269344][ T8015] syzkaller0: entered promiscuous mode [ 139.285347][ T8015] syzkaller0: entered allmulticast mode [ 139.463462][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 139.664399][ T8017] tipc: Resetting bearer [ 139.670729][ T8028] netlink: 'syz.3.559': attribute type 29 has an invalid length. [ 139.713805][ T8011] tipc: Resetting bearer [ 139.775087][ T8011] tipc: Disabling bearer [ 139.824955][ T8036] netlink: 'syz.3.559': attribute type 29 has an invalid length. [ 140.047340][ T8058] bond2: option mode: invalid value (133) [ 140.055791][ T8058] bond2 (unregistering): Released all slaves [ 140.195836][ T8074] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 140.227871][ T8067] syzkaller0: entered promiscuous mode [ 140.233676][ T8067] syzkaller0: entered allmulticast mode [ 140.319869][ T8074] bond1: entered promiscuous mode [ 140.326121][ T8074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.381906][ T8079] bond1: (slave bridge1): making interface the new active one [ 141.389847][ T8079] bridge1: entered promiscuous mode [ 141.396473][ T8079] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 141.582005][ T5847] Bluetooth: hci4: link tx timeout [ 141.587614][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.757715][ T8098] tipc: Enabled bearer , priority 0 [ 141.767580][ T8098] tipc: Enabling of bearer rejected, media not registered [ 141.793185][ T8097] tipc: Resetting bearer [ 141.838056][ T8097] tipc: Disabling bearer [ 141.868993][ T8107] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 141.879703][ T8105] lo: entered promiscuous mode [ 141.892167][ T8105] tunl0: entered promiscuous mode [ 141.899580][ T8105] gre0: entered promiscuous mode [ 141.924951][ T8105] gretap0: entered promiscuous mode [ 141.959505][ T8105] erspan0: entered promiscuous mode [ 142.002809][ T8105] ip_vti0: entered promiscuous mode [ 142.370204][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 142.660581][ T8145] raw_sendmsg: syz.2.588 forgot to set AF_INET. Fix it! [ 142.763161][ T8155] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 142.808105][ T8159] netlink: 'syz.4.592': attribute type 21 has an invalid length. [ 142.836776][ T8159] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 142.865278][ T8159] xt_l2tp: v2 sid > 0xffff: 1114112 [ 143.018420][ T8170] Bluetooth: MGMT ver 1.23 [ 143.582155][ T8197] vxlan0: entered promiscuous mode [ 143.597076][ T8197] vxlan0: entered allmulticast mode [ 143.622541][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 143.645335][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.664176][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.676309][ T8206] __nla_validate_parse: 7 callbacks suppressed [ 143.676327][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 143.697672][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.706552][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.896111][ T8219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.607'. [ 143.967594][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'. [ 144.019449][ T8228] netlink: 84 bytes leftover after parsing attributes in process `syz.1.607'. [ 144.385235][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 144.395936][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.496617][ T8243] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 144.504832][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.618'. [ 144.569647][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 144.607738][ T8246] netlink: 20 bytes leftover after parsing attributes in process `syz.2.619'. [ 144.830216][ T8261] x_tables: duplicate underflow at hook 2 [ 145.268003][ T8280] dvmrp1: entered allmulticast mode [ 145.328380][ T8285] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 145.335899][ T8287] netlink: 5 bytes leftover after parsing attributes in process `syz.3.630'. [ 145.345094][ T8287] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 145.676117][ T8300] tipc: Enabled bearer , priority 0 [ 145.686412][ T8300] syzkaller0: entered promiscuous mode [ 145.693260][ T8300] syzkaller0: entered allmulticast mode [ 145.724637][ T8299] tipc: Resetting bearer [ 145.760603][ T8299] tipc: Disabling bearer [ 145.919190][ T8316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 146.446331][ T8344] netlink: zone id is out of range [ 146.472436][ T8344] netlink: zone id is out of range [ 146.484558][ T8344] netlink: zone id is out of range [ 146.501270][ T8344] netlink: zone id is out of range [ 146.741496][ T8355] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 146.770884][ T8355] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 146.851876][ T8349] macvlan2: entered promiscuous mode [ 146.880014][ T8349] macvlan2: entered allmulticast mode [ 146.887877][ T8349] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 147.128498][ T8377] bond2: option resend_igmp: invalid value (32767) [ 147.136156][ T8377] bond2: option resend_igmp: allowed values 0 - 255 [ 147.161446][ T8377] bond2 (unregistering): Released all slaves [ 147.750478][ T8414] netlink: 'syz.1.665': attribute type 10 has an invalid length. [ 147.808831][ T8414] team0: Device veth1_macvtap failed to register rx_handler [ 148.625782][ T8457] netlink: 'syz.4.682': attribute type 3 has an invalid length. [ 148.729857][ T8465] __nla_validate_parse: 15 callbacks suppressed [ 148.729880][ T8465] netlink: 192 bytes leftover after parsing attributes in process `syz.1.684'. [ 149.684155][ T8482] syzkaller1: entered promiscuous mode [ 149.689693][ T8482] syzkaller1: entered allmulticast mode [ 149.741144][ T8490] netlink: 'syz.4.690': attribute type 15 has an invalid length. [ 149.750509][ T8489] netlink: 'syz.3.689': attribute type 11 has an invalid length. [ 149.763276][ T8494] netlink: 'syz.4.690': attribute type 15 has an invalid length. [ 149.765047][ T8490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 149.781019][ T8494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.690'. [ 149.796660][ T8491] netlink: 'syz.2.691': attribute type 1 has an invalid length. [ 149.805144][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 149.814332][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.691'. [ 149.852446][ T8488] netlink: 'syz.2.691': attribute type 20 has an invalid length. [ 149.853419][ T8491] netlink: 52 bytes leftover after parsing attributes in process `syz.2.691'. [ 149.933683][ T8498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.692'. [ 149.997784][ T8488] veth7: entered promiscuous mode [ 150.038044][ T8498] netlink: 52 bytes leftover after parsing attributes in process `syz.3.692'. [ 150.080693][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 150.117378][ T8511] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 150.129172][ T5954] IPVS: starting estimator thread 0... [ 150.256252][ T8512] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.284651][ T8517] lo speed is unknown, defaulting to 1000 [ 150.920788][ T8551] Cannot find del_set index 4 as target [ 150.954538][ T8554] netlink: 22 bytes leftover after parsing attributes in process `syz.0.706'. [ 151.440435][ T8573] syzkaller0: entered promiscuous mode [ 151.447074][ T8573] syzkaller0: entered allmulticast mode [ 151.993568][ T8606] netlink: 'syz.3.721': attribute type 5 has an invalid length. [ 152.273888][ T8623] ip6t_srh: unknown srh match flags 4000 [ 152.494263][ T8618] netlink: 'syz.1.725': attribute type 13 has an invalid length. [ 152.612849][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.620075][ T8618] bridge0: port 2(bridge_slave_1) entered listening state [ 152.628415][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.635662][ T8618] bridge0: port 1(bridge_slave_0) entered listening state [ 152.700087][ T8618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.752727][ T8645] ksmbd: Unknown IPC event: 3, ignore. [ 152.973471][ T8659] netlink: 'syz.2.732': attribute type 4 has an invalid length. [ 152.975339][ T8660] netlink: 'syz.3.733': attribute type 21 has an invalid length. [ 153.006472][ T8645] team0 (unregistering): Port device team_slave_0 removed [ 153.018927][ T8645] team0 (unregistering): Port device team_slave_1 removed [ 153.137349][ T8664] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 153.162103][ T5901] lo speed is unknown, defaulting to 1000 [ 153.179099][ T8664] Bluetooth: MGMT ver 1.23 [ 153.183021][ T5901] syz2: Port: 1 Link DOWN [ 153.977498][ T8707] netlink: 'syz.4.749': attribute type 6 has an invalid length. [ 154.019066][ T8707] __nla_validate_parse: 21 callbacks suppressed [ 154.019086][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 154.125048][ T8707] netlink: 'syz.4.749': attribute type 6 has an invalid length. [ 154.174064][ T8697] bridge_slave_0: left allmulticast mode [ 154.180122][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.280089][ T8697] bridge_slave_1: left allmulticast mode [ 154.286831][ T8697] bridge_slave_1: left promiscuous mode [ 154.296811][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.347378][ T8697] bond0: (slave bond_slave_0): Releasing backup interface [ 154.359458][ T8697] bond0: (slave bond_slave_1): Releasing backup interface [ 154.384480][ T8697] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.710274][ T8738] lo speed is unknown, defaulting to 1000 [ 154.839777][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 154.997949][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.004670][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.019696][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.048902][ T8764] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 155.079263][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.088388][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.096574][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.107415][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.144506][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.162913][ T8764] hsr0 speed is unknown, defaulting to 1000 [ 155.583547][ T8794] netlink: 'syz.4.768': attribute type 58 has an invalid length. [ 155.601639][ T8794] netlink: 20 bytes leftover after parsing attributes in process `syz.4.768'. [ 155.710118][ T155] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.754931][ T155] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.796043][ T155] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.826319][ T155] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.057401][ T8812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.774'. [ 156.196790][ T8818] netlink: 'syz.2.775': attribute type 22 has an invalid length. [ 156.205821][ T8819] netlink: 'syz.2.775': attribute type 22 has an invalid length. [ 156.213649][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 156.223344][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 156.275722][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 156.352194][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 156.536488][ T8837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.777'. [ 156.674224][ T8841] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.722558][ T8841] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.670986][ T8907] validate_nla: 2 callbacks suppressed [ 157.671005][ T8907] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 157.720818][ T8907] netlink: 224 bytes leftover after parsing attributes in process `syz.3.788'. [ 157.746770][ T8912] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 157.747144][ T8910] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 158.034150][ T8910] bond2: entered promiscuous mode [ 158.045479][ T8910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.101874][ T8916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.110952][ T8936] netlink: 'syz.0.792': attribute type 2 has an invalid length. [ 158.111452][ T8916] bond2: (slave wireguard2): The slave device specified does not support setting the MAC address [ 158.130586][ T8916] bond2: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 158.168188][ T8916] bond2: (slave wireguard2): making interface the new active one [ 158.202417][ T8916] wireguard2: entered promiscuous mode [ 158.210082][ T8916] bond2: (slave wireguard2): Enslaving as an active interface with an up link [ 158.544464][ T8954] netlink: 'syz.0.798': attribute type 21 has an invalid length. [ 158.724625][ T8946] netlink: 'syz.3.796': attribute type 5 has an invalid length. [ 158.756580][ T8966] netlink: 'syz.4.801': attribute type 5 has an invalid length. [ 158.861832][ T8966] geneve2: entered promiscuous mode [ 158.905759][ T8966] geneve2: entered allmulticast mode [ 158.947491][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 158.956380][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 158.994014][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 159.047093][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 159.291534][ T8995] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 159.610014][ T9012] Cannot find set identified by id 65534 to match [ 159.651396][ T8896] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 159.820379][ T9030] __nla_validate_parse: 9 callbacks suppressed [ 159.820399][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.816'. [ 159.886277][ T9030] hsr_slave_1 (unregistering): left promiscuous mode [ 160.020204][ T9039] netlink: 'syz.2.817': attribute type 12 has an invalid length. [ 160.121348][ T9047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.818'. [ 160.219446][ T9050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.819'. [ 160.253830][ T9050] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 160.730242][ T9064] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.770699][ T9064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 160.809602][ T9064] tc_dump_action: action bad kind [ 160.850213][ T9075] xt_hashlimit: max too large, truncated to 1048576 [ 160.972140][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.979877][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.034902][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 161.412424][ T9093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.664126][ T9118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.839'. [ 161.771397][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.779259][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.814548][ T9124] xt_hashlimit: size too large, truncated to 1048576 [ 162.248256][ T9115] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 162.278549][ T9145] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 162.377171][ T9140] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 162.387878][ T70] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.390177][ T9141] 8021q: adding VLAN 0 to HW filter on device bond6 [ 162.407295][ T9152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 162.533919][ T70] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.687616][ T9171] validate_nla: 1 callbacks suppressed [ 162.687635][ T9171] netlink: 'syz.0.853': attribute type 12 has an invalid length. [ 162.710510][ T9171] netlink: 'syz.0.853': attribute type 29 has an invalid length. [ 162.721186][ T9171] netlink: 148 bytes leftover after parsing attributes in process `syz.0.853'. [ 162.730417][ T9171] netlink: 59 bytes leftover after parsing attributes in process `syz.0.853'. [ 162.742949][ T8896] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 162.905314][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.857'. [ 163.586658][ T9206] netlink: 'syz.4.859': attribute type 21 has an invalid length. [ 163.681235][ T9210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 163.783813][ T9210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 163.819942][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.830400][ T9217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.844423][ T9217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.851992][ T9217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.958627][ T9210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 164.098173][ T9210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 164.186010][ T9238] netlink: 'syz.0.867': attribute type 8 has an invalid length. [ 164.287621][ T8896] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 164.309459][ T8896] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 164.333648][ T9242] syzkaller0: entered promiscuous mode [ 164.339557][ T9242] syzkaller0: entered allmulticast mode [ 164.373664][ T8891] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 164.410021][ T79] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 183.063463][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 183.071785][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 188.948159][ T9273] __nla_validate_parse: 3 callbacks suppressed [ 188.948181][ T9273] netlink: 220 bytes leftover after parsing attributes in process `syz.1.880'. [ 188.964726][ T9268] netlink: 240 bytes leftover after parsing attributes in process `syz.0.879'. [ 188.981434][ T9273] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 188.998695][ T9271] netlink: 5 bytes leftover after parsing attributes in process `syz.3.877'. [ 189.011672][ T9271] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 189.153658][ T9286] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 189.240067][ T9282] syzkaller0: entered promiscuous mode [ 189.256966][ T9282] syzkaller0: entered allmulticast mode [ 190.482753][ T9305] tc_dump_action: action bad kind [ 190.649450][ T9321] netlink: 'syz.0.889': attribute type 17 has an invalid length. [ 190.686926][ T9331] Cannot find add_set index 2 as target [ 190.725792][ T9332] Cannot find add_set index 2 as target [ 190.964454][ T9347] syzkaller1: entered promiscuous mode [ 190.969995][ T9347] syzkaller1: entered allmulticast mode [ 191.180328][ T9362] ip6tnl0: Caught tx_queue_len zero misconfig [ 191.246749][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.904'. [ 191.557160][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 191.599725][ T9388] macvlan0: entered promiscuous mode [ 191.607025][ T9388] batadv0: entered promiscuous mode [ 191.627373][ T9388] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 191.634015][ T9392] unsupported nla_type 52263 [ 191.649091][ T9388] hsr1: entered allmulticast mode [ 191.654661][ T9388] macvlan0: entered allmulticast mode [ 191.670478][ T9388] veth1_vlan: entered allmulticast mode [ 191.680707][ T9388] batadv0: entered allmulticast mode [ 191.893601][ T9407] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 192.342693][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 192.590704][ T9445] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 192.620387][ T9445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.642092][ T9445] bond5: (slave gretap2): making interface the new active one [ 192.651243][ T9445] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 192.660796][ T9446] syzkaller1: entered promiscuous mode [ 192.668181][ T9446] syzkaller1: entered allmulticast mode [ 192.954668][ T9456] netlink: 152 bytes leftover after parsing attributes in process `syz.4.934'. [ 192.965287][ T9456] syzkaller0: entered promiscuous mode [ 192.970891][ T9456] syzkaller0: entered allmulticast mode [ 192.980131][ T9456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.934'. [ 193.478186][ T9475] ip6gre1: entered promiscuous mode [ 193.485097][ T9475] ip6gre1: entered allmulticast mode [ 193.512918][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'. [ 193.525948][ T9480] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 193.665277][ T9485] tipc: Enabling of bearer rejected, failed to enable media [ 193.730503][ T9489] syzkaller1: entered promiscuous mode [ 193.752367][ T9489] syzkaller1: entered allmulticast mode [ 193.774574][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.948'. [ 193.864227][ T9502] xt_l2tp: missing protocol rule (udp|l2tpip) [ 194.347782][ T9528] syzkaller0: entered promiscuous mode [ 194.354061][ T9528] syzkaller0: entered allmulticast mode [ 194.363194][ T9528] netlink: 'syz.3.957': attribute type 8 has an invalid length. [ 195.041851][ T9540] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 195.693002][ T9540] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 195.779381][ T9547] sit3: entered promiscuous mode [ 195.795489][ T9547] sit3: entered allmulticast mode [ 195.869278][ T9558] __nla_validate_parse: 2 callbacks suppressed [ 195.869297][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.963'. [ 196.180688][ T9584] netlink: 52 bytes leftover after parsing attributes in process `syz.4.970'. [ 196.192146][ T9576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 196.739448][ T9608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.979'. [ 196.749640][ T9611] netlink: 'syz.2.978': attribute type 1 has an invalid length. [ 196.873312][ T9611] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 196.893573][ T9611] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 196.999422][ T9618] gretap1: entered promiscuous mode [ 197.015165][ T9618] gretap1: entered allmulticast mode [ 197.048023][ T9618] bond3: (slave gretap1): making interface the new active one [ 197.065751][ T9618] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 197.269963][ T9638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.983'. [ 197.408955][ T9651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 197.732970][ T9679] netlink: 36 bytes leftover after parsing attributes in process `syz.2.995'. [ 197.900924][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.998'. [ 197.964691][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.999'. [ 198.103606][ T9701] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 198.103637][ T9702] netlink: 'syz.2.1002': attribute type 1 has an invalid length. [ 198.153005][ T9708] SET target dimension over the limit! [ 198.196259][ T9701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.304207][ T9717] pim6reg527: entered allmulticast mode [ 198.385746][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1008'. [ 198.414040][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 198.522129][ T9731] netlink: 'syz.2.1010': attribute type 13 has an invalid length. [ 198.555543][ T9731] netlink: 'syz.2.1010': attribute type 13 has an invalid length. [ 198.710653][ T9741] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 198.719560][ T9741] netlink: 'syz.2.1014': attribute type 2 has an invalid length. [ 198.843472][ T9741] syzkaller0: entered promiscuous mode [ 198.849918][ T9741] syzkaller0: entered allmulticast mode [ 198.959185][ T9750] syzkaller0: entered promiscuous mode [ 198.965037][ T9750] syzkaller0: entered allmulticast mode [ 199.305852][ T9766] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.316969][ T9766] team0: Cannot enslave team device to itself [ 199.382012][ T9768] Unsupported xt match [ 199.382052][ T9768] unable to load match [ 200.180991][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.373738][ T9835] netlink: 'syz.1.1042': attribute type 7 has an invalid length. [ 200.509153][ T9837] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 201.130951][ T9869] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 201.149702][ T9868] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 201.183502][ T9868] __nla_validate_parse: 5 callbacks suppressed [ 201.183520][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 201.243168][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1051'. [ 201.330560][ T9874] ip6erspan0: entered promiscuous mode [ 201.342807][ T9874] ip6erspan0: entered allmulticast mode [ 201.613441][ T9882] tipc: Enabled bearer , priority 0 [ 201.643316][ T9882] syzkaller0: entered promiscuous mode [ 201.660558][ T9882] syzkaller0: entered allmulticast mode [ 201.707125][ T9882] tipc: Resetting bearer [ 201.776853][ T9881] tipc: Resetting bearer [ 201.800063][ T9881] tipc: Disabling bearer [ 202.038983][ T9891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1058'. [ 202.242400][ T9899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1059'. [ 202.446328][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'. [ 202.570582][ T9916] x_tables: duplicate underflow at hook 2 [ 202.690622][ T9924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.498782][ T9950] syzkaller0: entered promiscuous mode [ 203.515837][ T9950] syzkaller0: entered allmulticast mode [ 203.624988][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 203.637904][ T9950] ipt_ECN: cannot use operation on non-tcp rule [ 205.200477][ T9818] Set syz1 is full, maxelem 65536 reached [ 205.672516][ T9983] tipc: Enabled bearer , priority 0 [ 205.705568][ T9989] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.733493][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1089'. [ 205.789439][ T9995] syzkaller0: entered promiscuous mode [ 205.796447][ T9995] syzkaller0: entered allmulticast mode [ 205.930677][ T9983] tipc: Disabling bearer [ 206.221870][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 206.455313][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 207.360599][T10040] gre0: entered promiscuous mode [ 207.413360][T10042] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 207.439203][T10040] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1098'. [ 207.455724][T10042] sctp: [Deprecated]: syz.1.1099 (pid 10042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.455724][T10042] Use struct sctp_sack_info instead [ 207.523796][T10042] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 207.637054][T10059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 208.354317][T10083] syzkaller0: entered promiscuous mode [ 208.377650][T10083] syzkaller0: entered allmulticast mode [ 210.668146][T10157] : renamed from veth1_vlan (while UP) [ 210.681991][T10168] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1133'. [ 210.844445][T10176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.218929][T10205] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 211.238100][T10197] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 211.417385][T10214] lo speed is unknown, defaulting to 1000 [ 211.457319][T10214] hsr0 speed is unknown, defaulting to 1000 [ 212.025076][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 212.031325][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.031358][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 212.038680][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 212.424391][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1163'. [ 212.448851][T10270] netlink: 'syz.2.1163': attribute type 11 has an invalid length. [ 212.461579][T10270] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1163'. [ 212.620487][T10284] Bluetooth: MGMT ver 1.23 [ 212.899534][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 213.125916][T10319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 213.142333][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.149604][ C0] bridge0: topology change detected, propagating [ 213.156446][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.163731][ C0] bridge0: topology change detected, propagating [ 213.203793][T10324] syzkaller0: entered promiscuous mode [ 213.219060][T10324] syzkaller0: entered allmulticast mode [ 213.413326][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 213.542148][T10349] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1185'. [ 213.558757][T10347] tipc: Enabled bearer , priority 0 [ 213.577708][T10347] syzkaller0: entered promiscuous mode [ 213.583394][T10353] tipc: Can't bind to reserved service type 1 [ 213.590180][T10347] syzkaller0: entered allmulticast mode [ 213.671899][T10347] tipc: Resetting bearer [ 213.767759][T10364] tipc: Resetting bearer [ 213.809757][T10364] tipc: Disabling bearer [ 213.846771][T10367] bond0: Caught tx_queue_len zero misconfig [ 213.988799][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 214.012477][T10384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.192167][T10391] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1195'. [ 214.204074][T10391] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 214.440712][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'. [ 214.502649][T10418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.907824][T10440] veth0: entered promiscuous mode [ 214.991257][T10444] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.125024][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 215.134269][T10445] openvswitch: netlink: Flow key attr not present in new flow. [ 215.630323][T10475] netlink: 'syz.0.1219': attribute type 2 has an invalid length. [ 215.680826][T10477] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 215.732124][T10436] veth0: left promiscuous mode [ 215.941833][T10488] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 216.315027][T10505] netlink: 'syz.3.1231': attribute type 33 has an invalid length. [ 216.338016][T10508] openvswitch: netlink: Flow key attr not present in new flow. [ 216.346651][T10512] netlink: 'syz.4.1232': attribute type 23 has an invalid length. [ 216.494553][T10517] bond3 (unregistering): Released all slaves [ 216.539942][T10525] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 216.847542][T10554] netlink: 'syz.4.1243': attribute type 1 has an invalid length. [ 217.063991][T10554] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.096245][T10555] team0: entered promiscuous mode [ 217.102603][T10555] team0: entered allmulticast mode [ 217.146222][T10560] bond6: (slave veth5): Enslaving as an active interface with a down link [ 217.166220][T10566] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 217.167314][T10572] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 217.185793][T10557] bridge0: port 3(ipvlan2) entered blocking state [ 217.193339][T10557] bridge0: port 3(ipvlan2) entered disabled state [ 217.201031][T10557] ipvlan2: entered allmulticast mode [ 217.207594][T10557] bridge0: entered allmulticast mode [ 217.220552][T10557] ipvlan2: left allmulticast mode [ 217.226649][T10557] bridge0: left allmulticast mode [ 217.263314][T10566] syzkaller0: entered promiscuous mode [ 217.282346][T10566] syzkaller0: entered allmulticast mode [ 217.565876][T10598] __nla_validate_parse: 13 callbacks suppressed [ 217.565992][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 217.641545][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 217.680290][T10602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 217.690175][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 217.700599][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 217.749370][T10598] macsec2: entered promiscuous mode [ 217.774978][T10598] macsec2: entered allmulticast mode [ 217.777231][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 217.794425][T10598] bond3: (slave macsec2): Error -34 calling dev_set_mtu [ 217.811261][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 218.027100][ T30] audit: type=1107 audit(1761437211.553:2): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.027100][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.075564][ T30] audit: type=1107 audit(1761437211.593:3): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.075564][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.212616][T10627] netlink: 'syz.0.1262': attribute type 32 has an invalid length. [ 218.214122][ T30] audit: type=1107 audit(1761437211.593:4): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.214122][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.282332][ T30] audit: type=1107 audit(1761437211.593:5): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.282332][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.391198][ T30] audit: type=1107 audit(1761437211.593:6): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.391198][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.483539][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1265'. [ 218.537578][ T30] audit: type=1107 audit(1761437211.593:7): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.537578][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.627990][T10654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.674613][ T30] audit: type=1107 audit(1761437211.593:8): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.674613][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.730022][ T30] audit: type=1107 audit(1761437211.593:9): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.730022][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.766072][ T30] audit: type=1107 audit(1761437211.593:10): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.766072][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.801754][ T30] audit: type=1107 audit(1761437211.593:11): pid=10616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G0a%$щ$8̄l*%ΝD V6xtB V,YnȵdhL |bV]Â&MU[,#feZHrh_+f5ZCA |D`KXx𜦇*^ 7)lu-S4OePI+JoZV [ 218.801754][ T30] Q,MZ30pFI>:_{Glm7sZF'<[ܛ,' [ 218.831168][T10657] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 218.864635][T10657] bond4 (unregistering): Released all slaves [ 218.972918][T10662] ip6gre1: entered allmulticast mode [ 219.094068][T10683] pim6reg1: entered promiscuous mode [ 219.099449][T10683] pim6reg1: entered allmulticast mode [ 219.354978][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 219.364863][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 219.392339][T10697] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 219.405560][T10705] ip6t_REJECT: ECHOREPLY is not supported [ 219.408061][T10697] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 219.478282][T10702] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 219.528984][T10702] bond4 (unregistering): Released all slaves [ 219.648860][T10720] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 219.990655][T10741] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 220.007385][T10740] netlink: 'syz.2.1296': attribute type 1 has an invalid length. [ 220.134052][T10746] bond5: (slave geneve2): making interface the new active one [ 220.142152][T10746] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 220.168614][T10753] netlink: 'syz.0.1299': attribute type 2 has an invalid length. [ 220.215230][ T8891] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 220.255542][ T8891] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 220.286384][ T8891] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 220.319198][ T8891] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 220.558837][T10786] tipc: Enabling of bearer rejected, failed to enable media [ 220.791831][T10797] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 220.855499][T10800] batadv_slave_0: entered promiscuous mode [ 220.879058][T10800] batadv_slave_0: entered allmulticast mode [ 220.995424][T10801] bridge_slave_1: left allmulticast mode [ 221.002439][T10801] bridge_slave_1: left promiscuous mode [ 221.008377][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.057533][T10801] bridge_slave_0: left allmulticast mode [ 221.065326][T10801] bridge_slave_0: left promiscuous mode [ 221.071315][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.360509][T10826] validate_nla: 5 callbacks suppressed [ 221.360537][T10826] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 221.391042][T10826] netlink: 'syz.3.1314': attribute type 2 has an invalid length. [ 221.412036][T10825] : renamed from bridge_slave_0 (while UP) [ 221.623366][T10838] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20002 [ 221.708366][T10841] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 221.733900][T10841] bond7 (unregistering): Released all slaves [ 221.994079][T10859] netlink: 'syz.1.1323': attribute type 30 has an invalid length. [ 222.017245][T10868] tipc: Started in network mode [ 222.020482][T10870] netlink: 'syz.3.1326': attribute type 2 has an invalid length. [ 222.022164][T10868] tipc: Node identity 4e8510204e0a, cluster identity 4711 [ 222.043769][T10868] tipc: Enabled bearer , priority 0 [ 222.059409][T10868] syzkaller0: entered promiscuous mode [ 222.073070][T10868] syzkaller0: entered allmulticast mode [ 222.140469][T10868] tipc: Resetting bearer [ 222.150819][T10865] tipc: Resetting bearer [ 222.209141][T10865] tipc: Disabling bearer [ 222.267264][T10875] syzkaller0: entered promiscuous mode [ 222.274243][T10875] syzkaller0: entered allmulticast mode [ 222.502334][ T5821] page_pool_release_retry() stalled pool shutdown: id 35, 2 inflight 60 sec [ 222.592953][T10905] __nla_validate_parse: 20 callbacks suppressed [ 222.592973][T10905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1336'. [ 222.638273][T10905] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1336'. [ 222.677216][T10905] netlink: 'syz.2.1336': attribute type 5 has an invalid length. [ 222.685760][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 222.700975][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 222.719115][T10905] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1336'. [ 222.840835][T10918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1342'. [ 223.022865][T10934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 223.066718][T10943] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 223.119420][T10943] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 223.213701][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1351'. [ 223.244457][T10954] sctp: [Deprecated]: syz.0.1350 (pid 10954) Use of int in max_burst socket option deprecated. [ 223.244457][T10954] Use struct sctp_assoc_value instead [ 223.740559][T10985] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 223.847331][T10985] 8021q: adding VLAN 0 to HW filter on device bond7 [ 223.943991][T10985] veth5: entered promiscuous mode [ 224.103325][T11015] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1371'. [ 224.135431][T11012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 224.289008][T11020] dvmrp0: entered allmulticast mode [ 224.358680][T11031] netlink: 'syz.1.1376': attribute type 39 has an invalid length. [ 224.482166][T11040] netlink: 'syz.1.1376': attribute type 2 has an invalid length. [ 224.519620][T11047] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 224.564577][T11041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.719375][T11053] netlink: 'syz.1.1382': attribute type 11 has an invalid length. [ 224.744941][T11050] 8021q: adding VLAN 0 to HW filter on device bond8 [ 224.832190][T11061] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 225.138027][T11084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.401156][T11095] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.473387][T11100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 225.490829][T11100] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 225.545548][T11100] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 225.684040][T11095] veth5: entered promiscuous mode [ 225.711633][T11095] bond9: (slave veth5): Enslaving as an active interface with a down link [ 225.760541][T11110] vlan0: entered allmulticast mode [ 225.766008][T11110] bond9: entered allmulticast mode [ 226.546904][T11161] validate_nla: 2 callbacks suppressed [ 226.546921][T11161] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 226.573023][T11161] netlink: 'syz.3.1407': attribute type 3 has an invalid length. [ 226.799540][T11183] netlink: 'syz.3.1411': attribute type 10 has an invalid length. [ 226.832345][T11183] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 226.897908][T11183] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 227.682501][T11242] netlink: 'syz.4.1426': attribute type 1 has an invalid length. [ 227.819556][T11254] __nla_validate_parse: 7 callbacks suppressed [ 227.819576][T11254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 227.864571][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 227.991258][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.008911][T11266] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 228.026983][T11260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.148212][T11260] bond7: option arp_validate: invalid value (134217728) [ 228.187526][T11260] bond7 (unregistering): Released all slaves [ 228.248343][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1436'. [ 228.389287][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 228.404400][T11294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 228.653828][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'. [ 228.737532][T11303] netlink: 'syz.4.1443': attribute type 8 has an invalid length. [ 228.772575][T11308] netlink: 'syz.0.1444': attribute type 13 has an invalid length. [ 228.846967][T11307] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1443'. [ 228.952114][T11323] netlink: 'syz.1.1447': attribute type 23 has an invalid length. [ 229.153908][T11339] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1453'. [ 229.200114][T11341] xt_NFQUEUE: number of total queues is 0 [ 229.318575][T11347] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 229.635268][T11362] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 229.691585][T11362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.766448][T11368] veth5: entered promiscuous mode [ 229.779299][T11368] bond4: (slave veth5): Enslaving as an active interface with an up link [ 230.103377][T11399] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 230.221366][T11405] veth0_to_bridge: entered promiscuous mode [ 230.240727][T11401] veth0_to_bridge: left promiscuous mode [ 230.318573][T11411] netlink: 'syz.0.1477': attribute type 1 has an invalid length. [ 230.465086][T11411] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.476427][T11411] bond2: (slave bond3): making interface the new active one [ 230.490929][T11411] bond2: (slave bond3): Enslaving as an active interface with an up link [ 230.514642][T11423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.892834][T11449] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 231.558884][T11494] team0: Device vti0 is of different type [ 231.646530][T11493] team0: Device vti0 is of different type [ 232.076783][T11530] bond7: option resend_igmp: invalid value (32767) [ 232.097029][T11530] bond7: option resend_igmp: allowed values 0 - 255 [ 232.107221][T11530] bond7 (unregistering): Released all slaves [ 232.450488][T11550] validate_nla: 1 callbacks suppressed [ 232.450508][T11550] netlink: 'syz.0.1516': attribute type 8 has an invalid length. [ 232.484296][T11553] netlink: 'syz.1.1517': attribute type 11 has an invalid length. [ 232.893911][T11574] lo speed is unknown, defaulting to 1000 [ 232.929198][T11574] lo speed is unknown, defaulting to 1000 [ 232.960698][T11574] lo speed is unknown, defaulting to 1000 [ 233.097442][T11592] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 233.292292][T11592] 8021q: adding VLAN 0 to HW filter on device bond5 [ 233.493616][T11574] infiniband syz0: set active [ 233.500033][T11574] infiniband syz0: added lo [ 233.545902][T11574] RDS/IB: syz0: added [ 233.550806][T11574] smc: adding ib device syz0 with port count 1 [ 233.557370][T11574] smc: ib device syz0 port 1 has no pnetid [ 233.589260][T11594] bond5: (slave veth7): Enslaving as an active interface with a down link [ 233.651937][T11589] veth9: entered promiscuous mode [ 233.664619][T11589] bond5: (slave veth9): Enslaving as an active interface with a down link [ 233.675987][ T5901] lo speed is unknown, defaulting to 1000 [ 233.692079][T11606] netlink: 'syz.4.1530': attribute type 2 has an invalid length. [ 233.726897][T11605] lo speed is unknown, defaulting to 1000 [ 233.734751][T11605] hsr0 speed is unknown, defaulting to 1000 [ 233.742073][T11574] lo speed is unknown, defaulting to 1000 [ 233.751575][ T9] lo speed is unknown, defaulting to 1000 [ 233.895692][T11617] ip6t_srh: unknown srh match flags 5F28 [ 233.904671][T11619] __nla_validate_parse: 6 callbacks suppressed [ 233.904689][T11619] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1535'. [ 233.943842][T11618] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1535'. [ 233.967893][T11618] netlink: 'syz.1.1535': attribute type 10 has an invalid length. [ 234.065452][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'. [ 234.075230][T11627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1536'. [ 234.265271][T11636] openvswitch: netlink: Flow actions attr not present in new flow. [ 234.362793][T11641] netlink: 'syz.1.1541': attribute type 9 has an invalid length. [ 234.377919][T11605] lo speed is unknown, defaulting to 1000 [ 234.380984][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 234.435009][T11641] netlink: 'syz.1.1541': attribute type 9 has an invalid length. [ 234.453879][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 234.468254][T11648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1543'. [ 234.483431][T11648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1543'. [ 234.850958][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 234.993608][T11669] netlink: 'syz.1.1547': attribute type 2 has an invalid length. [ 236.572422][T11574] lo speed is unknown, defaulting to 1000 [ 236.763534][T11703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1555'. [ 237.122182][T11713] netlink: 'syz.2.1558': attribute type 3 has an invalid length. [ 237.178957][T11574] lo speed is unknown, defaulting to 1000 [ 237.187088][T11717] C: Caught tx_queue_len zero misconfig [ 237.668939][T11727] gre5: entered promiscuous mode [ 237.674492][T11727] gre5: entered allmulticast mode [ 237.704540][T11574] lo speed is unknown, defaulting to 1000 [ 238.293929][T11574] lo speed is unknown, defaulting to 1000 [ 238.459693][T11792] xt_cluster: node mask cannot exceed total number of nodes [ 238.742833][T11803] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 238.778300][T11803] bond8 (unregistering): Released all slaves [ 238.994993][T11818] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 239.095619][T11827] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 239.140924][T11822] tipc: Enabled bearer , priority 0 [ 239.153643][T11822] syzkaller0: entered promiscuous mode [ 239.190808][T11822] syzkaller0: entered allmulticast mode [ 239.251345][T11822] tipc: Resetting bearer [ 239.288940][T11834] __nla_validate_parse: 7 callbacks suppressed [ 239.288961][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 239.438960][T11848] netlink: 'syz.1.1595': attribute type 21 has an invalid length. [ 239.447367][T11848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1595'. [ 239.511922][T11834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.607593][T11846] 8021q: adding VLAN 0 to HW filter on device bond7 [ 239.617341][T11846] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 239.631133][T11846] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 239.712167][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 239.817988][T11821] tipc: Resetting bearer [ 239.860225][T11821] tipc: Disabling bearer [ 240.076523][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1603'. [ 240.275614][T11874] lo speed is unknown, defaulting to 1000 [ 240.286671][T11874] hsr0 speed is unknown, defaulting to 1000 [ 240.306292][T11874] lo speed is unknown, defaulting to 1000 [ 240.394899][T11893] veth0_to_bridge: entered promiscuous mode [ 240.425538][T11891] veth0_to_bridge: left promiscuous mode [ 240.616911][T11905] syzkaller0: entered promiscuous mode [ 240.625625][T11905] syzkaller0: entered allmulticast mode [ 240.735880][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 240.880432][T11923] veth1_to_bond: entered allmulticast mode [ 240.890688][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1614'. [ 240.944410][T11923] bond0: (slave bond_slave_1): Releasing backup interface [ 241.022489][T11926] netlink: 'syz.0.1615': attribute type 7 has an invalid length. [ 241.240302][T11934] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 241.510096][T11936] openvswitch: netlink: Missing key (keys=40, expected=80) [ 241.775247][T11954] netlink: 'syz.3.1625': attribute type 64 has an invalid length. [ 241.793898][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 241.817865][T11954] netlink: 'syz.3.1625': attribute type 64 has an invalid length. [ 241.828726][T11954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 241.976590][T11969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1629'. [ 242.100435][T11973] netlink: 'syz.1.1631': attribute type 4 has an invalid length. [ 242.216117][T11982] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1635'. [ 242.230151][T11982] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 242.607781][T12007] netlink: 'syz.0.1641': attribute type 10 has an invalid length. [ 243.405101][T12012] tipc: Enabled bearer , priority 0 [ 243.436420][T12012] syzkaller0: entered promiscuous mode [ 243.441975][T12012] syzkaller0: entered allmulticast mode [ 243.507691][T12012] tipc: Resetting bearer [ 243.546987][T12010] tipc: Resetting bearer [ 243.608754][T12010] tipc: Disabling bearer [ 243.627435][T12022] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 243.737297][T12022] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.747648][T12030] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 243.885893][T12035] bond8 (unregistering): Released all slaves [ 244.013231][T12030] ip6tnl5: entered promiscuous mode [ 244.027795][T12030] ip6tnl5: entered allmulticast mode [ 244.947006][T12044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.367339][ T5821] lo speed is unknown, defaulting to 1000 [ 245.384725][ T5821] syz0: Port: 1 Link DOWN [ 245.448847][T11225] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.464467][T11225] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.504623][T11225] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.546065][T12077] lo speed is unknown, defaulting to 1000 [ 245.554291][T11225] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.705181][T12100] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 245.830269][T12106] team0: Caught tx_queue_len zero misconfig [ 245.895250][T12114] sctp: [Deprecated]: syz.1.1662 (pid 12114) Use of int in max_burst socket option. [ 245.895250][T12114] Use struct sctp_assoc_value instead [ 245.976025][T12116] __nla_validate_parse: 6 callbacks suppressed [ 245.976068][T12116] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1667'. [ 246.255407][T12140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.358552][T12146] syzkaller0: entered promiscuous mode [ 246.371928][T12146] syzkaller0: entered allmulticast mode [ 246.547147][T12159] syz.0.1680: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.568046][T12159] CPU: 1 UID: 0 PID: 12159 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 246.568089][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.568117][T12159] Call Trace: [ 246.568125][T12159] [ 246.568135][T12159] dump_stack_lvl+0x189/0x250 [ 246.568187][T12159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.568219][T12159] ? __pfx__printk+0x10/0x10 [ 246.568243][T12159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.568274][T12159] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 246.568307][T12159] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 246.568342][T12159] warn_alloc+0x214/0x310 [ 246.568385][T12159] ? __pfx_warn_alloc+0x10/0x10 [ 246.568430][T12159] ? __get_vm_area_node+0x28f/0x300 [ 246.568470][T12159] ? hash_ipportnet_create+0x358/0xfe0 [ 246.568504][T12159] __vmalloc_node_range_noprof+0x690/0x12d0 [ 246.568549][T12159] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 246.568601][T12159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 246.568632][T12159] ? hash_ipportnet_create+0x358/0xfe0 [ 246.568664][T12159] ? rcu_is_watching+0x15/0xb0 [ 246.568689][T12159] ? hash_ipportnet_create+0x358/0xfe0 [ 246.568720][T12159] __kvmalloc_node_noprof+0x674/0x910 [ 246.568752][T12159] ? hash_ipportnet_create+0x358/0xfe0 [ 246.568778][T12159] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 246.568808][T12159] ? hash_ipportnet_create+0x2fe/0xfe0 [ 246.568842][T12159] hash_ipportnet_create+0x358/0xfe0 [ 246.568879][T12159] ? __nla_parse+0x40/0x60 [ 246.568902][T12159] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 246.568932][T12159] ip_set_create+0xa97/0x1940 [ 246.568961][T12159] ? ip_set_create+0x4a2/0x1940 [ 246.569002][T12159] ? __pfx_ip_set_create+0x10/0x10 [ 246.569072][T12159] nfnetlink_rcv_msg+0xb4d/0x1130 [ 246.569102][T12159] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 246.569153][T12159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.569179][T12159] ? kasan_save_track+0x4f/0x80 [ 246.569266][T12159] netlink_rcv_skb+0x208/0x470 [ 246.569296][T12159] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.569324][T12159] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 246.569354][T12159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.569400][T12159] ? bpf_lsm_capable+0x9/0x20 [ 246.569425][T12159] ? security_capable+0x7e/0x2e0 [ 246.569468][T12159] nfnetlink_rcv+0x282/0x2590 [ 246.569499][T12159] ? __dev_queue_xmit+0x27b/0x3b50 [ 246.569524][T12159] ? __dev_queue_xmit+0x1d79/0x3b50 [ 246.569546][T12159] ? kasan_save_track+0x3e/0x80 [ 246.569572][T12159] ? __kasan_slab_alloc+0x6c/0x80 [ 246.569614][T12159] ? __dev_queue_xmit+0x27b/0x3b50 [ 246.569651][T12159] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 246.569679][T12159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 246.569719][T12159] ? ref_tracker_free+0x63a/0x7d0 [ 246.569739][T12159] ? __asan_memcpy+0x40/0x70 [ 246.569767][T12159] ? __pfx_ref_tracker_free+0x10/0x10 [ 246.569806][T12159] ? skb_clone+0x246/0x3a0 [ 246.569833][T12159] ? __netlink_deliver_tap+0x807/0x850 [ 246.569863][T12159] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.569903][T12159] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.569944][T12159] netlink_unicast+0x82f/0x9e0 [ 246.569984][T12159] ? __pfx_netlink_unicast+0x10/0x10 [ 246.570015][T12159] ? netlink_sendmsg+0x642/0xb30 [ 246.570032][T12159] ? skb_put+0x11b/0x210 [ 246.570055][T12159] netlink_sendmsg+0x805/0xb30 [ 246.570085][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.570122][T12159] ? aa_sock_msg_perm+0xf1/0x1d0 [ 246.570155][T12159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.570175][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.570209][T12159] __sock_sendmsg+0x21c/0x270 [ 246.570241][T12159] ____sys_sendmsg+0x505/0x830 [ 246.570269][T12159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.570302][T12159] ? import_iovec+0x74/0xa0 [ 246.570333][T12159] ___sys_sendmsg+0x21f/0x2a0 [ 246.570357][T12159] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.570422][T12159] ? __fget_files+0x2a/0x420 [ 246.570441][T12159] ? __fget_files+0x3a0/0x420 [ 246.570478][T12159] __x64_sys_sendmsg+0x19b/0x260 [ 246.570503][T12159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.570545][T12159] ? do_syscall_64+0xbe/0xfa0 [ 246.570578][T12159] do_syscall_64+0xfa/0xfa0 [ 246.570602][T12159] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.570628][T12159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.570648][T12159] ? clear_bhb_loop+0x60/0xb0 [ 246.570674][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.570694][T12159] RIP: 0033:0x7f158bd8efc9 [ 246.570719][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.570736][T12159] RSP: 002b:00007f1589ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.570758][T12159] RAX: ffffffffffffffda RBX: 00007f158bfe6180 RCX: 00007f158bd8efc9 [ 246.570773][T12159] RDX: 0000000000004020 RSI: 0000200000000040 RDI: 000000000000005f [ 246.570786][T12159] RBP: 00007f158be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 246.570799][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.570811][T12159] R13: 00007f158bfe6218 R14: 00007f158bfe6180 R15: 00007ffe09489db8 [ 246.570864][T12159] [ 246.570984][T12159] Mem-Info: [ 247.082359][T12159] active_anon:4469 inactive_anon:0 isolated_anon:0 [ 247.082359][T12159] active_file:2696 inactive_file:39925 isolated_file:0 [ 247.082359][T12159] unevictable:768 dirty:63 writeback:0 [ 247.082359][T12159] slab_reclaimable:11372 slab_unreclaimable:163467 [ 247.082359][T12159] mapped:29905 shmem:1354 pagetables:1040 [ 247.082359][T12159] sec_pagetables:0 bounce:0 [ 247.082359][T12159] kernel_misc_reclaimable:0 [ 247.082359][T12159] free:1261794 free_pcp:15072 free_cma:0 [ 247.202362][T12159] Node 0 active_anon:18052kB inactive_anon:0kB active_file:10784kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119756kB dirty:252kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13964kB pagetables:3900kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.240894][T12159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 247.273848][T12159] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.392330][T12159] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 247.398248][T12159] Node 0 DMA32 free:1141572kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17620kB inactive_anon:0kB active_file:10784kB inactive_file:159496kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2565180kB mlocked:0kB bounce:0kB free_pcp:42192kB local_pcp:20748kB free_cma:0kB [ 247.419060][T12183] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1685'. [ 247.463102][T12159] lowmem_reserve[]: 0 0 0 0 0 [ 247.469363][T12159] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.501078][T12159] lowmem_reserve[]: 0 0 0 0 0 [ 247.515118][T12159] Node 1 Normal free:3890672kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19904kB local_pcp:10208kB free_cma:0kB [ 247.562452][T12159] lowmem_reserve[]: 0 0 0 0 0 [ 247.567247][T12159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.632349][T12159] Node 0 DMA32: 1119*4kB (UME) 355*8kB (ME) 212*16kB (UM) 853*32kB (UME) 332*64kB (UM) 64*128kB (UME) 22*256kB (UME) 10*512kB (UM) 9*1024kB (UME) 3*2048kB (UM) 256*4096kB (M) = 1142132kB [ 247.721544][T12159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.735710][T12197] netlink: 'syz.1.1687': attribute type 23 has an invalid length. [ 247.762379][T12159] Node 1 Normal: 194*4kB (UE) 53*8kB (UME) 42*16kB (UME) 93*32kB (UME) 28*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890672kB [ 247.806307][T12159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.862390][T12159] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.872014][T12159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.881793][T12159] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.901263][T12159] 44922 total pagecache pages [ 247.917074][T12159] 0 pages in swap cache [ 247.927293][T12159] Free swap = 124996kB [ 247.937457][T12159] Total swap = 124996kB [ 247.947626][T12159] 2097051 pages RAM [ 247.951496][T12159] 0 pages HighMem/MovableOnly [ 247.982679][T12159] 424114 pages reserved [ 247.992450][T12159] 0 pages cma reserved [ 248.120748][T12209] syzkaller1: entered promiscuous mode [ 248.162275][T12209] syzkaller1: entered allmulticast mode [ 248.390618][T12217] netlink: 'syz.2.1693': attribute type 3 has an invalid length. [ 248.398651][T12217] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1693'. [ 248.511590][T12221] xt_NFQUEUE: number of total queues is 0 [ 248.534344][T12221] xt_NFQUEUE: number of total queues is 0 [ 250.042879][T12227] netlink: 'syz.3.1696': attribute type 5 has an invalid length. [ 250.202469][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1699'. [ 250.366516][T12249] veth1_to_bond: entered allmulticast mode [ 250.435560][T12242] lo speed is unknown, defaulting to 1000 [ 250.442292][T12249] veth1_to_bond: left allmulticast mode [ 250.463952][T12242] hsr0 speed is unknown, defaulting to 1000 [ 250.474799][T12242] lo speed is unknown, defaulting to 1000 [ 250.553790][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1703'. [ 250.582419][T12267] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 250.644117][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1704'. [ 250.668918][T12263] vlan2: entered allmulticast mode [ 250.684422][T12263] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 250.925548][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 250.999486][T12283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.077715][T12283] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 251.125585][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 251.138458][T12296] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1711'. [ 251.158535][T12283] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.187741][T12283] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 251.204930][T12283] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 251.279626][T12300] xt_cgroup: xt_cgroup: no path or classid specified [ 251.319862][T12300] netlink: 'syz.3.1713': attribute type 1 has an invalid length. [ 251.419503][T12312] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 251.432454][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1717'. [ 251.432702][T12304] bond10: (slave bridge9): making interface the new active one [ 251.456815][T12304] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 251.811620][T12336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 251.842152][T12337] netlink: 'syz.1.1722': attribute type 8 has an invalid length. [ 251.935064][T12325] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1721'. [ 252.196621][T12361] tipc: Enabling of bearer rejected, failed to enable media [ 252.364366][T12370] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 252.385488][T12370] netlink: zone id is out of range [ 252.759224][T12383] syz.3.1734 (12383) used greatest stack depth: 17832 bytes left [ 252.830352][T12400] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 253.029266][T12409] lo speed is unknown, defaulting to 1000 [ 253.119371][T12414] ipt_REJECT: TCP_RESET invalid for non-tcp [ 253.618038][T12444] netlink: 'syz.4.1752': attribute type 7 has an invalid length. [ 253.631918][T12444] wg1: entered promiscuous mode [ 253.638783][T12444] wg1: entered allmulticast mode [ 253.699106][T12451] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1751'. [ 253.916953][T12460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1757'. [ 253.990990][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 254.138069][T12471] netlink: 'syz.0.1759': attribute type 5 has an invalid length. [ 254.171711][T12468] sctp: [Deprecated]: syz.3.1758 (pid 12468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 254.171711][T12468] Use struct sctp_sack_info instead [ 254.186836][T12477] tipc: Enabled bearer , priority 0 [ 254.203032][T12477] syzkaller0: entered promiscuous mode [ 254.208568][T12477] syzkaller0: entered allmulticast mode [ 254.260188][T12477] tipc: Resetting bearer [ 254.285388][T12475] tipc: Resetting bearer [ 254.319399][T12475] tipc: Disabling bearer [ 254.369101][T12486] netlink: 'syz.2.1764': attribute type 33 has an invalid length. [ 254.717456][T12499] netlink: 'syz.2.1766': attribute type 27 has an invalid length. [ 254.734900][T12499] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 254.754688][T12499] netlink: 2819 bytes leftover after parsing attributes in process `syz.2.1766'. [ 255.440338][T12545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1777'. [ 256.515546][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 256.548590][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 256.731534][T12611] syzkaller0: entered promiscuous mode [ 256.743782][T12611] syzkaller0: entered allmulticast mode [ 256.746930][T12616] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 256.758431][T12610] tipc: Enabled bearer , priority 0 [ 256.765910][T12616] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 256.774487][T12616] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 256.785972][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1794'. [ 256.793458][T12616] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 256.804451][T12616] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 256.916370][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 256.927770][T12610] tipc: Resetting bearer [ 256.984285][T12610] tipc: Disabling bearer [ 258.015164][T12654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.121263][T12660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1808'. [ 258.491215][T12685] dvmrp1: entered allmulticast mode [ 258.697048][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 258.712907][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 258.835376][T12711] validate_nla: 60 callbacks suppressed [ 258.835396][T12711] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 258.849562][T12711] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 259.837253][T12719] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1824'. [ 259.882893][T12719] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.1824'. [ 260.120662][T12742] SET target dimension over the limit! [ 260.302496][T12757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'. [ 260.472667][T12764] sctp: [Deprecated]: syz.4.1833 (pid 12764) Use of int in max_burst socket option deprecated. [ 260.472667][T12764] Use struct sctp_assoc_value instead [ 260.554631][T12768] team0: Device gtp0 is of different type [ 260.928502][T12797] netlink: 'syz.2.1841': attribute type 1 has an invalid length. [ 260.929407][T12793] rose0: entered allmulticast mode [ 261.147984][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 261.238158][T12818] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 261.495178][T12831] vlan3: entered promiscuous mode [ 261.516830][T12831] bridge0: entered promiscuous mode [ 261.702928][T12840] netlink: 'syz.3.1856': attribute type 1 has an invalid length. [ 261.741706][T12843] __nla_validate_parse: 4 callbacks suppressed [ 261.741726][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1857'. [ 261.762954][T12840] 8021q: adding VLAN 0 to HW filter on device bond11 [ 261.780205][T12844] vlan3: entered promiscuous mode [ 261.787797][T12844] bond11: entered promiscuous mode [ 261.841160][T12844] vlan3: entered allmulticast mode [ 261.858890][T12844] bond11: entered allmulticast mode [ 261.887554][T12846] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1858'. [ 262.148137][T12859] netlink: 'syz.4.1864': attribute type 32 has an invalid length. [ 262.509422][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 262.595534][T12896] sctp: [Deprecated]: syz.4.1873 (pid 12896) Use of int in maxseg socket option. [ 262.595534][T12896] Use struct sctp_assoc_value instead [ 262.614530][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.636194][T12898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.652428][T12890] netlink: 'syz.4.1873': attribute type 1 has an invalid length. [ 262.682276][T12898] batadv0 (unregistering): left promiscuous mode [ 263.301840][T12936] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 263.348110][T12941] IPVS: rr: FWM 3 0x00000003 - no destination available [ 263.360270][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 263.432778][T12945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1885'. [ 263.448459][T12945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'. [ 263.479634][T12945] ip6t_srh: unknown srh invflags 4000 [ 263.782047][T12966] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 263.792125][T12966] delete_channel: no stack [ 263.801297][ T5894] IPVS: starting estimator thread 0... [ 263.903503][T12970] IPVS: using max 28 ests per chain, 67200 per kthread [ 263.971113][T12981] tipc: Enabled bearer , priority 2 [ 264.145353][T12992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 264.238459][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 264.261674][T12999] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1899'. [ 264.295910][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1900'. [ 264.308390][T13002] netlink: 50 bytes leftover after parsing attributes in process `syz.1.1900'. [ 264.339588][T13006] netlink: 'syz.2.1899': attribute type 30 has an invalid length. [ 264.414233][T13008] netlink: 'syz.1.1902': attribute type 29 has an invalid length. [ 264.662502][T13029] netlink: 'syz.2.1908': attribute type 32 has an invalid length. [ 264.964438][ T5894] tipc: Node number set to 357230415 [ 265.301587][T13065] netlink: 'syz.0.1915': attribute type 10 has an invalid length. [ 265.664806][T13083] netlink: 'syz.4.1922': attribute type 15 has an invalid length. [ 265.896584][T13096] syzkaller1: entered promiscuous mode [ 265.907316][T13096] syzkaller1: entered allmulticast mode [ 265.958217][T13103] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 265.977356][T13103] bond12 (unregistering): Released all slaves [ 266.059331][T13109] netlink: 'syz.4.1930': attribute type 10 has an invalid length. [ 266.060838][T13112] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 266.147396][T13112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.260741][T13124] bond8: (slave veth0_to_bond): making interface the new active one [ 266.302011][T13124] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 266.315690][T13129] netlink: 'syz.0.1935': attribute type 24 has an invalid length. [ 266.667954][T13148] syzkaller0: entered promiscuous mode [ 266.673678][T13148] syzkaller0: entered allmulticast mode [ 266.780088][T13157] __nla_validate_parse: 13 callbacks suppressed [ 266.780102][T13157] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1941'. [ 266.850011][T13164] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1944'. [ 266.901335][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1944'. [ 267.200859][T13192] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 267.215431][T13192] netlink: 'syz.4.1952': attribute type 1 has an invalid length. [ 267.791518][T13221] lo speed is unknown, defaulting to 1000 [ 267.813190][T13224] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1963'. [ 267.818457][T13221] hsr0 speed is unknown, defaulting to 1000 [ 267.835597][T13221] lo speed is unknown, defaulting to 1000 [ 267.860365][T13232] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1963'. [ 267.955708][T13228] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1964'. [ 268.098211][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 268.455460][T13260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1972'. [ 268.728870][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1977'. [ 269.238465][T13303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 269.273959][T13303] syzkaller0: entered promiscuous mode [ 269.279499][T13303] syzkaller0: entered allmulticast mode [ 269.355163][T13311] 8021q: VLANs not supported on lo [ 269.926074][T13356] validate_nla: 4 callbacks suppressed [ 269.926096][T13356] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 269.952737][T13358] vlan4: entered promiscuous mode [ 269.999434][T13356] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.069936][T13366] gre3: entered promiscuous mode [ 270.094852][T13366] gre3: entered allmulticast mode [ 270.144392][T13375] nftables ruleset with unbound chain [ 270.350895][T13383] bond5 (unregistering): Released all slaves [ 270.581938][T13405] netlink: 'syz.0.2011': attribute type 13 has an invalid length. [ 270.591080][T13405] veth0_macvtap: left promiscuous mode [ 270.600338][T13405] macvtap0: entered allmulticast mode [ 270.629893][T13405] macvtap0: refused to change device tx_queue_len [ 270.692751][T13402] delete_channel: no stack [ 270.911098][T13415] netlink: 'syz.3.2015': attribute type 29 has an invalid length. [ 270.929310][T13415] netlink: 'syz.3.2015': attribute type 29 has an invalid length. [ 270.951361][T13417] Bluetooth: hci1: too big key_count value 32778 [ 271.080493][T13426] netlink: 'syz.2.2019': attribute type 21 has an invalid length. [ 271.214568][T13438] tipc: New replicast peer: 255.255.255.255 [ 271.234164][T13438] tipc: Enabled bearer , priority 10 [ 271.338649][ T3438] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 271.828686][T13476] netlink: 'syz.0.2032': attribute type 13 has an invalid length. [ 271.889896][T13477] IPVS: set_ctl: invalid protocol: 50 172.20.20.28:20003 [ 272.262581][ T5894] tipc: Node number set to 794876717 [ 272.838237][T11226] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 273.089136][T13547] __nla_validate_parse: 6 callbacks suppressed [ 273.089156][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 273.119296][T13549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2054'. [ 273.259162][T13563] xt_hashlimit: overflow, rate too high: 0 [ 273.428920][T13566] tipc: Trying to set illegal importance in message [ 273.489713][T13567] netlink: zone id is out of range [ 274.364633][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 274.370121][T13604] delete_channel: no stack [ 274.375120][T13598] netlink: 'syz.1.2067': attribute type 13 has an invalid length. [ 274.398611][T13601] x_tables: duplicate underflow at hook 1 [ 274.448183][T13598] gretap0: refused to change device tx_queue_len [ 274.484370][T13598] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 274.558289][T13615] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2072'. [ 274.581949][T13611] syzkaller1: entered promiscuous mode [ 274.642620][T13611] syzkaller1: entered allmulticast mode [ 274.819883][T13637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 274.850816][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2079'. [ 274.860835][T13640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2079'. [ 275.045025][T13654] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 275.164515][T13654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 275.227268][T13661] 8021q: adding VLAN 0 to HW filter on device bond10 [ 275.262567][T13654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2083'. [ 275.272379][T13661] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 275.285583][T13661] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 275.576694][T13667] veth7: entered promiscuous mode [ 275.587734][T13667] bond10: (slave veth7): Enslaving as an active interface with a down link [ 275.600169][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'. [ 275.626335][T13672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2085'. [ 275.643489][T13654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 275.955154][T13715] netlink: 'syz.0.2101': attribute type 1 has an invalid length. [ 276.022808][T13715] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 276.061259][T13715] veth9: entered promiscuous mode [ 276.073761][T13715] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 276.105972][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 276.478859][T13738] netlink: 'syz.2.2107': attribute type 10 has an invalid length. [ 276.488082][T13738] bond0: (slave wlan1): Opening slave failed [ 276.646557][T13747] netlink: 'syz.0.2108': attribute type 5 has an invalid length. [ 277.274095][T13793] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.510958][T13806] syzkaller0: refused to change device tx_queue_len [ 277.588578][T13809] ip6tnl0: Caught tx_queue_len zero misconfig [ 277.854622][T13825] syzkaller1: entered promiscuous mode [ 277.860173][T13825] syzkaller1: entered allmulticast mode [ 278.378372][T13852] __nla_validate_parse: 2 callbacks suppressed [ 278.378394][T13852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2135'. [ 278.408510][T13854] netlink: 'syz.4.2137': attribute type 10 has an invalid length. [ 278.414938][T13852] IPVS: Unknown mcast interface: vcan0 [ 278.418653][T13856] netlink: 'syz.4.2137': attribute type 10 has an invalid length. [ 278.568806][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2138'. [ 278.598496][T13868] syzkaller1: entered promiscuous mode [ 278.631151][T13868] syzkaller1: entered allmulticast mode [ 278.637595][T13865] sctp: Trying to GSO but underlying device doesn't support it. [ 278.902407][T13885] openvswitch: netlink: EtherType 53b is less than min 600 [ 279.270559][T13916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.393833][ T5839] Bluetooth: hci4: link tx timeout [ 279.401332][ T5839] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 279.858817][T13921] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2154'. [ 279.868352][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 279.989961][T13948] xt_hashlimit: size too large, truncated to 1048576 [ 280.010893][T13950] sctp: [Deprecated]: syz.4.2159 (pid 13950) Use of int in max_burst socket option. [ 280.010893][T13950] Use struct sctp_assoc_value instead [ 280.425560][T13973] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 280.535167][T13981] tipc: Enabling of bearer rejected, failed to enable media [ 280.720573][T13998] C: entered allmulticast mode [ 280.737506][T13998] C: left allmulticast mode [ 280.748319][T13998] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2170'. [ 280.861940][T14008] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2173'. [ 280.878610][T14008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2173'. [ 281.160311][T14020] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.203970][T14024] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 281.279460][T14024] bond6: entered promiscuous mode [ 281.302862][T14024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.348665][T14028] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.363196][T14028] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 281.374092][T14028] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 281.404198][T14028] bond6: (slave gre1): making interface the new active one [ 281.412049][T14028] gre1: entered promiscuous mode [ 281.421179][T14028] bond6: (slave gre1): Enslaving as an active interface with an up link [ 281.436473][T14038] xt_l2tp: missing protocol rule (udp|l2tpip) [ 281.475521][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 281.553466][T14026] syzkaller0: entered allmulticast mode [ 283.321786][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2191'. [ 283.648713][T14086] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 283.890377][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2204'. [ 283.900192][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2202'. [ 283.961778][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 284.158156][T14126] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2207'. [ 284.208256][T14128] pim6reg1: entered promiscuous mode [ 284.214720][T14128] pim6reg1: entered allmulticast mode [ 284.291963][T14132] vlan1: entered promiscuous mode [ 284.301572][T14132] vlan1: entered allmulticast mode [ 284.307991][T14132] hsr_slave_1: entered allmulticast mode [ 284.325794][T14132] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2210'. [ 284.471554][T14139] macvtap1: entered promiscuous mode [ 284.479634][T14139] vlan0: entered promiscuous mode [ 284.486960][T14142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.494822][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2215'. [ 284.496430][T14139] bond9: entered promiscuous mode [ 284.514590][T14139] macvtap1: entered allmulticast mode [ 284.695219][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.704556][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 284.722070][ T8879] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 284.846333][T14167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.976185][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2224'. [ 285.174728][T14183] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2227'. [ 285.499383][T14167] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 286.008854][T14227] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 286.100308][T14232] C: renamed from team_slave_0 [ 286.144391][T14232] netlink: 'syz.4.2239': attribute type 1 has an invalid length. [ 286.172111][T14232] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 286.270392][T14236] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 286.737514][T14274] rdma_op ffff8880587cf9f0 conn xmit_rdma 0000000000000000 [ 286.926534][T14287] delete_channel: no stack [ 286.979053][T14285] netdevsim netdevsim0: Direct firmware load for /. failed with error -2 [ 286.992909][T14285] netdevsim netdevsim0: Falling back to sysfs fallback for: /. [ 287.545466][T14329] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 287.587410][T14329] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 287.613201][T14329] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 287.628300][T14327] netlink: 'syz.1.2266': attribute type 6 has an invalid length. [ 287.650592][T14327] netlink: 'syz.1.2266': attribute type 2 has an invalid length. [ 287.663036][T14333] bond9: (slave gretap2): making interface the new active one [ 287.671571][T14333] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 287.693601][T14333] macvlan3: entered promiscuous mode [ 287.699073][T14333] macvlan3: entered allmulticast mode [ 287.705842][T14333] bond9: entered promiscuous mode [ 287.711048][T14333] gretap2: entered promiscuous mode [ 287.719577][T14333] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 287.732143][T14333] bond9: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 287.770356][T14333] bond9: left promiscuous mode [ 287.783575][T14333] gretap2: left promiscuous mode [ 288.249261][T14373] ksmbd: Unknown IPC event: 3, ignore. [ 288.499724][T14391] xt_hashlimit: overflow, try lower: 3/0 [ 288.540126][T14388] bond10: entered promiscuous mode [ 288.554608][T14391] IPVS: Unknown mcast interface: vcan0 [ 288.621420][T14388] netlink: 'syz.2.2282': attribute type 10 has an invalid length. [ 288.631059][T14392] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 288.646449][T14392] bond10: (slave macvlan3): making interface the new active one [ 288.660325][T14392] macvlan3: entered promiscuous mode [ 288.666265][T14392] bond0: entered promiscuous mode [ 288.699116][T14392] bond_slave_0: entered promiscuous mode [ 288.712448][T14392] bond_slave_1: entered promiscuous mode [ 288.714158][T14400] openvswitch: netlink: Missing key (keys=40, expected=80) [ 288.738673][T14392] bond10: (slave macvlan3): Enslaving as an active interface with an up link [ 289.180984][T14434] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 289.229505][T14440] SET target dimension over the limit! [ 289.235933][T14440] __nla_validate_parse: 15 callbacks suppressed [ 289.235954][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 289.273310][T14440] vlan1: entered promiscuous mode [ 289.278549][T14440] bridge0: entered promiscuous mode [ 289.654461][T14455] tunl0: entered promiscuous mode [ 289.663496][T14455] netlink: 'syz.1.2299': attribute type 3 has an invalid length. [ 289.671503][T14455] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2299'. [ 289.818980][T14473] team0: Port device dummy0 removed [ 289.832687][T14473] bridge_slave_0: left allmulticast mode [ 289.839487][T14473] bridge_slave_0: left promiscuous mode [ 289.845822][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.858002][T14473] bridge_slave_1: left allmulticast mode [ 289.909946][T14473] bridge_slave_1: left promiscuous mode [ 289.932883][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.950544][T14484] netlink: 'syz.4.2307': attribute type 10 has an invalid length. [ 289.974595][T14473] bond8: (slave veth0_to_bond): Releasing active interface [ 289.988899][T14473] bond0: (slave bond_slave_0): Releasing backup interface [ 290.001822][T14473] bond0: (slave bond_slave_1): Releasing backup interface [ 290.040012][T14473] team0: Port device team_slave_0 removed [ 290.043864][T14491] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2304'. [ 290.061122][T14473] team0: Port device team_slave_1 removed [ 290.069496][T14473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.078936][T14473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.090238][T14473] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.149586][T14476] vcan0: entered promiscuous mode [ 290.864386][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2321'. [ 290.975318][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 291.027240][T14551] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 291.075475][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2324'. [ 291.141002][T14564] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 291.195637][T14564] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.207477][T14564] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 291.265574][T14567] bond7: (slave gretap3): making interface the new active one [ 291.275177][T14567] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 291.374800][T14574] tipc: Enabling of bearer rejected, failed to enable media [ 291.650215][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 291.746513][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 291.770474][T14599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2332'. [ 291.869438][T14603] IPVS: set_ctl: invalid protocol: 48103 10.1.1.1:20004 [ 292.151432][T14619] netlink: 'syz.0.2338': attribute type 3 has an invalid length. [ 292.159743][T14619] netlink: 'syz.0.2338': attribute type 3 has an invalid length. [ 292.168160][T14622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2340'. [ 292.479365][T14642] bond13: entered promiscuous mode [ 292.485059][T14642] bond13: entered allmulticast mode [ 292.491896][T14642] 8021q: adding VLAN 0 to HW filter on device bond13 [ 292.551807][T14645] 8021q: adding VLAN 0 to HW filter on device bond9 [ 292.564855][T14645] bond0: (slave bond9): Enslaving as an active interface with an up link [ 292.591127][T14637] lo speed is unknown, defaulting to 1000 [ 292.621639][T14637] hsr0 speed is unknown, defaulting to 1000 [ 292.632785][T14637] lo speed is unknown, defaulting to 1000 [ 292.673992][T14652] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 292.703796][T14652] netlink: 'syz.3.2348': attribute type 2 has an invalid length. [ 292.711611][T14652] netlink: 'syz.3.2348': attribute type 1 has an invalid length. [ 292.731845][T14652] vxcan2: entered allmulticast mode [ 293.073804][T14678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.460129][T14688] syzkaller0: entered promiscuous mode [ 293.467813][T14688] syzkaller0: entered allmulticast mode [ 293.968418][T14697] gre0: left promiscuous mode [ 294.304333][T14697] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.312090][T14697] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.438619][T14697] batadv_slave_0: left promiscuous mode [ 294.450122][T14697] batadv_slave_0: left allmulticast mode [ 294.521982][T14697] macvtap0: left allmulticast mode [ 294.528370][T14697] macsec0: left promiscuous mode [ 294.533787][T14697] macsec0: left allmulticast mode [ 294.559983][T14697] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 294.584105][T14697] bond1: left promiscuous mode [ 294.594433][T14697] gretap2: left promiscuous mode [ 294.599623][T14697] gretap2: left allmulticast mode [ 294.610377][T14697] team0: left promiscuous mode [ 294.616152][T14697] team0: left allmulticast mode [ 294.665260][T14697] veth9: left promiscuous mode [ 294.673275][T14697] bond6: left promiscuous mode [ 294.678350][T14697] gre1: left promiscuous mode [ 294.700774][T14706] tipc: Enabling of bearer rejected, failed to enable media [ 294.744403][ T8879] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.796813][ T8879] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.831323][ T8879] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.854553][ T8879] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.934389][T14735] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 294.943144][T14736] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 294.951167][T14736] __nla_validate_parse: 2 callbacks suppressed [ 294.951186][T14736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 294.970975][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 295.337479][T14766] xt_TCPMSS: Only works on TCP SYN packets [ 295.366670][T14766] syzkaller0: entered promiscuous mode [ 295.372907][T14766] syzkaller0: entered allmulticast mode [ 295.607430][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2384'. [ 296.356614][T14808] IPv6: sit4: Disabled Multicast RS [ 296.393744][T14808] sit4: entered allmulticast mode [ 296.438697][T14823] delete_channel: no stack [ 296.540737][T14826] veth0_to_bond: entered allmulticast mode [ 296.943076][T14850] vlan2: entered promiscuous mode [ 296.952559][T14850] bridge0: entered promiscuous mode [ 297.017929][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'. [ 297.140109][T14861] netlink: 'syz.3.2407': attribute type 12 has an invalid length. [ 297.198246][T14861] bond14: option primary_reselect: invalid value (255) [ 297.215367][T14861] bond14 (unregistering): Released all slaves [ 297.337809][T14867] sctp: [Deprecated]: syz.1.2409 (pid 14867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.337809][T14867] Use struct sctp_sack_info instead [ 297.382014][T14868] nbd: device at index 4 is going down [ 297.388414][T14868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.401745][T14867] sctp: [Deprecated]: syz.1.2409 (pid 14867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.401745][T14867] Use struct sctp_sack_info instead [ 297.619303][T14881] tipc: Enabled bearer , priority 0 [ 297.630520][T14881] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2417'. [ 297.666934][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2418'. [ 297.700136][T14880] tipc: Disabling bearer [ 297.802904][T14895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 297.997874][T14906] nbd: couldn't find a device at index 0 [ 298.019393][T14908] block nbd1: Unsupported socket: should be TCP or UNIX. [ 298.177111][T14923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 298.614008][T14938] can: request_module (can-proto-5) failed. [ 299.025623][T14972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2444'. [ 299.061764][T14977] netlink: 'syz.2.2442': attribute type 4 has an invalid length. [ 299.104940][T14972] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2444'. [ 299.234567][T14985] netlink: 'syz.0.2447': attribute type 1 has an invalid length. [ 299.520193][T15001] Set syz1 is full, maxelem 65536 reached [ 299.868926][T14985] 8021q: adding VLAN 0 to HW filter on device bond8 [ 300.389824][T14994] bond8: (slave geneve2): making interface the new active one [ 300.398967][T14994] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 300.409154][T15002] __nla_validate_parse: 1 callbacks suppressed [ 300.409176][T15002] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2452'. [ 300.424969][T15002] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2452'. [ 300.439265][T11225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 300.458236][T11225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 300.490407][T11225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 300.503996][T11225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 300.682466][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'. [ 300.682466][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2456'. [ 300.781353][T15034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2463'. [ 300.896895][ T3438] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 301.573420][T15063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.589831][T15064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.855125][T15076] tipc: Enabled bearer , priority 0 [ 301.966593][T15076] syzkaller0: entered promiscuous mode [ 301.984099][T15076] syzkaller0: entered allmulticast mode [ 302.093325][T15095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2477'. [ 302.972456][ T5921] tipc: Node number set to 2406909349 [ 303.155068][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2483'. [ 303.611292][T15122] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 303.633251][T15078] tipc: Resetting bearer [ 303.641936][T15122] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 303.672369][T15122] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 303.687464][T15078] tipc: Disabling bearer [ 303.851763][T15136] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 303.897172][T15136] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 304.133353][T15157] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 304.302741][T15166] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2498'. [ 304.570756][T15184] tipc: Enabled bearer , priority 0 [ 304.598280][T15183] tipc: Enabling of bearer rejected, already enabled [ 304.625036][T15184] syzkaller0: entered promiscuous mode [ 304.653637][T15184] syzkaller0: entered allmulticast mode [ 304.672680][T15188] netlink: 'syz.1.2505': attribute type 1 has an invalid length. [ 304.735572][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 304.747627][T15183] sch_tbf: burst 206 is lower than device syzkaller0 mtu (1514) ! [ 304.790264][T15195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 305.542724][T15184] tipc: Resetting bearer [ 305.635219][T15184] tipc: Resetting bearer [ 305.704793][T15184] tipc: Disabling bearer [ 305.778085][T15217] tipc: Enabled bearer , priority 10 [ 305.853945][T15221] netlink: 'syz.0.2516': attribute type 1 has an invalid length. [ 305.906313][T15221] netlink: 'syz.0.2516': attribute type 3 has an invalid length. [ 305.961056][T15221] __nla_validate_parse: 1 callbacks suppressed [ 305.961078][T15221] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2516'. [ 306.019365][T15237] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2521'. [ 306.042972][T15221] NCSI netlink: No device for ifindex 813332851 [ 306.101974][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'. [ 306.411116][T15261] netlink: 'syz.2.2530': attribute type 2 has an invalid length. [ 306.434429][T15261] 9: entered promiscuous mode [ 306.450258][T15259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2527'. [ 306.755549][T15281] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2535'. [ 306.813921][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 306.841250][T15288] gtp0: entered promiscuous mode [ 306.869434][T15288] gtp0: entered allmulticast mode [ 306.892375][ T983] tipc: Node number set to 9375776 [ 307.036218][T15297] nbd: couldn't find device at index 0 [ 307.150138][T15308] tipc: Enabled bearer , priority 0 [ 307.157943][T15308] syzkaller0: entered promiscuous mode [ 307.165494][T15308] syzkaller0: entered allmulticast mode [ 307.299978][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2544'. [ 307.525290][T15305] team0 (unregistering): Port device team_slave_0 removed [ 307.550752][T15305] team0 (unregistering): Port device team_slave_1 removed [ 307.626768][T15325] tipc: Resetting bearer [ 307.644546][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2547'. [ 307.669211][T15307] tipc: Resetting bearer [ 307.761539][T15307] tipc: Disabling bearer [ 307.821457][T15344] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2548'. [ 308.089947][T15362] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2557'. [ 308.199884][T15365] vlan2: entered promiscuous mode [ 308.213582][T15365] vlan2: entered allmulticast mode [ 308.225103][T15365] hsr_slave_1: entered allmulticast mode [ 309.004730][T15415] netlink: 'syz.4.2572': attribute type 1 has an invalid length. [ 309.024906][T15415] netlink: 'syz.4.2572': attribute type 11 has an invalid length. [ 309.177042][T15424] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.485737][T15452] openvswitch: netlink: IP tunnel dst address not specified [ 309.508237][T15453] openvswitch: netlink: IP tunnel dst address not specified [ 309.786266][T15471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.856385][T15478] netlink: 'syz.4.2593': attribute type 32 has an invalid length. [ 309.939696][T15478] bond11: Setting coupled_control to off (0) [ 310.680136][T15540] --map-set only usable from mangle table [ 310.858588][T15547] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 311.032573][T15566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.292835][T15578] netlink: 'syz.0.2619': attribute type 10 has an invalid length. [ 311.299787][T15579] tipc: Enabled bearer , priority 0 [ 311.331581][T15578] bond0: (slave wlan1): Opening slave failed [ 311.456639][T15568] tipc: Resetting bearer [ 311.467895][T15590] __nla_validate_parse: 13 callbacks suppressed [ 311.467915][T15590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2622'. [ 311.539033][T15568] tipc: Disabling bearer [ 311.618261][T15590] netlink: 'syz.2.2622': attribute type 62 has an invalid length. [ 311.802950][T15600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 311.811828][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2628'. [ 311.959616][T15621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 312.010934][T15624] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 312.058129][T15627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2631'. [ 312.432119][T15609] veth1_vlan: left allmulticast mode [ 312.773617][T15609] bond0: left promiscuous mode [ 312.778623][T15609] bond_slave_0: left promiscuous mode [ 312.785065][T15609] bond_slave_1: left promiscuous mode [ 312.826033][T15620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.842108][T15620] bond1: (slave macvlan2): making interface the new active one [ 312.877067][T15620] macvlan2: entered promiscuous mode [ 312.902268][T15620] bond0: entered promiscuous mode [ 312.917663][T15620] bond9: entered promiscuous mode [ 312.931893][T15620] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 313.040297][T15624] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.057791][ T3438] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.104062][ T3438] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.114083][ T3438] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.169293][ T3438] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.209238][ T3438] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.229458][ T3438] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.269390][ T3438] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.297622][ T3438] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.322308][ T3438] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.341658][ T3438] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.361351][T15666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2635'. [ 313.377374][ T3438] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.396832][ T3438] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 313.869207][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2646'. [ 313.883868][T15697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 313.936249][T15701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2650'. [ 314.024331][T15703] bond10: entered promiscuous mode [ 314.046618][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 314.155696][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'. [ 314.668248][T15757] netlink: 'syz.4.2663': attribute type 16 has an invalid length. [ 314.712866][T15759] openvswitch: netlink: IP tunnel dst address not specified [ 314.866643][T15767] syz.3.2668 uses old SIOCAX25GETINFO [ 314.880807][T15767] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 314.907399][T15767] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.066874][T15775] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 315.154883][T15776] bond14 (unregistering): Released all slaves [ 315.491119][T15786] netlink: 'syz.3.2673': attribute type 3 has an invalid length. [ 315.611464][T15793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.816265][T15799] netlink: 'syz.1.2677': attribute type 10 has an invalid length. [ 315.842531][T15799] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 315.873019][T15799] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.555489][T15842] __nla_validate_parse: 8 callbacks suppressed [ 316.555510][T15842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 316.571235][T15842] block nbd1: Unsupported socket: should be TCP or UNIX. [ 316.648218][T15847] xt_limit: Overflow, try lower: 271964/0 [ 316.914470][T15866] netlink: 'syz.3.2698': attribute type 4 has an invalid length. [ 316.996198][T15870] netlink: 'syz.2.2700': attribute type 3 has an invalid length. [ 317.005155][T15870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2700'. [ 317.026381][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 317.061442][T15873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2701'. [ 317.081007][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2701'. [ 317.134329][T15873] gretap4: entered promiscuous mode [ 317.139610][T15873] gretap4: entered allmulticast mode [ 317.267559][T15886] bond11: invalid ARP target 0.0.0.0 specified for addition [ 317.275378][T15886] bond11: option arp_ip_target: invalid value (0) [ 317.284059][T15886] bond11 (unregistering): Released all slaves [ 317.600880][T15902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2710'. [ 317.610533][T15902] ip6gre0: Caught tx_queue_len zero misconfig [ 317.613260][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 317.652122][T15903] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2709'. [ 317.853660][T15914] lo speed is unknown, defaulting to 1000 [ 317.861499][T15914] hsr0 speed is unknown, defaulting to 1000 [ 317.870259][T15914] lo speed is unknown, defaulting to 1000 [ 317.956380][T15920] netlink: 'syz.4.2716': attribute type 13 has an invalid length. [ 317.983189][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 318.033054][T11226] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.041569][T15920] netlink: 'syz.4.2716': attribute type 13 has an invalid length. [ 318.051583][T11226] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.070794][T11226] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.079972][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 318.093269][T11226] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.401924][T15947] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 318.476661][ T3438] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.487406][ T3438] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.509569][T15947] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 318.519221][ T3438] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.572958][ T3438] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.039788][T15978] xt_CT: No such helper "syz1" [ 319.595728][T16004] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 319.707808][T16004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 319.871186][T16004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 320.004662][T16004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 320.084757][T16004] bond0: (slave netdevsim0): Releasing backup interface [ 320.117082][T16004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 320.227225][ T8879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.282275][ T8879] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 320.329882][T16049] [ 320.332268][T16049] ============================================ [ 320.338439][T16049] WARNING: possible recursive locking detected [ 320.344623][T16049] syzkaller #0 Not tainted [ 320.349069][T16049] -------------------------------------------- [ 320.355240][T16049] syz.3.2755/16049 is trying to acquire lock: [ 320.361402][T16049] ffff88807c6c4d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 320.372403][T16049] [ 320.372403][T16049] but task is already holding lock: [ 320.379783][T16049] ffff88807c6c4d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 320.389667][T16049] and the lock comparison function returns 0: [ 320.395745][T16049] [ 320.395745][T16049] other info that might help us debug this: [ 320.403815][T16049] Possible unsafe locking scenario: [ 320.403815][T16049] [ 320.411288][T16049] CPU0 [ 320.414574][T16049] ---- [ 320.417857][T16049] lock(&dev_instance_lock_key#20); [ 320.423170][T16049] lock(&dev_instance_lock_key#20); [ 320.428479][T16049] [ 320.428479][T16049] *** DEADLOCK *** [ 320.428479][T16049] [ 320.436627][T16049] May be due to missing lock nesting notation [ 320.436627][T16049] [ 320.444956][T16049] 2 locks held by syz.3.2755/16049: [ 320.450152][T16049] #0: ffffffff8f2cb0c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 320.459151][T16049] #1: ffff88807c6c4d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 320.469444][T16049] [ 320.469444][T16049] stack backtrace: [ 320.475354][T16049] CPU: 0 UID: 0 PID: 16049 Comm: syz.3.2755 Not tainted syzkaller #0 PREEMPT(full) [ 320.475377][T16049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 320.475390][T16049] Call Trace: [ 320.475399][T16049] [ 320.475407][T16049] dump_stack_lvl+0x189/0x250 [ 320.475439][T16049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.475463][T16049] ? __pfx__printk+0x10/0x10 [ 320.475482][T16049] ? print_lock_name+0xde/0x100 [ 320.475501][T16049] print_deadlock_bug+0x28b/0x2a0 [ 320.475523][T16049] validate_chain+0x1a3f/0x2140 [ 320.475555][T16049] __lock_acquire+0xab9/0xd20 [ 320.475576][T16049] ? __netdev_update_features+0xcb1/0x1be0 [ 320.475595][T16049] lock_acquire+0x120/0x360 [ 320.475611][T16049] ? __netdev_update_features+0xcb1/0x1be0 [ 320.475636][T16049] __mutex_lock+0x187/0x1350 [ 320.475660][T16049] ? __netdev_update_features+0xcb1/0x1be0 [ 320.475679][T16049] ? stack_trace_save+0x9c/0xe0 [ 320.475702][T16049] ? __pfx_stack_trace_save+0x10/0x10 [ 320.475726][T16049] ? stack_depot_save_flags+0x40/0x860 [ 320.475754][T16049] ? __netdev_update_features+0xcb1/0x1be0 [ 320.475775][T16049] ? __pfx___mutex_lock+0x10/0x10 [ 320.475799][T16049] ? bond_fix_features+0x191/0x1d0 [ 320.475836][T16049] __netdev_update_features+0xcb1/0x1be0 [ 320.475862][T16049] ? __pfx___netdev_update_features+0x10/0x10 [ 320.475883][T16049] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 320.475904][T16049] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.475929][T16049] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 320.475957][T16049] ? __wake_up_common_lock+0x190/0x1f0 [ 320.475984][T16049] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 320.476010][T16049] ? consume_skb+0xce/0xf0 [ 320.476025][T16049] ? netlink_broadcast_filtered+0xf55/0x1000 [ 320.476054][T16049] netdev_change_features+0x72/0xd0 [ 320.476073][T16049] ? __pfx_netdev_change_features+0x10/0x10 [ 320.476095][T16049] ? netif_set_tso_max_size+0x10e/0x1d0 [ 320.476124][T16049] bond_compute_features+0x615/0x680 [ 320.476153][T16049] ? __pfx_bond_compute_features+0x10/0x10 [ 320.476183][T16049] bond_netdev_event+0x72e/0xe80 [ 320.476206][T16049] ? __pfx_bond_netdev_event+0x10/0x10 [ 320.476246][T16049] ? inetdev_event+0x464/0x15b0 [ 320.476272][T16049] ? igmp_netdev_event+0x7c/0x770 [ 320.476299][T16049] notifier_call_chain+0x1b6/0x3e0 [ 320.476324][T16049] netdev_features_change+0x85/0xc0 [ 320.476349][T16049] ? __pfx_netdev_features_change+0x10/0x10 [ 320.476373][T16049] ? security_capable+0x7e/0x2e0 [ 320.476399][T16049] dev_ethtool+0x1541/0x19c0 [ 320.476425][T16049] ? __pfx_dev_ethtool+0x10/0x10 [ 320.476450][T16049] ? dev_load+0x21/0x1f0 [ 320.476474][T16049] dev_ioctl+0x392/0x1150 [ 320.476500][T16049] sock_do_ioctl+0x22c/0x300 [ 320.476523][T16049] ? __pfx_sock_do_ioctl+0x10/0x10 [ 320.476552][T16049] sock_ioctl+0x576/0x790 [ 320.476575][T16049] ? __pfx_sock_ioctl+0x10/0x10 [ 320.476597][T16049] ? __fget_files+0x3a0/0x420 [ 320.476612][T16049] ? __fget_files+0x2a/0x420 [ 320.476629][T16049] ? bpf_lsm_file_ioctl+0x9/0x20 [ 320.476650][T16049] ? __pfx_sock_ioctl+0x10/0x10 [ 320.476670][T16049] __se_sys_ioctl+0xfc/0x170 [ 320.476693][T16049] do_syscall_64+0xfa/0xfa0 [ 320.476715][T16049] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.476737][T16049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.476754][T16049] ? clear_bhb_loop+0x60/0xb0 [ 320.476774][T16049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.476791][T16049] RIP: 0033:0x7f4a0158efc9 [ 320.476809][T16049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.476831][T16049] RSP: 002b:00007f4a024be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.476850][T16049] RAX: ffffffffffffffda RBX: 00007f4a017e5fa0 RCX: 00007f4a0158efc9 [ 320.476864][T16049] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003 [ 320.476876][T16049] RBP: 00007f4a01611f91 R08: 0000000000000000 R09: 0000000000000000 [ 320.476888][T16049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.476898][T16049] R13: 00007f4a017e6038 R14: 00007f4a017e5fa0 R15: 00007fff814f5f88 [ 320.476921][T16049] [ 320.892395][T16053] netlink: zone id is out of range [ 320.897574][T16053] netlink: zone id is out of range [ 320.903202][T16053] netlink: zone id is out of range [ 320.908375][T16053] netlink: get zone limit has 4 unknown bytes [ 322.583759][ T1298] aoe: packet could not be sent on bond0. consider increasing tx_queue_len