last executing test programs: 10.984228713s ago: executing program 3 (id=9722): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000019af2051f650ba900000000000000000000e344dfaa00000006b6a71de8a6d766d26a70b6d05312e63e59c4693092d939f98d24e2d0355719670e5f91626822bb759a5d6025ecca557b5b7bde890615743dcb174620c1cf9a1a3662fd910f9e72c25bcb4549e701c462b5267ae1cf731906771f411ba04b54e9897f17b68371"], 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x8000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) 10.880900625s ago: executing program 3 (id=9724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000e4000071109b00000000009500"], 0x0, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000e4000071109b00000000009500"], 0x0, 0x5}, 0x94) socket$inet(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10.632788722s ago: executing program 3 (id=9729): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="6aab3fab370a273ff3251142482bb9423db6f53e43a4d90e19ea1be93fc26b1f28c6dad9790ae9c4038fc5a79fd7e8bb822291d9b9bcc5fb6c708fb9b0374f461dc8ef62d29bcc26490cddcfda3c32b763576a7c", 0x54}, {&(0x7f0000000080)="37d0dde1c8b3b4a46b3cfcb3e6ec0c617f08e2e10106e06169628067f97204228cc79773a312249b49b0b76c12fc4bac440cc881f98cf2abe151929ee42c68cca37c3070af936a7e3abbfa75d1f2f056501db4eb3652271f066c420c7c6b4d2be46e0079edb618f7eced1f653600067889e6c8dc1bd01bf7a812e7f9b6a26c280467b38105fc7d5aaf840d0ddfc0984d3eed7184d936c6ef84684b0129871c9a0ea39d087f481f78afaae9e2b93373026dec95365ab6cd0086a7b212f5ae72dfce216c99647834ea7504cf5041d08a9912c3c16834891601d15066", 0xdb}, {&(0x7f0000000180)="e84c9726b08ff472881133dc9e7b8970b1c546fd64eb997211818689b984f729fec8520e36b90068532bda69a841ff95a498e31c95e3a806e77fbc6e39ab85dc44dbc73d946bc130a67661c487680aa8c032b9d27bc3e0dbc955e052c54691cd8eb6abb7fa1d1609c79b84ada545029d0f6287a8feb0ad78687b0e64114f8cbe90e5ac477f81f17ad79a09e060d0cfee60d75990c758cee554e87de2c0fef2f10c721831f2eda4d8e024934a9b7d8533558f8e28fd630f", 0xb7}, {&(0x7f0000000240)="2fc62f912c59560f9f797077395669372d9ab9a60125625a65148020adf2ecc3424d34cd0e3ff05d0d71e8a6053a310d592dcce586b4c5717b24d194dc57635649bafe577f0124b219126631a557e39488032603ebd1163949f184a4b30fd35d7983476861e53a099d6db593c9b1b165eb31c964bb02503dbb781f78022c229568915fe785a46fb3b1cd387f236a7207a88349132490c509df56023b0b991961f884556121c66ebb9e2a", 0xaa}, {&(0x7f0000000300)="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", 0x1000}], 0x5, 0x0, 0x0, 0x20000000}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESHEX=r0, @ANYBLOB="02e2c11500"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x366}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0b8293acaac4"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 10.240188603s ago: executing program 3 (id=9732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3160}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb14}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="872308", 0x3}], 0x1, 0x0, 0x0, 0x8800}, 0x800) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r1, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000300)={0x0, 0x2}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r7, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f0000000580)={0x7fff, 0x8, 0x7, 0xad, 0x9, 0x0, 0x10001}) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0x148, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in6=@loopback, @in=@broadcast, @in6=@remote, 0x6c, 0x0, 0x0, 0x3504, 0xa}]}]}, 0x148}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10.13930798s ago: executing program 3 (id=9734): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x1, 0x10, 0x1c4}]}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xd5e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x1, 0x0) (async, rerun: 32) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) (async) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async, rerun: 32) sendmmsg$inet6(r6, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) (rerun: 32) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)={0x114, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @rand_addr=0x64010101, @loopback, @multicast2]}]}}}}}}}, 0x0) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x20, 0x29, 0x10f}, 0x20}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r7, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 9.904624734s ago: executing program 3 (id=9738): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0) accept$unix(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000640)={r1, &(0x7f0000000540)='\x02\x00', 0x200680, &(0x7f0000000580)={@_ha_fsid={[0xda, 0x8]}, {0x32, 0x1, 0xfffffffd, 0x4}}, 0x6, &(0x7f00000005c0), &(0x7f0000000600)=0x1a67e11a}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000c, 0x12, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0xcd, &(0x7f00000003c0)=""/205, 0x41100, 0x20, '\x00', 0x0, 0x19, r3, 0x8, &(0x7f00000004c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0xffff, 0x2}, 0x10, 0x100f2, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)=[r3, 0x1, r3, r4, r4, r3, r4, r3], &(0x7f0000000700)=[{0x1, 0x3, 0x10, 0x2}, {0x0, 0x2, 0x4}, {0x5, 0x1, 0x3, 0x1}, {0x3, 0x5, 0x3, 0x4}, {0x5, 0x4, 0xd}, {0x2, 0x4, 0x0, 0xa}, {0x3, 0x2, 0x9, 0xb}, {0x0, 0x5, 0x6, 0x4}], 0x10, 0x8}, 0x94) 1.634228647s ago: executing program 2 (id=9850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000bb"], 0xf8}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$netlink(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)={0x2c8, 0x2d, 0x20, 0x70bd26, 0x25dfdbfd, "", [@nested={0xed, 0x153, 0x0, 0x1, [@typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}, @generic="5880f99bd1cad6b2644d2d5c13f1189f07a308b9079169ec5a99c5f8568c055839421be1980d4181d0045a51789fa718631b3efca253a72d3bdc983748b74bab93f3c9069fa7bbc018c801898b8947fe40cc4791bf93a85fbd141b5438b8f8f46b3b30e68a555f0a608c9332f47fb26c49d99ab38c3ab7022c5cdb73516c37ea01a95d230f510eeef733bda862defa9e773e0e2758764044c2840e3542ff00ab944e26b4841a990fd70dc217eb5a61f091589fbac6fa999e709ebf13090975b2ba", @typed={0x8, 0x13a, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x95, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x13}]}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r2}, @generic="cfac59c431012902cc88b8ef957075fb2ad1c5e3940e88012a8df97f0b329b14cbce7070b8c691471e70d91b20c06541b9d1e448e424cb23530fa79b008f2dfbd5270db2d1cb7f0a208b96d3d9ca3d5b95bd207d16bcb8a52c48e554595bcd8f4d04e27449823b6cf2", @typed={0x4, 0x152}, @generic="85e5cb70b7cc941e03b4c030ab3e526abd70e37785fe27fd65b53939575ce17754169b9120b8c1fc2c9fab9a78f754029a6d291578aca8cd1162da05d15c4c94f61727c14be962b249735a77802cfe7b4482a163eb1b19ae85309d65d6eb626119106f9b69ab4d84f66873b4e6bef5d9df94ca370b17318d3d3cfd0fbaf92f32155067e85df752dc4c1886d6c579e7aebba7172c56e7ecc27a329eddb5c5e7e68778163a0d773ba1", @nested={0xa5, 0x83, 0x0, 0x1, [@generic="850350eb4fc2470f007e9ff305c4fded15bc97de214a4324d51ab6e3d1c561bdfbe1325aac0333ef0f8218e8f2301924cc9b773a0889b37d1a3abc57664cd5666149d04b8ddd9ff01fa5683c5ef5b964f589bb49b8d259df31d5461c4c374503210adffc17431d0b4b61ee56e692b79c76bee78da1c629e6e6907bf708893428b996760e7cd4f75d715d08710b7e9d2e33a38d1bad37570937", @nested={0x4, 0xfe}, @nested={0x4, 0x153}]}]}, 0x2c8}, {&(0x7f0000003980)={0xf0, 0x1e, 0x200, 0x70bd26, 0x25dfdbfc, "", [@generic="57d052cb8b62b78c947f6a4a44ed981bb86090304eb6c59fc2e04516fcc23beb7367ecf65346a19375c9ce2d29d8c8", @generic="4ec2bc2c0fa538eb5f5f2411c89cf47e2f9a33a5caf1bb2a83ec0a0a0b51ef9f75970f569b1b9ba45bc4dd6bcdbca56c9b89fe79a809205730a6d6aabee9e3cc58e28f41c20d002484b42be7eb435c942c579099a9332322be9f", @typed={0x21, 0x132, 0x0, 0x0, @binary="7fadf946fb6387b73dbf3dce84ac56edf90783df1ffb8d8714095714ed"}, @nested={0x2d, 0x34, 0x0, 0x1, [@nested={0x4, 0x11e}, @generic="fc14272bd63ca0ca0615edb69936c9927dfbd8b8f56a7663e65fcd53d18d13ab6e346f99b3"]}]}, 0xf0}, {&(0x7f0000003a80)={0x48, 0x32, 0x200, 0x70bd27, 0x25dfdbfd, "", [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2}, @nested={0x21, 0x7b, 0x0, 0x1, [@generic="f587245362da89f9d0f8acb9dc1248b3a87e32fa63ce2813a066421dc4"]}]}, 0x48}], 0x3, 0x0, 0x0, 0x4c0d1}, 0x404c014) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.445586317s ago: executing program 2 (id=9852): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmmsg$inet(r4, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x8000000000025a5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={r7, 0x9e2}, 0x8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000006c0)="fa6d", 0x2}], 0x1}}], 0x1, 0x24008057) socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 1.235117506s ago: executing program 1 (id=9857): socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x6, 0xd24}) write$nci(r0, &(0x7f00000002c0)=ANY=[], 0x6) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) bind$tipc(r1, 0x0, 0x0) (async) bind$tipc(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1}}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0000000c0200000b00000006"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, 0x0, 0x0, 0x825f108c29c318}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="0204000018000000000000000000000002000b00ff03000006000000000000000800120002000100bc6b6e00080000000600ff004002000081000000000000001fffffffff00000000000000000000000005001a00ac1414aa000000000000000100000000ac14140c007137db9d000200010000009100000000000000090000000000000004000000000000000300070032a079b202004e20e000000200"/177], 0xc0}}, 0x0) 1.204405726s ago: executing program 0 (id=9858): r0 = socket(0x2d, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000e100000095000000000000001a42d4f421a7be9b3315accb3048c4aca6d08ff8060f28a9ab63efab0e68b1dab174155a4874249ec6ee0299ede615a47b6f5e6e12de1d93761314b902a35ba0ff45a45140eab714fd3c798dba30e44ef0f8369fa7ca53174073ffefad22dc7ac1feb6a2d62f635f3f45f57e8d431d1bd13b622cc5d83f7095a2f41f7115f06dc82e3937edb9fce1e5ee3e0d198cfccf754a6efbef781839e37a7d087dcfb469e403c9dde48816"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x27, &(0x7f0000000640)=""/159, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x43) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0xfffffffe, 0x1bffe}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="cc0000001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0xcc}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) 1.109933665s ago: executing program 4 (id=9859): socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x7, 0xa, 0x801, 0x0, 0x0, {0xf, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x10, 0x10, 0x329b, 0x0, {{0x35, 0x4, 0x1, 0x2, 0xd4, 0x64, 0x0, 0x43, 0x2f, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @generic={0x86, 0xb, "510aeba3f525fe58d6"}, @rr={0x7, 0xb, 0xcb, [@loopback, @empty]}, @cipso={0x86, 0x77, 0x1, [{0x6, 0x12, "ba82be8af87bc3b001b4fbde54e8f0eb"}, {0x5, 0xf, "48be3ed151e1a0435b70bfe015"}, {0x6, 0xd, "795df474d78c65f3d46430"}, {0x5, 0x6, "0d063019"}, {0x7, 0xb, "14b871ea108c4673aa"}, {0x2, 0x11, "859d2c1ff8629cfb15d21b70636285"}, {0x1, 0xf, "62f460e6fb13d7b5946c3e553e"}, {0x2, 0x10, "8bcbf6c4a6852fd33890e2aac8f8"}, {0x4, 0x2}]}, @ssrr={0x89, 0x17, 0xe5, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x13, 0x7c, [@multicast1, @multicast1, @multicast2, @rand_addr=0x64010101]}, @noop, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x4, 0x70bd26, 0x25dfdbfd, {0xa, 0x68, 0x1, 0xff, r2}, [@IFA_FLAGS={0x8, 0x8, 0x4}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dvmrp0\x00'}) 1.012241172s ago: executing program 1 (id=9860): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) 979.477458ms ago: executing program 0 (id=9861): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xa}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r3, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) 902.679896ms ago: executing program 4 (id=9862): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x583}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd20}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc235}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb62}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000814) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x11c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x583}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd20}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc235}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb62}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000814) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80) 844.868255ms ago: executing program 1 (id=9863): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880), &(0x7f00000007c0), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) r2 = socket(0x11, 0xa, 0x0) sendto$x25(r2, 0x0, 0x0, 0x85, &(0x7f0000000f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 806.141841ms ago: executing program 0 (id=9864): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c80)="49fea42b469cc986c720933091e4f3b4cdd6a0622d4e7c97c4f20e63de4d389d5767d50684493a2710a7b80ae6c2b8451d0000000000000000f405b279e862665c333fc984ffe76c39e343489dcbf52b6106b1353db8b7bf11656e1f2ea8b3a16e3ad5f5efe8e11e79b8322559ba8b416339843f301637ee4b494321279bb202e08223868b98652c6c9f68ff019e2bd5896f8489538a2290871ec644b336a4", &(0x7f0000000bc0)="952e67c5b2e13b31322fc8c0a3684b8e86b5f203221c9106cba220be05a878ce83f0a42630dc64d96cc437464fad6b87a012b8be79fd273711b2d3ea9e0875202b6cd1d440c5e4133a541829880a6e0d0bec0926994c44717feb35ddf1aaf7f1ce3f4c2673ef82b779b011e5aed164df4fea0135db0b8bc000009723ebb005349bc9c69752", 0x619, r1}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1b1e030032dd3725e6c89b4e4d95b0df395a195a000008000000000900000000000000bb6125cfd5ebf786b7c01b287b73a6a6e490ee32a8ddcced2c042774ffb1b90ce63b24f4b27e56ad4f5670ddc27f83829522af61cd7ccbe3522455dd346f8e49f118279ac05891b5ad5b43cfb7df4e2e4d94e9dc8dbda07d195b064a1c247abe205be522a168ef869a65c385801c4b777e81b3b999ba727bdae58ad54aa87a884f293743cbe1c0be65bf8081f0b485c18da4add79fcb9b2453695db19414ab43f4a94efda81bdd3fb91d00344d45827a4ca06a87"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r3, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5a1b6c", 0x18, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x18, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}}}}}}}}, 0x52) setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r6}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0x7, [@union={0xe, 0x9, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x1, 0x1}, {0xc, 0x4, 0xfffffffa}, {0x9, 0xfffff5ea, 0xf9}, {0x5, 0x5, 0x3}, {0xf, 0x5, 0x9}, {0xb, 0x3, 0x8}, {0xe, 0x0, 0xffffffff}, {0xd, 0x4, 0x2}, {0x22, 0x5, 0x3}]}, @enum={0x9, 0x9, 0x0, 0x6, 0x4, [{0x10, 0x6}, {0xc, 0x6}, {0x8, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x4}, {0x9, 0x5}, {0x8, 0xffffffff}, {0xb, 0x2}]}, @enum64={0x6, 0x9, 0x0, 0x13, 0x0, 0x2, [{0x6, 0x9, 0x5}, {0x5, 0x8, 0x9e3}, {0xc, 0x4, 0xae}, {0x8, 0x4, 0xfffffe00}, {0x7, 0x8, 0xfffffffc}, {0x7, 0x6, 0x8}, {0xd, 0x3, 0x6}, {0xd, 0x3, 0xf}, {0xe, 0xd, 0x56}]}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000f00)=""/69, 0x163, 0x45, 0x0, 0x5, 0x10000, @value=r7}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r8}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000200), &(0x7f00000003c0)=r10}, 0x20) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r11, 0x1, 0x3d, &(0x7f00000000c0), 0x8) sendmmsg$sock(r11, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@txtime={{0x14, 0x1, 0x3d, 0x6a7}}], 0x14}}], 0x1, 0x40084) socket$phonet(0x23, 0x2, 0x1) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f0000000e40)=ANY=[@ANYBLOB="01000400aaaaaaaaaa31000000000000da2ce8cad3b8aaaaaaaaaabb59c8e8d5bfad377787cbabd629581c2fc6b6ae44b8faf0b862c6894454a1c70b75a0ce736249f5a0a2ee0499dc27d7d8113991b9aa6201b09ab9846df8a5efa467955505d700bbfa27ae1e85c603c05a2fe183e4b264d882d7b67964ab84e5314fffa1de09a64054921552330d06de4dd8ca5969666b0a72f31fcb775aa2899aae9a013ee558e02772790e375c3c13d5"]) 733.861985ms ago: executing program 1 (id=9865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="ac112a9c5a404d362d52a9d71ecee5294378370dd5d5333ca7ba4a826fe416469d7e655dc2db28d2459c307af041dda1ea86667ae44fc2f77af4c688f3ae681a09c94d8a5359ea5f83bbf4d0856ab89e06b2fe9229d18b5a2df4411d106b102c44ee0b77c78ae9f00dec77c35e57cd639f8eb83e7d11beb76a61dca93dcbd23732f2447b75ec77bcabb1d037c2e3218a1543346365158fe90b8ad22a86267bef9a174d43a3f602c00615ab9a96ad970091c9b4398ac623af7dedb3bf48ab5850afc21bfe268e5938b9", 0xc9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d80b972, 0xc574450d1af3a7ac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x8b}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRES64=r3, @ANYRESOCT=r3, @ANYRES64=r3, @ANYRES8=0x0, @ANYRES16=r5], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 680.547391ms ago: executing program 4 (id=9866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=@acquire={0x128, 0x17, 0x200, 0x70bd2b, 0x25dfdbff, {{@in=@private=0xa010101, 0x4d4, 0xff}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {@in=@loopback, @in=@local, 0x4e23, 0x2, 0x4e22, 0x0, 0x2, 0x20, 0x80, 0x11, 0x0, 0xee01}, {{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x37, 0x4e21, 0x48, 0x2, 0x20, 0x20, 0x32}, {0x7fffffffffffffff, 0x721b, 0x7, 0x80000000, 0x5, 0x7, 0x5, 0x3}, {0x81, 0x4, 0x5}, 0x10, 0x6e6bb8, 0x0, 0x0, 0x1, 0x3}, 0x800, 0x40, 0x10000, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x2000}, 0x41) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x901, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}}, 0x400c881) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000ac0)={&(0x7f0000000480)=@ll={0x11, 0x0, r3, 0x1, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)="f983539ab3502cdaca541620dd9beb8209388dc1356ee94d4d19350d3fa2c6f701e0972e57aeb95b1cbf858019b8d32e70a0f5af9c83b9b94fb81caf8fe0cdc6d3c2d0b7cb3d42cf2f0288c4a6797c659be082853e5a", 0x56}, {&(0x7f0000000580)="818199898e4a761666331c75b250359c795f3a5fc524", 0x16}, {&(0x7f00000006c0)="cb7e76bcec5f0072e93498a2a8991df686c2747972bef150eaa9885f72e167ecf1e055d5571aa5e9cd07069d43b9b363e84f34c284043b07042604080e1ce262c1789427e909a4a3bb80c699211f63e19c36b93b3e635b17c0d069af8c49afd0a4f661373428818c4e1cb0ff0b99c06c8953ca1fe27944811a386c432513234be252e948d071880dbfa899e002", 0x8d}], 0x3, &(0x7f00000007c0)=[{0x90, 0x113, 0xf9, "48a36858cfbf5aa3d8dbd2c6061605b35afa159d2892e3639724022f22f31832f8f194a2dfbf5323ad9e3ac0b78a2b5323d22220a9dae36eae53cace1354bc5ab7bfd914be2b88a25bc391707632be1169a8b0822a598c0ba69e9855152e29f4a239f61d49ab1d9b7572ad3c6899533d325323d377429e0906e9"}, {0x90, 0x116, 0x1, "3e2fc9e3ad893724ab72a954952c1531d3cd052e3f83836cb7aeef22bd23ad92141bb80c370f21f86fe84df33743554d617776d9b112fac647e74a6efd6ea8f354600d1b66bd0adb38b4984732c8940cf40a72a1cba639635e4ad061757ee587ccea58270530e65eda306f988e1d35b131e9049fc04b6b5a7bfc"}, {0x10, 0x101, 0x6}, {0xf0, 0x11, 0xffffffff, "72db17b2b14848852a63a273f0cbf4c2cbafa9807393e7949b94f0d06fc4693d9bd0852e43eab96a50b3892d9893d38c0836c700b1b0422daf717cb47d2517a79054cea99373e13d4360c77658f4b7cd6255d1f0eba3198d4ba15ad6f7913232bc8152276ca2f4198314c557c256a29e3df53a4caea22b2676942e3417aa40b88e8926069dc08bf52f93f0812147554e9eb7cecdf9831de20c986f73e32e8e7bf36cfd33e39efdb4cc69f42fb54ed460aa7153ba93e33d6d0ce377e067e5a54bb6a3c62fec4225a5799c081fafb1ddd779a869eaf217c1321f9538"}, {0x18, 0x0, 0x7ff, '@<'}, {0x98, 0x3a, 0x2, "66596d8bbe5d99b49d70e51bc19f389bcffa164a3b6408e4e147dd1ac60573f823da224b71b5d2d8f58384ec354c0ffb38f3cf9496dec9e684ddc042f8d228e534b187d8d352308f65bfb4caa149949510b010a3190912ed0915549050ec1dbe960728a4a9100ad027c35f9b5a24dac07b88cae18046f94d9fc407753152eabce7d475f98e"}], 0x2d0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000b00)="13000000010203", 0x7}, {&(0x7f00000000c0)="92", 0x1}], 0x2) 590.660972ms ago: executing program 4 (id=9867): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x4040841, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x40}}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r2, &(0x7f00000001c0)='O', 0x1, 0x4040841, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x40}}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) 522.613209ms ago: executing program 2 (id=9868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000500f9ff000016000300686173683a6e65742c706f72742c6e65740000000c00078008000840000000020500010007"], 0x5c}}, 0x0) 443.722202ms ago: executing program 4 (id=9869): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000007acc97d49274567ae42b1dae719ab95e8c3131b3d31ebdc11ce7752723fe69e2aea5c60ad661116b260e3d0835c928f9edbf094564b8280a0aedcdff526e7628f75ef93903a330e568f1415e21f9ba37dbc8d2ee3c6af85b751590131abae81f1d60960b53febb87af32f9190c4f267ffa12b828ad79bc81edaa", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="04005a80"], 0x20}}, 0x4004040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_SUBVOL_CREATE(r8, 0x5000940e, &(0x7f00000007c0)={{r5}, "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"}) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r9}) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000100)="87426b2359b3163b7552ac2c129a83348c54b4c085ba86405ac75a6f81b03d540b52f7152fd0d7a6fa97e4ac09d695a62e12c446193f116acf9040882a5f28b1f21ed0d4984c13fc5bb05c9ba4f06bd144a95c41b00ee1bca2ea57856d509eb5c3a7a391eac3ff694328b3aa23d5d64ed103c541c8fc55491766ff053f32a60fc37fb83b98ed46dfc35d6d75661f76a86d0d29209060b7ed3351421cb0", 0x9d) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000180001002cbd7000fcdbdf250a000000ff00ff000004000008000400", @ANYRES32, @ANYBLOB="0600150003000000180016"], 0x44}}, 0x0) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r11, 0x29, 0xc8, 0x0, 0xc000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@bridge_setlink={0x94, 0x13, 0x100, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x0, r13, 0x41c88, 0x40}, [@IFLA_PORT_SELF={0x4c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "08c1b0e5932d9806ca5c8cac7f863ae5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "005594311919d9636c045ed198d72a8a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, @IFLA_PHYS_SWITCH_ID={0x20, 0x24, "187c49316b89fdb5ea6012aba9547fde3b906d859d59625e523549c1"}, @IFLA_PHYS_PORT_ID={0x6, 0x22, "78d1"}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x8001, 0x5, 0x58, 0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3d3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000005) 442.275867ms ago: executing program 0 (id=9870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@deltclass={0x68, 0x29, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xe}, {0x2, 0xe}, {0xe, 0xfff2}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x5, 0x6}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x80000001, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xfb}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r4, 0x0, 0x4890) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r8 = socket$kcm(0x11, 0x5, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r12, @ANYBLOB="14000100ff0100000020000000000000000000010800080002040000b33f92d733e18022227486858ac5c132d3865493c4a51980e4f6aeaef552444302c0015efd00401179bc8eca72de52204d01c2dba3d6a3d3414b7ed8ae451f50cca540ff800d079e9f0e99016581e4e976d860a0af8bcf851b092ed246cf98d8ed3d4061d70f"], 0x34}}, 0x0) (async) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r13, 0x0, 0x485, 0x0, 0x0) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000040)={&(0x7f0000000000)=[{0x1, 0x0, 0x5, 0x1000, 0x3, 0x1, 0x415e, 0x8}], 0x1, 0x38, 0x1, 0x7b}) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000190001002dbd7000fedbdf25fe8000000000000000000000000000aafe80000000000000000000000020303a000000b986a12ebd4bad8bec53dc9de743104c4736bc5cc9705644e044d1178d89f6cbddbfe018d0be55559390063283f96fce0bc30387d0480c04e23566f0b83aaa78892ce81e31d7e7a3f454da0f016e5491bdd9965105f42676ae9393afd54b50e56d72b8c9f9307dbd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000009000000000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000008feffffffff7f4000020000000000000800000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r14 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r14, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000140)="1140679a", 0x4}], 0x1}, 0x40810) 397.99168ms ago: executing program 1 (id=9871): r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) close(0x3) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0xd, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x9, [{@empty, 0x4fb90bcf}, {@dev={0xac, 0x14, 0x14, 0x13}, 0xb7}, {@private=0xa010101, 0x2}]}, @end]}}, {0x11, 0x0, 0x0, @empty, "fd0c0000"}}}}}, 0x0) 388.731263ms ago: executing program 2 (id=9872): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000580)="004f28528714f2dfa69abbd8f2aef5138cdc4ed99544d356947c5317ec121817bfa4012e5fcee694f38ec49bbf652c0d2c67368b2046e8f939452aff4c1670376e55940ba803654348", 0x0}, 0x50) socket$inet6(0xa, 0x2, 0x3a) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14e0ffffff0000002923b22e972a86d2193e000000a64f11c66501f0cf7a431f9dc025413500000041890b5060a9cb88e420affa69c6599f39f95b7f03636a3acdd2e36c3c5d86a90d9fe36e7f07e1af21bee8c63ec68d91da4d50355d95bd444e6469cfe0fbee0bba3c1b213fe2a65cf4e3df467572d2ad0b3efb8d61b956a37ab51ca2bf2e0eed1431947ac07460"], 0x18}}], 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001440)={'team0\x00', &(0x7f0000001400)=@ethtool_eee={0x44, 0x4, 0x10, 0x2, 0x41e, 0x9, 0x7, 0xb, [0x3, 0x8000]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000200fbdbdf250c0000000c000380080003800400010200000000000000007369743000"/50], 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000200fbdbdf250c0000000c000380080003800400010200000000000000007369743000"/50], 0x38}}, 0x0) 268.075013ms ago: executing program 4 (id=9873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={0x0}}, 0xc000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7c}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 258.828657ms ago: executing program 1 (id=9874): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="e2930dc3", @ANYRES16=r3, @ANYBLOB="030000000000000000000200000008000300", @ANYRES32=r4, @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x890) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket(0x2b, 0x1, 0x1) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0xb) r10 = socket$packet(0x11, 0x3, 0x300) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r7) sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r11, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000390427bd70000000060000000000", @ANYRES32=r14, @ANYBLOB="67d7030000000000180012800b000136746e6c00000800028009001300"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r10, &(0x7f0000000240)="280320000a0014000000fbf719143baa111f43c80500ab286e16195ecf3d77cc32b6d78839980700e6663c", 0x2b, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r14, 0x1, 0x2}, 0x14) r15 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r15, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 242.505715ms ago: executing program 2 (id=9875): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 135.123186ms ago: executing program 0 (id=9876): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) poll(&(0x7f0000000040)=[{r1, 0x82}], 0x1, 0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e9990000000000000000fc000000000000000000000000000000ac1e00010000000000000000557a10ea6308e7eee137c67db81f000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000b000000000000000000000000000000faffffffffffffff00"/112], 0xb8}}, 0x0) 60.435744ms ago: executing program 2 (id=9877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000280)={0x1d, r2, 0x2, {0x0, 0xf0}, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)={@local, @remote}, &(0x7f0000000180)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200102}, 0xc, &(0x7f0000001a00)={&(0x7f00000045c0)=ANY=[@ANYBLOB="70150000", @ANYRES16=r5, @ANYBLOB="000228bd7000fbdbdf250c00000090010380b20004003e0d97dadaff641bcf19a4ed5700064e46f8dca98af0caadf1aebefcbf2e97413792470c7ebcbdb7e4a8e4fdd78f65ac3a5b31a04510e5eaf8b9ced32941aaeb4c318470caff3d4fc46b4489d7bf1b57667fcde86bcd0f388b834974bc60f5c5189f698cd1a6693ed3c3ada53552c75bc2884e668435b17419ff4aa5d651721b35164f3be5f5ba090ea7b5fe77e1e5c994e7de546ce4d91d052278d0152e96e3a679ec5096aaf23302213d447e750000d50005003218da9ffa651362a86be6d3082e5e976cfcad84dd0fcd8ca2b842739e89cc7427a1316e6e907e37c5de6fcd2f32fd1152b71c0e426f71219506d55a9d2b0073cea5d007d5c2791342142c0e0cdac8c2715f52daa274404894d7fec30707df1def3d1b20d0f6a5f8e0defef4bc9334fb640d526ae3807d93c83c5f9af9b5a1cd1782e8f0be0ceb8ce96801614304ea3e531665f55ee9c575f213712569f74e6af4ab358db915b05396265d88b20939234ac55cc7ebb91600905d8f548962e5e92a4a2f72907e86112f28a62844174b98c900000050020380580003800c000180080001000d000000100001800400030004000300040003003800018009000200212f2b2d00000000080002002b267d00040003000900020073797a320000000004000300080001000900000004000300280103801c00018008000100ff0700000f0002002e402fa6295c405d7b2e000034000180060002002b00000007000200212d0000070002002a7b000008000100010000000800010003000000040003000400030044000180040003000b0002005c2a5b29232400000800010097070000040003000400030007000200200100000800010005000000040003000a000200bb7b253a400000002c0001800400030004000300080001006192fe1b0900020073797a3100000000080001000100000004000300340001800900020073797a31000000000800010006000000080001005c00000008000100faffffff0400030004000300040003002400018004000300070002002f26000008000100f00000000400030008000100ff7f00000c0001800800010008000000c400040020060065c6a2f518e56db50ba60fa487f225e2e1a04a9d7bf296dfa24253c6d2fdf607be6c3a21d62355906184b780ce6d89b78ca3987ff4883ce721077c9e76b8da74a9b06d6cce51c454aa667b360e3e5a5f9da4c0cff3f2172ed7d625fdecb46e192dc29722ec9826dcf5d451157dd694e904de287278ab2092c1b1230e9e48eb5268a11d36145b5a93fb01421584f705332c4e91eeccd03f6d574d6976a850111347db1f0f8ac59964d700b61ba64ca9b4a0317c70e6ce9d2c8db166520908000200b3c2ffffcc1003800800020046080000041005000d7489b82edf9edc2031457bc3db674f9bfed549ac23e0f349721a7be1e0e6a59e77424a60f31d06b09eb9d52da9a7011229308e949323c43028eeab67692ba84bf961facf7dc4be49fc09586c3000fe5b5be2dea365d61aa476f706f6782360e6b4415e66c5f7a08d0a0990b9eb3538153e864df0450954fd589084957a2ee83815b6ba1867a0ae4c10ef0c44a1dcb4f6c6e6b13d58afe537aeb7058934d1daf22f494dc876a1dcdfec985d6300c27419ac2b57afd03c82ff8c71650b4cc78346e4514739dcac4c6f79ca7e76a40007f5cd288ae1d910c48efd100527e81be2d05b14bda6d1cda6ea0a99d9ebe71eeba9176b7e5c3234bff631ddc236f0122e86890f674133be0c33cded18e34eaa1ddd318e57934e68ac48531094028b5699304fe5f573c526ddea23dba5ffb38c945cd4ca0f32ffc38c2a91be62dffaa6701150fba754fcd1d27bfe20d7bd6b94fa03b3d42bb2e29c8624d076a053b887e4e4aded141658f0eeec0bf64dd5e9b7a3737477d9daee647d871be2c9b0bfec9bffb7349e335efb14fb0dfd1877bb5d108883b232acaf4743f19fd7c1093ba99b2130e7bdd593e8106aef2e857312ec5d7d8aaf3dd6045ec3e35c8a0f153e756c248619f9a87324e6e87ac280a466ab652706b4443a500a83229476b632e5be2dca8cf0142308b50598df138edbbbd11fc0f8ce8c68c6638e580e193721d739868cc64e7fd9b7c630c0384662b93c233e7d1778dc3881a115599d449569f461f2f8fc41191c2cb33facff6eb7e1ab40f6cbacbfccc410f2b48e5076e4d877b65d58f9789e27ecbdd763206b3d8ea76e76734879ce7687cb805ef34f5ddb83ffa16e8c6c030a50bebcb86a4b397cbb0823e2b9f79a37f74c39600786d72ebc8e551ab6bfd8cdf8f5141c41f10f7358c1ffc42f45c93256232b3de9b96481a364a809ea7e82af716e903ffaf744f20a3905f7030e8a22acad8d8662f624fe9673d212bee91602cda5eccdeced44fa4a778aaaaad40a3fb1c7223f79ff58fbd24ee47adec1cdacdaff579411a0ba580f99b4f3b03e2d6cd2eeecb450e59cc2ad95c44f094697030aa3437af06c7c38e34b5233b71efd4f1639c5bc329e52ae81bf6922cf5fb1b8e4cd108e241bbb3a6afc57c0218723f22cf0413dbc04959ffc8e1052df6a669d91b7ddbf282962cbf6625f75c477d4d15cabb30841e2a22da0d6f50083b0ba023494ff4d4c0c32ab86a0dcd3fde3005273fc070fc9fe4ec5d2553872c8af6b5f5ed4365d3bad858aba50eb2ae4c6f2d791841fa6dba3d00a1ac8d350c0d79ac503289e295ec076d0169d675cde1630644cf89360b59b4bfd79ee1db3e41724e3129a99997cb0cc0eb539e7478998c405664b2c08b0b69e03e7e67641de4907683ac6c22f3c91761458e2d7682d116e7cf31ef0f66cd3aaf501abbae4db6d13c055e358dce3d558afae0b134fff471c9c62cd879f05ff81baae4f70d94cb1c77074fc22407fb242b85ae7e770d7149902c368f0a404da4ea0f997c6e3b035aa2ba7328921514ae051711b4f09206cd22d011f0febd8604a39057cee26c343518b978d6cec4fa39cde51de530d795fe93ca34aee9d92e276270d7999d91516002c06b3a8067e80dff905c821e53294737b52136286d32085fd4118a9e4a283eedf9568e83f1119327779913c1bc98e4e219184879278bb9cf9cfb80bf4c9e120802308b0fdacef1707059dd1d7aa7e4f1c2f4cfba01f53de889d0a549d066266bcfa7a686df9c02af6c5e7aaa687a87c5d8c6603ace8a113197800ecc2e6b0c1dfea845debeeb0c5b42f07a2bdf36690bf6de269bbd207d3ef22811dd238164aea414e9b738d49facc3138fa1bad57f07838963b9b3fd8ad15073e62c631a4c074021afc0245bf335d39ad8b7721dea27d1994e7d906ed0d8ee7356b594fb770dcd0449a005755982d8558b0a645c09367c55c4a9e8aa2511e9ebb01236c2a18cd0ab4d812b94d1ce0236439ba6038082c1d48f0650b141fdb88161b0050993105322fd28aaf36ec7b5fa18d6d5c77544b8a49712922b446d24d6e91bfcc849182b691d2d49eab66239aac8c09d8c934937c2b1879fbfab5e95d3e0f998716deadf065a9374da5de99d988343964f93af7401a204411c9cb44bf98376a7d216e7f862a8f616d5f7129b7e05dcad816150dd77de513863aad3fa34dba87d51849a35a077be66b9e16882909c8a76afc1cb0366d574b2a2b4de2b2a77ad965b5c02b3ffbc6782cb6ec05f8dea690d89f20b492f21168d5f0b53408f49266e5359ff7607270caaf5f9cbc99fa846ba06c53d2aa57e49f00d90f467df531fd570c310764e79cc950cd5aab05852bd937052cdc35fa58dded07ed1577ea48eaf00b64af5fa76941afec6590f7d71f3b6d22c63324421aabeafa6ff1f84ec850b1ae03ebd8f635c0ccbf9298b1a17b0a1fb5c135cda42e64b614d3749c3486a11fd8f63a46243297fadaf4bbb27e24422dfb9130c152ec7d57d3a220b1836dd7bc52d8cf5f285a325d434144d5fbb401f9cb43ff040ebc081d095941e2c3d426abf8963916887b92039e41b2dc74256506243479ef55a79b3a4927b3937da7cf09d0b9162b9edb500c542113c95d4d0181e1124c9142a7ae1a3fd06406e4a18d40997e0b38f0deff199aa4e53babb286cd75f50dd9c92d43d2834ebf3eb7ccbd81ea56952146cb71e9fba6407f7711de5448856a9ea082dca1fee362ea684b5c7df77a2ef632fc9e9d206527c302616ac892887d444681702fbd7a4cc662306ff3ddff9677be4272008327f549a8f40d114416c8482295c0621ede3153b3c4e8353783cbe9a5b6e7b1d3f5f7d8d6efe7da2804138237893dab19b57dd1cd7f74db5f00c45f93dc9bb3434e02c13ef1ca4e119e6319d0527de6a4158fb367bb81868b4ef991d6e25bb3842df4ee6fccacefdf8c13642f02768db8889ff1ec0eac7be5d224de998df54018e3013cc8b60bc943c8fa314ce2ec1ad798e0ab01c8cb23ef60997621a4140e8c69874464ae79a356a756891e036539c6da4732f633879f16184f1454af98e1e80b77c9065e36ba9d9b8c027892f59c36dd59e8f95176931474c4656419ae938e04db4191f823fc9eac0d21089bd28e52556e1c5569469f6789e9f0b51130cfcb7914464acdd1dc47b0aaee5c5e434c0fcaa5eb7ba64c19434c7bafe5ece68ebdcae4b67f8cfbee6213b9c54283a3ef9fe96ce120c0dff23ed864baec79392a10aaad54f109ec96a19324067a3ec69523354750898fa27851fd765a4e911f3c793cc7302e72db3647c01b9ebf3a987087f8ca287410ec84e51ad33896c6fc5081733a1d152e3ba80d169377ca17e4c8e3389485a9a0735ea11327228b7f402f5b1b6edc5f03c19767ef65a73329c11e67cd4b4b198a5a723a8fbede04b006037b79b6bc585b3aacd38f08a5bcf0e9e2099c9ff570d6680773b4c72bddc99e4abe4aa7b636fbd257a66006060d1333ee63f20bc0e21e38bd7baae4fdff07b46d3338911acedc36bb947463b21ef8e3b31e8bb8cb13074fbc32dcd1f0b9ce473ef250491dfc5afa959eadeb1b32c18de47120b54c02dc0af368910aecc2e020c454c7ac6f428a89717bbc1cab3b5ca8f7a45d71108561fcca96380be349ed3e4abd197ff04597a1e78f1a4598ef0ff43d1baa907bf516a812ba12aac154a7ec6c657ed0a0175ceb1489f99c0ac2d4711606ff45089c890a9ba8d176275466cb2817e6fad37673ee85fc042cf8750865e445eacfd598e1894de560803b898fdd454b5bbcba17c57a3afe4df3ede17b3dbf8b1a6aa3ca04d61f7ef86ea133b23002c50bd868ac7c9faccf6de5140ecae376e39ef5a97e011ec2b83fd727ab2122bf57eb376f6f5cc28f65d134030165417b477a6b874d557b4dd4e489b862b7daccbf9654bf2a49c2ed57bfde4a83af6b7e1c4b39436e73ee0e0962135034e1541be94d61464526d8a99f76b21287946f7319c2e302d9892af1fb64add1bc6c2c7471b8a4bbde563d437a402667418c394e146304fa9691b0e4330aca2a85d59db208ff610f07f1040a2673d8ec44f8968c55d25ff161f74e29edeeb48883fbfe82c1b45337128920ac2ecdd8f0661bfcef5d5f36846318ec4082735f7b8a9445df210c1bfe487317d10d01fe407522ff643d168331cb044a6054d2868ab4ddccbf32c6387fd106ade435127039b8177a143b5a90820820db41bff79071934ef93e92517b55ac409886b21de60b516c40898da33651facacefc1e23b038b30868bdf5fe37c3e287024fdcdc8a45a84c99e3685f8bc495925135a11febbc1321f929c8c3026f3e41cb946f0f69206467cfb80ef50e43657ee453538473b21a3c02a2abaadcb1de0f45bf655e17cbc9a0204aff2984b7c32d13701f4c31e03589ca2c9f5d80015490264f911f25fcec12ba0fd2bd4c63eb12e46d9b305f9bcc64bcea530142a27ceb68cae60999f0e52bf2a3e032c4d9980e54b6e439b021dea465ba08dc4f7b1b04ff7b5bc80c4e8a7ed26189b1871014f086d2e4b7c253e7618e65e30eb79b8db719d459f1dc485f26f3d3be78cfd509dca155b5ac39c49f843f92fa362d06f5f7a5d746ebf0057af9323e2961271336358e7ee63258709a2eb28ce4495e4e177505cd4a121191b4f1c7f4d75fa101c8b9a781474b7ebdf8d94f5fef41c73841353e21a28733f986f697dcc8be6c81715d0383d446371442862727a446657ea0270d4925878775185bb8491c16312a07595c1aa4ef177a82a46cdfe153e8ae01851a6b2ffe97b48fa007e777d8a0ef74439f2fb1a46f5add412ea45d3404918ac4bb84e34e43e7303bd7d5ad37031b2ca6dc642e93db565c129f635c84eea230d552cef70ba1f2ae17f3791d0cd7e50dcbe8338525f391242831da61ebc18f0219faac45bda4064c7eeee33742001892dce006c20d7a60435ea9b48712afe15e2988d0238d9c9fdf9c739df131ba911ee138274ba5667a9ac0d8544b445f6f874e079b7fe573ce929993f0a2687b295361d55a9fd19dc56e80b0fabb10df7307759ddd93b88437d572ee8bb97fc3cf581c77fe1932f9c7478035292e431319c20ae3b5a1bb518881820fb4cadb975f486e242b6dd5c03b7d8018ad4754d914b20aa839f62e35bfc61c88d53e6c187d4153bbbc8a1bbbaad688cad0aa7a47df303fd70e3f1bc5d4c2adf93d996b78690f6e170f0957015d2332de82808ae9e22a716642c3465fa5f67c5d9f8ce03cb1cf4345721b29ebd77b794392d79e0e2c76331a7a52ab22dfa4de370398ae4eada2e78796dda558716a096841e579e57c04fba6c70f5cfd608c360189e74beb47f0b2e06d0ad4af7b4444567b7a40acd5951e5d93f057f4f1f96c216205d35574600d20eb5342395b3021fe76ff590309e06c352f4b7c19fcec62536e728ae5e84fa9ca5389cd7c24bb1505e8c1e786b8c6fdf3bdea093873c07abf5e8a55574a4f5089cae8fa2cecb7340ef4fe282aaed54d3c6f3d7e67742c4575f00ce855a1ce5a8bf08475ec2d98167c771605a559b380745d43be1442a16e65928e17fbb93c34c3ac557630075ae9d49d83fee918911cb83d9691cc19b9db7bfb98b1b4f13c878b0a31dac0e249635c3ef2758e3d37eaae7571b2de7a788360bb6a788d836f1563cc1fc2060020d28395389c3fd9715e6b6ae5208c88ad42df1679e9941123e05fd55aebb35a722c9a5d0ed5ee1c1c4281d878abc65e9238bd73885226baa17e280003800c00018008000100040000001000018004000300050002000000000008000180040003002a0004006d5bc02eb2f61a7b78a59afe253f635184d23398ce0ba3eac5df9956ec09b05bc8be854a24b1000004000100640003801c000180040003000900020073797a310000000008000200237b290014000180040003000900020073797a3200000000080001800400030014000180080001000400000005000200000000001400018007000200200100000800010004000000440001801400020076657468315f746f5f6272696467650014000200626f6e645f736c6176655f3000000000080003000200000008000100", @ANYRESDEC=r5, @ANYBLOB="0800030002a85a8cb5a4ea5315718603430edad90000002000018008000100", @ANYRESOCT=r1, @ANYBLOB="1400020064756d6d7930000000000000000000000c00018008000100", @ANYRES32=r9, @ANYBLOB="400001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f6d616376746170000000"], 0x1570}, 0x1, 0x0, 0x0, 0x488c0}, 0x40091) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, 0x0) syz_emit_ethernet(0x81, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4b, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x4, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281"}]}}}}}}, 0x0) 0s ago: executing program 0 (id=9878): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r2, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xca}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x80) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x2, 0xbabd}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): 8] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8162'. [ 1074.307728][ T4964] vlan2: entered allmulticast mode [ 1074.334101][ T4964] bond4: entered allmulticast mode [ 1074.409174][ T4964] bond4: (slave geneve2): making interface the new active one [ 1074.428522][ T4964] geneve2: entered allmulticast mode [ 1074.447258][ T4964] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1074.466179][T30668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.492115][T30668] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.535019][T30668] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.569306][T30668] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.600950][ T4996] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.8168'. [ 1074.702439][ T5002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.796480][ T5008] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1074.852151][ T5008] netlink: 'syz.3.8171': attribute type 1 has an invalid length. [ 1074.943562][ T5008] bond7: option mode: invalid value (15) [ 1074.965279][ T5008] bond7 (unregistering): Released all slaves [ 1075.055590][ T5028] xt_cluster: node mask cannot exceed total number of nodes [ 1075.408192][T30668] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.431399][T30668] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.449690][T30668] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.476989][ T5049] : renamed from bond0 (while UP) [ 1075.495014][T30668] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.538381][ T5051] ieee802154 phy0 wpan0: encryption failed: -22 [ 1075.546875][ T5046] netlink: 'syz.0.8180': attribute type 32 has an invalid length. [ 1075.579854][ T5051] netlink: 'syz.3.8182': attribute type 1 has an invalid length. [ 1075.681766][ T5046] bond5: option coupled_control: invalid value (16) [ 1075.708728][ T5046] bond5 (unregistering): Released all slaves [ 1075.760637][ T5058] lo: left promiscuous mode [ 1075.771843][ T5058] erspan0: left promiscuous mode [ 1075.823411][ T5058] veth0_virt_wifi: left promiscuous mode [ 1075.849606][ T5058] bond3: left promiscuous mode [ 1075.866692][ T5058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1076.008482][T14175] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 1076.074591][T14175] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1076.092640][T14175] bond4: (slave veth5): making interface the new active one [ 1076.110233][T14175] bond4: active interface up! [ 1076.126421][ T5085] sock: sock_timestamping_bind_phc: sock not bind to device [ 1076.406890][ T5108] bridge0: entered promiscuous mode [ 1076.427957][ T5108] bridge0: entered allmulticast mode [ 1076.785323][ T5141] netlink: 'syz.1.8201': attribute type 1 has an invalid length. [ 1077.364644][ T5141] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1078.346329][ T5144] bond6: (slave batadv1): Opening slave failed [ 1078.566506][ T5175] __nla_validate_parse: 13 callbacks suppressed [ 1078.566524][ T5175] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8209'. [ 1078.590634][ T5174] team0: No ports can be present during mode change [ 1078.608278][ T29] audit: type=1107 audit(1783278604.690:16): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y„{a‘ó_|' [ 1078.622621][ T5177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8213'. [ 1078.840105][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1078.918883][ T5206] netlink: 'syz.4.8220': attribute type 1 has an invalid length. [ 1078.943285][ T5206] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8220'. [ 1078.998347][ T5193] netlink: 372 bytes leftover after parsing attributes in process `syz.0.8217'. [ 1079.028689][ T5212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8221'. [ 1079.105962][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1079.224932][ T5230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8226'. [ 1079.253598][ T5229] bond7: entered promiscuous mode [ 1079.268931][ T5229] bond7: entered allmulticast mode [ 1079.279322][ T5233] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1079.294438][ T5233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1079.338395][ T5233] gretap1: entered promiscuous mode [ 1079.366799][ T5233] gretap1: entered allmulticast mode [ 1079.613499][ T5253] netlink: 'syz.0.8232': attribute type 15 has an invalid length. [ 1079.641334][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1079.646106][ T5253] netlink: 'syz.0.8232': attribute type 15 has an invalid length. [ 1079.660543][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1079.675315][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1079.689144][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1079.703295][ T5253] netlink: 'syz.0.8232': attribute type 1 has an invalid length. [ 1079.706919][ T5250] tcf_pedit_act: 7 callbacks suppressed [ 1079.706934][ T5250] tc action pedit 'at' offset 3 out of bounds [ 1079.936173][ T5264] bond5: option resend_igmp: invalid value (32767) [ 1079.962138][ T5264] bond5: option resend_igmp: allowed values 0 - 255 [ 1079.983946][ T5264] bond5 (unregistering): Released all slaves [ 1080.040394][ T5267] bridge10: entered promiscuous mode [ 1080.076902][ T5267] bridge10: entered allmulticast mode [ 1080.115731][ T5281] netlink: 'syz.3.8242': attribute type 1 has an invalid length. [ 1080.200176][ T5291] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 1080.209988][ T5291] bond7: option packets_per_slave: allowed values 0 - 65535 [ 1080.242089][ T5291] bond7 (unregistering): Released all slaves [ 1080.415809][ T5306] netlink: 'syz.3.8248': attribute type 2 has an invalid length. [ 1082.832715][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1082.975613][ T5276] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1083.101040][ T5331] nbd: must specify a size in bytes for the device [ 1083.264433][ T5342] netlink: 'syz.1.8258': attribute type 1 has an invalid length. [ 1083.391015][ T5357] netlink: 'syz.2.8264': attribute type 2 has an invalid length. [ 1083.419781][ T5350] bond8: (slave bridge1): making interface the new active one [ 1083.451669][ T5350] bond8: (slave bridge1): Enslaving as an active interface with an up link [ 1083.720387][ T5385] __nla_validate_parse: 11 callbacks suppressed [ 1083.720403][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8268'. [ 1083.770560][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8269'. [ 1083.832398][ T5388] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1083.864486][ T5388] bond0 (unregistering): Released all slaves [ 1084.071330][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8274'. [ 1084.105103][ T5410] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1084.365103][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8280'. [ 1084.469430][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.745212][ T5457] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8286'. [ 1084.800211][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8287'. [ 1084.833782][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8287'. [ 1084.853742][ T5461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8287'. [ 1084.877697][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8287'. [ 1084.898057][ T5463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8288'. [ 1085.155167][ T5470] xt_nfacct: accounting object `syz1' does not exist [ 1085.548663][ T5486] netlink: 'syz.1.8297': attribute type 1 has an invalid length. [ 1085.567679][ T5494] openvswitch: netlink: Message has 512 unknown bytes. [ 1085.579546][ T5486] netlink: 'syz.1.8297': attribute type 2 has an invalid length. [ 1085.980460][ T5512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1086.034647][ T5521] netlink: 'syz.2.8309': attribute type 2 has an invalid length. [ 1086.137739][ T5523] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1086.144257][ T5523] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1086.262152][ T5530] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1086.315365][ T5530] hsr_slave_0: left promiscuous mode [ 1086.339232][ T5530] hsr_slave_1: left promiscuous mode [ 1086.485986][ T5541] bond0 (unregistering): Released all slaves [ 1086.523876][ T5543] SET target dimension over the limit! [ 1086.562720][ T5543] SET target dimension over the limit! [ 1086.718963][ T5558] x_tables: duplicate underflow at hook 1 [ 1086.728625][ T5560] syzkaller0: entered promiscuous mode [ 1086.737448][ T5560] syzkaller0: entered allmulticast mode [ 1086.751469][ T5560] netlink: 'syz.0.8322': attribute type 1 has an invalid length. [ 1086.786154][ T5560] bond0: entered promiscuous mode [ 1086.791551][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.798748][ T5563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.814156][ T5563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.838259][ T5560] ipvlan1: entered allmulticast mode [ 1086.847709][ T5560] bond0: entered allmulticast mode [ 1086.881785][ T5567] bond0: (slave bridge6): making interface the new active one [ 1086.890347][ T5567] bridge6: entered promiscuous mode [ 1086.895833][ T5567] bridge6: entered allmulticast mode [ 1086.902367][ T5567] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 1087.368083][ T5591] mac80211_hwsim hwsim71 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1087.822008][ T5617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1087.883429][ T5573] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 1088.020133][ T5625] syzkaller0: entered promiscuous mode [ 1088.034158][ T5625] syzkaller0: entered allmulticast mode [ 1088.058365][ T5624] 0: reclassify loop, rule prio 0, protocol 800 [ 1088.098424][ T5636] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1088.100900][ T5633] netlink: 'syz.4.8338': attribute type 4 has an invalid length. [ 1088.156313][ T5638] netlink: 'syz.1.8342': attribute type 1 has an invalid length. [ 1088.209334][ T5638] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1088.816549][ T5669] netlink: 'syz.4.8353': attribute type 1 has an invalid length. [ 1088.832532][ T5674] __nla_validate_parse: 42 callbacks suppressed [ 1088.832549][ T5674] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1088.836291][ T5675] netlink: 'syz.1.8354': attribute type 4 has an invalid length. [ 1088.866039][ T5674] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8355'. [ 1088.924232][ T5669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.134029][ T1059] Bluetooth: hci2: command 0x0405 tx timeout [ 1089.165151][ T5697] netlink: 'syz.1.8358': attribute type 83 has an invalid length. [ 1089.245431][ T5687] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8359'. [ 1089.473805][ T5707] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8363'. [ 1089.814122][ T5722] veth0: entered promiscuous mode [ 1089.832221][ T5722] mac80211_hwsim hwsim69 ÿ: renamed from wlan1 (while UP) [ 1089.867990][ T5719] veth0: left promiscuous mode [ 1090.225496][ T5745] syzkaller0: entered allmulticast mode [ 1090.421586][ T5760] syzkaller0: entered promiscuous mode [ 1090.428365][ T5760] syzkaller0: entered allmulticast mode [ 1090.452288][ T5760] tipc: Enabled bearer , priority 0 [ 1090.500350][ T5759] tipc: Resetting bearer [ 1090.586581][ T5759] tipc: Disabling bearer [ 1090.917935][ T5779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.125195][ T5788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8388'. [ 1091.351945][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1091.806819][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1091.844971][ T5822] erspan0: Device is already in use. [ 1091.872853][ T5820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8399'. [ 1091.935607][ T5824] netlink: 'syz.4.8401': attribute type 4 has an invalid length. [ 1091.984924][ T5824] netlink: 'syz.4.8401': attribute type 4 has an invalid length. [ 1092.050910][ T5831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8403'. [ 1092.595515][ T5853] bond5 (unregistering): Released all slaves [ 1092.945603][ T5870] netlink: 'syz.2.8415': attribute type 11 has an invalid length. [ 1093.019400][ T5874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8417'. [ 1093.316443][ T5887] netlink: 'syz.4.8420': attribute type 62 has an invalid length. [ 1093.660205][ T5902] can: request_module (can-proto-0) failed. [ 1093.744052][ T5907] syzkaller0: entered promiscuous mode [ 1093.764407][ T5907] syzkaller0: entered allmulticast mode [ 1093.787086][ T5909] netlink: 'syz.3.8427': attribute type 13 has an invalid length. [ 1093.861826][ T5907] ip6gre2: entered allmulticast mode [ 1093.882404][ T5907] __nla_validate_parse: 4 callbacks suppressed [ 1093.882418][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8426'. [ 1093.901119][ T5909] syzkaller0: entered promiscuous mode [ 1093.913354][ T5909] syzkaller0: entered allmulticast mode [ 1094.055655][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8431'. [ 1094.229672][ T5928] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1094.597214][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8436'. [ 1094.768455][ T5948] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8438'. [ 1094.852801][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8440'. [ 1094.987139][ T5958] netlink: 'syz.2.8440': attribute type 1 has an invalid length. [ 1095.147283][ T5958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1095.195725][ T5969] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1095.293044][ T5973] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 1095.317131][ T5964] bond7: (slave geneve2): making interface the new active one [ 1095.333001][ T5964] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 1095.379293][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8448'. [ 1095.389444][ T5976] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1095.403652][ T5976] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.8449'. [ 1095.414758][T18733] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1095.427289][T18733] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1095.438080][ T5981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8450'. [ 1095.565889][T18733] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1095.575615][T18733] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1095.940237][ T6001] netlink: 'syz.4.8457': attribute type 1 has an invalid length. [ 1095.950441][ T6002] xt_HMARK: spi-set and port-set can't be combined [ 1095.983615][ T6001] IPv6: NLM_F_CREATE should be specified when creating new route [ 1096.201076][ T6017] netlink: 'syz.1.8462': attribute type 10 has an invalid length. [ 1096.255927][ T6018] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1096.263384][ T6023] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1096.603765][ T6034] netlink: 'syz.2.8467': attribute type 63 has an invalid length. [ 1096.665455][ T6034] netlink: 'syz.2.8467': attribute type 63 has an invalid length. [ 1096.752189][T21074] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 724 sec [ 1096.957430][ T6052] netlink: 'syz.1.8473': attribute type 1 has an invalid length. [ 1097.172318][ T6052] bond9: entered promiscuous mode [ 1097.180385][ T6052] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1097.246208][ T6064] bond9: (slave bridge2): making interface the new active one [ 1097.256214][ T6064] bridge2: entered promiscuous mode [ 1097.274301][ T6064] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 1097.301472][ T6055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1097.917327][ T6109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1098.140322][ T6113] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1098.286103][ T6131] netlink: 'syz.0.8488': attribute type 1 has an invalid length. [ 1098.426689][ T6116] syzkaller0: entered promiscuous mode [ 1098.447880][ T6116] syzkaller0: entered allmulticast mode [ 1098.460650][ T6136] syzkaller0: entered promiscuous mode [ 1098.468891][ T6136] syzkaller0: entered allmulticast mode [ 1098.537314][ T6128] netlink: 'syz.1.8489': attribute type 1 has an invalid length. [ 1098.734908][ T6145] x_tables: duplicate underflow at hook 2 [ 1098.871501][ T6147] netlink: 'syz.0.8494': attribute type 9 has an invalid length. [ 1101.403288][ T6156] __nla_validate_parse: 16 callbacks suppressed [ 1101.403306][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8496'. [ 1102.099047][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8504'. [ 1102.112837][ T6202] sctp: [Deprecated]: syz.4.8510 (pid 6202) Use of int in maxseg socket option. [ 1102.112837][ T6202] Use struct sctp_assoc_value instead [ 1102.124945][ T6204] netlink: 'syz.3.8509': attribute type 3 has an invalid length. [ 1102.151465][ T6202] sctp: [Deprecated]: syz.4.8510 (pid 6202) Use of int in maxseg socket option. [ 1102.151465][ T6202] Use struct sctp_assoc_value instead [ 1102.240087][ T6194] bridge3: port 1(veth11) entered blocking state [ 1102.248376][ T6194] bridge3: port 1(veth11) entered disabled state [ 1102.255529][ T6194] veth11: entered allmulticast mode [ 1102.263490][ T6194] veth11: entered promiscuous mode [ 1102.300120][ T6183] bridge3: port 2(veth0_to_bond) entered blocking state [ 1102.307962][ T6183] bridge3: port 2(veth0_to_bond) entered disabled state [ 1102.315892][ T6183] veth0_to_bond: entered allmulticast mode [ 1102.325429][ T6183] veth0_to_bond: entered promiscuous mode [ 1102.362574][ T6214] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8513'. [ 1102.666725][ T6219] bond5: entered allmulticast mode [ 1102.672324][ T6219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1102.700441][ T6233] tipc: Enabling of bearer rejected, failed to enable media [ 1102.857842][ T6228] syzkaller0: entered promiscuous mode [ 1102.866806][ T6228] syzkaller0: entered allmulticast mode [ 1102.900112][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8517'. [ 1102.990538][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8522'. [ 1105.477490][ T6260] netlink: 'syz.3.8523': attribute type 30 has an invalid length. [ 1105.651348][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1105.808344][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1105.868328][ T6266] netlink: 'syz.4.8524': attribute type 10 has an invalid length. [ 1105.889522][ T6277] syzkaller0: entered promiscuous mode [ 1105.906077][ T6277] syzkaller0: entered allmulticast mode [ 1105.912085][ T6278] netlink: 'syz.4.8524': attribute type 10 has an invalid length. [ 1105.928921][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8530'. [ 1105.974709][ T6266] : entered allmulticast mode [ 1106.034833][ T6287] netlink: 'syz.2.8533': attribute type 21 has an invalid length. [ 1106.044452][ T6282] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8532'. [ 1106.046464][ T6287] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8533'. [ 1106.086800][ T6290] netlink: 'syz.2.8533': attribute type 21 has an invalid length. [ 1106.110165][ T6282] vlan4: entered allmulticast mode [ 1106.116061][ T6282] bridge0: entered allmulticast mode [ 1106.128592][ T6287] netlink: 'syz.2.8533': attribute type 4 has an invalid length. [ 1106.147780][ T6287] netlink: 'syz.2.8533': attribute type 5 has an invalid length. [ 1106.169560][ T6290] netlink: 'syz.2.8533': attribute type 4 has an invalid length. [ 1106.192475][ T6290] netlink: 'syz.2.8533': attribute type 5 has an invalid length. [ 1106.476805][ T6303] __nla_validate_parse: 5 callbacks suppressed [ 1106.476824][ T6303] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8539'. [ 1106.915236][ T6330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1106.932282][ T6332] IPVS: set_ctl: invalid protocol: 221 172.20.20.170:20001 [ 1107.052196][ T6330] vlan3: entered promiscuous mode [ 1107.057856][ T6330] bond6: entered promiscuous mode [ 1107.066828][ T6330] vlan3: entered allmulticast mode [ 1107.075199][ T6330] bond6: entered allmulticast mode [ 1107.087854][ T6341] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1107.123707][ T6341] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1107.164575][ T6341] netlink: 21 bytes leftover after parsing attributes in process `syz.4.8548'. [ 1107.308194][ T6335] bond6: (slave bridge0): making interface the new active one [ 1107.337597][ T6335] bridge0: entered promiscuous mode [ 1107.367213][ T6335] bridge0: entered allmulticast mode [ 1107.401066][ T6335] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 1107.458237][ T6360] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8551'. [ 1108.135375][ T6390] syzkaller0: entered promiscuous mode [ 1108.145400][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8562'. [ 1108.156741][ T6390] syzkaller0: entered allmulticast mode [ 1108.306079][ T6399] team0: Port device syz_tun removed [ 1108.349404][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8563'. [ 1108.840965][ T6429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8570'. [ 1108.945310][ T6431] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8570'. [ 1109.250244][ T6455] tipc: Started in network mode [ 1109.257914][ T6455] tipc: Node identity 2ec5d7745df7, cluster identity 4711 [ 1109.281294][ T6455] tipc: Enabled bearer , priority 0 [ 1109.325717][ T6457] syzkaller0: entered promiscuous mode [ 1109.360386][ T6457] syzkaller0: entered allmulticast mode [ 1109.427500][ T6455] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1109.555433][ T6470] tipc: Resetting bearer [ 1109.642557][ T6454] tipc: Resetting bearer [ 1109.772858][ T6454] tipc: Disabling bearer [ 1109.907112][ T6483] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8585'. [ 1110.163290][ T6500] validate_nla: 2 callbacks suppressed [ 1110.163308][ T6500] netlink: 'syz.0.8591': attribute type 4 has an invalid length. [ 1110.585284][ T6519] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1110.604139][ T6523] netlink: 'syz.2.8597': attribute type 10 has an invalid length. [ 1110.653724][ T6523] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1111.061429][ T6538] vxcan1 speed is unknown, defaulting to 1000 [ 1111.117369][ T6555] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1111.426983][ T6578] atomic_op ffff88805495a198 conn xmit_atomic 0000000000000000 [ 1111.495721][ T6579] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1111.531031][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1111.558990][ T6579] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1111.575500][ T6579] gretap2: entered promiscuous mode [ 1111.594030][ T6579] gretap2: entered allmulticast mode [ 1111.799219][ T6591] vcan1: entered promiscuous mode [ 1111.904302][ T29] audit: type=1107 audit(1783278637.980:17): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$à+güOÝÈ¡KßÇ5Ïø¥Z¹0{žV=‚|loG&_&œi%åÆRДԮSŸ [ 1111.904302][ T29] ®„ysÐ碯„¦66c`À’ÚA“gø•Æ,¹eÿ' [ 1111.907567][ T6599] __nla_validate_parse: 8 callbacks suppressed [ 1111.907597][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1111.975088][ T29] audit: type=1107 audit(1783278637.980:18): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='$à+güOÝÈ¡KßÇ5Ïø¥Z¹0{žV=‚|loG&_&œi%åÆRДԮSŸ [ 1111.975088][ T29] ®„ysÐ碯„¦66c`À’ÚA“gø•Æ,¹eÿ' [ 1111.999404][ T6538] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1112.035470][ T6596] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8618'. [ 1112.149691][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8621'. [ 1112.719084][ T3353] syzkaller1: tun_net_xmit 90 [ 1112.825054][ T6640] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1112.905650][ T6640] 8021q: VLANs not supported on gre0 [ 1113.031590][ T6649] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1113.114085][ T6653] ieee802154 phy0 wpan0: encryption failed: -126 [ 1113.608932][ T6671] netlink: 'syz.2.8640': attribute type 1 has an invalid length. [ 1113.691220][ T6679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8642'. [ 1113.716200][ T6671] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1114.410363][ T6713] syzkaller0: entered promiscuous mode [ 1114.429867][ T6713] syzkaller0: entered allmulticast mode [ 1114.449937][ T6709] sch_fq: defrate 0 ignored. [ 1114.782362][ T6734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1114.806474][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8656'. [ 1115.055769][ T1059] block nbd1: Receive control failed (result -32) [ 1115.116727][ T6744] tap0: tun_chr_ioctl cmd 1074025676 [ 1115.132546][ T6744] tap0: owner set to 0 [ 1115.397482][ T6768] netlink: 'syz.2.8667': attribute type 1 has an invalid length. [ 1115.560046][ T6777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1115.662203][ T6768] bond9: entered promiscuous mode [ 1115.692302][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.692469][ T6768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1115.700807][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1115.727122][ T6774] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1115.773517][ T6774] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1115.788961][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8674'. [ 1115.801469][ T6774] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1116.026821][ T6799] netlink: 'syz.0.8677': attribute type 1 has an invalid length. [ 1116.103336][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8679'. [ 1116.185900][ T6799] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1116.357529][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8681'. [ 1116.379910][ T3355] IPVS: starting estimator thread 0... [ 1116.486269][ T6821] IPVS: using max 30 ests per chain, 72000 per kthread [ 1116.742257][ T6835] syzkaller1: entered promiscuous mode [ 1116.780006][ T6835] syzkaller1: entered allmulticast mode [ 1117.379355][ T6872] netlink: 'syz.1.8702': attribute type 11 has an invalid length. [ 1117.422494][ T6872] __nla_validate_parse: 2 callbacks suppressed [ 1117.422539][ T6872] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8702'. [ 1117.602605][ T6883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1117.720732][ T6890] tipc: Enabling of bearer rejected, failed to enable media [ 1117.745094][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8706'. [ 1118.141820][ T6911] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 1118.157396][ T6908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1118.169108][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1118.180149][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1118.193017][ T6911] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8714'. [ 1118.238034][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8711'. [ 1118.486569][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8721'. [ 1118.498788][ T6932] netlink: 'syz.3.8721': attribute type 7 has an invalid length. [ 1118.514523][ T6932] netlink: 'syz.3.8721': attribute type 8 has an invalid length. [ 1118.530323][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8721'. [ 1118.585538][ T6932] dummy0: entered promiscuous mode [ 1118.600306][ T6932] team0: entered promiscuous mode [ 1118.620249][ T6932] team_slave_0: entered promiscuous mode [ 1118.635281][ T6932] team_slave_1: entered promiscuous mode [ 1118.645004][ T6932] team0: left promiscuous mode [ 1118.649927][ T6932] team_slave_0: left promiscuous mode [ 1118.657750][ T6932] team_slave_1: left promiscuous mode [ 1118.667062][ T6932] dummy0: left promiscuous mode [ 1118.872729][ T6945] netlink: 'syz.3.8724': attribute type 21 has an invalid length. [ 1118.920212][ T6945] netlink: 'syz.3.8724': attribute type 1 has an invalid length. [ 1119.395756][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8728'. [ 1119.589317][ T6971] netlink: 'syz.1.8731': attribute type 39 has an invalid length. [ 1119.610430][ T6972] netlink: 'syz.2.8732': attribute type 1 has an invalid length. [ 1119.673974][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.683287][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.822151][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.037028][ T6984] netlink: 'syz.4.8735': attribute type 2 has an invalid length. [ 1120.052861][ T6985] gre2: entered promiscuous mode [ 1120.089744][T18733] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.114704][T18733] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.128157][T18733] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.146754][T18733] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.168284][T18733] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.181076][T18733] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.191425][T18733] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1120.201093][T18733] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.261146][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1120.408265][ T7003] netlink: 'syz.3.8741': attribute type 19 has an invalid length. [ 1120.422379][ T7003] openvswitch: netlink: Actions may not be safe on all matching packets [ 1120.445885][ T7003] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1120.594850][ T7008] gre0: Caught tx_queue_len zero misconfig [ 1121.280381][ T7041] xt_hashlimit: size too large, truncated to 1048576 [ 1121.345588][ T7045] netlink: 'syz.3.8751': attribute type 2 has an invalid length. [ 1121.438098][ T7045] : entered promiscuous mode [ 1121.721428][ T7059] netlink: 'syz.4.8755': attribute type 3 has an invalid length. [ 1121.743507][ T29] audit: type=1804 audit(1783278647.820:19): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8756" name="/newroot/491/cgroup.controllers" dev="tmpfs" ino=2547 res=1 errno=0 [ 1121.790691][ T7064] syzkaller0: entered promiscuous mode [ 1121.806868][ T7064] syzkaller0: entered allmulticast mode [ 1121.828236][ T29] audit: type=1800 audit(1783278647.820:20): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8756" name="cgroup.controllers" dev="tmpfs" ino=2547 res=0 errno=0 [ 1121.850594][ T7066] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1122.222555][ T7078] netlink: 'syz.1.8760': attribute type 1 has an invalid length. [ 1122.247243][ T7078] netlink: 'syz.1.8760': attribute type 7 has an invalid length. [ 1122.301431][ T7078] netlink: 'syz.1.8760': attribute type 8 has an invalid length. [ 1122.362189][ T7078] NCSI netlink: No device for ifindex 65584 [ 1122.469725][ T7092] __nla_validate_parse: 8 callbacks suppressed [ 1122.469743][ T7092] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8763'. [ 1122.558997][ T7093] netlink: 244 bytes leftover after parsing attributes in process `syz.3.8763'. [ 1122.620763][ T7102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1122.636157][ T7102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.000099][ T7120] IPv6: NLM_F_CREATE should be specified when creating new route [ 1123.022186][ T7120] netlink: 'syz.3.8769': attribute type 1 has an invalid length. [ 1123.092697][ T7133] netlink: 'syz.4.8773': attribute type 11 has an invalid length. [ 1123.167216][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8775'. [ 1123.262306][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8775'. [ 1123.667165][ T7160] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.8783'. [ 1123.907426][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8784'. [ 1124.051511][ T7176] netlink: 'syz.4.8788': attribute type 83 has an invalid length. [ 1124.338591][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1124.366374][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1124.381108][ T7187] netlink: 'syz.4.8791': attribute type 21 has an invalid length. [ 1124.403981][ T7187] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8791'. [ 1124.433992][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8793'. [ 1125.312634][ T7210] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1128.249815][ T7245] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1128.630982][ T7273] validate_nla: 1 callbacks suppressed [ 1128.631017][ T7273] netlink: 'syz.4.8819': attribute type 4 has an invalid length. [ 1128.631396][ T7281] netlink: 'syz.3.8820': attribute type 13 has an invalid length. [ 1128.672315][ T7283] syzkaller0: entered promiscuous mode [ 1128.679332][ T7283] syzkaller0: entered allmulticast mode [ 1128.688753][ T7281] gretap0: refused to change device tx_queue_len [ 1128.696610][ T7281] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1129.057154][ T7294] ieee802154 phy0 wpan0: encryption failed: -126 [ 1129.081001][ T7294] __nla_validate_parse: 3 callbacks suppressed [ 1129.081032][ T7294] netlink: 176 bytes leftover after parsing attributes in process `syz.4.8827'. [ 1129.084566][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1129.106422][ T7294] netlink: 'syz.4.8827': attribute type 1 has an invalid length. [ 1129.292721][ T7306] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1129.309209][ T7306] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1129.321168][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8832'. [ 1129.564389][ T7318] veth13: entered promiscuous mode [ 1129.565078][ T7320] xt_TCPMSS: Only works on TCP SYN packets [ 1129.584414][ T7318] veth13: entered allmulticast mode [ 1129.628312][ T7320] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1129.939255][ T7336] netlink: 'syz.4.8839': attribute type 32 has an invalid length. [ 1129.972648][ T7340] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1130.187928][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8844'. [ 1130.211897][ T7352] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1130.320676][ T7362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8846'. [ 1130.589199][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1130.766592][ T7389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1130.810022][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1130.873509][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1130.950382][ T7396] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1131.197392][ T7404] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1131.252495][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1131.267689][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1131.301069][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1131.312955][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1131.323337][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1131.631070][ T7418] netlink: 'syz.0.8863': attribute type 13 has an invalid length. [ 1131.826354][ T7425] netlink: 'syz.2.8864': attribute type 1 has an invalid length. [ 1131.863840][ T7426] netlink: 'syz.2.8864': attribute type 1 has an invalid length. [ 1131.988077][ T7441] netlink: 'syz.3.8868': attribute type 23 has an invalid length. [ 1132.106045][ T7426] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1132.578971][T30668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.592712][T30668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1132.604476][T30668] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.852709][T30668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.931488][T30668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1132.977592][T30668] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.205792][T30668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.224121][T30668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1133.234975][T30668] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.308802][ T7405] vxcan1 speed is unknown, defaulting to 1000 [ 1133.375877][ T5627] Bluetooth: hci0: command tx timeout [ 1133.510617][T30668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.543677][T30668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1133.565115][T30668] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.837999][ T7516] pimreg3: entered allmulticast mode [ 1134.169378][ T7533] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 1134.256409][ T7540] __nla_validate_parse: 4 callbacks suppressed [ 1134.256425][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1134.304312][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1134.315558][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1134.328137][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8890'. [ 1134.349410][ T7542] tipc: Failed to remove unknown binding: 66,0,0/0:2143099694/2143099696 [ 1134.356557][ T7533] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1134.368277][ T7542] tipc: Failed to remove unknown binding: 66,0,0/0:2143099694/2143099695 [ 1134.393840][ T7542] tipc: Failed to remove unknown binding: 66,0,0/0:2143099694/2143099696 [ 1134.424241][ T7542] tipc: Failed to remove unknown binding: 66,0,0/0:2143099694/2143099695 [ 1134.445409][ T7537] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1134.479828][T30668] bridge_slave_1: left promiscuous mode [ 1134.490880][T30668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.510577][T30668] bridge_slave_0: left allmulticast mode [ 1134.525524][T30668] bridge_slave_0: left promiscuous mode [ 1134.532502][T30668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.250861][T30668] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 1135.259445][T30668] bridge4 (unregistering): left promiscuous mode [ 1135.272787][T30668] bridge4 (unregistering): left allmulticast mode [ 1135.386984][T30668]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.396157][T30668] bond_slave_0: left allmulticast mode [ 1135.405686][T30668]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.414945][T30668] bond_slave_1: left allmulticast mode [ 1135.421764][T30668]  (unregistering): Released all slaves [ 1135.438295][T30668] bond1 (unregistering): Released all slaves [ 1135.453368][ T5627] Bluetooth: hci0: command tx timeout [ 1135.466186][T30668] bond2 (unregistering): Released all slaves [ 1135.485795][T30668] bond3 (unregistering): Released all slaves [ 1135.506455][T30668] bond4 (unregistering): Released all slaves [ 1135.526056][T30668] bond5 (unregistering): Released all slaves [ 1135.554275][T30668] bond6 (unregistering): Released all slaves [ 1135.572711][T30668] bond7 (unregistering): Released all slaves [ 1135.592740][T30668] bond8 (unregistering): Released all slaves [ 1135.621408][T30668] bond9 (unregistering): Released all slaves [ 1135.642404][T30668] bond10 (unregistering): (slave C): Releasing backup interface [ 1135.652929][T30668] bond10 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 1135.671770][T30668] bond10 (unregistering): Released all slaves [ 1135.690262][T30668] bond11 (unregistering): Released all slaves [ 1135.714974][T30668] bond12 (unregistering): Released all slaves [ 1135.748009][T30668] bond13 (unregistering): Released all slaves [ 1135.768000][T30668] bond0 (unregistering): Released all slaves [ 1135.787067][T30668] bond14 (unregistering): Released all slaves [ 1135.812580][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.824961][ T7541] bond8: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1135.947353][ T7405] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1136.134134][T30668] tipc: Disabling bearer [ 1136.172537][T30668] tipc: Left network mode [ 1136.849957][ T7585] openvswitch: netlink: Message has 1 unknown bytes. [ 1136.891206][ T7585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1137.166940][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1137.523183][ T5627] Bluetooth: hci0: command tx timeout [ 1137.705708][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1137.796320][ T7625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1137.815206][ T7625] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1137.867003][ T7625] netlink: 'syz.0.8906': attribute type 5 has an invalid length. [ 1137.923841][ T7625] netlink: 'syz.0.8906': attribute type 6 has an invalid length. [ 1137.971738][ T7625] netlink: 35 bytes leftover after parsing attributes in process `syz.0.8906'. [ 1138.102458][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.127783][ T7405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.172048][ T7639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8909'. [ 1138.172851][ T7405] bridge_slave_0: entered allmulticast mode [ 1138.259603][ T7405] bridge_slave_0: entered promiscuous mode [ 1138.272620][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.286239][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.302750][ T7405] bridge_slave_1: entered allmulticast mode [ 1138.324970][ T7405] bridge_slave_1: entered promiscuous mode [ 1138.502446][T30668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.529964][T30668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.548348][T30668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.565726][T30668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.596211][T30668] veth0_macvtap: left promiscuous mode [ 1138.617798][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8913'. [ 1138.630563][T30668] veth1_vlan: left promiscuous mode [ 1139.325740][T30668] team0 (unregistering): Port device team_slave_1 removed [ 1139.346226][T30668] team0 (unregistering): Port device team_slave_0 removed [ 1139.568925][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1139.590990][ T7405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.606014][ T5627] Bluetooth: hci0: command tx timeout [ 1139.634051][ T7405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.677261][ T7405] team0: Port device team_slave_0 added [ 1139.686336][ T7405] team0: Port device team_slave_1 added [ 1139.734057][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.751259][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.808391][ T7405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.822646][ T7405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.831429][ T7405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.899665][ T7405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.949532][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8916'. [ 1139.962102][ T7683] vlan2: left allmulticast mode [ 1139.970518][ T7683] bond4: left allmulticast mode [ 1139.981368][ T7683] geneve2: left allmulticast mode [ 1140.012627][ T7683] bond0: left promiscuous mode [ 1140.022648][ T7683] bridge6: left promiscuous mode [ 1140.041219][ T7683] ipvlan1: left allmulticast mode [ 1140.052858][ T7683] bond0: left allmulticast mode [ 1140.061945][ T7683] bridge6: left allmulticast mode [ 1140.071388][ T7683] bond5: left allmulticast mode [ 1140.099598][ T7683] vlan3: left promiscuous mode [ 1140.111773][ T7683] bond6: left promiscuous mode [ 1140.117216][ T7683] bridge0: left promiscuous mode [ 1140.122640][ T7683] vlan3: left allmulticast mode [ 1140.128186][ T7683] bond6: left allmulticast mode [ 1140.133561][ T7683] bridge0: left allmulticast mode [ 1140.158046][ T7683] gretap2: left promiscuous mode [ 1140.167935][ T7683] gretap2: left allmulticast mode [ 1140.177824][ T7683] vcan1: left promiscuous mode [ 1140.280766][T18730] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1140.308215][T18730] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.332040][T18730] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1140.362361][T18730] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.440053][ T7688] netlink: 'syz.3.8917': attribute type 10 has an invalid length. [ 1140.556382][T18730] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1140.590854][T18730] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.621037][T18730] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1140.651508][T18730] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.680936][ T7702] netlink: 'syz.2.8920': attribute type 1 has an invalid length. [ 1140.691390][ T7702] netlink: 'syz.2.8920': attribute type 1 has an invalid length. [ 1140.691816][ T7405] hsr_slave_0: entered promiscuous mode [ 1140.726984][ T7405] hsr_slave_1: entered promiscuous mode [ 1140.739184][ T7405] debugfs: 'hsr0' already exists in 'hsr' [ 1140.752444][ T7405] Cannot create hsr debugfs directory [ 1140.794802][T30668] IPVS: stop unused estimator thread 0... [ 1140.975957][ T7706] ip6tnl0: Caught tx_queue_len zero misconfig [ 1141.261709][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1141.341789][ T7728] netlink: 'syz.3.8927': attribute type 30 has an invalid length. [ 1141.362299][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8927'. [ 1141.470045][ T7736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8929'. [ 1141.778917][ T7744] ieee802154 phy0 wpan0: encryption failed: -126 [ 1141.885878][ T7751] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1142.107440][ T7751] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1142.124699][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1142.161720][ T7759] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1142.216368][ T7759] netlink: 'syz.1.8934': attribute type 5 has an invalid length. [ 1142.602650][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8939'. [ 1142.622294][ T7780] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8939'. [ 1142.869162][ T7790] netlink: 'syz.1.8942': attribute type 1 has an invalid length. [ 1142.890023][ T7405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1142.890838][ T7790] netlink: 'syz.1.8942': attribute type 1 has an invalid length. [ 1142.935645][ T7405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1142.959457][ T7405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1143.004283][ T7800] netlink: 'syz.3.8944': attribute type 3 has an invalid length. [ 1143.006424][ T7405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1143.041820][ T7405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1143.100040][ T7405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1143.136846][ T7405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1143.197077][ T7405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1143.552921][ T7405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.625479][ T7405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.677323][T30668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.684521][T30668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.738201][T30668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.745429][T30668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1143.974749][ T7835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1144.030582][ T7835] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1144.178226][ T7853] openvswitch: netlink: Key type 31 is not supported [ 1144.233251][ T7854] openvswitch: netlink: Key type 31 is not supported [ 1144.260130][ T7835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1144.286875][ T7835] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1144.354995][ T7835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1144.371134][ T7835] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1144.717461][ T7835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1144.742194][ T7835] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1144.920260][ T7835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1144.942534][ T7835] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1145.240867][ T7891] __nla_validate_parse: 6 callbacks suppressed [ 1145.240885][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8960'. [ 1145.334578][ T7888] veth1_to_bond: entered allmulticast mode [ 1145.366602][ T7887] veth1_to_bond: left allmulticast mode [ 1145.489819][ T7897] netlink: 'syz.2.8961': attribute type 12 has an invalid length. [ 1145.686878][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8962'. [ 1145.934628][ T7405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.173037][ T7930] netlink: 'syz.3.8968': attribute type 1 has an invalid length. [ 1146.226950][ T7928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.253540][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1146.330743][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8969'. [ 1146.707454][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8971'. [ 1146.798681][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8973'. [ 1147.049949][ T7405] veth0_vlan: entered promiscuous mode [ 1147.110008][ T7405] veth1_vlan: entered promiscuous mode [ 1147.211551][ T7978] tipc: Enabling of bearer rejected, failed to enable media [ 1147.320070][ T7405] veth0_macvtap: entered promiscuous mode [ 1147.382265][ T7405] veth1_macvtap: entered promiscuous mode [ 1147.624399][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.671644][ T7405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.785008][T18730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.805324][T18730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.897576][T18730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.936950][T18730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.613633][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.653376][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.887025][ T2237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.913769][ T2237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.273041][ T1059] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1150.287599][ T1059] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1150.298417][ T1059] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1150.330896][ T1059] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1150.339615][ T1059] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1150.476882][ T8095] netlink: 'syz.1.8995': attribute type 11 has an invalid length. [ 1150.487745][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1150.512944][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1150.524415][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1150.544109][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1150.555804][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1150.678058][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8995'. [ 1150.755917][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8995'. [ 1150.802127][ T8089] syzkaller0: entered promiscuous mode [ 1150.809018][ T8089] syzkaller0: entered allmulticast mode [ 1151.061068][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8999'. [ 1152.328713][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1152.646049][ T5627] Bluetooth: hci5: command tx timeout [ 1153.848319][ T8125] netlink: 'syz.4.9001': attribute type 12 has an invalid length. [ 1154.298407][ T8160] tipc: Started in network mode [ 1154.339484][ T8160] tipc: Node identity 5a924e46375e, cluster identity 4711 [ 1154.377594][ T8160] tipc: Enabled bearer , priority 0 [ 1154.504522][ T8163] syzkaller0: entered promiscuous mode [ 1154.510370][ T8163] syzkaller0: entered allmulticast mode [ 1154.540727][ T8150] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1154.691555][ T8174] tipc: Resetting bearer [ 1154.726194][ T5627] Bluetooth: hci5: command tx timeout [ 1154.761216][ T8148] tipc: Resetting bearer [ 1154.824630][ T8148] tipc: Disabling bearer [ 1154.911899][ T8085] vxcan1 speed is unknown, defaulting to 1000 [ 1155.170498][ T8198] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 1155.627974][ T8085] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1155.878443][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1155.906283][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1155.992294][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1156.045106][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9021'. [ 1156.265649][ T8240] netlink: 'syz.4.9024': attribute type 1 has an invalid length. [ 1156.282185][ T8240] 8021q: VLANs not supported on wg2 [ 1156.693786][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.720343][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.738699][ T8085] bridge_slave_0: entered allmulticast mode [ 1156.749709][ T8085] bridge_slave_0: entered promiscuous mode [ 1156.765886][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.781130][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.790215][ T8085] bridge_slave_1: entered allmulticast mode [ 1156.803246][ T5627] Bluetooth: hci5: command tx timeout [ 1156.810141][ T8085] bridge_slave_1: entered promiscuous mode [ 1156.897888][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9029'. [ 1156.995786][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.029084][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.149738][ T8085] team0: Port device team_slave_0 added [ 1157.166806][ T8085] team0: Port device team_slave_1 added [ 1157.212396][T21074] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 784 sec [ 1157.351440][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.368336][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.441317][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.479258][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.502186][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.560707][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.584863][ T8290] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1157.588304][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9034'. [ 1157.687826][ T8085] hsr_slave_0: entered promiscuous mode [ 1157.706466][ T8085] hsr_slave_1: entered promiscuous mode [ 1157.727186][ T8085] debugfs: 'hsr0' already exists in 'hsr' [ 1157.742634][ T8085] Cannot create hsr debugfs directory [ 1158.258578][ T8307] netlink: 'syz.3.9038': attribute type 9 has an invalid length. [ 1158.796486][ T8085] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.816573][ T8085] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.818842][ T8329] x_tables: unsorted entry at hook 3 [ 1158.830962][ T8085] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1158.886734][ T5627] Bluetooth: hci5: command tx timeout [ 1158.941937][ T8326] syzkaller0: entered promiscuous mode [ 1158.964884][ T8326] syzkaller0: entered allmulticast mode [ 1159.062971][ T8339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1159.250887][ T8085] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.273606][ T8085] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.283765][T32110] IPVS: ip_vs_send_async error -101 [ 1159.285106][ T8085] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1159.300939][ T8349] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9045'. [ 1159.439786][ T8085] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.461395][ T8085] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.486265][ T8085] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1159.540565][ T8357] netlink: 'syz.3.9048': attribute type 20 has an invalid length. [ 1159.554761][ T8357] IPv6: NLM_F_CREATE should be specified when creating new route [ 1159.694096][ T8085] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.712906][ T8085] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.745615][ T8085] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1160.246251][ T8362] netlink: 'syz.3.9050': attribute type 4 has an invalid length. [ 1160.279297][ T8362] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9050'. [ 1160.526306][ T8085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1160.567030][ T8085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1160.602555][ T8085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1160.677888][ T8085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1160.703776][ T8085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1160.729998][ T8085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1160.774228][ T8085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1160.801914][ T8085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1161.119250][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.247049][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.311391][ T2238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.318631][ T2238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.358704][T18730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.365897][T18730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.425027][ T8435] netlink: 'syz.1.9067': attribute type 11 has an invalid length. [ 1161.475884][ T8439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1161.476305][ T8435] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9067'. [ 1161.571897][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1161.659871][ T8443] sctp: [Deprecated]: syz.4.9069 (pid 8443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1161.659871][ T8443] Use struct sctp_sack_info instead [ 1162.060307][ T8459] bond10: entered promiscuous mode [ 1162.066698][ T8459] bond10: entered allmulticast mode [ 1162.072946][ T8459] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1162.116239][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9073'. [ 1162.156646][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9073'. [ 1162.282125][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1162.419793][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1162.444452][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9071'. [ 1163.198621][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1163.262557][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.343587][ T8522] netlink: 'syz.4.9091': attribute type 12 has an invalid length. [ 1163.378251][ T8521] netlink: 'syz.4.9091': attribute type 12 has an invalid length. [ 1163.404461][ T8085] veth0_vlan: entered promiscuous mode [ 1163.422846][ T8085] veth1_vlan: entered promiscuous mode [ 1163.428609][ T8523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9091'. [ 1163.489504][ T8085] veth0_macvtap: entered promiscuous mode [ 1163.512747][ T8529] netlink: 'syz.3.9093': attribute type 5 has an invalid length. [ 1163.521180][ T8085] veth1_macvtap: entered promiscuous mode [ 1163.532305][ T8529] netlink: 'syz.3.9093': attribute type 6 has an invalid length. [ 1163.554858][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.587357][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.628540][T18735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.660687][T18735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.700201][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.740425][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.966864][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.983416][ T8534] openvswitch: netlink: Flow key attr not present in new flow. [ 1164.020429][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.126860][ T2237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.146036][ T2237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.161381][ T8543] veth0_to_bridge: entered promiscuous mode [ 1164.182153][ T8543] veth0_to_bridge: left promiscuous mode [ 1164.762572][ T8569] netlink: 'syz.4.9103': attribute type 11 has an invalid length. [ 1165.041700][ T8574] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1165.570651][ T8590] syzkaller0: entered promiscuous mode [ 1165.586780][ T8590] syzkaller0: entered allmulticast mode [ 1165.666199][ T8590] tipc: Started in network mode [ 1165.686440][ T8590] tipc: Node identity 82aa22ec5fca, cluster identity 4711 [ 1165.703465][ T8590] tipc: Enabled bearer , priority 0 [ 1165.731943][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fd9b400: rx timeout, send abort [ 1165.745943][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807fd9b400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1165.775477][ T8589] tipc: Resetting bearer [ 1165.846471][ T8589] tipc: Disabling bearer [ 1166.362961][ T8627] syzkaller0: entered promiscuous mode [ 1166.380144][ T8627] syzkaller0: entered allmulticast mode [ 1167.013683][ T8661] netlink: 'syz.2.9129': attribute type 12 has an invalid length. [ 1167.046184][ T8661] netlink: 'syz.2.9129': attribute type 29 has an invalid length. [ 1167.080857][ T8661] __nla_validate_parse: 19 callbacks suppressed [ 1167.080888][ T8661] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1167.113592][ T8661] netlink: 'syz.2.9129': attribute type 3 has an invalid length. [ 1167.141712][ T8661] netlink: 'syz.2.9129': attribute type 2 has an invalid length. [ 1167.160556][ T8661] netlink: 35 bytes leftover after parsing attributes in process `syz.2.9129'. [ 1167.170740][ T8667] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1167.204152][ T8668] tipc: Enabled bearer , priority 10 [ 1167.337207][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1167.363499][ T8674] netlink: 'syz.4.9133': attribute type 22 has an invalid length. [ 1167.381691][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1167.381805][ T8679] netlink: 'syz.2.9135': attribute type 1 has an invalid length. [ 1167.405652][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1167.406537][T30668] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.415758][ T8674] netlink: 'syz.4.9133': attribute type 22 has an invalid length. [ 1167.426512][T30668] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.441337][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9133'. [ 1167.469320][T30668] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.479646][T30668] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.630353][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9139'. [ 1167.740808][ T8691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1167.792345][ T8691] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1167.820733][ T8691] gretap1: entered promiscuous mode [ 1167.842988][ T8691] gretap1: entered allmulticast mode [ 1167.930090][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9140'. [ 1168.238519][ T8719] netlink: 'syz.1.9144': attribute type 1 has an invalid length. [ 1168.326901][ T8725] netlink: 'syz.0.9146': attribute type 7 has an invalid length. [ 1168.342885][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9146'. [ 1168.444697][ T8699] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1168.475175][ T8699] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1168.534985][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9147'. [ 1168.624838][ T8737] tipc: Enabled bearer , priority 0 [ 1168.666558][ T8735] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1168.682507][ T8735] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1168.714116][ T8737] syzkaller0: entered promiscuous mode [ 1168.719678][ T8737] syzkaller0: entered allmulticast mode [ 1168.729874][ T8744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1169.199694][ T8766] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1169.200613][ T8758] tipc: Resetting bearer [ 1169.218847][ T8764] veth1_macvtap: left promiscuous mode [ 1169.387793][ T8736] tipc: Resetting bearer [ 1169.506303][ T8736] tipc: Disabling bearer [ 1169.628588][ T8782] xt_nfacct: accounting object `syz1' does not exist [ 1169.996680][ T8795] batadv1: entered allmulticast mode [ 1170.219558][ T8794] syzkaller0: entered promiscuous mode [ 1170.239278][ T8794] syzkaller0: entered allmulticast mode [ 1170.420935][ T8818] validate_nla: 2 callbacks suppressed [ 1170.420952][ T8818] netlink: 'syz.1.9169': attribute type 1 has an invalid length. [ 1173.403396][ T5286] veth1_macvtap: entered promiscuous mode [ 1173.470241][ T8844] __nla_validate_parse: 6 callbacks suppressed [ 1173.470258][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9172'. [ 1173.849756][ T8861] bond1: Removing last arp target with arp_interval on [ 1174.142972][ T8881] tipc: Enabling of bearer rejected, failed to enable media [ 1174.401290][ T8893] netlink: 'syz.2.9183': attribute type 4 has an invalid length. [ 1174.660179][ T29] audit: type=1804 audit(1783278700.740:21): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9185" name="/newroot/597/cgroup.controllers" dev="tmpfs" ino=3089 res=1 errno=0 [ 1174.772500][ T29] audit: type=1800 audit(1783278700.770:22): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9185" name="cgroup.controllers" dev="tmpfs" ino=3089 res=0 errno=0 [ 1175.342709][ T8927] openvswitch: netlink: IP tunnel dst address not specified [ 1175.367275][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1175.401066][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9194'. [ 1175.447173][ T8927] netlink: 'syz.2.9194': attribute type 14 has an invalid length. [ 1175.479323][ T8927] netlink: 'syz.2.9194': attribute type 13 has an invalid length. [ 1175.888980][ T1059] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1175.908150][ T1059] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1175.922796][ T1059] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1175.935603][ T1059] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1175.949755][ T1059] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1176.019492][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9199'. [ 1176.028953][ T8950] SET target dimension over the limit! [ 1176.080341][ T8946] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1176.088428][ T8946] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1176.320366][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9201'. [ 1176.580331][ T8966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9206'. [ 1176.838715][ T8976] netlink: 'syz.2.9207': attribute type 83 has an invalid length. [ 1177.134533][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.141429][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1177.142254][ T8988] netlink: 'syz.2.9209': attribute type 12 has an invalid length. [ 1177.226325][T30668] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1177.554455][ T8939] vxcan1 speed is unknown, defaulting to 1000 [ 1177.666784][ T9006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9217'. [ 1177.967206][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.003308][ T5627] Bluetooth: hci4: command tx timeout [ 1178.068968][ T9021] macvtap1: entered promiscuous mode [ 1178.077811][ T9021] macvtap1: entered allmulticast mode [ 1178.083516][ T9021] veth1_vlan: entered allmulticast mode [ 1178.100515][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.115991][ T9022] tc action pedit offset 0 out of bounds [ 1178.160056][ T9021] macvtap2: entered promiscuous mode [ 1178.170672][ T9021] macvtap2: entered allmulticast mode [ 1178.192929][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.279492][ T9021] macvtap3: entered promiscuous mode [ 1178.288505][ T9021] macvtap3: entered allmulticast mode [ 1178.401385][ T9021] macvtap4: entered promiscuous mode [ 1178.411047][ T9021] macvtap4: entered allmulticast mode [ 1178.420508][ T8939] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1178.461926][ T9021] macvtap5: entered promiscuous mode [ 1178.473358][ T9021] macvtap5: entered allmulticast mode [ 1178.481158][ T9021] __nla_validate_parse: 2 callbacks suppressed [ 1178.481233][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.529995][ T9021] macvtap6: entered promiscuous mode [ 1178.536244][ T9021] macvtap6: entered allmulticast mode [ 1178.549289][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.585681][ T9037] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9226'. [ 1178.605091][ T9021] macvtap7: entered promiscuous mode [ 1178.624146][ T9021] macvtap7: entered allmulticast mode [ 1178.638225][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9220'. [ 1178.715718][ T9021] macvtap8: entered promiscuous mode [ 1178.721682][ T9021] macvtap8: entered allmulticast mode [ 1179.274577][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1179.332823][ T9059] : renamed from ip6gretap0 [ 1179.371688][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1179.426291][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9235'. [ 1179.725025][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9239'. [ 1179.903004][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.912276][ T8939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.920995][ T8939] bridge_slave_0: entered allmulticast mode [ 1179.939322][ T8939] bridge_slave_0: entered promiscuous mode [ 1179.954219][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.966796][ T8939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.975061][ T9067] RDS: rds_bind could not find a transport for fe88::103, load rds_tcp or rds_rdma? [ 1179.997645][ T9094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9241'. [ 1180.013735][ T8939] bridge_slave_1: entered allmulticast mode [ 1180.024053][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9242'. [ 1180.036660][ T8939] bridge_slave_1: entered promiscuous mode [ 1180.089280][ T5627] Bluetooth: hci4: command tx timeout [ 1180.337007][ T8939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.379169][ T8939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.470989][ T3352] IPVS: starting estimator thread 0... [ 1180.485275][ T9116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1180.492530][ T9116] IPv6: NLM_F_CREATE should be set when creating new route [ 1180.505537][ T9119] "syz.1.9247" (9119) uses obsolete ecb(arc4) skcipher [ 1180.595049][ T9118] IPVS: using max 27 ests per chain, 64800 per kthread [ 1180.678933][ T8939] team0: Port device team_slave_0 added [ 1180.706564][ T8939] team0: Port device team_slave_1 added [ 1180.988845][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.024943][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.070491][ T8939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.092160][ T8939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.101732][ T8939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.142789][ T8939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.146402][ T9147] netlink: 'syz.2.9256': attribute type 1 has an invalid length. [ 1181.162331][ T9147] netlink: 'syz.2.9256': attribute type 2 has an invalid length. [ 1181.282207][ T8939] hsr_slave_0: entered promiscuous mode [ 1181.297441][ T8939] hsr_slave_1: entered promiscuous mode [ 1181.310416][ T8939] debugfs: 'hsr0' already exists in 'hsr' [ 1181.316607][ T8939] Cannot create hsr debugfs directory [ 1181.677561][ T9161] netlink: 'syz.2.9261': attribute type 3 has an invalid length. [ 1181.740297][ T9162] macvlan0: entered promiscuous mode [ 1181.800590][ T9161] mac80211_hwsim hwsim89 syzkaller0: entered promiscuous mode [ 1181.834664][ T9161] mac80211_hwsim hwsim89 syzkaller0: entered allmulticast mode [ 1182.166981][ T5627] Bluetooth: hci4: command tx timeout [ 1182.244172][ T9161] syzkaller1: entered promiscuous mode [ 1182.257868][ T9161] syzkaller1: entered allmulticast mode [ 1182.437612][ T9186] syzkaller0: entered promiscuous mode [ 1182.456886][ T9186] syzkaller0: entered allmulticast mode [ 1183.205552][ T8939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1183.240898][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1183.261198][ T8939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1183.302497][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.321140][ T9191] netlink: 'syz.2.9268': attribute type 1 has an invalid length. [ 1183.337908][ T8939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1183.375662][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.386669][ T8939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1183.427413][ T8939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1183.690368][ T9231] ip6gre1: entered promiscuous mode [ 1183.715713][ T9231] ip6gre1: entered allmulticast mode [ 1184.058929][ T8939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.134101][ T8939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.179934][ T2237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.187133][ T2237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.243218][ T5627] Bluetooth: hci4: command tx timeout [ 1184.257945][ T2238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.267554][ T2238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.753020][ T9259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1185.458347][ T9286] __nla_validate_parse: 135 callbacks suppressed [ 1185.458368][ T9286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9289'. [ 1185.538491][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 1185.949832][ T8939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.132689][ T9314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1186.164736][ T8939] veth0_vlan: entered promiscuous mode [ 1186.185962][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1186.679486][ T8939] veth1_vlan: entered promiscuous mode [ 1186.769331][ T9334] block nbd0: reconnected socket [ 1186.774639][ T5627] block nbd0: Receive control failed (result -107) [ 1186.889322][ T9340] syzkaller0: entered promiscuous mode [ 1186.909020][ T9340] syzkaller0: entered allmulticast mode [ 1187.036994][ T2237] pimreg3: left allmulticast mode [ 1187.593005][ T2237] bond5 (unregistering): (slave ip6gretap2): Releasing active interface [ 1187.752640][ T2237] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1187.848932][ T2237] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1187.940105][ T2237] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1187.950741][ T2237] bond0 (unregistering): Released all slaves [ 1187.968944][ T2237] bond1 (unregistering): Released all slaves [ 1187.987669][ T2237] bond2 (unregistering): Released all slaves [ 1188.008381][ T2237] bond3 (unregistering): Released all slaves [ 1188.037044][ T2237] bond4 (unregistering): Released all slaves [ 1188.055691][ T2237] bond5 (unregistering): Released all slaves [ 1188.075750][ T2237] bond6 (unregistering): Released all slaves [ 1188.103983][ T2237] bond7 (unregistering): Released all slaves [ 1188.122759][ T2237] bond8 (unregistering): Released all slaves [ 1188.151878][ T2237] bond9 (unregistering): Released all slaves [ 1188.173939][ T2237] bond10 (unregistering): Released all slaves [ 1188.278159][ T9370] vxcan1 speed is unknown, defaulting to 1000 [ 1188.347877][ T8939] veth0_macvtap: entered promiscuous mode [ 1188.378997][ T8939] veth1_macvtap: entered promiscuous mode [ 1188.461031][ T2237] tipc: Left network mode [ 1188.464953][ T9374] netlink: 'syz.3.9308': attribute type 2 has an invalid length. [ 1188.487804][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.527341][ T9379] Cannot find add_set index 0 as target [ 1188.533996][ T9377] Cannot find add_set index 0 as target [ 1188.600038][ T8939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.741357][T18730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.770690][T18730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.858740][T18730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.014585][T18730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.251591][ T9408] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1189.459221][ T9414] netlink: 'syz.2.9320': attribute type 4 has an invalid length. [ 1189.490228][ T9414] netlink: 17 bytes leftover after parsing attributes in process `syz.2.9320'. [ 1189.735700][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.752642][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.838991][ T9438] netlink: 'syz.2.9323': attribute type 29 has an invalid length. [ 1189.850102][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1189.861197][ T9447] netlink: 'syz.2.9323': attribute type 29 has an invalid length. [ 1189.870893][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9323'. [ 1190.052127][T30668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.091949][T30668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.401060][ T9462] syzkaller0: entered promiscuous mode [ 1190.416417][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9327'. [ 1190.432486][ T9462] syzkaller0: entered allmulticast mode [ 1190.477754][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9327'. [ 1190.501000][ T9462] netlink: 'syz.3.9326': attribute type 142 has an invalid length. [ 1190.519762][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9327'. [ 1190.637382][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9327'. [ 1190.950259][ T2237] hsr_slave_0: left promiscuous mode [ 1190.986943][ T2237] hsr_slave_1: left promiscuous mode [ 1191.009679][ T2237] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1191.048192][ T2237] batman_adv: batadv0: Removing interface: ipvlan2 [ 1191.098679][ T9430] IPVS: starting estimator thread 0... [ 1191.114529][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1191.134850][ T9495] netlink: 'syz.3.9334': attribute type 10 has an invalid length. [ 1191.158060][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1191.188781][ T9500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9334'. [ 1191.205703][ T9496] IPVS: using max 31 ests per chain, 74400 per kthread [ 1191.558041][ T2237] veth1_vlan: left promiscuous mode [ 1191.571791][ T2237] veth0_vlan: left promiscuous mode [ 1194.035820][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1194.047853][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9354'. [ 1194.261949][ T9602] netlink: 'syz.2.9358': attribute type 1 has an invalid length. [ 1194.517526][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9361'. [ 1194.744824][ T9623] tipc: Invalid UDP bearer configuration [ 1194.744875][ T9623] tipc: Enabling of bearer rejected, failed to enable media [ 1194.810447][ T9628] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9366'. [ 1195.002328][ T9636] tipc: New replicast peer: 255.255.255.255 [ 1195.018684][ T9636] tipc: Enabled bearer , priority 10 [ 1195.518525][ T9662] __nla_validate_parse: 3 callbacks suppressed [ 1195.518573][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9376'. [ 1195.975032][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9380'. [ 1196.164275][ T9432] tipc: Node number set to 1932711796 [ 1196.392957][ T9696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1196.428708][ T9697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9384'. [ 1196.548575][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9385'. [ 1197.071111][ T9735] netlink: 'syz.2.9392': attribute type 1 has an invalid length. [ 1197.088048][ T9592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.170082][ T9741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9392'. [ 1197.286468][ T9735] bond3: entered promiscuous mode [ 1197.295712][ T9735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1197.427761][ T9746] pim6reg: entered allmulticast mode [ 1197.460811][ T9752] netlink: 'syz.1.9395': attribute type 21 has an invalid length. [ 1197.726582][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9399'. [ 1197.766388][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9400'. [ 1198.079899][ T9790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9403'. [ 1198.319394][ T9807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9407'. [ 1198.359567][ T9807] netlink: 'syz.3.9407': attribute type 12 has an invalid length. [ 1198.392163][ T9807] netlink: 'syz.3.9407': attribute type 11 has an invalid length. [ 1198.872825][ T9833] macvtap0: entered allmulticast mode [ 1198.878547][ T9833] veth0_macvtap: entered allmulticast mode [ 1198.957933][ T9829] netlink: 'syz.4.9413': attribute type 1 has an invalid length. [ 1198.993462][ T9836] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1199.161240][ T9847] syzkaller0: entered promiscuous mode [ 1199.187002][ T9847] syzkaller0: entered allmulticast mode [ 1199.665107][ T9869] gretap0: entered promiscuous mode [ 1199.684604][ T9869] vlan2: entered promiscuous mode [ 1199.847533][ T9883] ip6erspan0: entered allmulticast mode [ 1200.270919][ T9900] syzkaller0: entered promiscuous mode [ 1200.313676][ T9900] syzkaller0: entered allmulticast mode [ 1200.679724][ T9926] ieee802154 phy0 wpan0: encryption failed: -126 [ 1200.842877][ T9931] __nla_validate_parse: 10 callbacks suppressed [ 1200.842896][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1200.941758][ T9934] netlink: 576 bytes leftover after parsing attributes in process `syz.0.9442'. [ 1201.080212][ T9946] netlink: 'syz.0.9442': attribute type 1 has an invalid length. [ 1201.210467][ T9944] gtp0: entered allmulticast mode [ 1201.247646][ T9944] team0: Device gtp0 is of different type [ 1201.358541][ T9949] ip6erspan1: entered allmulticast mode [ 1202.392910][T10008] netlink: zone id is out of range [ 1202.424604][T10008] netlink: zone id is out of range [ 1202.462566][T10008] netlink: zone id is out of range [ 1202.482750][T10008] netlink: zone id is out of range [ 1202.516963][T10001] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9456'. [ 1202.551707][T10008] netlink: zone id is out of range [ 1202.570519][T10008] netlink: zone id is out of range [ 1202.594182][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1202.615504][T10008] netlink: zone id is out of range [ 1202.622956][T10017] openvswitch: netlink: Flow actions attr not present in new flow. [ 1202.636011][T10008] netlink: zone id is out of range [ 1202.658393][T10008] netlink: zone id is out of range [ 1202.672865][T10022] netlink: 'syz.0.9461': attribute type 8 has an invalid length. [ 1202.757850][T10020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9460'. [ 1203.226873][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.274682][T10051] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1203.275555][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.313410][T10051] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1203.359800][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.414187][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1203.457563][T10063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1203.468792][T10050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1204.095715][T10095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9478'. [ 1204.182733][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.192430][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.210920][T10108] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9482'. [ 1204.310176][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.327489][T10091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.416005][T10091] veth0_macvtap: left allmulticast mode [ 1204.421857][T10091] macvtap0: left allmulticast mode [ 1204.532003][T10091] ip6erspan0: left allmulticast mode [ 1204.569852][T10096] bridge43: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1204.621955][T18731] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.642689][T18731] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.860886][T10113] syzkaller0: entered promiscuous mode [ 1204.877568][T10113] syzkaller0: entered allmulticast mode [ 1204.904303][T18731] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.940622][T18731] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.413377][T10133] netlink: 'syz.0.9483': attribute type 1 has an invalid length. [ 1205.478683][T10133] netlink: 'syz.0.9483': attribute type 11 has an invalid length. [ 1208.275242][T10166] __nla_validate_parse: 1 callbacks suppressed [ 1208.275261][T10166] netlink: 236 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1208.319383][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9497'. [ 1208.337516][T10166] netlink: 'syz.3.9493': attribute type 1 has an invalid length. [ 1208.365103][T10175] netlink: 'syz.0.9496': attribute type 11 has an invalid length. [ 1208.407837][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1208.434941][T10166] net_ratelimit: 74 callbacks suppressed [ 1208.434957][T10166] openvswitch: netlink: Flow actions attr not present in new flow. [ 1208.464678][T10181] Bluetooth: MGMT ver 1.23 [ 1208.519493][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9500'. [ 1208.818157][T10206] netlink: 'syz.1.9507': attribute type 8 has an invalid length. [ 1208.829299][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9507'. [ 1209.191455][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1209.210815][T10232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9515'. [ 1209.269155][T10230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.381535][T10243] xt_hashlimit: size too large, truncated to 1048576 [ 1209.467192][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.518933][T10250] bridge_slave_0 (unregistering): left allmulticast mode [ 1209.532101][T10250] bridge_slave_0 (unregistering): left promiscuous mode [ 1209.544150][T10250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.711208][T10266] pimreg: entered allmulticast mode [ 1209.779874][T10270] tap0: tun_chr_ioctl cmd 2148553947 [ 1211.242340][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9532'. [ 1211.391162][T10294] netlink: 'syz.1.9534': attribute type 21 has an invalid length. [ 1211.415841][T10294] netlink: 'syz.1.9534': attribute type 1 has an invalid length. [ 1211.460625][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1211.468673][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9537'. [ 1211.517544][T10300] netlink: 'syz.3.9537': attribute type 7 has an invalid length. [ 1211.547679][T10300] netlink: 'syz.3.9537': attribute type 8 has an invalid length. [ 1212.318006][T10349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.325702][T10349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.420190][T10349] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1212.805311][T10392] netlink: 'syz.0.9555': attribute type 7 has an invalid length. [ 1212.868597][T10374] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20002 [ 1213.907138][T10464] can: request_module (can-proto-0) failed. [ 1214.108197][ T5286] veth0_vlan: left promiscuous mode [ 1214.146112][ T9432] veth0_vlan: entered promiscuous mode [ 1214.162777][T10485] __nla_validate_parse: 4 callbacks suppressed [ 1214.162793][T10485] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9579'. [ 1214.391932][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9583'. [ 1214.456253][ T1059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1214.470049][ T1059] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1214.478059][ T1059] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1214.498725][ T1059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1214.510225][ T1059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1214.930627][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1214.972374][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1214.983838][T10513] netlink: 'syz.2.9586': attribute type 20 has an invalid length. [ 1214.991830][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1215.025881][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1215.055415][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9588'. [ 1215.090674][ T2238] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.090773][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1215.131703][ T2238] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.134587][T10513] netlink: 'syz.2.9586': attribute type 20 has an invalid length. [ 1215.157576][T10526] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9589'. [ 1215.169406][ T2238] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.191515][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9586'. [ 1215.319393][ T2238] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.556780][T10543] ip6gre1: entered promiscuous mode [ 1215.563859][T10545] xt_CT: No such helper "snmp_trap" [ 1215.582013][T10543] ip6gre1: entered allmulticast mode [ 1215.738778][T10494] vxcan1 speed is unknown, defaulting to 1000 [ 1215.747691][T10555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.922336][T10564] netlink: 'syz.2.9598': attribute type 1 has an invalid length. [ 1216.012924][ T7723] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1216.041782][T10569] netlink: 'syz.0.9599': attribute type 8 has an invalid length. [ 1216.094684][T10564] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1216.247745][T10577] gretap2: entered promiscuous mode [ 1216.305885][T10577] bond4: (slave gretap2): making interface the new active one [ 1216.351291][T10577] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 1216.417918][T10581] macvlan2: entered promiscuous mode [ 1216.423876][T10581] macvlan2: entered allmulticast mode [ 1216.430132][T10581] bond4: entered promiscuous mode [ 1216.439065][T10581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1216.447054][T10581] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1216.464572][T10581] bond4: left promiscuous mode [ 1216.541277][T10494] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1216.574428][ T1059] Bluetooth: hci3: command tx timeout [ 1216.700840][T10596] bond2: entered promiscuous mode [ 1216.774610][T10601] macvlan2: entered promiscuous mode [ 1216.780134][T10601] macvlan2: entered allmulticast mode [ 1216.787344][T10601] bond2: (slave macvlan2): Opening slave failed [ 1217.051830][T18735] bridge_slave_1: left allmulticast mode [ 1217.069630][T18735] bridge_slave_1: left promiscuous mode [ 1217.078602][T18735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.098277][T18735] bridge_slave_0: left allmulticast mode [ 1217.113867][T18735] bridge_slave_0: left promiscuous mode [ 1217.132924][T18735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.175568][T10627] ieee802154 phy0 wpan0: encryption failed: -126 [ 1217.200631][T18735] veth0_to_bond: left allmulticast mode [ 1217.224499][T18735] veth0_to_bond: left promiscuous mode [ 1217.238540][T18735] bridge3: port 2(veth0_to_bond) entered disabled state [ 1217.259208][T18735] veth11: left allmulticast mode [ 1217.277209][T18735] veth11: left promiscuous mode [ 1217.295828][T18735] bridge3: port 1(veth11) entered disabled state [ 1217.523212][ T9441] page_pool_release_retry() stalled pool shutdown: id 72, 1 inflight 845 sec [ 1217.575034][T18735] bond8 (unregistering): (slave bridge1): Releasing active interface [ 1217.591204][T18735] bond9 (unregistering): (slave bridge2): Releasing backup interface [ 1217.600398][T18735] bridge2 (unregistering): left promiscuous mode [ 1217.642494][T18735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.651427][T18735] bond_slave_0: left allmulticast mode [ 1217.658423][T18735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.668842][T18735] bond_slave_1: left allmulticast mode [ 1217.674759][T18735] bond0 (unregistering): Released all slaves [ 1217.686099][T18735] bond1 (unregistering): (slave veth3): Releasing active interface [ 1217.694582][T18735] veth0_virt_wifi: entered promiscuous mode [ 1217.702047][T18735] bond1 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 1217.713006][T18735] bond1 (unregistering): Released all slaves [ 1217.728676][T18735] bond2 (unregistering): Released all slaves [ 1217.744329][T18735] bond3 (unregistering): Released all slaves [ 1217.760277][T18735] bond4 (unregistering): (slave veth5): Releasing active interface [ 1217.770442][T18735] bond4 (unregistering): (slave veth7): Releasing active interface [ 1217.779922][T18735] bond4 (unregistering): Released all slaves [ 1217.797255][T18735] bond5 (unregistering): Released all slaves [ 1217.811895][T18735] bond6 (unregistering): Released all slaves [ 1217.827423][T18735] bond7 (unregistering): Released all slaves [ 1217.841243][T18735] bond8 (unregistering): Released all slaves [ 1217.865293][T18735] bond9 (unregistering): Released all slaves [ 1217.895841][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1218.112124][T10654] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1218.147932][T10654] netlink: 'syz.3.9615': attribute type 1 has an invalid length. [ 1218.181835][T10654] Bluetooth: MGMT ver 1.23 [ 1218.199922][T18735] tipc: Disabling bearer [ 1218.226701][T18735] tipc: Left network mode [ 1218.421872][T10669] netlink: 'syz.4.9619': attribute type 22 has an invalid length. [ 1218.511670][T10669] netlink: 'syz.4.9619': attribute type 22 has an invalid length. [ 1218.644692][ T1059] Bluetooth: hci3: command tx timeout [ 1218.728460][T10687] netlink: 'syz.4.9625': attribute type 8 has an invalid length. [ 1219.135314][T10705] vlan2: entered promiscuous mode [ 1219.329849][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.339896][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.350312][T10494] bridge_slave_0: entered allmulticast mode [ 1219.360547][T10494] bridge_slave_0: entered promiscuous mode [ 1219.382042][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.400237][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.411004][T10494] bridge_slave_1: entered allmulticast mode [ 1219.436207][T10494] bridge_slave_1: entered promiscuous mode [ 1219.449349][T10725] netlink: 'syz.3.9630': attribute type 4 has an invalid length. [ 1219.510428][T10722] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 1219.611303][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.695346][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1219.730264][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.937468][T10494] team0: Port device team_slave_0 added [ 1219.962648][T10494] team0: Port device team_slave_1 added [ 1220.072175][T10763] netlink: 'syz.0.9642': attribute type 1 has an invalid length. [ 1220.118273][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.145996][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.222842][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.321898][T10763] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1220.361831][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.383407][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.410948][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.589069][T18735] hsr_slave_0: left promiscuous mode [ 1220.600414][T18735] hsr_slave_1: left promiscuous mode [ 1220.617786][T18735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.726171][ T1059] Bluetooth: hci3: command tx timeout [ 1221.255095][T10494] hsr_slave_0: entered promiscuous mode [ 1221.261475][T10494] hsr_slave_1: entered promiscuous mode [ 1221.276711][T10791] __nla_validate_parse: 9 callbacks suppressed [ 1221.276726][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9648'. [ 1221.303991][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9648'. [ 1221.313639][T10791] netlink: 'syz.0.9648': attribute type 3 has an invalid length. [ 1221.366575][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1221.556929][T10818] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9652'. [ 1221.638216][T10819] gtp0: entered allmulticast mode [ 1221.668088][T10819] team0: Device gtp0 is of different type [ 1221.918192][T10842] netlink: 'syz.3.9658': attribute type 2 has an invalid length. [ 1221.968103][ T9443] syzkaller1: tun_net_xmit 90 [ 1221.975534][T18735] IPVS: stop unused estimator thread 0... [ 1221.990638][T10842] netlink: 'syz.3.9658': attribute type 2 has an invalid length. [ 1222.003934][ T9443] syzkaller1: tun_net_xmit 90 [ 1222.011211][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9658'. [ 1222.020703][T10833] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1222.020724][T10833] syzkaller1: Linktype set failed because interface is up [ 1222.732349][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9664'. [ 1222.780574][T10895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9667'. [ 1222.792663][T10872] syzkaller0: entered promiscuous mode [ 1222.806809][ T1059] Bluetooth: hci3: command tx timeout [ 1222.816063][T10872] syzkaller0: entered allmulticast mode [ 1222.861032][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9670'. [ 1222.876836][T10886] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9664'. [ 1222.922877][T10895] bond11 (unregistering): Released all slaves [ 1223.488713][T10929] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.9676'. [ 1225.428354][T10937] hsr0: entered promiscuous mode [ 1225.611971][T10950] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1225.629853][T10951] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1225.646979][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1225.915045][T10970] veth0_vlan: left promiscuous mode [ 1226.018387][T10976] netlink: 'syz.3.9687': attribute type 4 has an invalid length. [ 1226.033653][T10974] geneve2: entered promiscuous mode [ 1226.050807][T10974] geneve2: entered allmulticast mode [ 1226.076717][T10984] FAULT_INJECTION: forcing a failure. [ 1226.076717][T10984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.106999][T30670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 1226.131443][T30670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 1226.142245][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.2.9689 Not tainted syzkaller #0 PREEMPT(full) [ 1226.142270][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1226.142282][T10984] Call Trace: [ 1226.142290][T10984] [ 1226.142299][T10984] dump_stack_lvl+0xe8/0x150 [ 1226.142332][T10984] should_fail_ex+0x40c/0x560 [ 1226.142358][T10984] _copy_to_user+0x31/0xb0 [ 1226.142387][T10984] simple_read_from_buffer+0xe1/0x170 [ 1226.142417][T10984] proc_fail_nth_read+0x1bb/0x230 [ 1226.142446][T10984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.142475][T10984] ? rw_verify_area+0x24a/0x4c0 [ 1226.142505][T10984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1226.142529][T10984] vfs_read+0x213/0xa80 [ 1226.142561][T10984] ? __pfx___mutex_lock+0x10/0x10 [ 1226.142586][T10984] ? __pfx_vfs_read+0x10/0x10 [ 1226.142615][T10984] ? __fget_files+0x2a/0x420 [ 1226.142643][T10984] ? __fget_files+0x3a2/0x420 [ 1226.142666][T10984] ? __fget_files+0x2a/0x420 [ 1226.142700][T10984] ksys_read+0x150/0x270 [ 1226.142730][T10984] ? __pfx_ksys_read+0x10/0x10 [ 1226.142763][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.142783][T10984] do_syscall_64+0x174/0x580 [ 1226.142805][T10984] ? trace_irq_disable+0x3b/0x140 [ 1226.142829][T10984] ? clear_bhb_loop+0x40/0x90 [ 1226.142852][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.142871][T10984] RIP: 0033:0x7f8677d5e68e [ 1226.142888][T10984] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1226.142904][T10984] RSP: 002b:00007f8678d3cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1226.142923][T10984] RAX: ffffffffffffffda RBX: 00007f8678d3d6c0 RCX: 00007f8677d5e68e [ 1226.142936][T10984] RDX: 000000000000000f RSI: 00007f8678d3d0a0 RDI: 0000000000000004 [ 1226.142947][T10984] RBP: 00007f8678d3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1226.142959][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1226.142971][T10984] R13: 00007f8678026038 R14: 00007f8678025fa0 R15: 00007ffdc98741b8 [ 1226.143002][T10984] [ 1226.419797][ T2237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 1226.429180][ T2237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 1226.481606][T10494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1226.520421][T10494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1226.528842][T10494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1226.550581][T10494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1226.558483][T10494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1226.587174][T10494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1226.596246][T10494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1226.619457][T10494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1226.802156][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.861938][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.883835][T11024] syzkaller0: entered promiscuous mode [ 1226.905168][T11024] syzkaller0: entered allmulticast mode [ 1226.948848][ T2238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.956042][ T2238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.988200][T18730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.995378][T18730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.202967][T11036] __nla_validate_parse: 3 callbacks suppressed [ 1227.202984][T11036] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9699'. [ 1227.247394][T10494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.296606][T11038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9699'. [ 1227.415393][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9702'. [ 1227.492075][T11067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9704'. [ 1228.075513][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9713'. [ 1228.453743][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.470531][T11122] netlink: 'syz.3.9717': attribute type 2 has an invalid length. [ 1228.591057][T10494] veth0_vlan: entered promiscuous mode [ 1228.620778][T10494] veth1_vlan: entered promiscuous mode [ 1228.820899][T10494] veth0_macvtap: entered promiscuous mode [ 1228.887742][T10494] veth1_macvtap: entered promiscuous mode [ 1228.948066][T11147] netlink: 'syz.3.9724': attribute type 4 has an invalid length. [ 1228.974108][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.010840][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.064729][T18730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.096863][T18730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.129757][T18730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.159793][T18730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.228572][T11162] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1229.328155][T11166] macvtap0: entered allmulticast mode [ 1229.383923][T11166] veth0_macvtap: entered allmulticast mode [ 1229.514366][T18735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.542468][T18735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.625818][T18735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.673356][T18735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.718871][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9735'. [ 1229.864444][T11192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1229.874718][T11195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.922066][T11192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9736'. [ 1229.994566][T11201] syzkaller0: entered promiscuous mode [ 1230.015971][T11201] syzkaller0: entered allmulticast mode [ 1230.077141][T11201] syz_tun: entered allmulticast mode [ 1230.126961][T11201] dvmrp8: entered allmulticast mode [ 1230.220417][T11207] syzkaller0: entered allmulticast mode [ 1230.255903][T11199] syz_tun: left allmulticast mode [ 1230.268394][T11216] syzkaller0: entered promiscuous mode [ 1230.275226][T11216] syzkaller0: entered allmulticast mode [ 1230.380444][T11222] x_tables: unsorted entry at hook 3 [ 1230.605676][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9748'. [ 1230.618466][T11235] netlink: 'syz.0.9750': attribute type 1 has an invalid length. [ 1230.935407][T11256] netlink: 'syz.4.9754': attribute type 3 has an invalid length. [ 1231.402667][ T5627] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1231.413938][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1231.424439][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1231.437051][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1231.450614][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1231.697067][T11296] netlink: 'syz.1.9764': attribute type 1 has an invalid length. [ 1232.038261][T11317] x_tables: unsorted entry at hook 2 [ 1232.099285][T11317] macsec2: entered promiscuous mode [ 1232.174795][T11317] batadv0: entered promiscuous mode [ 1232.221526][T11317] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 1232.278735][T11317] batadv0: left promiscuous mode [ 1232.503345][T11333] __nla_validate_parse: 7 callbacks suppressed [ 1232.503363][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1232.527135][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1232.586879][T11339] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1232.604731][T11339] 8021q: VLANs not supported on gre0 [ 1232.638907][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1232.719823][T11282] vxcan1 speed is unknown, defaulting to 1000 [ 1232.783908][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1232.801931][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9778'. [ 1232.850530][T11349] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1232.864664][T11349] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1232.885261][T11349] gretap1: entered promiscuous mode [ 1232.893177][T11349] gretap1: entered allmulticast mode [ 1233.011311][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1233.168704][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1233.196950][T11359] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 1233.205316][T11282] ±ÿÿÿ speed is unknown, defaulting to 1000 [ 1233.297488][T11370] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9782'. [ 1233.342205][T11338] team0: Device ipvlan3 is already an upper device of the team interface [ 1233.523932][ T1059] Bluetooth: hci2: command tx timeout [ 1233.747375][T11394] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9789'. [ 1234.156923][T11425] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1234.170528][T11425] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1234.180251][T11425] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1234.266979][T11282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.276205][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.283566][T11282] bridge_slave_0: entered allmulticast mode [ 1234.291442][T11282] bridge_slave_0: entered promiscuous mode [ 1234.301937][T11282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.309868][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.318872][T11282] bridge_slave_1: entered allmulticast mode [ 1234.328054][T11282] bridge_slave_1: entered promiscuous mode [ 1234.372612][T11282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.386974][T11282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.430444][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9800'. [ 1234.481038][T11282] team0: Port device team_slave_0 added [ 1234.491949][T11282] team0: Port device team_slave_1 added [ 1234.527606][T11282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.544035][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.581020][T11282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.596881][T11441] mac80211_hwsim hwsim85 wlan0: entered promiscuous mode [ 1234.608724][T11282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.611560][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9802'. [ 1234.622180][T11282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.670739][T11282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.844212][T11454] netlink: 'syz.1.9805': attribute type 12 has an invalid length. [ 1234.870655][T11451] netlink: 'syz.1.9805': attribute type 3 has an invalid length. [ 1234.916075][T11282] hsr_slave_0: entered promiscuous mode [ 1234.936066][T11282] hsr_slave_1: entered promiscuous mode [ 1234.952566][T11282] debugfs: 'hsr0' already exists in 'hsr' [ 1234.964177][T11282] Cannot create hsr debugfs directory [ 1235.352067][T11485] netlink: 'syz.2.9812': attribute type 1 has an invalid length. [ 1235.377411][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 1235.419886][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9812'. [ 1235.459605][T11479] pim6reg: entered allmulticast mode [ 1235.504906][T11487] pim6reg: left allmulticast mode [ 1235.603144][ T1059] Bluetooth: hci2: command tx timeout [ 1235.758972][T11496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.786861][T11496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.806945][T11496] bond0 (unregistering): Released all slaves [ 1235.857595][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9818'. [ 1236.078972][T11282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.092642][T11282] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.212532][T11282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.242252][T11282] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1236.297587][T11525] netlink: 'syz.2.9824': attribute type 1 has an invalid length. [ 1236.411672][T11533] netlink: 'syz.0.9827': attribute type 58 has an invalid length. [ 1236.549018][T11282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1236.575887][T11282] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.201908][T11577] netlink: 'syz.0.9837': attribute type 21 has an invalid length. [ 1237.351241][T11581] syzkaller0: entered promiscuous mode [ 1237.369082][T11581] syzkaller0: entered allmulticast mode [ 1237.507526][T11282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1237.537861][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1237.548733][T18731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1237.569811][T18731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1237.582381][ T9432] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1237.609429][T11282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1237.651297][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1237.665633][T11282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1237.678606][T11603] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 1237.683261][ T1059] Bluetooth: hci2: command tx timeout [ 1237.700591][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1237.713929][T11603] __nla_validate_parse: 6 callbacks suppressed [ 1237.713944][T11603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9844'. [ 1237.736447][T11282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1237.754591][T11282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1237.797940][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1237.810374][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1238.072942][T11282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.202562][T11282] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.227296][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9851'. [ 1238.243766][ T9429] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1238.256507][T18730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.263652][T18730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.324073][ T9429] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1238.337220][T18736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.344404][T18736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.410955][T11644] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1238.429221][T11644] netlink: 'syz.0.9854': attribute type 61 has an invalid length. [ 1238.569635][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.577409][ T1316] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1238.648413][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9858'. [ 1239.323489][T11282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.413584][T11705] openvswitch: netlink: IP tunnel dst address not specified [ 1239.422355][T11706] openvswitch: netlink: IP tunnel dst address not specified [ 1239.431992][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1239.441976][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1239.575111][T11282] veth0_vlan: entered promiscuous mode [ 1239.598021][T11282] veth1_vlan: entered promiscuous mode [ 1239.624770][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9874'. [ 1239.651416][T11718] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9876'. [ 1239.685785][T11282] veth0_macvtap: entered promiscuous mode [ 1239.711480][T11282] veth1_macvtap: entered promiscuous mode [ 1239.724906][T11712] [ 1239.727250][T11712] ====================================================== [ 1239.734261][T11712] WARNING: possible circular locking dependency detected [ 1239.741280][T11712] syzkaller #0 Not tainted [ 1239.745682][T11712] ------------------------------------------------------ [ 1239.752682][T11712] syz.1.9874/11712 is trying to acquire lock: [ 1239.758725][T11712] ffff888077dfe1e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 1239.770199][T11712] [ 1239.770199][T11712] but task is already holding lock: [ 1239.777539][T11712] ffff888077dfe660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1239.786491][T11712] [ 1239.786491][T11712] which lock already depends on the new lock. [ 1239.786491][T11712] [ 1239.796874][T11712] [ 1239.796874][T11712] the existing dependency chain (in reverse order) is: [ 1239.805873][T11712] [ 1239.805873][T11712] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1239.813594][T11712] lock_sock_nested+0x41/0x100 [ 1239.818868][T11712] smc_listen_out+0x105/0x3c0 [ 1239.824050][T11712] smc_listen_work+0x81d/0x1410 [ 1239.829408][T11712] process_scheduled_works+0xa8e/0x14e0 [ 1239.835457][T11712] worker_thread+0xa47/0xfb0 [ 1239.840553][T11712] kthread+0x388/0x470 [ 1239.845128][T11712] ret_from_fork+0x514/0xb70 [ 1239.850225][T11712] ret_from_fork_asm+0x1a/0x30 [ 1239.855493][T11712] [ 1239.855493][T11712] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1239.865639][T11712] __lock_acquire+0x1520/0x2cf0 [ 1239.870996][T11712] lock_acquire+0x106/0x350 [ 1239.876007][T11712] __flush_work+0x74c/0xca0 [ 1239.881015][T11712] __cancel_work_sync+0xbe/0x110 [ 1239.886460][T11712] smc_clcsock_release+0x60/0xf0 [ 1239.891912][T11712] __smc_release+0x64e/0x7c0 [ 1239.897007][T11712] smc_close_non_accepted+0xd5/0x1f0 [ 1239.902799][T11712] smc_close_active+0xb42/0xf30 [ 1239.908161][T11712] __smc_release+0x9c/0x7c0 [ 1239.913170][T11712] smc_release+0x2c5/0x550 [ 1239.918090][T11712] sock_close+0xad/0x220 [ 1239.922833][T11712] __fput+0x418/0xa50 [ 1239.927320][T11712] task_work_run+0x1d9/0x270 [ 1239.932419][T11712] exit_to_user_mode_loop+0x1fa/0x730 [ 1239.938298][T11712] do_syscall_64+0x353/0x580 [ 1239.943400][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.949798][T11712] [ 1239.949798][T11712] other info that might help us debug this: [ 1239.949798][T11712] [ 1239.960003][T11712] Possible unsafe locking scenario: [ 1239.960003][T11712] [ 1239.967430][T11712] CPU0 CPU1 [ 1239.972774][T11712] ---- ---- [ 1239.978117][T11712] lock(sk_lock-AF_SMC/1); [ 1239.982612][T11712] lock((work_completion)(&new_smc->smc_listen_work)); [ 1239.992047][T11712] lock(sk_lock-AF_SMC/1); [ 1239.999065][T11712] lock((work_completion)(&new_smc->smc_listen_work)); [ 1240.005985][T11712] [ 1240.005985][T11712] *** DEADLOCK *** [ 1240.005985][T11712] [ 1240.014109][T11712] 3 locks held by syz.1.9874/11712: [ 1240.019284][T11712] #0: ffff888057228240 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x82/0x220 [ 1240.029455][T11712] #1: ffff888077dfe660 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1240.038843][T11712] #2: ffffffff8eb59c20 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 1240.048053][T11712] [ 1240.048053][T11712] stack backtrace: [ 1240.053925][T11712] CPU: 1 UID: 0 PID: 11712 Comm: syz.1.9874 Not tainted syzkaller #0 PREEMPT(full) [ 1240.053954][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1240.053970][T11712] Call Trace: [ 1240.053980][T11712] [ 1240.053988][T11712] dump_stack_lvl+0xe8/0x150 [ 1240.054011][T11712] print_circular_bug+0x2e1/0x300 [ 1240.054027][T11712] check_noncircular+0x12e/0x150 [ 1240.054051][T11712] __lock_acquire+0x1520/0x2cf0 [ 1240.054076][T11712] ? do_raw_spin_unlock+0xf5/0x210 [ 1240.054093][T11712] ? __flush_work+0x101/0xca0 [ 1240.054110][T11712] lock_acquire+0x106/0x350 [ 1240.054128][T11712] ? __flush_work+0x101/0xca0 [ 1240.054149][T11712] ? __flush_work+0x101/0xca0 [ 1240.054166][T11712] __flush_work+0x74c/0xca0 [ 1240.054183][T11712] ? __flush_work+0x101/0xca0 [ 1240.054200][T11712] ? __flush_work+0x101/0xca0 [ 1240.054218][T11712] ? __pfx___flush_work+0x10/0x10 [ 1240.054237][T11712] ? __pfx_wq_barrier_func+0x10/0x10 [ 1240.054262][T11712] ? __cancel_work_sync+0x5c/0x110 [ 1240.054281][T11712] __cancel_work_sync+0xbe/0x110 [ 1240.054300][T11712] smc_clcsock_release+0x60/0xf0 [ 1240.054322][T11712] __smc_release+0x64e/0x7c0 [ 1240.054340][T11712] smc_close_non_accepted+0xd5/0x1f0 [ 1240.054359][T11712] smc_close_active+0xb42/0xf30 [ 1240.054379][T11712] ? __pfx_sock_def_readable+0x10/0x10 [ 1240.054397][T11712] __smc_release+0x9c/0x7c0 [ 1240.054412][T11712] ? __local_bh_enable_ip+0xd0/0x130 [ 1240.054430][T11712] smc_release+0x2c5/0x550 [ 1240.054447][T11712] sock_close+0xad/0x220 [ 1240.054462][T11712] ? __pfx_sock_close+0x10/0x10 [ 1240.054476][T11712] __fput+0x418/0xa50 [ 1240.054496][T11712] task_work_run+0x1d9/0x270 [ 1240.054518][T11712] ? __pfx_task_work_run+0x10/0x10 [ 1240.054542][T11712] exit_to_user_mode_loop+0x1fa/0x730 [ 1240.054561][T11712] ? rcu_is_watching+0x15/0xb0 [ 1240.054582][T11712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.054598][T11712] do_syscall_64+0x353/0x580 [ 1240.054617][T11712] ? clear_bhb_loop+0x40/0x90 [ 1240.054634][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.054649][T11712] RIP: 0033:0x7ff4a339de59 [ 1240.054663][T11712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.054676][T11712] RSP: 002b:00007ffec1b46c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1240.054691][T11712] RAX: 0000000000000000 RBX: 00007ffec1b46d50 RCX: 00007ff4a339de59 [ 1240.054702][T11712] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1240.054711][T11712] RBP: 000000000012e9d7 R08: 0000000000000001 R09: 0000000000000000 [ 1240.054721][T11712] R10: 0000001b33420000 R11: 0000000000000246 R12: 00007ffec1b46d90 [ 1240.054732][T11712] R13: 00007ff4a3625fac R14: 000000000012ea76 R15: 00007ff4a3625fa0 [ 1240.054754][T11712] [ 1240.336106][ T1059] Bluetooth: hci2: command tx timeout [ 1240.341587][T11722] netlink: 'syz.2.9877': attribute type 1 has an invalid length. [ 1240.368228][T11722] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1240.410430][T11282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.421276][T11282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.468815][T18731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.479219][T18731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.489493][T11282] ieee80211 phy99: Selected rate control algorithm 'minstrel_ht' [ 1240.501992][T18731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.522143][T18736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.523635][T11282] ieee80211 phy100: Selected rate control algorithm 'minstrel_ht' [ 1240.531024][T18736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.550116][T14175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.568277][T18736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.576409][T18736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.933274][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!