last executing test programs: 8.026320596s ago: executing program 4 (id=9378): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) (async) setsockopt$inet6_int(r2, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x101, 0x5}, 0x8) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="c265086de96e8e57ee3723844b0830b8f9bfb7269191890b43d236a2b3bf42e3a280ce6f73a3639014d92e50b312bec1e68a7ff74bb63f018de64913bf7fc0dc969a0dde4b302df477400d09bc225ba23223b64877e2ea5440e39e", 0x5b, 0x40000, &(0x7f0000000200)={0x11, 0x1, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x41d808}]}}]}, 0x3c}}, 0x20040054) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) 7.501421518s ago: executing program 4 (id=9382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000bc0)={'veth0_to_team\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a200000001a0a01080000000000000000070000050900010073797a310000000048000000000a050000000000000000000100000308000240000000020c00044000000000000000050900010073797a3100000000080002"], 0x90}, 0x1, 0x0, 0x0, 0x4004020}, 0x80) 7.266245973s ago: executing program 4 (id=9385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f7ffffffb703000018000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.089634197s ago: executing program 4 (id=9388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) (async) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 6.939772785s ago: executing program 4 (id=9389): unshare(0x22020600) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2c, 0x140f, 0x401, 0x70bd2a, 0x25dfdc00, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x2c}}, 0x20004840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r0}]}, 0x3c}}, 0x0) unshare(0x44000200) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r0, &(0x7f0000000000)='vxcan\x00', 0x4020, &(0x7f0000000080)={@align=0x3, {0x7, 0x9, 0x20000000}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x6}) ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f0000000240)="d7521a8b4300db99ffd5ae2c6f8e000d2f253451fa87243453360193ae8a1ea265adca4af376a69301fa9c538efaf1a4b1f1e76057846c8f45c643b85a1316019f2d2c38fef7d8885435978b842d5aac8c4777c9d6c23a14c3390c278faa93b88ef6d4d8b8cf86d6c85c6208d65d5f726fd4bffa4ae9341e8c955e831f2d8798a0bad2b98b42dbc35969a74737adff6db86c18e2f3867750b62e63ad92981268251648bedd8d6f9742acc34f78cdc61dc54339e7834bf80abdd30595e729d45cf5a1d0237abc03df0fec763a83451aab151c0a194ab8b5670473ef1f2fee3cd3ba365cdb2b2320cdeb1c75f4f70c89f4fda72d718ff5676d3b157d586754cd46bf5696bd13900764c63ca19e9d9d4503c47332c1332082bac1810adb19cfc7693b9376dfa1edcfa11ea4b476b13deb088c87b4b1f40ead685eea7e4783ac03507a3a493807d2a6112db557347639cf97514d27533a3b9a4078740d0f3fc7e4b4950a27ed83a9c89067a1bd41695aaf20a3ed936d4bfff9672c8a85ebf840ad710e8444903f615654a448a8f66cdf62162b05a3c789b306aa12dceb089e2a3436652eb7f98557d0c6251b35330ea6027306f66bdf297710ce0484273158b97b17a70ec3b720981694032a0b95a8b8b46bec53515b3d10673b0d9547f36cf034698170a6d3435a9cb4ecc19ea3ba42f61bd931c2815f3c33f5fb8c210719e953bb2da79e9d2dd02948ddb20e5159f2ae101c62f1710f875163119f9e17399c8b8a154e6dc474d50f963667283fc7c6b6b085f8f053964f88554d726079403d721802444dcc6e32a719d8b28f503c171d62d1366a39e204d5a5c08d325e930d96a7e96bd96a5415d4991527a17c9e40d513daca5c2175a8de1bc768346ccb87fd15cd6d3886e3f292fa61c8dd14e6eae55f63f6e49b14acf19b1be700020982e10143573da2bf613c5bdfa9686f36f9d6c07eddf78ebcc06b93ff3143c5dea25f9169dbcf24afaf4ed82a678dfe8eb82bebec67080ea055b6a32961ad2bc330515525be0cdd9e19d3c1a5b4dc7ea16b5eedd69952995abaaa53e24f6f313bcdab1c3122f09f0fced375a1bedc99d5e00719fe678f21e926dae71be247f67b2e4ea3b2ed866c2e1266604f87d9225d5347a1a61f68b87c2a3c140a2687572e049970e6e2d31c76b71d7471c2675785c9326fc02fb5dcc2d5a0e32e560bf7a40a5eddb868f47ecaea689be1612cd0fbd8105a1a1b2d0c8ad7cf961b2003ba4c66aa11a650aafe0f454afcc07bdee5aab7908a9c821f2d95905af0e5e01061c0ea3a5f9aac2eec6dbbbd1e51721c773bd919324e6aab77dd59a2b4cfedb9a8371aae6ccba5cb7b378551d334bd72ac208ec2037ffc481b23a8167a62b052863f3c2a3a6f30f74870f7aa5bebd1571a0a25467c5ac9859691a4c3e59e91bd7ba8d5a1c31b8d93d8f12a81cf6e17837ed83e40b2139c0219171f9cd8fac9f0345350f7ae27c21fb0ba00bade112778efae30993af60448c37c954e74f6977b451392bdc8114df3ab1219de29d6a8ca419a251f73a2a8643358aaac180093c98140d9845f175ecde3acec1e7d953da765ea521a7b40aada03061b4d7a3a8079656c876326a888e0a1e19a6e06fd4360ca810316300996a4414d989a976e20f41e231cd092cee94f8d5f3da933a375304c78de4c0c9605e611f043607eac83d0af84d280039e27d5008cb2f3b7db706957e80d2d883628c6402315a1183b692a3e341ea39070b7832c0db6a3784240c43970259c8d3153cb0bf46192c543ecd3619cec268ad4986c44f8cdffa38f0601f3757f961fa0131b50995cbd8000b1dd612037cfaa8de3c0b1c965f8c73f87c87eed7f3be41530d1bf0671a3e43fbf523b200085bff803e1e6dc4f56f329d3151cb0717f946264e74d66bc6cc07945d9050e45415196924873012c204ed7dd2c9e6148f283c7a780b60987d3395fdc33229339f6cc68c61608166d7c9d0214a2d6b9b428094510405ccb1eae782c849b8ecf1b74fc12ddb31bf86a0c0c59d6787ae7558c90c283c51163ff20d889af6cd557d7bb04758a84b0fb58de41e0d854cc88952c9b1ecb345fd75c480ed7de2bb6bd921ed3d8e026d6866d126194194fd4f6c4a83f1390e418bd68a7885953a18423ab85363a5f4039c7b280e3375f630f3ab61f75f57f0f499e9a81cf9048ae380e23eb61c46c8e53d5ea30f23d735efef0e33a4ea6d6fee45ae0df5a78920e08bb17baab140c7941b7b0cc8fb597d95d60667ce0887e99728aa035f484e64fbef252349b21f63dd877e78bdbd8fcc3b1434ff755ed98ac5f939e041a17c71280ef58f61a46e6583ab7c365e561d8cce2522d73ecd0b089929d64e172347d59b668777c3a5739bb5276aa478521f6c635b3ee8f17a577100cc5a4830d9f2357b9536cb5a4ee8f6672fd827cb616301457277152fbae4f8d8acb49d219c1593ec053ebbbd523fe6d15f94563455238a9adb9d4c2276a7d22746e20058081893872f1c6577629621e4455669b4bfd899f1a636fb81b3c2071307c27312c67080ee8e1bbb9bd9dca7f9cfb91515d40faa097463bab21898bacb26976026b5b67b2931c9374ab062a020b9bfd58229b3ccb7e2d57a4ebfee0186ea34975107b89f9764987f15078f5c391408a43c4fb85dac43d8871d5ae3d47d63535678c8cb65ee4e913f98538ae4a75c48b6643a2e046ffff2b3c0b4a17a65eab5aa7a5a5b313ede2d8ed6cf0b29665e2f3580b464a9a0a27e80bdf9e3e87220ee26ac0cafafcd47bf53f26a9eeea1238e5f25beaccc2b80146f07c4b6f466ffad1bbdc934953a7901d3ebac2c558a4f747e7d42d6430f7747cf401e5645b3934a8be8fc9eec679c92ed0d5051d981ade7b2c5e57fa031fc77e5719f9ef748243763f24fa6a5ef7f11f742da5c0d16d895b691105bbd4967d0e56d889d12957f944a0293c6cb15e2a640f8402b062321f7bd79685ab3ca858c4d3873cea42c0734285b1753cc1ee2ab38edf4b3e1adf20232cad6fdf99332d69fde6d0883e612cc159d40da9bee8e729ea36413d901cc06528a5ffebb44ec72461a05b3693a455a4e6ded5b1e80116bad65118c3595d0f78e95d3d7f1074545eb876eb8a25210518e8dcf295098c5c5b832dd6dc16ff099abd43bd8eac4024734a2dbe564d7eb13c000a23fd4cb210f7603662a4a9fd3360b61db5602ba6d5040a0f6b4b57f508d9ba1b52861a996ff1b64b3aa1b6d1e37b2ddf868f237a685945764c162a5dbe6289cc82aeb3578c7c2246a860627104c02c55550ec18669441b237d334a9db65c742b6b437b288139e37ad7f6e7239c5c89f262e6196b32ed8c7a012424d05324fc591fbd1d2e6eaf3bfcea5a2e98270e8d833b1557245de2ceca00bd6f9607525093b67ec87aefe6269ab04f243af27e1f99cfae410424924b74c2eeeff993c2d0840db27ed0e23cd067ca5e422ea2aec6811ba02f1659bba5d5313031fca6858865e636f55afb45af306bae1b65ab49dde362cd594715ce31316a1db24b3470264af91c7396531df882dc09cb12091880a3ea69fc4cdd4d03aa4e09025557db065cd0c84d0d7ec270fac201b13ae960e50166ec9042817ad1558ac1c3c5b34e3cf8d982649f70a77fee6437286243b1bd74984466b49d7df96eb5efd05c42c09dbf9fa9b651a4a7ffdde8d5d742e59e31a2909c3befa4763ac9de322f1ccc5aec53e0285fe39903c39198993f034c8083535323dde4acc6c835eb5edc720e663388ed990c4943d20f748ad12af9f27063564f8b15458945bfaf6cdaa71e7e92a85b06800c6b6834164d2424210f746b59552f495ad795b5c30c520d1eb570285f3cbedc8f59c9e79af1144b10521fd332f8447f6a23c3f82b7fb9a9104827041eea8d20b54070ff05736ffa3a72b05c162635ad6a3abab5bd54b96fae21b6f0f75654d36b1206b49f1b6ea76612ce413943dbe13ca16c37385c84e822b752d13dd7966f79ed9d04a7a731a0c0cd5f7191f98786c38912bbd53e44b2b5da9f43bbe071e5f677acfdb35c125fec04bdf9dd521fca4f8c55aeb76a283fcbe01c9fb98328aa35aae15bc2756b95041397fa3972e304a3c73cde790fa7c2f7fe65d54d0501077a6961cf0c71954dd0e1323abc8896af20758d5ef58ca8d56ee155669bcf9acab3977f6cc096a654fe437a08850a4220eb3e59f5ae187249f5743371c579124c77c986d0b1ad6781a546c4feab9b511500ed3b98b19aae84e217a47067e8760cfa590aea93dbcfdde403c6479eed99ce25dad3bb73c7615ef4ce3581e023d8b47e4c768b1d88b3fb9d50cf7d7112f784eac5ceac89d14ca0a30d9756a62079d13b38e61c68a30ba04dcd012fb59fa4f0b68ebbcf3611c5e3ecf53d85bb8b15fa1c16a60b3eb14710c4bff21fe7a64a6d31d4c5afa7026515b544dfc355ad1a6dd8ce4ec6a97a6cda7ab44101a02070b9edb625b2b04d372e5ab861d3f213f548a3146fbbcdde47d0243aaf224ae54a67bc17e65a3dc16066aa12a1cffa5c324d00c41d8d3bdd627f18537f86082b6bd5ba580eb9369fc8d570ca9e665c6632a10384421c8746b1b24c41f5b7c4199cef31248f4f059d0c43f3b4acf88699345d5e43bf4b0c3c6cd97dd48708c6b6748b52839fc99affb676fc63966ea2a56ea53a8e0eea0997ec826d693a8ed7106d338b13023a976f95d2b10e782fb930ee86deb3ac699d9e1d5cf3c3e0c94eeba0e4f4ff30119b214d1be975d21f1a42c05a31278dc042a50c00569d5254abf1398035d7cc645ff721f5317bafe9753c7ab680388964cb16aacb2883861806308f570e440687232e628e91cc867ed9378fe9a78abbcd5ae1edf8fbba29f3cd7a9ab8d1b6cf44f91191fdaac37e6b03bbcb41de68149ab750204d6a670c7e211a2682d95673d4f7641d2d6034f3390a31d6a0809bb3d12ea134cde808c5d8d93f6ad6683f62bc2c2e08a9b0b11742bdc520175993f39bc09bebdc2426ef69811d4855d3eca2b4d8b411dbbbd23b23d760802723d1f05f5f4054b4ba766b1b78e4c559e49483bc027ce0e1f7a1daff08ea5ce5fd12e4b3e8fef13b18750c24ca0a45ee73194b5e044c22ff73973447b2c5f89a3dfee9c4ed6bff321fafbc710cb311e63504e30088a30401cf8b1e337784a5b8cdac62e9ed13f2be4500f921fc6dc0647b4ee4123517b64ed9bfda2c388002ca90f4606e2b2ecfaf5c92fc3c1e7e274677625af1df20c5d9ed393fe47ee274b7cf78c10df6412255bc9de366124d29fd16a418bc9d1c66d591492b622c3c87ff50281d1d4f633f97e2a13694597aebc357a54d631e65cf8f854adbb7ecce880eead8fb309a74ff2ce35fd46128082cdc2e40ee315d200195efc6f6e9c5b36b4819f079de923a34292f3a58444e43363b7f318b26fe2816c47f59ddc882ab86c8de26b00a03b42e2d23ed599e18a5d98e098c61ea51f442e5efc56e93bdff68a4323365579a70259fd4faa0fbfe26514a1eddc883c3a3e2fb95b51d5f167a594b7443efec987526716b091af643e4b731cbcfe6fa5982e6a3cdbe2fb351eaf39e1827b881b15373a911b9892918d864f6c9c106fc90784ab8252fb2167edfd9586e05239c97eb201b773f8debd6b862a98e9bdc2104173653d16c8759a28c03aa359f08e3d347e88e5918623192bb94964457af414bb1f2d064682010cce964924e1273a8450b5dcb49ae3da832868659c5ba1df5422b71aaf062cbd71df3490b4543dba5827e") 5.248230128s ago: executing program 1 (id=9403): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c0000002c000701000d0000fddbdf25087c0000080001801716c2e9"], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0xbdab, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'gre0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x48, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x48}}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.157605384s ago: executing program 1 (id=9405): r0 = socket$inet6(0xa, 0x80000, 0x400001) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x40) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = getuid() r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0x2}}]}, 0x28}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xf, 0x4, 0x4, 0x3db7}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000040), &(0x7f0000000080)=@udp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f00000003c0), &(0x7f0000000400)=@udp6=r7, 0x1}, 0x20) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in=@private=0xa010101, 0x4e24, 0x5, 0x4e23, 0x0, 0x2, 0x0, 0x20, 0x0, r3, r4}, {0x40, 0x8, 0x80, 0x1, 0xfff, 0x7, 0x3, 0x1}, {0xe81, 0x1, 0x7fff, 0x9}, 0x1, 0x6e6bb5, 0x0, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xff}, 0x2, @in=@empty, 0x3504, 0x1, 0x1, 0x5, 0x6, 0x1, 0xd}}, 0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c00000018000180340002006970366772653000000000000000000014000380080002000b000000040005000400040023c303f9103ff6087b0937f90ea02e59a012fe7b12376775894ebf00b496461337feb5864ff4944a73934ee4214a026d9fc3792fb6"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x9c, r9, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff2d, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008055}, 0x24008085) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f7, &(0x7f0000003200)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) 5.068244128s ago: executing program 3 (id=9406): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x207}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r2, 0x4) 4.956770255s ago: executing program 1 (id=9408): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'pimreg\x00', {0x2, 0x4e24, @local}}) 4.884362275s ago: executing program 3 (id=9409): r0 = socket(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) (async, rerun: 64) r2 = socket$inet(0xa, 0x801, 0x84) (rerun: 64) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x10, 0x2d, 0x1, 0x70bd26}, 0x10}], 0x1}, 0x4) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) (async) close(r3) (async) r4 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) 4.883104083s ago: executing program 0 (id=9410): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="e0010010", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fddbdf255200000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4}, 0x1) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@multicast2, @multicast2, 0x0}, &(0x7f0000000180)=0xc) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x6dcd}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000500)={@rand_addr, 0x0}, &(0x7f0000000580)=0x14) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010127bd700000818008000100"/22, @ANYRES32=r12, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x9, 0x9, 0x8, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x1, 0x7828, 0x10000, 0x4}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf0, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x4}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x4050) 4.64561386s ago: executing program 3 (id=9412): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xaec}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xe9c9}, 0x10}, 0x94) 4.539947652s ago: executing program 1 (id=9413): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x1, 0x1, 0x5, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r6], 0x34}}, 0x4008000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r8, &(0x7f0000000540)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}], 0x1) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) 4.539587883s ago: executing program 0 (id=9414): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 4.417829941s ago: executing program 0 (id=9416): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609fbbb000080000fc01000000e40000000000000000000000fe8000000000000000000000000000aa00007600000000004a3c03dac00065c7586eb83087130a0ac2d5ca57a6c5faa9d1fee211144a995c6e9c8fdb4a739336f37a1ac37c4a8a112f7fb7f332ea68b31025a8c91ef31daf2f8625f210243c992e00ee32751038678081e0d05e6a25ce073cf8a5d18d0bddc6b21e3e769be177cb2ca099b9c389e59bb9"], 0x0) r1 = socket(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'pimreg\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, 0x0, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) 4.344812815s ago: executing program 3 (id=9417): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'dvmrp0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 4.343685499s ago: executing program 2 (id=9418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0xe, 0xffffffffffffffff, &(0x7f0000000000)=0x9700) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)={0x1c, r8, 0x125, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)={0x1c, r8, 0x125, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9800}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x490, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @beacon=[@NL80211_ATTR_IE={0x14, 0x2a, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x6, @void, @void}}]}, @NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@mesh_chsw={0x76, 0x6, {0x54, 0xff, 0x7, 0x4}}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x5, @val=0x1f, @val="92e4f6cc690a066ea0b36eb1d9df5464"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2cf, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="55347a11cbae", {0x8, 0xa}}, 0x100, @random=0x4, 0x4843, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x9}, {0x12}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xb8}, @void, @val={0x6, 0x2, 0xe}, @val={0x5, 0x83, {0xff, 0xc3, 0x6f, "187a78fa1f07a8d80b4b7ef4605639c837012de6304eae7a877a47f510f8bfaf5ed6d658a9153c39dbd28c68c272321553ce478a345b5fbe63e1f407391b08a88ff5889168c9acd1902e998f32b3b754501afb305e5861ef85636821bd6aab24130d215b47461984ad8d88ba534229631e3723786f180825c9e479806a46959f"}}, @val={0x25, 0x3, {0x1, 0xb, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb3}}, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x7, 0xf, 0x6}}, [{0xdd, 0xf8, "05db23c587a3a4c900e421f9d3c1dfe8fbd3ff2f7be3753f4c1905169e4f48cafe90e735ac5be93cc7f61fe0f7c68b9bb0b770f17741c96216b34677d40cb7748acc19c5b0851784a0be49275d0f631cb50760c8356c1f4aa0eefc057c0d37909e2c3c800e35cc9bef7144d66db63a2f6ef097b21496de05e841ce23cf7c652ae092d058bb7ac996fcc661585cdb28cb5b3cefa2dee56fc80cb7163586f503072c3db882cf352168ca308b559a16e3e9347c1eb021085d96c3171a4813c8c9f510d5223d2243388b42a33d511d0ae4bb63e24c08c677a5b1f663569219649de3b6983f626d8f8c6a03617e0e08b53ec2d1c9094cffce7b8c"}, {0xdd, 0x38, "65cd381cd93e5ab28e993279c4d35390cd395b8c14372e31573f996f52d99b05315d81d9bc3f24adfd3938316f1b81165f5a899f5e16a55e"}, {0xdd, 0x52, "5a80ebf72452d6c9546db4e7024e82eb178415c89ff24919c7d5ba3cec2356d6b35f0b03b39a4bf3699b0e49cce322eb1ed41b073c388d7fdf4e6b2a5434d08a086b0d2a4bb78192965f22abeebf7fc375de"}, {0xdd, 0xd, "cf3c4af45f49e73aa96306f8be"}, {0xdd, 0x62, "298f5d090efbaaea692a592d65d90576c6935dcc5cb04179f25ea1c28a2a3c62a0a9685e6e1e90dbdd1302fc64d0df1fc2d708515b5dda82f4ce50dcc8bdf65b91a237061519bb433b8d2ae0c76f610e7aa62685f92afdb1c40ffa1746bd468be12d"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x27, 0x80, [@rann={0x7e, 0x15, {{0x1}, 0x9, 0xe, @broadcast, 0x6}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x60}}]}, @NL80211_ATTR_BEACON_TAIL={0x6d, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x1}, 0xf9, 0x8, @device_a, 0x40, 0x3d, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0x2, 0x0, 0x4, 0x1}}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x7f, @device_b, 0x1, @value=@broadcast, 0xf4d8, 0x40, @broadcast, 0x4}}, @mic={0x8c, 0x18, {0x90f, "81f93162e277", @long="11290d32519af337737a0b13127ae948"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0xb4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xaa, 0x2, "9c78743be97658850035965d19a75d671517d41bbd2c3eb6a622751006acf4d31690bad1230d2a30609e7f70dd5b6fe9c42dde1fbcd46129fbe234420d354e784e4a5e5a0835e71b891c0bb281f70745ec03817863263560843d0be9b2ea3ab2c7867fe10dd17ae12e19e11e5118ce3b55301b7d5ea3c978bb178603c1e1db959c30dac651a28e8808e23f940af51dbfd48f0e9873b31a5995dd21921331964adc47269462ed"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x490}}, 0x4040014) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x490, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @beacon=[@NL80211_ATTR_IE={0x14, 0x2a, [@mesh_id={0x72, 0x6}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @val=0x6, @void, @void}}]}, @NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@mesh_chsw={0x76, 0x6, {0x54, 0xff, 0x7, 0x4}}, @peer_mgmt={0x75, 0x18, {0x0, 0x3, @val=0x5, @val=0x1f, @val="92e4f6cc690a066ea0b36eb1d9df5464"}}]}, @NL80211_ATTR_BEACON_HEAD={0x2cf, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="55347a11cbae", {0x8, 0xa}}, 0x100, @random=0x4, 0x4843, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x9}, {0x12}, {0x36, 0x1}]}, @val={0x3, 0x1, 0xb8}, @void, @val={0x6, 0x2, 0xe}, @val={0x5, 0x83, {0xff, 0xc3, 0x6f, "187a78fa1f07a8d80b4b7ef4605639c837012de6304eae7a877a47f510f8bfaf5ed6d658a9153c39dbd28c68c272321553ce478a345b5fbe63e1f407391b08a88ff5889168c9acd1902e998f32b3b754501afb305e5861ef85636821bd6aab24130d215b47461984ad8d88ba534229631e3723786f180825c9e479806a46959f"}}, @val={0x25, 0x3, {0x1, 0xb, 0x2}}, @void, @val={0x3c, 0x4, {0x1, 0x7, 0xb3}}, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x7, 0xf, 0x6}}, [{0xdd, 0xf8, "05db23c587a3a4c900e421f9d3c1dfe8fbd3ff2f7be3753f4c1905169e4f48cafe90e735ac5be93cc7f61fe0f7c68b9bb0b770f17741c96216b34677d40cb7748acc19c5b0851784a0be49275d0f631cb50760c8356c1f4aa0eefc057c0d37909e2c3c800e35cc9bef7144d66db63a2f6ef097b21496de05e841ce23cf7c652ae092d058bb7ac996fcc661585cdb28cb5b3cefa2dee56fc80cb7163586f503072c3db882cf352168ca308b559a16e3e9347c1eb021085d96c3171a4813c8c9f510d5223d2243388b42a33d511d0ae4bb63e24c08c677a5b1f663569219649de3b6983f626d8f8c6a03617e0e08b53ec2d1c9094cffce7b8c"}, {0xdd, 0x38, "65cd381cd93e5ab28e993279c4d35390cd395b8c14372e31573f996f52d99b05315d81d9bc3f24adfd3938316f1b81165f5a899f5e16a55e"}, {0xdd, 0x52, "5a80ebf72452d6c9546db4e7024e82eb178415c89ff24919c7d5ba3cec2356d6b35f0b03b39a4bf3699b0e49cce322eb1ed41b073c388d7fdf4e6b2a5434d08a086b0d2a4bb78192965f22abeebf7fc375de"}, {0xdd, 0xd, "cf3c4af45f49e73aa96306f8be"}, {0xdd, 0x62, "298f5d090efbaaea692a592d65d90576c6935dcc5cb04179f25ea1c28a2a3c62a0a9685e6e1e90dbdd1302fc64d0df1fc2d708515b5dda82f4ce50dcc8bdf65b91a237061519bb433b8d2ae0c76f610e7aa62685f92afdb1c40ffa1746bd468be12d"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x27, 0x80, [@rann={0x7e, 0x15, {{0x1}, 0x9, 0xe, @broadcast, 0x6}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x60}}]}, @NL80211_ATTR_BEACON_TAIL={0x6d, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x1}, 0xf9, 0x8, @device_a, 0x40, 0x3d, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @cf={0x4, 0x6, {0x2, 0x0, 0x4, 0x1}}, @erp={0x2a, 0x1}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x7f, @device_b, 0x1, @value=@broadcast, 0xf4d8, 0x40, @broadcast, 0x4}}, @mic={0x8c, 0x18, {0x90f, "81f93162e277", @long="11290d32519af337737a0b13127ae948"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0xb4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xaa, 0x2, "9c78743be97658850035965d19a75d671517d41bbd2c3eb6a622751006acf4d31690bad1230d2a30609e7f70dd5b6fe9c42dde1fbcd46129fbe234420d354e784e4a5e5a0835e71b891c0bb281f70745ec03817863263560843d0be9b2ea3ab2c7867fe10dd17ae12e19e11e5118ce3b55301b7d5ea3c978bb178603c1e1db959c30dac651a28e8808e23f940af51dbfd48f0e9873b31a5995dd21921331964adc47269462ed"}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x490}}, 0x4040014) close(r0) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r1, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x0) 3.876574552s ago: executing program 2 (id=9419): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x3fffffffffffce3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) pipe(0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 3.796353915s ago: executing program 0 (id=9420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan0\x00', 0x6}) syz_emit_ethernet(0x6c, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0xffff, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x2}}}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r4) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x9, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) socket$inet6(0xa, 0x4, 0x7ff) 3.568947812s ago: executing program 2 (id=9421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xb4, "b37c9621a38368153da83ffab13fcb993b0e3cde73157d0bd12ee6b21789e598c4b6923516d4482a403c9fd16abce73d5978d031cb6f3eba3f57a3f0671965e71e9d733eb59716beb22769cf76b58eb6ed0882a77735ccd749dda5a09dae8b3fdf56c160954da1a0e32c9def90be4490b4cdf38659f4e33c3979ada051d5ac44d19a344ee53103972056957b278214921e0ef0f4cae3ee2e5cead2d129abc9ae9e4228c8e4839f1fe5cf14ba6139f27b3e447c5b"}, &(0x7f0000000380)=0xbc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f00000003c0)={r1, 0x6}, 0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x34028800}, 0x0) 3.448678235s ago: executing program 2 (id=9422): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x1411, 0x223, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a0001", 0x37}], 0x1}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x6}, 0x1c}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0xa, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 368.993505ms ago: executing program 0 (id=9423): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="27031c00160014000000002f16afacdb06e10540000086dd00050004060000000000000037249654fd4828c1b95acb31c060d0097238a9d87f0013385372647accab9f5131c75c91", 0x48}], 0x1}, 0x4005) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006120a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 288.865808ms ago: executing program 1 (id=9424): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046, 0x400}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x51de}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000100000e277ecf1c67e1f000000000000f54b64fa25f04d7783574aa736cf892cf6f75833596ed3fdaf8c8f3752cc8634906ee812b9eec2720a9c0f8f9d8523acbc8123c274ef39a21322650ab588d140659ef53efb55ba06ec94cf1d150b1cc5b86c2d16cbec5d0e02d4b99fcdeb82e38f21ac6a9d4c5dfe77156320ad074f1e6ed880a223edc724df87965af4ba98fac037f48fae8f6fffa7babc5765a3094f3207c73e0e33dec746567609eb", @ANYRES32=0x0, @ANYRES8=r2], 0x2c}}, 0x0) 236.427041ms ago: executing program 3 (id=9425): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x990, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}}, 0x28}}, 0x0) 204.536392ms ago: executing program 2 (id=9426): syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaab00000000000086dd6011a8bc594c771f2a9384a700000000ffffac141400fe8000000000000000000000000000aa000040010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0) 148.55097ms ago: executing program 1 (id=9427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) sendto$inet6(r1, &(0x7f0000000080)="28a616", 0x3, 0x40500c1, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @loopback, 0x879}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x2) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x1, 0x1, 0x526}, 0x58}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r4) r8 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r9, &(0x7f0000000080), 0x0}, 0x20) (async) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, 0xfffffffffffffffd, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r11) (async) recvmmsg(r11, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000ac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000004240)=""/4122, 0x101a}, {&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/48, 0x30}], 0x5}, 0xfffffffe}], 0x3, 0x2030, 0x0) 147.885393ms ago: executing program 0 (id=9428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "0200"}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x8000000004) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000600)={0x124, r4, 0x5eae78d9c54e9d3f, 0x70bd2c, 0x25dfdc02, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x108, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xec, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3b41}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555540404}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xf9a0947595593702}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x124}}, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000000800010002081000418e00000004fcff", 0x58}, {&(0x7f0000000000)="b4b0753ca5d4a99d9d7f5b82566ffb83eb284fc1ac34c9f4924e6300bcc4ddbabb1d5d9e2b4824206ca058402e7240b644c7b816d1c13f87622033e9", 0x3c}], 0x2) shutdown(r0, 0x1) r6 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) (async) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0xe}, {0x0, 0xffe0}, {0xe, 0x8005}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "4716dcd94222218876eaccb7b0596014"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "b20c51b800c9992795f5fea9302f41df"}]}}]}, 0x5c}}, 0x4094) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (rerun: 32) 93.929579ms ago: executing program 2 (id=9429): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) unshare(0x46000480) unshare(0x70000200) 63.631781ms ago: executing program 3 (id=9430): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xf9a3d000) r4 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendto(r6, &(0x7f0000000100)="aa08153e0f1d02843be8820fd70293ae614716e75cf9a29deb39b7a94aea63ac75416f2a318f4b25bbd0ef43e1d07e698956da74a489b0896c9049629c385495a225b4a6401fb681c7b05bc73dfc6e2b", 0x50, 0x44000, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x2, 0x2, {0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}}}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x71, 0x425, 0x5070bd28, 0x7f, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0xc1, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 0s ago: executing program 4 (id=9431): socket$kcm(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13a1000000000000300012800b00010067656e657665000020000280060005004e23"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000001ce66ea18fc26d9dd9040000000000000000f8188abd024d883ab41d6e89d9fecb576f3a137c400c2e6e65c590a37eedd03d19219f7a2a0c5bfdf65f1b107c86da9bc01dab0391720a092258fa7e53d83c164c64608939a6d75f7e358b6a6955ddda603147a3cfa6208cf21e4a324221e0af79b3c7e038ffb546"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) connect$unix(r2, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", '\x00', "4f9e86d67a8426bd"}, 0x28) (async, rerun: 32) recvfrom$phonet(r2, &(0x7f0000000300)=""/202, 0xca, 0x10121, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) kernel console output (not intermixed with test programs): s [ 787.470127][ T460] Cannot find add_set index 4 as target [ 787.517804][ T463] openvswitch: netlink: Duplicate key (type 2). [ 787.717916][ T7315] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.727004][ T7315] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.743124][ T7315] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.778703][ T7315] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.832503][ T476] smc: net device team0 applied user defined pnetid SYZ2 [ 787.842735][ T481] netlink: 'syz.0.7326': attribute type 1 has an invalid length. [ 788.214883][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 788.331684][ T7315] bridge_slave_1: left promiscuous mode [ 788.337861][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.358002][ T7315] bridge_slave_0: left allmulticast mode [ 788.366455][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.549595][ T519] netlink: 'syz.3.7337': attribute type 9 has an invalid length. [ 788.594457][ T7315] pimreg3: left allmulticast mode [ 788.917399][ T7315] bond11 (unregistering): (slave gretap1): Releasing active interface [ 788.943994][ T7315] bond12 (unregistering): (slave gretap2): Releasing active interface [ 789.025859][ T7315] bond1 (unregistering): (slave geneve2): Releasing active interface [ 789.580899][ T7315] team0: Port device bridge2 removed [ 789.781849][ T7315] bond1 (unregistering): Released all slaves [ 789.798247][ T7315] bond2 (unregistering): (slave team_slave_0): Removing an active aggregator [ 789.808330][ T7315] bond2 (unregistering): (slave team_slave_0): Releasing backup interface [ 789.819012][ T7315] bond2 (unregistering): Released all slaves [ 789.834803][ T7315] bond0 (unregistering): Released all slaves [ 789.852185][ T7315] bond3 (unregistering): Released all slaves [ 789.882104][ T7315] bond4 (unregistering): Released all slaves [ 789.902190][ T7315] bond5 (unregistering): Released all slaves [ 789.919055][ T7315] bond6 (unregistering): (slave bond7): Releasing backup interface [ 789.928203][ T7315] bond6 (unregistering): Released all slaves [ 789.944436][ T7315] bond7 (unregistering): Released all slaves [ 789.960451][ T7315] bond8 (unregistering): Released all slaves [ 789.996572][ T7315] bond9 (unregistering): Released all slaves [ 790.012489][ T7315] bond10 (unregistering): Released all slaves [ 790.028513][ T7315] bond11 (unregistering): Released all slaves [ 790.044513][ T7315] bond12 (unregistering): Released all slaves [ 790.060530][ T505] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 790.145116][ T542] xt_hashlimit: size too large, truncated to 1048576 [ 790.464408][ T544] FAULT_INJECTION: forcing a failure. [ 790.464408][ T544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.484094][ T544] CPU: 1 UID: 0 PID: 544 Comm: syz.4.7344 Not tainted syzkaller #0 PREEMPT(full) [ 790.484125][ T544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.484139][ T544] Call Trace: [ 790.484148][ T544] [ 790.484159][ T544] dump_stack_lvl+0xe8/0x150 [ 790.484192][ T544] should_fail_ex+0x40c/0x560 [ 790.484222][ T544] _copy_from_user+0x2d/0xb0 [ 790.484250][ T544] kstrtouint_from_user+0xd6/0x180 [ 790.484357][ T544] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 790.484411][ T544] proc_fail_nth_write+0x8e/0x210 [ 790.484441][ T544] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 790.484479][ T544] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 790.484507][ T544] vfs_write+0x296/0xba0 [ 790.484549][ T544] ? __pfx_vfs_write+0x10/0x10 [ 790.484583][ T544] ? __fget_files+0x2a/0x420 [ 790.484615][ T544] ? __fget_files+0x3a2/0x420 [ 790.484641][ T544] ? __fget_files+0x2a/0x420 [ 790.484678][ T544] ksys_write+0x150/0x270 [ 790.484713][ T544] ? __pfx_ksys_write+0x10/0x10 [ 790.484755][ T544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.484780][ T544] do_syscall_64+0x174/0x580 [ 790.484803][ T544] ? trace_irq_disable+0x3b/0x140 [ 790.484835][ T544] ? clear_bhb_loop+0x40/0x90 [ 790.484863][ T544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.484886][ T544] RIP: 0033:0x7f24fd55d68e [ 790.484907][ T544] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 790.484929][ T544] RSP: 002b:00007f24fe3cbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.484951][ T544] RAX: ffffffffffffffda RBX: 00007f24fe3cc6c0 RCX: 00007f24fd55d68e [ 790.484964][ T544] RDX: 0000000000000001 RSI: 00007f24fe3cc0a0 RDI: 0000000000000006 [ 790.484975][ T544] RBP: 00007f24fe3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 790.484987][ T544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.484997][ T544] R13: 00007f24fd816038 R14: 00007f24fd815fa0 R15: 00007ffc28a22ff8 [ 790.485037][ T544] [ 790.518065][ T547] tipc: MTU too low for tipc bearer [ 790.823546][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.862422][ T555] x_tables: duplicate underflow at hook 3 [ 790.869787][ T550] bridge_slave_0 (unregistering): left allmulticast mode [ 790.877060][ T550] bridge_slave_0 (unregistering): left promiscuous mode [ 790.915255][ T550] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.193396][ T568] __nla_validate_parse: 10 callbacks suppressed [ 791.193423][ T568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7348'. [ 791.304337][ T570] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 791.713605][ T597] sctp: [Deprecated]: syz.0.7355 (pid 597) Use of int in maxseg socket option. [ 791.713605][ T597] Use struct sctp_assoc_value instead [ 792.416446][ T632] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7363'. [ 792.451883][ T638] h: entered promiscuous mode [ 792.492892][ T642] netlink: 'syz.1.7366': attribute type 3 has an invalid length. [ 792.501438][ T642] netlink: 'syz.1.7366': attribute type 1 has an invalid length. [ 792.509223][ T642] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7366'. [ 792.980213][ T660] netlink: 'syz.4.7373': attribute type 1 has an invalid length. [ 793.002811][ T660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7373'. [ 793.038782][ T660] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7373'. [ 793.061258][ T660] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7373'. [ 793.192640][ T668] netlink: 88 bytes leftover after parsing attributes in process `syz.1.7375'. [ 793.206374][ T670] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7375'. [ 793.234049][ T672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7376'. [ 793.516518][ T681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7376'. [ 793.588182][ T7315] hsr_slave_0: left promiscuous mode [ 793.685977][ T7315] hsr_slave_1: left promiscuous mode [ 793.692119][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.699571][ T7315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.738004][ T689] sctp: [Deprecated]: syz.1.7379 (pid 689) Use of int in max_burst socket option. [ 793.738004][ T689] Use struct sctp_assoc_value instead [ 793.806689][ T7315] veth1_macvtap: left promiscuous mode [ 793.812248][ T7315] veth0_macvtap: left promiscuous mode [ 794.243134][ T724] netlink: 'syz.1.7385': attribute type 1 has an invalid length. [ 794.564960][ T7315] team0 (unregistering): Port device team_slave_1 removed [ 794.806744][ T719] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 795.185782][ T753] veth0: entered promiscuous mode [ 795.356105][ T752] veth0: left promiscuous mode [ 795.439543][ T765] ip6tnl1: entered promiscuous mode [ 795.630317][ T781] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 795.751404][ T787] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 796.069176][ T804] netlink: 'syz.0.7412': attribute type 1 has an invalid length. [ 796.242732][ T803] __nla_validate_parse: 6 callbacks suppressed [ 796.242755][ T803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7413'. [ 796.309248][ T799] netlink: 'syz.0.7412': attribute type 1 has an invalid length. [ 796.491630][ T7315] IPVS: stop unused estimator thread 0... [ 796.657414][ T815] netlink: get zone limit has 4 unknown bytes [ 796.734296][ T817] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 796.755093][ T817] bond5 (unregistering): Released all slaves [ 797.032891][ T825] bond2: option all_slaves_active: invalid value (222) [ 797.041838][ T825] bond2 (unregistering): Released all slaves [ 797.106986][ T839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7421'. [ 797.284279][ T854] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.7424'. [ 797.443840][ T864] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 797.462413][ T864] bond3 (unregistering): Released all slaves [ 797.638161][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7422'. [ 797.656698][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.664362][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.671981][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.680298][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7429'. [ 797.693286][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.701493][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.709278][ T874] openvswitch: netlink: IP tunnel dst address not specified [ 797.726711][ T29] audit: type=1800 audit(1781423900.838:23): pid=868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7430" name="memory.events" dev="tmpfs" ino=856 res=0 errno=0 [ 797.963511][ T886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7434'. [ 798.128714][ T890] syzkaller0: entered promiscuous mode [ 798.134781][ T890] syzkaller0: entered allmulticast mode [ 798.336757][ T901] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7439'. [ 798.703150][ T919] sctp: [Deprecated]: syz.4.7443 (pid 919) Use of int in maxseg socket option. [ 798.703150][ T919] Use struct sctp_assoc_value instead [ 798.851344][ T935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7446'. [ 798.928783][ T941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7449'. [ 798.944890][ T941] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7449'. [ 799.139966][ T956] lo: entered allmulticast mode [ 799.145790][ T956] tunl0: entered allmulticast mode [ 799.154344][ T956] gre0: entered allmulticast mode [ 799.168337][ T956] gretap0: entered allmulticast mode [ 799.182956][ T956] erspan0: entered allmulticast mode [ 799.213165][ T956] ip_vti0: entered allmulticast mode [ 799.222485][ T956] ip6_vti0: entered allmulticast mode [ 799.231956][ T956] sit0: entered allmulticast mode [ 799.250480][ T956] ip6tnl0: entered allmulticast mode [ 799.275348][ T956] ip6gre0: entered allmulticast mode [ 799.427928][ T969] vlan3: entered promiscuous mode [ 799.440747][ T969] bridge0: entered promiscuous mode [ 800.013943][ T1003] netlink: 'syz.3.7465': attribute type 1 has an invalid length. [ 800.045192][ T1000] netlink: 'syz.3.7465': attribute type 1 has an invalid length. [ 800.182512][ T1014] netlink: 'syz.3.7468': attribute type 1 has an invalid length. [ 800.273781][ T1025] xt_hashlimit: size too large, truncated to 1048576 [ 800.343040][ T1020] can: request_module (can-proto-0) failed. [ 800.579021][ T1045] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 800.590629][ T1038] ipvlan2: entered promiscuous mode [ 800.893166][ T1071] net_ratelimit: 27 callbacks suppressed [ 800.893189][ T1071] openvswitch: netlink: IPv4 tun info is not correct [ 800.976212][ T1081] vlan2: entered allmulticast mode [ 800.986724][ T1081] erspan0: entered allmulticast mode [ 801.065431][ T1083] netlink: 'syz.3.7483': attribute type 15 has an invalid length. [ 801.223431][ T1093] netlink: 'syz.0.7488': attribute type 1 has an invalid length. [ 801.243807][ T1093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.279064][ T1093] netlink: 'syz.0.7488': attribute type 1 has an invalid length. [ 801.310436][ T1097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.341940][ T1101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.392161][ T1099] __nla_validate_parse: 1 callbacks suppressed [ 801.392182][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7490'. [ 801.536895][ T1110] netlink: 260 bytes leftover after parsing attributes in process `syz.4.7490'. [ 801.591532][ T1101] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 801.712933][ T1101] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 801.820026][ T1126] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7496'. [ 801.836097][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.850185][ T1126] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7496'. [ 801.859812][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.867088][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.877143][ T1126] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7496'. [ 801.910392][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.940133][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7497'. [ 802.042753][ T1132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.262024][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 802.272049][ T1144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7500'. [ 802.282301][ T1145] netlink: 'syz.2.7503': attribute type 9 has an invalid length. [ 802.290119][ T1145] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7503'. [ 802.300791][ T1147] netlink: 'syz.2.7503': attribute type 9 has an invalid length. [ 802.308574][ T1147] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7503'. [ 802.359572][ T1147] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7503'. [ 802.368664][ T1147] openvswitch: netlink: Flow actions attr not present in new flow. [ 802.384456][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 802.391451][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 802.874744][ T1134] infiniband syz2: set active [ 802.879589][ T808] vxcan1 speed is unknown, defaulting to 1000 [ 802.886518][ T1134] infiniband syz2: added vxcan1 [ 802.957127][ T1134] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 802.981640][ T1134] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 802.998847][ T1134] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 803.085959][ T1134] RDS/IB: syz2: added [ 803.095201][ T1134] smc: adding ib device syz2 with port count 1 [ 803.121666][ T1134] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 803.147949][ T808] vxcan1 speed is unknown, defaulting to 1000 [ 803.155250][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 803.493998][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 803.562408][ T1197] bond0: entered promiscuous mode [ 803.574317][ T1197] bond_slave_0: entered promiscuous mode [ 803.591192][ T1197] bond_slave_1: entered promiscuous mode [ 803.617958][ T1201] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.625676][ T1201] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.866005][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 804.134449][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 804.320983][ T1222] netlink: 'syz.2.7524': attribute type 1 has an invalid length. [ 804.347089][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 804.575253][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 804.770444][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 804.918601][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 804.967523][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 805.143658][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 805.311425][ T1134] vxcan1 speed is unknown, defaulting to 1000 [ 806.205002][ T1183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.224415][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 806.431588][ T1238] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 806.774562][ T1255] __nla_validate_parse: 6 callbacks suppressed [ 806.774582][ T1255] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7535'. [ 806.832019][ T1258] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7536'. [ 806.841373][ T1258] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7536'. [ 807.008697][ T1269] xt_HMARK: proto mask must be zero with L3 mode [ 807.567962][ T1307] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7551'. [ 807.657702][ T1311] netlink: 'syz.3.7552': attribute type 21 has an invalid length. [ 807.665865][ T1311] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7552'. [ 807.925238][ T1329] vlan0: entered promiscuous mode [ 807.936526][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7557'. [ 808.329174][ T1350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7564'. [ 808.361135][ T1351] syzkaller0: entered promiscuous mode [ 808.372285][ T1351] syzkaller0: entered allmulticast mode [ 808.602788][ T1357] netlink: 'syz.0.7566': attribute type 30 has an invalid length. [ 808.808618][ T1377] netlink: 'syz.1.7573': attribute type 1 has an invalid length. [ 808.881506][ T1381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7573'. [ 808.901233][ T1377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.139892][ T1394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7576'. [ 809.265706][ T1398] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7578'. [ 809.293731][ T1394] netlink: 'syz.4.7576': attribute type 1 has an invalid length. [ 809.749980][ T1421] netlink: 'syz.0.7584': attribute type 1 has an invalid length. [ 809.783675][ T1421] bond7: (slave geneve2): making interface the new active one [ 809.791851][ T1421] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 809.800538][ T7315] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 809.809446][ T7315] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 809.818286][ T7315] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 809.828783][ T7315] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 809.921795][ T1426] syzkaller0: entered promiscuous mode [ 809.928460][ T1426] syzkaller0: entered allmulticast mode [ 809.934314][ T1428] 0: reclassify loop, rule prio 0, protocol 800 [ 809.996892][ T1430] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 810.371837][ T1452] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 810.435252][ T1415] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 810.790551][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 811.547202][ T1517] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 811.571732][ T1513] Cannot find del_set index 3 as target [ 811.752743][ T1522] x_tables: duplicate underflow at hook 3 [ 811.805059][ T1529] netlink: 'syz.2.7614': attribute type 4 has an invalid length. [ 811.805808][ T1527] syzkaller0: entered promiscuous mode [ 811.818403][ T1527] syzkaller0: entered allmulticast mode [ 811.875627][ T1527] __nla_validate_parse: 6 callbacks suppressed [ 811.875651][ T1527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7615'. [ 811.996829][ T1535] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 812.013852][ T1535] bond0: (slave lo): Error: Device can not be enslaved while up [ 812.372056][ T1559] netlink: 'syz.4.7625': attribute type 1 has an invalid length. [ 812.473144][ T1559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 812.559646][ T1564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7626'. [ 812.574151][ T1562] bond3: (slave veth0_to_bond): making interface the new active one [ 812.583898][ T1562] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 812.677163][ T1566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7627'. [ 812.687622][ T1559] bond3: entered promiscuous mode [ 812.692906][ T1559] veth0_to_bond: entered promiscuous mode [ 812.699183][ T1559] bond3: entered allmulticast mode [ 812.704364][ T1559] veth0_to_bond: entered allmulticast mode [ 812.724619][ T1562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7625'. [ 812.965025][ T1572] gre2: entered promiscuous mode [ 813.051109][ T1578] IPv6: NLM_F_CREATE should be specified when creating new route [ 813.436752][ T1606] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7638'. [ 813.446840][ T1606] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7638'. [ 813.457130][ T1606] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7638'. [ 814.399173][ T1649] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7642'. [ 816.015987][ T1582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 816.048857][ T1648] netlink: 'syz.3.7642': attribute type 2 has an invalid length. [ 816.064796][ T1648] netlink: 'syz.3.7642': attribute type 2 has an invalid length. [ 816.281112][ T1666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7647'. [ 816.389804][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7649'. [ 819.189556][ T1655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.421602][ T1703] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20000 [ 819.503671][ T1698] openvswitch: netlink: VLAN attribute unexpected. [ 819.510693][ T1698] openvswitch: netlink: VLAN attribute unexpected. [ 819.765654][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 819.798155][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 819.807354][ T1723] team0: entered allmulticast mode [ 819.812602][ T1723] team_slave_0: entered allmulticast mode [ 819.818366][ T1723] team_slave_1: entered allmulticast mode [ 819.839933][ T1723] bridge0: port 1(team0) entered blocking state [ 819.846551][ T1723] bridge0: port 1(team0) entered disabled state [ 819.855522][ T1723] team0: entered promiscuous mode [ 819.857969][ T1731] openvswitch: netlink: Missing valid actions attribute. [ 819.860598][ T1723] team_slave_0: entered promiscuous mode [ 819.861069][ T1723] team_slave_1: entered promiscuous mode [ 819.868103][ T1731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.918085][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 819.925980][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 819.962306][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 819.970197][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 819.980270][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 819.988149][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.030959][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 820.038925][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.053988][ T1730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7664'. [ 820.119020][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 820.139470][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.195246][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 820.203137][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.213177][ T1723] netlink: 'syz.1.7661': attribute type 10 has an invalid length. [ 820.221047][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.231033][ T1723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 820.346106][ T1743] pim6reg: entered allmulticast mode [ 820.361103][ T1743] hsr_slave_0: left promiscuous mode [ 820.367493][ T1743] hsr_slave_1: left promiscuous mode [ 821.100749][ T1782] IPVS: length: 239 != 24 [ 821.249782][ T1797] ip6erspan0: entered promiscuous mode [ 821.341322][ T1802] geneve3: entered promiscuous mode [ 821.351684][ T276] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 35789 - 0 [ 821.360577][ T276] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 35789 - 0 [ 821.377751][ T276] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 35789 - 0 [ 821.432959][ T276] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 35789 - 0 [ 821.649432][ T1821] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 821.715904][ T1828] IPv6: NLM_F_REPLACE set, but no existing node found! [ 821.893929][ T1837] bridge5: entered promiscuous mode [ 821.901315][ T1837] bridge5: entered allmulticast mode [ 821.920096][ T1838] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 822.353425][ T1866] validate_nla: 27 callbacks suppressed [ 822.353446][ T1866] netlink: 'syz.1.7701': attribute type 3 has an invalid length. [ 822.601656][ T1878] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 822.967725][ T1892] siw: device registration error -23 [ 822.986933][ T1893] siw: device registration error -23 [ 823.308185][ T1905] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 824.386370][ T1917] netlink: 'syz.0.7716': attribute type 5 has an invalid length. [ 824.398276][ T1915] syzkaller1: entered promiscuous mode [ 824.416666][ T1915] syzkaller1: entered allmulticast mode [ 824.456497][ T1919] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 824.472392][ T1915] vlan3: entered allmulticast mode [ 824.483295][ T1915] bond0: entered allmulticast mode [ 824.496692][ T1915] bond_slave_0: entered allmulticast mode [ 824.517011][ T1915] bond_slave_1: entered allmulticast mode [ 824.801567][ T1928] bond5: option lp_interval: invalid value (0) [ 824.807855][ T1928] bond5: option lp_interval: allowed values 1 - 2147483647 [ 824.826200][ T1928] bond5 (unregistering): Released all slaves [ 824.885247][ T1943] __nla_validate_parse: 36 callbacks suppressed [ 824.885269][ T1943] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7726'. [ 824.909702][ T1941] hsr0: entered promiscuous mode [ 825.096873][ T1950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.116707][ T1952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7728'. [ 825.139688][ T1950] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.7730'. [ 825.559206][ T1963] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 825.584969][ T1967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7733'. [ 825.794253][ T1977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7740'. [ 825.812750][ T1978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7739'. [ 825.962103][ T1977] 8021q: adding VLAN 0 to HW filter on device bond6 [ 825.972844][ T1986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7743'. [ 826.019824][ T1977] bond6 (unregistering): Released all slaves [ 826.667386][ T2018] openvswitch: netlink: Flow key attribute not present in set flow. [ 826.677015][ T2021] openvswitch: netlink: Flow key attribute not present in set flow. [ 826.791349][ T2024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7756'. [ 826.965784][ T2034] veth1_to_bond: entered allmulticast mode [ 826.990981][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7756'. [ 827.036094][ T2034] veth1_to_bond (unregistering): left allmulticast mode [ 827.102609][ T2034] bond0: (slave bond_slave_1): Releasing backup interface [ 827.473841][ T2056] vcan0: entered promiscuous mode [ 827.478958][ T2056] vcan0: entered allmulticast mode [ 827.573100][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7768'. [ 827.764247][ T2043] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 827.946936][ T2043] wlan0 speed is unknown, defaulting to 1000 [ 827.959460][ T2073] netlink: 'syz.2.7774': attribute type 1 has an invalid length. [ 827.970021][ T2073] netlink: 'syz.2.7774': attribute type 1 has an invalid length. [ 827.979639][ T2043] vxcan1 speed is unknown, defaulting to 1000 [ 828.043504][ T2073] bond6: entered promiscuous mode [ 828.059948][ T2073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.214010][ T2073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 828.221233][ T2073] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 828.231526][ T2073] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 828.291223][ T2073] bond6: (slave ip6gre2): making interface the new active one [ 828.298771][ T2073] ip6gre2: entered promiscuous mode [ 828.305830][ T2073] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 828.473523][ T2097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 829.349890][ T2134] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 829.709918][ T2145] netlink: 'syz.3.7792': attribute type 4 has an invalid length. [ 830.583068][ T2188] __nla_validate_parse: 1 callbacks suppressed [ 830.583088][ T2188] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7799'. [ 830.692917][ T2191] IPVS: Unknown mcast interface: vcan0 [ 830.798371][ T2192] syzkaller1: entered promiscuous mode [ 830.803916][ T2192] syzkaller1: entered allmulticast mode [ 830.864415][ T2196] netlink: 'syz.0.7803': attribute type 1 has an invalid length. [ 830.996361][ T2204] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 831.010086][ T2204] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 831.024467][ T2204] bond8: (slave ip6gre1): making interface the new active one [ 831.032917][ T2204] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 831.184068][ T2213] netlink: 'syz.2.7807': attribute type 1 has an invalid length. [ 831.196703][ T2212] bridge0: port 1(team0) entered blocking state [ 831.203131][ T2212] bridge0: port 1(team0) entered forwarding state [ 831.209825][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.216944][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.319545][ T2199] Bluetooth: hci3: command 0x0406 tx timeout [ 831.353690][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7807'. [ 831.362629][ T2215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7807'. [ 831.422236][ T2212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7808'. [ 831.432228][T13379] vxcan1 speed is unknown, defaulting to 1000 [ 831.448161][ T7311] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.464821][ T2220] xt_l2tp: v2 doesn't support IP mode [ 831.477185][ T2219] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 831.492984][ T2212] netlink: 'syz.1.7808': attribute type 1 has an invalid length. [ 831.517977][ T7311] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.545063][ T7311] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.561541][ T7311] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.915584][ T2224] syzkaller0: entered promiscuous mode [ 831.921199][ T2224] syzkaller0: entered allmulticast mode [ 831.957735][ T2227] batman_adv: batadv0: Interface deactivated: wlan0 [ 832.253643][ T2227] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 832.263513][ T2227] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 832.479604][ T2227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 832.489427][ T2227] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 832.578424][ T2227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 832.598668][ T2227] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 832.633242][ T2258] bridge0: port 3(gretap0) entered blocking state [ 832.640150][ T2258] bridge0: port 3(gretap0) entered disabled state [ 832.647128][ T2258] gretap0: entered allmulticast mode [ 832.661528][ T2258] gretap0: entered promiscuous mode [ 832.951937][ T5640] Bluetooth: hci4: command 0x041b tx timeout [ 832.962261][ T2227] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 832.968622][ T2227] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 833.016230][ T2270] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 833.429594][ T2285] netem: change failed [ 833.554699][ T2294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7825'. [ 833.635909][ T2297] netlink: 'syz.3.7823': attribute type 10 has an invalid length. [ 833.643837][ T2297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.651265][ T2297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.679080][ T2297] batman_adv: batadv0: Removing interface: gretap1 [ 833.937360][ T2306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7827'. [ 833.987443][ T2309] : renamed from bond0 (while UP) [ 834.473769][ T2336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7832'. [ 834.537546][ T2336] team1: entered promiscuous mode [ 834.542680][ T2336] team1: entered allmulticast mode [ 834.593294][ T2341] tipc: Enabling of bearer rejected, already enabled [ 834.608719][ T2340] tipc: Enabling of bearer rejected, already enabled [ 834.876068][ T2350] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 834.966334][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 834.984308][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 835.100362][ T2368] xt_hashlimit: size too large, truncated to 1048576 [ 835.154469][ T2374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7841'. [ 835.300969][ T2377] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 835.343871][ T2377] bond4 (unregistering): Released all slaves [ 835.672823][ T2398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7845'. [ 835.696633][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7845'. [ 835.734908][ T2398] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7845'. [ 835.746762][ T2402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7846'. [ 835.756057][ T2399] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7845'. [ 835.821106][ T2406] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.7847'. [ 835.854293][ T2402] bond3: option xmit_hash_policy: invalid value (64) [ 835.870699][ T2402] bond3 (unregistering): Released all slaves [ 836.331233][ T2432] netlink: 'syz.1.7850': attribute type 23 has an invalid length. [ 836.680943][ T2461] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.856439][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.863744][ C1] bridge0: topology change detected, propagating [ 836.974668][ T2484] netlink: 'syz.4.7859': attribute type 1 has an invalid length. [ 837.036631][ T2484] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 837.235877][ T2493] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7861'. [ 837.844679][ T2542] syzkaller0: entered promiscuous mode [ 837.862658][ T2542] syzkaller0: entered allmulticast mode [ 837.995329][ T2558] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7874'. [ 838.063419][ T2559] syzkaller0: entered promiscuous mode [ 838.068959][ T2559] syzkaller0: entered allmulticast mode [ 838.210333][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 838.608874][ T2602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7879'. [ 838.622350][ T2596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7879'. [ 839.133719][ T2631] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 839.145814][ T2631] bond8 (unregistering): Released all slaves [ 839.559434][ T2660] ipvlan2: entered allmulticast mode [ 839.568461][ T2660] batadv_slave_1: entered allmulticast mode [ 839.589535][ T2660] batman_adv: batadv0: Adding interface: ipvlan2 [ 839.621935][ T2660] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.715412][ T2660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.735163][ T2660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.762979][ T2660] batman_adv: batadv0: Interface activated: ipvlan2 [ 840.113081][ T2704] netlink: 'syz.2.7901': attribute type 1 has an invalid length. [ 840.265633][ T2704] bond8: entered promiscuous mode [ 840.271264][ T2704] 8021q: adding VLAN 0 to HW filter on device bond8 [ 840.327102][ T2708] syzkaller0: entered promiscuous mode [ 840.358101][ T2720] openvswitch: netlink: IP tunnel TTL not specified. [ 840.374062][ T2708] syzkaller0: entered allmulticast mode [ 840.513984][ T2726] netlink: 'syz.1.7906': attribute type 4 has an invalid length. [ 840.537946][ T2708] bond8: (slave bridge3): making interface the new active one [ 840.545490][ T2708] bridge3: entered promiscuous mode [ 840.569476][ T2708] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 840.594227][ T2715] bond8: (slave bridge4): Enslaving as a backup interface with an up link [ 840.620996][ T2733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.633686][ T2726] netlink: 'syz.1.7906': attribute type 2 has an invalid length. [ 840.732854][ T2741] netlink: 'syz.0.7909': attribute type 83 has an invalid length. [ 841.156537][ T2772] __nla_validate_parse: 8 callbacks suppressed [ 841.156559][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7914'. [ 841.171775][ T2772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7914'. [ 841.616389][ T2788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7919'. [ 841.645221][ T2788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7919'. [ 841.680467][ T2788] openvswitch: netlink: EtherType 50a is less than min 600 [ 841.696239][ T2788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7919'. [ 841.728396][ T2796] openvswitch: netlink: EtherType 50a is less than min 600 [ 841.754008][ T2788] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7919'. [ 842.181459][ T2819] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7929'. [ 842.205273][ T2820] netlink: 'syz.2.7930': attribute type 10 has an invalid length. [ 842.278739][ T2820] team0: Port device dummy0 added [ 842.404719][ T2826] netlink: 'syz.3.7931': attribute type 11 has an invalid length. [ 842.412615][ T2826] netlink: 'syz.3.7931': attribute type 11 has an invalid length. [ 842.420479][ T2826] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7931'. [ 842.554692][ T2840] x_tables: duplicate entry at hook 3 [ 842.828875][ T2835] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 842.856335][ T2861] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7935'. [ 843.109240][ T2877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7940'. [ 843.958460][ T2902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.529913][ T2932] veth0: entered promiscuous mode [ 844.535482][ T2934] veth0: left promiscuous mode [ 845.181365][ T2971] netlink: 'syz.1.7965': attribute type 2 has an invalid length. [ 845.190328][ T2972] netlink: 'syz.4.7966': attribute type 7 has an invalid length. [ 845.441274][ T2985] netlink: 'syz.1.7969': attribute type 1 has an invalid length. [ 845.654496][ T2992] netlink: 'syz.0.7973': attribute type 21 has an invalid length. [ 846.107443][ T3016] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 846.198690][ T3022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.302624][ T3026] netlink: 'syz.4.7984': attribute type 4 has an invalid length. [ 846.334597][ T3026] __nla_validate_parse: 7 callbacks suppressed [ 846.334621][ T3026] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7984'. [ 846.553763][ T3031] : entered promiscuous mode [ 846.558757][ T3040] netlink: 'syz.1.7990': attribute type 1 has an invalid length. [ 846.604827][ T3040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.622546][ T3031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7986'. [ 846.633260][ T3044] team_slave_0: left promiscuous mode [ 846.660125][ T3044] team_slave_0: left allmulticast mode [ 846.692405][ T3044] team0: Port device team_slave_0 removed [ 846.714949][ T3044] bond0: (slave team_slave_0): Enslaving as a backup interface with an up link [ 846.907744][ T3064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7995'. [ 847.097192][ T3074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7998'. [ 847.266827][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8000'. [ 847.322874][ T3084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8000'. [ 847.381795][ T3087] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.8001'. [ 847.409060][ T3087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8001'. [ 847.522409][ T3097] netlink: 'syz.3.8003': attribute type 1 has an invalid length. [ 847.962524][ T3115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8005'. [ 847.988352][ T3115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8005'. [ 848.014301][ T3123] netlink: 'syz.3.8007': attribute type 4 has an invalid length. [ 848.035252][ T3123] netlink: 'syz.3.8007': attribute type 1 has an invalid length. [ 848.231109][ T3132] veth5: entered allmulticast mode [ 848.716015][ T3167] syzkaller0: entered promiscuous mode [ 848.722957][ T3167] syzkaller0: entered allmulticast mode [ 848.796408][ T3171] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.057751][ T3187] gretap0: entered promiscuous mode [ 849.066004][ T3187] gretap0: left promiscuous mode [ 849.600754][ T3205] netlink: 'syz.1.8031': attribute type 21 has an invalid length. [ 849.948709][ T3227] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 850.147222][ T3241] xt_CONNSECMARK: invalid mode: 0 [ 850.157192][ T3241] x_tables: duplicate underflow at hook 3 [ 850.391494][ T3253] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 851.200187][ T3297] Cannot find del_set index 2 as target [ 851.230077][ T3291] Cannot find del_set index 2 as target [ 851.545135][ T3308] syzkaller1: entered promiscuous mode [ 851.577286][ T3308] syzkaller1: entered allmulticast mode [ 851.740814][ T3324] erspan0: entered promiscuous mode [ 852.244876][ T3348] __nla_validate_parse: 13 callbacks suppressed [ 852.244898][ T3348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8074'. [ 852.314418][ T3355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8075'. [ 852.459150][ T3363] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode [ 852.503752][ T3366] netlink: 'syz.3.8081': attribute type 6 has an invalid length. [ 852.621076][ T3369] syzkaller0: entered promiscuous mode [ 852.641366][ T3369] syzkaller0: entered allmulticast mode [ 852.786835][ T3383] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8085'. [ 853.205332][ T3407] xt_cgroup: xt_cgroup: no path or classid specified [ 853.336763][ T3414] xt_hashlimit: size too large, truncated to 1048576 [ 853.429721][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.584617][ T3415] bridge_slave_0 (unregistering): left allmulticast mode [ 853.631610][ T3415] bridge_slave_0 (unregistering): left promiscuous mode [ 853.673385][ T3415] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.317699][ T3462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8107'. [ 854.673693][ T3479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8112'. [ 854.996495][ T3499] netlink: 'syz.3.8117': attribute type 23 has an invalid length. [ 855.306053][ T3519] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 855.341183][ T3508] syzkaller1: entered promiscuous mode [ 855.355392][ T3508] syzkaller1: entered allmulticast mode [ 855.623071][ T3536] netlink: 'syz.0.8128': attribute type 1 has an invalid length. [ 855.677792][ T3536] 8021q: adding VLAN 0 to HW filter on device bond9 [ 855.758549][ T3545] netlink: 'syz.4.8131': attribute type 11 has an invalid length. [ 855.791022][ T3545] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8131'. [ 855.802834][ T3548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.917059][ T3551] netlink: 'syz.0.8134': attribute type 10 has an invalid length. [ 855.925614][ T3555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8135'. [ 855.952507][ T3555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8135'. [ 855.953466][ T3551] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8134'. [ 855.992438][ T3555] netlink: 'syz.3.8135': attribute type 1 has an invalid length. [ 856.353884][ T3569] netlink: 'syz.3.8141': attribute type 39 has an invalid length. [ 856.486971][ T3583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8144'. [ 856.518486][ T3583] netlink: 'syz.4.8144': attribute type 8 has an invalid length. [ 856.578501][ T3583] netlink: 'syz.4.8144': attribute type 15 has an invalid length. [ 856.873390][ T3612] netlink: 'syz.1.8151': attribute type 2 has an invalid length. [ 856.953147][ T3618] netlink: 'syz.4.8153': attribute type 1 has an invalid length. [ 857.075489][ T3618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 857.144196][ T3624] syzkaller0: entered promiscuous mode [ 857.177446][ T3624] syzkaller0: entered allmulticast mode [ 857.203068][ T3630] bridge0: port 1(team0) entered disabled state [ 857.226313][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.414143][ T3634] erspan0: left promiscuous mode [ 857.542960][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.550431][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.591022][ T3654] validate_nla: 3 callbacks suppressed [ 857.591041][ T3654] netlink: 'syz.2.8163': attribute type 1 has an invalid length. [ 857.605713][ T3654] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8163'. [ 857.678801][ T3634] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 857.706617][ T7311] bridge0: port 1(team0) entered blocking state [ 857.713124][ T7311] bridge0: port 1(team0) entered forwarding state [ 857.734006][ T3644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8160'. [ 857.885650][ T3665] netlink: 'syz.0.8166': attribute type 21 has an invalid length. [ 857.907060][ T3665] netlink: 'syz.0.8166': attribute type 6 has an invalid length. [ 857.918975][ T3662] netlink: 'syz.4.8165': attribute type 1 has an invalid length. [ 857.937211][ T3665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8166'. [ 857.970717][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8166'. [ 858.095050][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8166'. [ 858.283447][ T3628] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 858.474709][ T3695] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8175'. [ 858.590011][ T3701] sctp: [Deprecated]: syz.3.8178 (pid 3701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.590011][ T3701] Use struct sctp_sack_info instead [ 858.633280][ T3704] sctp: [Deprecated]: syz.3.8178 (pid 3704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 858.633280][ T3704] Use struct sctp_sack_info instead [ 858.673170][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8177'. [ 858.935926][ T3724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8183'. [ 858.957505][ T3628] wlan0 speed is unknown, defaulting to 1000 [ 858.975614][ T3628] vxcan1 speed is unknown, defaulting to 1000 [ 858.984279][ T3724] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8183'. [ 859.063924][ T3726] netlink: 'syz.4.8183': attribute type 17 has an invalid length. [ 859.098379][ T3726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8183'. [ 859.154070][ T3726] erspan0: entered promiscuous mode [ 859.184986][ T3726] erspan0: left promiscuous mode [ 859.955790][ T3773] syzkaller0: entered promiscuous mode [ 859.970452][ T3773] syzkaller0: entered allmulticast mode [ 860.320829][ T3783] batadv_slave_1: entered promiscuous mode [ 861.372963][ T3809] netlink: 'syz.0.8208': attribute type 2 has an invalid length. [ 862.019084][ T3849] xt_socket: unknown flags 0xe4 [ 862.131254][ T3858] hsr0: default FDB implementation only supports local addresses [ 862.564658][ T3884] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20003 [ 862.766501][ T3892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.777825][ T3895] netlink: 'syz.1.8236': attribute type 18 has an invalid length. [ 862.944707][ T3901] __nla_validate_parse: 11 callbacks suppressed [ 862.944733][ T3901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8239'. [ 862.961343][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8240'. [ 862.970976][ T3905] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8238'. [ 862.983230][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8240'. [ 863.387687][ T3931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.410732][ T3931] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8246'. [ 863.567261][ T3942] xt_nat: multiple ranges no longer supported [ 863.728774][ T3952] netlink: 'syz.4.8253': attribute type 1 has an invalid length. [ 863.754634][ T3962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8255'. [ 863.799287][ T3963] netlink: 'syz.4.8253': attribute type 10 has an invalid length. [ 863.841888][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 863.859062][ T3952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 863.928884][ T3970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8258'. [ 864.028153][ T3973] syzkaller0: entered promiscuous mode [ 864.036912][ T3973] syzkaller0: entered allmulticast mode [ 864.075856][ T3973] tipc: Enabled bearer , priority 0 [ 864.088195][ T3972] tipc: Resetting bearer [ 864.157941][ T3972] tipc: Disabling bearer [ 864.225057][ T3982] netlink: 'syz.4.8262': attribute type 27 has an invalid length. [ 864.612867][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8266'. [ 864.627695][ T4000] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8266'. [ 864.822056][ T4006] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 865.086563][ T4028] netlink: 'syz.2.8272': attribute type 2 has an invalid length. [ 865.275791][ T4034] netlink: 'syz.1.8274': attribute type 11 has an invalid length. [ 865.665443][ T4061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.073659][ T4092] netlink: 'syz.1.8291': attribute type 1 has an invalid length. [ 866.096296][ T4088] team0: Port device dummy0 removed [ 866.114417][ T4088] bridge6: port 1(dummy0) entered blocking state [ 866.121572][ T4088] bridge6: port 1(dummy0) entered disabled state [ 866.128336][ T4088] dummy0: entered allmulticast mode [ 866.137029][ T4088] dummy0: entered promiscuous mode [ 866.147254][ T4092] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 866.745891][ T4131] syzkaller0: entered promiscuous mode [ 866.782121][ T4131] syzkaller0: entered allmulticast mode [ 867.029286][ T4155] netlink: 'syz.4.8308': attribute type 8 has an invalid length. [ 867.113764][ T4155] veth1_to_team: entered promiscuous mode [ 867.145241][ T4155] gretap0: entered promiscuous mode [ 867.176274][ T4155] hsr_slave_1: entered promiscuous mode [ 867.224584][ T4155] debugfs: 'hsr0' already exists in 'hsr' [ 867.276234][ T4155] Cannot create hsr debugfs directory [ 867.306354][ T4155] hsr0: entered promiscuous mode [ 867.541100][T18557] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 867.987350][ T4203] __nla_validate_parse: 11 callbacks suppressed [ 867.987371][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8319'. [ 868.011283][ T4199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 868.018585][ T4199] IPv6: NLM_F_CREATE should be set when creating new route [ 868.025903][ T4199] IPv6: NLM_F_CREATE should be set when creating new route [ 868.185033][ T4210] Bluetooth: MGMT ver 1.23 [ 868.206102][ T4212] veth0: entered promiscuous mode [ 868.223218][ T4212] veth0: left promiscuous mode [ 868.317425][ T4217] nbd: must specify at least one socket [ 868.358299][ T4220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8326'. [ 868.507624][ T4233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8329'. [ 868.590007][T26938] block nbd3: Receive control failed (result -32) [ 868.599913][ T9350] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 869.137931][ T4265] nbd: couldn't find a device at index 0 [ 869.216423][ T4269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 869.471894][ T4278] syzkaller0: entered promiscuous mode [ 869.477461][ T4278] syzkaller0: entered allmulticast mode [ 869.903566][ T4301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8348'. [ 869.973988][ T4305] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8348'. [ 873.140676][ T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 873.165977][ T47] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 873.174295][T18557] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 873.321111][T18557] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 873.359045][ T4321] netlink: 'syz.1.8352': attribute type 32 has an invalid length. [ 873.386371][ T4321] netlink: 292 bytes leftover after parsing attributes in process `syz.1.8352'. [ 873.475554][ T4332] openvswitch: netlink: Flow actions attr not present in new flow. [ 873.626487][ T4340] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8356'. [ 874.039924][ T9350] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 874.106367][ T4366] syzkaller1: entered promiscuous mode [ 874.134711][ T4366] syzkaller1: entered allmulticast mode [ 874.555863][ T4400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8370'. [ 874.629178][ T4406] netlink: 'syz.3.8372': attribute type 1 has an invalid length. [ 874.775998][ T4416] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8372'. [ 874.905122][ T4421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8372'. [ 874.971822][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8372'. [ 875.041140][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8374'. [ 875.185524][ T4426] kthread_run failed with err -4 [ 875.412701][ T4440] xt_hashlimit: size too large, truncated to 1048576 [ 875.852568][ T4473] netlink: 'syz.1.8386': attribute type 2 has an invalid length. [ 875.933003][ T4480] set match dimension is over the limit! [ 876.120548][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8390'. [ 876.132644][ T4488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8389'. [ 876.170277][ T4490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8389'. [ 876.272530][ T4493] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 876.896175][ T4528] netlink: 'syz.3.8403': attribute type 24 has an invalid length. [ 877.098694][ T4532] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 877.112929][ T4532] gretap2: entered promiscuous mode [ 877.118356][ T4532] gretap2: entered allmulticast mode [ 877.479601][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 877.702232][ T4556] netlink: 'syz.3.8414': attribute type 1 has an invalid length. [ 877.706539][ T4553] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 877.758581][ T4556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 877.796043][ T4561] bond4: (slave gretap2): making interface the new active one [ 877.808693][ T4561] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 878.895944][ T4614] __nla_validate_parse: 2 callbacks suppressed [ 878.895959][ T4614] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8433'. [ 879.405256][ T4616] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 879.648772][ T4631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8438'. [ 882.346948][ T4624] erspan0: entered promiscuous mode [ 882.557299][ T4654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8442'. [ 882.598504][ T4656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8443'. [ 882.853238][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8447'. [ 883.185521][ T4695] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.236098][ T4694] netlink: 'syz.2.8449': attribute type 27 has an invalid length. [ 883.274369][ T4695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.517076][ T4710] xt_TCPMSS: Only works on TCP SYN packets [ 883.698402][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8457'. [ 883.885292][ T4725] veth9: entered allmulticast mode [ 883.978084][ T4734] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 884.062329][ T4745] netlink: 'syz.2.8461': attribute type 10 has an invalid length. [ 884.097745][ T4745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8461'. [ 884.163078][ T4745] team0: Port device geneve1 added [ 884.472720][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8466'. [ 884.757887][ T4778] tipc: Started in network mode [ 884.782335][ T4778] tipc: Node identity ee27e96a0418, cluster identity 4711 [ 884.793657][ T4778] tipc: Enabled bearer , priority 0 [ 884.853452][ T4785] netlink: 'syz.2.8471': attribute type 1 has an invalid length. [ 884.877674][ T4778] syzkaller0: entered promiscuous mode [ 884.885929][ T4778] syzkaller0: entered allmulticast mode [ 884.893067][ T4778] tipc: Resetting bearer [ 884.956368][ T4778] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 884.994512][ T4778] veth9: entered promiscuous mode [ 885.004932][ T4778] bond10: (slave veth9): Enslaving as a backup interface with a down link [ 885.039580][ T4778] tipc: Resetting bearer [ 886.119614][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 887.798682][ T4778] tipc: Disabling bearer [ 887.817359][T18557] tipc: Node number set to 3930057066 [ 903.399669][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 905.960098][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 936.681077][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 943.943116][ T4802] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8476'. [ 943.989843][ T4805] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8478'. [ 944.115751][ T4807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 944.186433][ T4813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8482'. [ 944.362897][ T4824] syzkaller1: entered promiscuous mode [ 944.369215][ T4824] syzkaller1: entered allmulticast mode [ 945.037675][ T4857] xt_TCPMSS: Only works on TCP SYN packets [ 945.037679][ T4856] xt_TCPMSS: Only works on TCP SYN packets [ 945.055672][ T4854] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8491'. [ 945.103890][ T4858] batman_adv: batadv0: Adding interface: dummy0 [ 945.125719][ T4858] batman_adv: batadv0: Interface activated: dummy0 [ 945.396160][ T4874] tipc: Enabling of bearer rejected, failed to enable media [ 945.607667][ T4890] nbd: must specify at least one socket [ 945.637788][ T4896] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 945.666913][ T4893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8502'. [ 945.689274][ T4898] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 945.893604][ T4907] syzkaller1: entered promiscuous mode [ 945.908236][ T4907] syzkaller1: entered allmulticast mode [ 945.925554][ T4907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8506'. [ 946.130568][ T4919] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 946.226101][ T4917] syzkaller0: entered promiscuous mode [ 946.242041][ T4917] syzkaller0: entered allmulticast mode [ 946.254365][ T4927] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 946.694959][ T4957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8522'. [ 949.668488][ T4965] x_tables: duplicate underflow at hook 3 [ 949.757849][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 949.794876][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8525'. [ 949.830168][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8525'. [ 949.869144][ T4981] netlink: 'syz.4.8529': attribute type 1 has an invalid length. [ 949.879102][ T4969] vlan0: entered promiscuous mode [ 949.892243][ T4981] netlink: 'syz.4.8529': attribute type 2 has an invalid length. [ 949.906846][ T4969] bridge0: entered promiscuous mode [ 949.918261][ T4982] netlink: 'syz.4.8529': attribute type 1 has an invalid length. [ 949.956561][ T4982] netlink: 'syz.4.8529': attribute type 2 has an invalid length. [ 950.094500][ T4992] syzkaller1: entered promiscuous mode [ 950.117092][ T4992] syzkaller1: entered allmulticast mode [ 950.186617][ T4992] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8532'. [ 950.248382][ T5005] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8535'. [ 950.301283][ T5009] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8537'. [ 950.810070][ T5032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.144397][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 952.099182][ T5072] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 954.508734][ T5067] netlink: 'syz.3.8550': attribute type 12 has an invalid length. [ 954.630195][ T5080] netlink: 'syz.1.8553': attribute type 24 has an invalid length. [ 954.788689][ T5086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8556'. [ 954.824906][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8554'. [ 954.850274][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8554'. [ 954.881937][ T5091] netlink: 'syz.3.8557': attribute type 10 has an invalid length. [ 954.907270][ T5091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8557'. [ 954.937584][ T5091] team0: entered allmulticast mode [ 954.943725][ T5091] team_slave_0: entered allmulticast mode [ 954.955597][ T5091] team_slave_1: entered allmulticast mode [ 954.967107][ T5091] bridge0: port 1(team0) entered blocking state [ 954.989753][ T5091] bridge0: port 1(team0) entered disabled state [ 955.014873][ T5091] team0: entered promiscuous mode [ 955.031912][ T5091] team_slave_0: entered promiscuous mode [ 955.038010][ T5091] team_slave_1: entered promiscuous mode [ 955.046019][ T5091] bridge0: port 1(team0) entered blocking state [ 955.052541][ T5091] bridge0: port 1(team0) entered forwarding state [ 955.065207][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8558'. [ 955.134851][ T5095] syz_tun: entered allmulticast mode [ 955.164949][ T5094] IPVS: persistence engine module ip_vs_pe_@ not found [ 955.477863][ T5121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8566'. [ 955.493087][ T5121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8566'. [ 955.685189][ T5131] TC_ACT_REPEAT abuse ? [ 955.717870][ T5129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8570'. [ 955.763699][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8572'. [ 956.214197][ T5158] syzkaller0: entered promiscuous mode [ 956.230268][ T5158] syzkaller0: entered allmulticast mode [ 956.237881][ T5156] netlink: 'syz.3.8576': attribute type 5 has an invalid length. [ 956.258843][ T5156] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8576'. [ 956.436930][ T5171] netlink: 'syz.2.8579': attribute type 1 has an invalid length. [ 956.463820][ T5171] NCSI netlink: No device for ifindex 0 [ 957.154666][ T5198] nbd: couldn't find a device at index 0 [ 957.363902][ T5219] netlink: 'syz.3.8592': attribute type 7 has an invalid length. [ 957.386125][ T5219] netlink: 'syz.3.8592': attribute type 8 has an invalid length. [ 957.948715][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 957.987891][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.009125][ T5234] bond11 (unregistering): Released all slaves [ 958.009170][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.022763][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.027439][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.039813][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.046781][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.054558][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.063279][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.073934][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.081954][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.096903][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.104508][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.118819][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.139152][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.146648][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.157763][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.165771][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.166231][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.171888][ T5246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.197671][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.224680][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.240028][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.247070][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.287354][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.299694][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.326742][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.357852][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.393041][ T5251] xt_hashlimit: size too large, truncated to 1048576 [ 958.415693][ T5251] xt_hashlimit: overflow, rate too high: 864691128455135232 [ 958.781320][ T5276] veth5: entered allmulticast mode [ 959.026842][ T5281] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.407742][ T5265] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 962.438961][ T5308] ip6tnl2: entered allmulticast mode [ 962.696614][ T5327] __nla_validate_parse: 7 callbacks suppressed [ 962.696634][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8623'. [ 963.282299][ T5356] netlink: 356 bytes leftover after parsing attributes in process `syz.0.8633'. [ 963.491736][ T5269] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 963.516204][ T5265] wlan0 speed is unknown, defaulting to 1000 [ 963.543328][ T5265] vxcan1 speed is unknown, defaulting to 1000 [ 963.604551][ T5379] netlink: 'syz.4.8638': attribute type 30 has an invalid length. [ 963.986498][ T5423] nbd: couldn't find a device at index 4 [ 964.016951][ T5418] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 964.057835][ T5418] bond5: option packets_per_slave: allowed values 0 - 65535 [ 964.257307][ T5418] bond5 (unregistering): Released all slaves [ 964.332877][ T5398] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8640'. [ 964.392392][ T5269] wlan0 speed is unknown, defaulting to 1000 [ 964.483514][ T5438] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8646'. [ 964.543515][ T5269] vxcan1 speed is unknown, defaulting to 1000 [ 965.105264][ T5462] netlink: 'syz.4.8654': attribute type 1 has an invalid length. [ 965.245130][ T5462] 8021q: adding VLAN 0 to HW filter on device bond6 [ 965.265109][ T5474] netlink: 'syz.4.8654': attribute type 10 has an invalid length. [ 965.288832][ T5474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8654'. [ 965.434712][ T5465] bond6: (slave dummy0): making interface the new active one [ 965.444063][ T5465] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 965.513593][ T5474] dummy0: entered promiscuous mode [ 965.532509][ T5474] bond6: (slave dummy0): Releasing active interface [ 965.789052][ T5480] netlink: 'syz.0.8658': attribute type 1 has an invalid length. [ 965.852671][ T5477] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8658'. [ 966.041161][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8660'. [ 966.190074][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8662'. [ 966.211942][ T5499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8662'. [ 966.744500][ T5513] wireguard0: entered promiscuous mode [ 966.796427][ T5523] netem: change failed [ 966.974956][ T5530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8670'. [ 967.799144][ T5571] __nla_validate_parse: 4 callbacks suppressed [ 967.799166][ T5571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8678'. [ 967.850737][ T5571] netlink: 'syz.0.8678': attribute type 7 has an invalid length. [ 967.881685][ T5571] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8678'. [ 968.258952][ T5598] syzkaller0: entered promiscuous mode [ 968.288970][ T5598] syzkaller0: entered allmulticast mode [ 968.475695][ T5613] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 968.518857][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8692'. [ 968.688972][ T5634] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8697'. [ 968.712741][ T5630] gre1: entered promiscuous mode [ 968.865745][ T5638] net_ratelimit: 56 callbacks suppressed [ 968.865766][ T5638] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 968.905818][ T5638] sctp: [Deprecated]: syz.3.8700 (pid 5638) Use of int in maxseg socket option. [ 968.905818][ T5638] Use struct sctp_assoc_value instead [ 969.031457][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8703'. [ 969.130501][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8705'. [ 969.158590][ T5657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8707'. [ 969.415428][ T5675] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8713'. [ 969.800109][ T5698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8718'. [ 970.029094][ T5705] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 970.079069][ T5718] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 970.107827][ T5705] bond11 (unregistering): Released all slaves [ 970.164361][ T5716] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 970.397734][ T5734] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8726'. [ 970.805839][ T5776] netlink: 'syz.2.8735': attribute type 12 has an invalid length. [ 970.898768][ T5776] bond11: option primary_reselect: invalid value (255) [ 970.920703][ T5776] bond11 (unregistering): Released all slaves [ 971.956101][ T5846] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 971.980290][T18557] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 972.149216][ T5856] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 972.260340][T18557] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 972.453922][ T5871] netlink: 'syz.4.8760': attribute type 1 has an invalid length. [ 972.602251][ T5407] bridge_slave_1: left allmulticast mode [ 972.632666][ T5407] bridge_slave_1: left promiscuous mode [ 972.655904][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.694089][ T5878] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.113211][ T5899] __nla_validate_parse: 11 callbacks suppressed [ 973.113236][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8767'. [ 973.623623][ T5407] bond6 (unregistering): (slave gretap1): Releasing active interface [ 973.696643][ T5407] bond11 (unregistering): (slave ipip0): Releasing backup interface [ 973.715818][ T5407] ipip0 (unregistering): left promiscuous mode [ 973.998900][ T5407] bond9 (unregistering): (slave bridge4): Releasing active interface [ 974.009001][ T5407] bridge4 (unregistering): left promiscuous mode [ 974.015862][ T5407] bridge4 (unregistering): left allmulticast mode [ 974.198348][ T5407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.208931][ T5407] bond0 (unregistering): Released all slaves [ 974.223916][ T5407] bond1 (unregistering): Released all slaves [ 974.241901][ T5407] bond2 (unregistering): Released all slaves [ 974.258482][ T5407] bond3 (unregistering): Released all slaves [ 974.280711][ T5407] bond4 (unregistering): Released all slaves [ 974.298603][ T5407] bond5 (unregistering): (slave team_slave_0): Releasing backup interface [ 974.316848][ T5407] bond5 (unregistering): Released all slaves [ 974.333694][ T5407] bond6 (unregistering): Released all slaves [ 974.351757][ T5407] bond7 (unregistering): Released all slaves [ 974.367621][ T5407] bond8 (unregistering): Released all slaves [ 974.398832][ T5407] bond9 (unregistering): Released all slaves [ 974.415921][ T5407] bond10 (unregistering): Released all slaves [ 974.437935][ T5407] bond11 (unregistering): Released all slaves [ 974.528821][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8765'. [ 974.559893][ T5849] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 974.803707][ T5930] netlink: 'syz.0.8773': attribute type 2 has an invalid length. [ 974.831738][ T5407] : left promiscuous mode [ 975.145043][ T5945] netlink: 'syz.2.8776': attribute type 32 has an invalid length. [ 975.164182][ T5945] netlink: 292 bytes leftover after parsing attributes in process `syz.2.8776'. [ 975.329192][ T5953] netlink: 'syz.2.8776': attribute type 9 has an invalid length. [ 975.343082][ T5953] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.8776'. [ 975.450298][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8776'. [ 975.707908][ T5849] wlan0 speed is unknown, defaulting to 1000 [ 975.768950][ T5849] vxcan1 speed is unknown, defaulting to 1000 [ 975.912153][ T5407] tipc: Disabling bearer [ 975.917544][ T5407] tipc: Left network mode [ 976.216686][ T5969] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8779'. [ 976.286661][ T5966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.637400][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8782'. [ 976.796628][ T5979] syzkaller0: entered promiscuous mode [ 976.802368][ T5979] syzkaller0: entered allmulticast mode [ 977.145475][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8786'. [ 980.356845][ T6008] mac80211_hwsim hwsim75 syzkaller0: entered promiscuous mode [ 980.390653][ T6008] mac80211_hwsim hwsim75 syzkaller0: entered allmulticast mode [ 980.832007][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8793'. [ 981.181114][ T6029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8792'. [ 981.698964][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8801'. [ 981.907674][ T6060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 981.996239][T12659] smbdirect: ib_dev[syz1] removed [ 982.445269][ T6082] netlink: 516 bytes leftover after parsing attributes in process `syz.4.8809'. [ 982.617657][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8812'. [ 982.668330][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8812'. [ 982.742682][ T6098] openvswitch: netlink: EtherType 0 is less than min 600 [ 982.753418][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8812'. [ 982.780414][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8812'. [ 983.378984][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8820'. [ 983.380630][ T6136] netlink: 'syz.4.8821': attribute type 1 has an invalid length. [ 983.592307][ T6137] vcan1: entered promiscuous mode [ 983.623500][ T6137] vcan1: entered allmulticast mode [ 983.731859][ T6145] IPVS: set_ctl: invalid protocol: 2 10.1.1.0:20001 [ 984.001726][ T5407] hsr_slave_0: left promiscuous mode [ 984.017948][ T5407] hsr_slave_1: left promiscuous mode [ 984.046472][ T5407] veth0_to_team: left allmulticast mode [ 984.066804][ T5407] veth0_to_team: left promiscuous mode [ 984.206759][ T6179] netlink: 'syz.3.8830': attribute type 10 has an invalid length. [ 984.233416][ T6180] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8833'. [ 984.266799][ T5407] pim6reg (unregistering): left allmulticast mode [ 985.246945][ T5407] IPVS: stop unused estimator thread 0... [ 985.299977][ T6222] netlink: 'syz.1.8845': attribute type 1 has an invalid length. [ 985.338000][ T6221] : entered promiscuous mode [ 985.386097][ T6223] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 985.467564][ T6222] 8021q: adding VLAN 0 to HW filter on device bond5 [ 985.935366][ T6253] Cannot find del_set index 4 as target [ 985.988482][ T6258] netlink: 'syz.4.8858': attribute type 12 has an invalid length. [ 986.001151][ T6258] __nla_validate_parse: 5 callbacks suppressed [ 986.001171][ T6258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8858'. [ 986.023865][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8857'. [ 986.033472][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8855'. [ 986.046467][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8857'. [ 986.138644][ T6263] team2: entered promiscuous mode [ 986.151146][ T6263] team2: entered allmulticast mode [ 986.214455][ T6265] team3: entered promiscuous mode [ 986.229716][ T6265] team3: entered allmulticast mode [ 986.442990][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8863'. [ 986.487583][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8863'. [ 986.516804][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8863'. [ 986.596755][ T6291] siw: device registration error -23 [ 986.666465][ T6295] netlink: 'syz.0.8866': attribute type 6 has an invalid length. [ 986.843281][ T6299] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8867'. [ 986.929624][ T6301] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8868'. [ 987.179543][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8872'. [ 987.642317][ T6333] xt_ecn: cannot match TCP bits for non-tcp packets [ 987.722635][ T6338] syzkaller0: entered promiscuous mode [ 987.745653][ T6338] syzkaller0: entered allmulticast mode [ 988.058068][ T6357] netlink: 'syz.0.8882': attribute type 15 has an invalid length. [ 988.096192][ T6357] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 988.974757][ T6408] netlink: 'syz.0.8895': attribute type 1 has an invalid length. [ 988.984939][ T6408] netlink: 'syz.0.8895': attribute type 1 has an invalid length. [ 988.995928][ T6408] netlink: 'syz.0.8895': attribute type 8 has an invalid length. [ 989.384189][ T6430] bond11 (unregistering): Released all slaves [ 989.512232][ T6446] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 989.695368][ T6450] bond6: entered promiscuous mode [ 989.729097][ T6450] bond6: entered allmulticast mode [ 989.756678][ T6450] 8021q: adding VLAN 0 to HW filter on device bond6 [ 990.125235][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.139515][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.151469][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.162612][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.171555][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.338442][T26938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.354510][T26938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.372415][T26938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.381835][T26938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.395544][T26938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.833020][T26935] syz_tun (unregistering): left allmulticast mode [ 991.115743][ T6521] __nla_validate_parse: 9 callbacks suppressed [ 991.115765][ T6521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8919'. [ 991.135784][ T6520] netlink: 'syz.2.8920': attribute type 1 has an invalid length. [ 991.182229][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8920'. [ 991.288919][ T6533] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8923'. [ 991.333360][ T6537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8923'. [ 991.389535][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8923'. [ 991.737940][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8927'. [ 991.988636][ T6567] netlink: 'syz.2.8928': attribute type 3 has an invalid length. [ 992.022885][ T6569] xt_policy: too many policy elements [ 992.055096][ T6567] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8928'. [ 992.265206][ T6474] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 992.528391][T26938] Bluetooth: hci2: command tx timeout [ 992.561616][ T6590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8934'. [ 992.575346][ T6590] bridge0: port 1(team0) entered disabled state [ 992.909211][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8937'. [ 992.971215][ T6474] vxcan1 speed is unknown, defaulting to 1000 [ 993.037963][ T6610] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8940'. [ 993.106931][ T6610] bond7 (unregistering): Released all slaves [ 993.136141][ T6620] netlink: 'syz.4.8943': attribute type 24 has an invalid length. [ 993.334394][ T6623] netlink: 'syz.4.8944': attribute type 4 has an invalid length. [ 993.366604][ T6623] netlink: 'syz.4.8944': attribute type 4 has an invalid length. [ 993.882531][ T6623] bridge0: port 3(syz_tun) entered disabled state [ 993.892073][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.899579][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.600966][T26938] Bluetooth: hci2: command tx timeout [ 995.356158][ T6642] kthread_run failed with err -4 [ 995.381457][ T5403] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.397057][ T5403] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.410956][ T5403] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 35789 - 0 [ 995.421010][ T5403] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.431297][ T5403] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.440769][ T5403] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 35789 - 0 [ 995.499073][ T5403] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.533477][ T5403] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.556525][ T5403] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 35789 - 0 [ 995.601538][ T5403] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.631908][ T5403] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.660090][ T5403] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 35789 - 0 [ 995.751796][ T6668] dvmrp0: entered allmulticast mode [ 995.781909][ T6678] netlink: 'syz.2.8954': attribute type 1 has an invalid length. [ 995.842144][ T6678] bond11: entered promiscuous mode [ 995.848272][ T6678] 8021q: adding VLAN 0 to HW filter on device bond11 [ 995.974592][ T6678] bond11: (slave bridge8): making interface the new active one [ 995.991167][ T6678] bridge8: entered promiscuous mode [ 995.998297][ T6678] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 996.291098][ T6715] __nla_validate_parse: 2 callbacks suppressed [ 996.291119][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8962'. [ 996.494378][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.502037][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.509814][ T6474] bridge_slave_0: entered allmulticast mode [ 996.517653][ T6474] bridge_slave_0: entered promiscuous mode [ 996.526505][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.534362][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.542181][ T6474] bridge_slave_1: entered allmulticast mode [ 996.550521][ T6474] bridge_slave_1: entered promiscuous mode [ 996.585302][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.605635][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.643143][ T6474] team0: Port device team_slave_0 added [ 996.653680][ T6474] team0: Port device team_slave_1 added [ 996.680384][T26938] Bluetooth: hci2: command tx timeout [ 996.689213][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.696378][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.724027][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.738676][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.746045][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.776586][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.828207][ T6474] hsr_slave_0: entered promiscuous mode [ 996.835488][ T6474] hsr_slave_1: entered promiscuous mode [ 996.842905][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 996.848762][ T6474] Cannot create hsr debugfs directory [ 997.039136][ T6474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.052977][ T6474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.063411][ T6474] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 997.184616][ T6474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.195110][ T6474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.205825][ T6474] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 997.303272][ T6474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.313825][ T6474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.324829][ T6474] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 997.459004][ T6474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.470450][ T6474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.482781][ T6474] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 998.759777][T26938] Bluetooth: hci2: command tx timeout [ 999.146095][ T6702] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.195670][ T6474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 999.254397][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 999.281547][ T6474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 999.314910][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.331108][ T6474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 999.366959][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 999.387564][ T6474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 999.423446][ T6474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 999.683936][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8971'. [ 999.699185][ T6751] xfrm1: entered allmulticast mode [ 999.725264][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.836122][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.867633][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.874894][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.933236][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.940488][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.104749][ T6772] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8974'. [ 1000.144038][ T6772] syzkaller1: entered promiscuous mode [ 1000.151130][ T6772] syzkaller1: entered allmulticast mode [ 1000.168275][ T6775] netlink: 'syz.4.8978': attribute type 1 has an invalid length. [ 1000.366240][ T6775] ip6gretap0: entered promiscuous mode [ 1000.378806][ T6775] ip6gretap0: entered allmulticast mode [ 1000.390321][ T6775] bond8: (slave ip6gretap0): making interface the new active one [ 1000.401150][ T6775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1000.412020][ T6775] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1000.420942][ T6775] bond8: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1000.491380][ T6791] bridge0: port 3(gretap0) entered blocking state [ 1000.498041][ T6791] bridge0: port 3(gretap0) entered forwarding state [ 1000.505079][ T6791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.512319][ T6791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.539924][ T6791] bridge0: entered allmulticast mode [ 1000.623365][ T6796] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1000.814927][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8987'. [ 1001.107988][ T6824] bond6: entered allmulticast mode [ 1001.125001][ T6824] ip6gre2: entered allmulticast mode [ 1001.274646][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.309192][ T6830] SET target dimension over the limit! [ 1001.473478][ T6474] veth0_vlan: entered promiscuous mode [ 1001.521179][ T6474] veth1_vlan: entered promiscuous mode [ 1001.684936][ T6853] netlink: 'syz.2.9001': attribute type 1 has an invalid length. [ 1001.703117][ T6853] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9001'. [ 1001.705054][ T6474] veth0_macvtap: entered promiscuous mode [ 1001.728844][ T6853] netlink: 658 bytes leftover after parsing attributes in process `syz.2.9001'. [ 1001.741867][ T6853] netlink: 1 bytes leftover after parsing attributes in process `syz.2.9001'. [ 1003.239648][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1004.421064][ T6474] veth1_macvtap: entered promiscuous mode [ 1004.584177][ T6860] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9005'. [ 1004.678617][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.731312][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.793888][ T5400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.813751][ T5400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.847010][ T5400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.881719][ T5403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.895075][ T6869] openvswitch: netlink: Flow actions attr not present in new flow. [ 1005.167131][ T6884] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9012'. [ 1005.267570][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.281326][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.366256][ T6883] syzkaller1: entered promiscuous mode [ 1005.378840][ T6883] syzkaller1: entered allmulticast mode [ 1005.460268][ T6888] FAULT_INJECTION: forcing a failure. [ 1005.460268][ T6888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.474328][ T6888] CPU: 0 UID: 0 PID: 6888 Comm: syz.2.9014 Not tainted syzkaller #0 PREEMPT(full) [ 1005.474357][ T6888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1005.474371][ T6888] Call Trace: [ 1005.474381][ T6888] [ 1005.474391][ T6888] dump_stack_lvl+0xe8/0x150 [ 1005.474428][ T6888] should_fail_ex+0x40c/0x560 [ 1005.474461][ T6888] _copy_from_user+0x2d/0xb0 [ 1005.474490][ T6888] copy_from_sockptr+0x48/0x70 [ 1005.474633][ T6888] ip_mroute_setsockopt+0x839/0x10d0 [ 1005.474676][ T6888] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 1005.474707][ T6888] ? get_pid_task+0x20/0x1f0 [ 1005.474737][ T6888] ? get_pid_task+0x20/0x1f0 [ 1005.474762][ T6888] ? get_pid_task+0x20/0x1f0 [ 1005.474803][ T6888] ? __lock_acquire+0x683/0x2cd0 [ 1005.474837][ T6888] do_ip_setsockopt+0xeba/0x2e30 [ 1005.474917][ T6888] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1005.474946][ T6888] ? aa_sk_perm+0x6d5/0x900 [ 1005.474981][ T6888] ? __fget_files+0x2a/0x420 [ 1005.475022][ T6888] ? __pfx_aa_sk_perm+0x10/0x10 [ 1005.475056][ T6888] ? __fget_files+0x2a/0x420 [ 1005.475081][ T6888] ? aa_sock_opt_perm+0xff/0x1a0 [ 1005.475118][ T6888] ip_setsockopt+0x66/0x110 [ 1005.475144][ T6888] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1005.475185][ T6888] do_sock_setsockopt+0x17c/0x1b0 [ 1005.475225][ T6888] __x64_sys_setsockopt+0x13d/0x1b0 [ 1005.475262][ T6888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.475289][ T6888] do_syscall_64+0x174/0x580 [ 1005.475312][ T6888] ? trace_irq_disable+0x3b/0x140 [ 1005.475347][ T6888] ? clear_bhb_loop+0x40/0x90 [ 1005.475379][ T6888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.475402][ T6888] RIP: 0033:0x7f07c8b9ce59 [ 1005.475424][ T6888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.475444][ T6888] RSP: 002b:00007f07c99db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1005.475468][ T6888] RAX: ffffffffffffffda RBX: 00007f07c8e15fa0 RCX: 00007f07c8b9ce59 [ 1005.475483][ T6888] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 1005.475497][ T6888] RBP: 00007f07c99db090 R08: 000000000000003c R09: 0000000000000000 [ 1005.475512][ T6888] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1005.475526][ T6888] R13: 00007f07c8e16038 R14: 00007f07c8e15fa0 R15: 00007ffc9a378548 [ 1005.475563][ T6888] [ 1005.594532][ T5403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.813294][ T5403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.853491][ T6899] netlink: 'syz.4.9017': attribute type 1 has an invalid length. [ 1006.003823][ T6899] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1006.035954][ T6905] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1006.508651][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9025'. [ 1006.566962][ T6932] syzkaller0: entered promiscuous mode [ 1006.592839][ T6932] syzkaller0: entered allmulticast mode [ 1006.669104][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9024'. [ 1006.835864][ T6944] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1006.870521][T13380] syzkaller1: tun_net_xmit 90 [ 1006.874356][ T6944] syzkaller1: Linktype set failed because interface is up [ 1007.091912][T13380] syzkaller1: tun_net_xmit 90 [ 1007.110686][ T6964] syzkaller1: tun_net_xmit 86 [ 1007.398641][ T6981] bridge0: port 4(geneve0) entered blocking state [ 1007.406372][ T6981] bridge0: port 4(geneve0) entered disabled state [ 1007.414861][ T6981] geneve0: entered allmulticast mode [ 1007.423848][ T6981] geneve0: entered promiscuous mode [ 1007.433424][ T6981] bridge0: port 4(geneve0) entered blocking state [ 1007.441897][ T6981] bridge0: port 4(geneve0) entered forwarding state [ 1009.921936][ T6960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.102995][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9042'. [ 1010.167738][ T7007] syzkaller1: entered promiscuous mode [ 1010.173481][ T7007] syzkaller1: entered allmulticast mode [ 1010.184404][ T7010] 8021q: VLANs not supported on ip6tnl0 [ 1010.194137][ T7007] 8021q: VLANs not supported on ip6tnl0 [ 1010.233174][ T7011] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1010.268824][ T7011] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9045'. [ 1010.544277][ T7034] netlink: 'syz.4.9053': attribute type 1 has an invalid length. [ 1010.557216][ T7034] netlink: 'syz.4.9053': attribute type 1 has an invalid length. [ 1010.661676][ T7040] SET target dimension over the limit! [ 1011.178685][ T7311] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 1011.202679][ T7087] sch_tbf: burst 0 is lower than device lo mtu (65499) ! [ 1011.261901][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9069'. [ 1011.282233][ T7088] vlan2: entered allmulticast mode [ 1011.288560][ T7088] bond0: entered allmulticast mode [ 1011.294201][ T7088] bond_slave_0: entered allmulticast mode [ 1011.301021][ T7088] bond_slave_1: entered allmulticast mode [ 1011.349003][ T7092] x_tables: duplicate entry at hook 1 [ 1011.515295][ T7102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1011.921378][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1011.931425][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1011.948747][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1011.948770][ T6965] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.961889][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9077'. [ 1011.978301][ T6965] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.988270][ T6965] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1011.998034][ T6965] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.066246][ T7072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.288335][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1014.329411][ T7126] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9078'. [ 1014.740785][ T7158] netlink: 'syz.1.9086': attribute type 2 has an invalid length. [ 1014.749192][ T7156] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 1015.322458][ T7168] __nla_validate_parse: 1 callbacks suppressed [ 1015.322481][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1018.432171][ T7168] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1018.465327][ T7170] macvlan0: entered promiscuous mode [ 1018.477264][ T7170] macvlan0: entered allmulticast mode [ 1018.502723][ T7170] bond7: entered promiscuous mode [ 1018.526269][ T7170] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1018.575591][ T7170] bond7: left promiscuous mode [ 1018.651725][ T7178] ip6gre1: entered allmulticast mode [ 1018.855602][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9099'. [ 1019.127953][ T7213] tipc: Started in network mode [ 1019.152300][ T7213] tipc: Node identity effffff7, cluster identity 4711 [ 1019.178816][ T7213] tipc: Node number set to 4026531831 [ 1019.588964][ T7241] syzkaller1: entered promiscuous mode [ 1019.601420][ T7241] syzkaller1: entered allmulticast mode [ 1019.622660][ T7210] netlink: 252 bytes leftover after parsing attributes in process `syz.4.9102'. [ 1019.736262][ T7248] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9113'. [ 1019.745615][ T7248] nbd: illegal input index -8454144 [ 1020.107094][ T7263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1020.202705][ T7272] netlink: 'syz.4.9121': attribute type 1 has an invalid length. [ 1020.217249][ T7272] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1020.228009][ T7272] netlink: 1 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1020.243716][ T7272] netlink: 'syz.4.9121': attribute type 1 has an invalid length. [ 1020.257752][ T7272] netlink: 634 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1020.667188][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1020.692268][ T7301] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1020.711379][ T7301] openvswitch: netlink: Message has 5 unknown bytes. [ 1020.782899][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1020.792683][ T7298] nbd: device at index 64 is going down [ 1020.895583][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9134'. [ 1020.948406][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9134'. [ 1020.986948][ T7319] macvlan0: entered promiscuous mode [ 1021.010649][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9134'. [ 1021.055386][ T7319] macvlan0: entered allmulticast mode [ 1021.082059][ T7319] veth1_to_batadv: entered promiscuous mode [ 1021.113277][ T7319] veth1_to_batadv: entered allmulticast mode [ 1021.140642][ T7221] udevd[7221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.163703][ T7319] team0: Port device macvlan0 added [ 1021.199028][ T7221] udevd[7221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1021.225707][ T7320] macvlan1: entered promiscuous mode [ 1021.261015][ T7320] macvlan1: entered allmulticast mode [ 1021.284059][ T7320] team0: Port device macvlan1 added [ 1021.313553][ T7333] netlink: 'syz.0.9138': attribute type 1 has an invalid length. [ 1021.339160][ T7333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9138'. [ 1021.604351][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1021.697191][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9142'. [ 1021.762286][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1021.903703][ T7353] bridge9: port 1(veth0_to_bond) entered blocking state [ 1021.935331][ T7353] bridge9: port 1(veth0_to_bond) entered disabled state [ 1021.972607][ T7353] veth0_to_bond: entered allmulticast mode [ 1021.991490][ T7353] veth0_to_bond: entered promiscuous mode [ 1022.018826][ T7353] bridge9: port 1(veth0_to_bond) entered blocking state [ 1022.026013][ T7353] bridge9: port 1(veth0_to_bond) entered forwarding state [ 1022.060942][ T7372] netlink: 'syz.1.9149': attribute type 1 has an invalid length. [ 1022.152522][ T7372] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1022.195928][ T7375] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1022.761695][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1022.781482][ T7401] netlink: 'syz.4.9156': attribute type 7 has an invalid length. [ 1022.808844][ T7401] netlink: 'syz.4.9156': attribute type 8 has an invalid length. [ 1022.843853][ T7407] netlink: 'syz.4.9156': attribute type 1 has an invalid length. [ 1023.118699][ T7426] netlink: 'syz.1.9164': attribute type 10 has an invalid length. [ 1023.452625][ T7446] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1023.800655][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1024.084045][ T7473] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1024.100207][ T7473] bond10 (unregistering): Released all slaves [ 1024.132228][ T7479] set match dimension is over the limit! [ 1024.148164][ T7435] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1024.506928][ T7501] dummy0: left allmulticast mode [ 1024.527772][ T7501] dummy0: left promiscuous mode [ 1024.540551][ T7501] bridge6: port 1(dummy0) entered disabled state [ 1024.671423][ T7510] xt_nfacct: accounting object `syz1' does not exist [ 1024.916826][ T7517] SET target dimension over the limit! [ 1024.933387][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.184581][ T7535] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 1025.201298][ T7536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.218351][ T7535] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 1025.337109][ T7528] netlink: 'syz.0.9195': attribute type 1 has an invalid length. [ 1025.369793][ T7528] tipc: Enabled bearer , priority 0 [ 1025.488986][ T7435] vxcan1 speed is unknown, defaulting to 1000 [ 1025.500643][ T7436] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1026.058726][ T7567] tls_set_device_offload_rx: netdev not found [ 1026.197628][ T7572] __nla_validate_parse: 15 callbacks suppressed [ 1026.197648][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1026.265258][ T7571] vlan5: entered promiscuous mode [ 1026.283086][ T7571] hsr0: entered promiscuous mode [ 1026.300618][ T7571] vlan5: entered allmulticast mode [ 1026.315377][ T7571] hsr0: entered allmulticast mode [ 1026.326531][ T7571] hsr_slave_0: entered allmulticast mode [ 1026.336633][ T7571] hsr_slave_1: entered allmulticast mode [ 1026.458197][ T7580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9205'. [ 1026.674299][ T7587] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9206'. [ 1027.140306][ T7612] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9213'. [ 1027.149715][ T7436] vxcan1 speed is unknown, defaulting to 1000 [ 1027.455962][ T7632] netlink: 'syz.4.9219': attribute type 1 has an invalid length. [ 1027.488727][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9217'. [ 1027.931471][ T7643] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1028.468967][ T7671] netlink: 'syz.0.9230': attribute type 1 has an invalid length. [ 1028.494343][ T7674] netlink: zone id is out of range [ 1028.512504][ T7674] netlink: zone id is out of range [ 1028.530429][ T7674] netlink: zone id is out of range [ 1028.545363][ T7674] netlink: zone id is out of range [ 1028.580951][ T7674] netlink: zone id is out of range [ 1028.607731][ T7674] netlink: zone id is out of range [ 1028.633055][ T7674] netlink: zone id is out of range [ 1028.653036][ T7674] netlink: zone id is out of range [ 1028.667220][ T7674] netlink: zone id is out of range [ 1028.680292][ T7671] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1028.689690][ T7674] netlink: zone id is out of range [ 1028.772677][ T5640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1028.787035][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1028.801112][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1028.811323][ T5640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1028.821844][ T5640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1029.085128][T26938] block nbd5: Receive control failed (result -32) [ 1029.198046][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.405020][T28836] syz_tun (unregistering): left allmulticast mode [ 1029.431270][T28836] syz_tun (unregistering): left promiscuous mode [ 1029.448054][T28836] bridge0: port 3(syz_tun) entered disabled state [ 1029.905589][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9239'. [ 1029.916416][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9240'. [ 1030.017041][ T7708] erspan0: entered promiscuous mode [ 1030.235172][ T7706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1030.936511][T26938] Bluetooth: hci0: command tx timeout [ 1030.963030][ T7742] netlink: 54 bytes leftover after parsing attributes in process `syz.0.9248'. [ 1030.972382][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9248'. [ 1031.532594][ T7681] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1031.808237][ T7756] hashlimit_mt_check_common: 55 callbacks suppressed [ 1031.808434][ T7756] xt_hashlimit: overflow, rate too high: 0 [ 1032.166053][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1032.177859][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9260'. [ 1032.295138][ T7776] vlan7: entered allmulticast mode [ 1032.346810][ T7681] vxcan1 speed is unknown, defaulting to 1000 [ 1032.508313][ T7783] "syz.2.9266" (7783) uses obsolete ecb(arc4) skcipher [ 1033.008840][T26938] Bluetooth: hci0: command tx timeout [ 1033.038255][ T7807] netlink: 'syz.2.9272': attribute type 18 has an invalid length. [ 1033.318384][ T7819] Bluetooth: MGMT ver 1.23 [ 1033.461456][ T7813] tap0: tun_chr_ioctl cmd 1074025672 [ 1033.468553][ T7813] tap0: ignored: set checksum disabled [ 1033.548264][ T7831] netlink: 'syz.0.9281': attribute type 1 has an invalid length. [ 1033.621752][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9281'. [ 1033.727644][ T7836] net_ratelimit: 821 callbacks suppressed [ 1033.727664][ T7836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1033.888482][ T7841] bond1: (slave gretap1): making interface the new active one [ 1033.917270][ T7841] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1033.964277][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1034.108762][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1034.150583][ T7860] netlink: 'syz.3.9284': attribute type 62 has an invalid length. [ 1034.227891][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.236230][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.244485][ T7681] bridge_slave_0: entered allmulticast mode [ 1034.253470][ T7681] bridge_slave_0: entered promiscuous mode [ 1034.264022][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.273063][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.281324][ T7681] bridge_slave_1: entered allmulticast mode [ 1034.289630][ T7681] bridge_slave_1: entered promiscuous mode [ 1034.292778][ T7864] netlink: 'syz.1.9285': attribute type 3 has an invalid length. [ 1034.342494][ T7864] netlink: 'syz.1.9285': attribute type 1 has an invalid length. [ 1034.358892][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.391839][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.393141][ T7864] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9285'. [ 1034.494036][ T7864] Can't find ip_set type hash: [ 1034.511256][ T7681] team0: Port device team_slave_0 added [ 1034.533118][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9286'. [ 1034.574654][ T7681] team0: Port device team_slave_1 added [ 1034.588008][ T7879] netlink: 'syz.2.9290': attribute type 11 has an invalid length. [ 1034.681551][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9286'. [ 1034.696411][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.711020][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.738253][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.784532][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.814146][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.873742][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.887080][ T7891] netlink: 'syz.0.9294': attribute type 1 has an invalid length. [ 1035.036154][ T7681] hsr_slave_0: entered promiscuous mode [ 1035.055637][ T7681] hsr_slave_1: entered promiscuous mode [ 1035.074913][ T7681] debugfs: 'hsr0' already exists in 'hsr' [ 1035.097339][T26938] Bluetooth: hci0: command tx timeout [ 1035.100349][ T7681] Cannot create hsr debugfs directory [ 1035.372685][ T7916] netlink: 'syz.2.9301': attribute type 1 has an invalid length. [ 1035.543597][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1035.649094][ T7681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.693436][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1035.702608][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9303'. [ 1035.758052][ T7926] tc action pedit 'at' offset 46 out of bounds [ 1035.774406][ T7926] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9305'. [ 1035.952971][ T7681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.027971][ T7943] ip6gretap0: entered promiscuous mode [ 1036.047070][ T7940] ip6gretap0: left promiscuous mode [ 1036.168692][ T7681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.271200][ T7951] bridge0: port 5(ipvlan3) entered blocking state [ 1036.279922][ T7951] bridge0: port 5(ipvlan3) entered disabled state [ 1036.289177][ T7951] ipvlan3: entered allmulticast mode [ 1036.312829][ T7951] ipvlan3: left allmulticast mode [ 1036.394207][ T7681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.847850][ T7973] bond5: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 1036.859208][ T7973] bond5 (unregistering): Released all slaves [ 1037.178467][T26938] Bluetooth: hci0: command tx timeout [ 1037.222239][ T7984] bond5 (unregistering): Released all slaves [ 1038.676669][ T7931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1038.728911][ T7681] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1038.797534][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1038.834310][ T7681] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1038.864567][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1038.882530][ T7681] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1038.913210][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1038.932945][ T7681] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1038.969160][ T7681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1039.079841][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1039.143558][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1039.406807][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.496537][ T8043] netlink: 'syz.1.9328': attribute type 4 has an invalid length. [ 1039.511382][ T7681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1039.604292][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.611609][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1039.665987][ T6965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.673287][ T6965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.855093][ T8052] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1039.868526][ T7681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1040.025047][ T8055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9333'. [ 1040.049914][ T8030] netlink: 'syz.2.9324': attribute type 1 has an invalid length. [ 1040.125888][ T8030] bond12: entered promiscuous mode [ 1040.159899][ T8030] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1040.447883][ T8069] netlink: 'syz.3.9335': attribute type 3 has an invalid length. [ 1040.506722][ T8069] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9335'. [ 1040.776213][ T8080] tipc: Enabling of bearer rejected, failed to enable media [ 1040.809050][ T8082] netlink: 'syz.1.9339': attribute type 4 has an invalid length. [ 1040.996036][ T8091] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1041.057331][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1041.094417][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.134755][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1041.190518][ T8099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1041.286180][ T8091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1041.842188][ T7681] veth0_vlan: entered promiscuous mode [ 1041.896145][ T7681] veth1_vlan: entered promiscuous mode [ 1042.097778][ T7681] veth0_macvtap: entered promiscuous mode [ 1042.107975][ T8133] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9352'. [ 1042.121962][ T7681] veth1_macvtap: entered promiscuous mode [ 1042.165367][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.280671][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.309205][ T7306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.322247][ T7306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.334742][ T7306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.344579][ T7306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.626870][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.659989][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.717137][ T4692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1042.726803][ T4692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1042.876414][ T8140] ref_ctr_offset mismatch. inode: 0x78 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 1042.876942][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1042.928225][ T8142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9227'. [ 1043.198416][ T8158] netlink: 'syz.2.9360': attribute type 1 has an invalid length. [ 1043.253167][ T8160] netlink: 'syz.2.9360': attribute type 1 has an invalid length. [ 1043.287633][ T8167] netlink: 'syz.1.9361': attribute type 4 has an invalid length. [ 1043.339098][ T8155] IPVS: Scheduler module ip_vs_sip not found [ 1043.386708][ T8169] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1044.363954][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1044.380209][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9374'. [ 1044.413237][ T8205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1044.433122][ T8205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1045.331736][ T8239] bridge9: entered promiscuous mode [ 1045.352103][ T8239] bridge9: entered allmulticast mode [ 1045.361562][ T8243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9382'. [ 1045.667030][ T8256] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.9387'. [ 1045.748897][ T8261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9387'. [ 1045.924761][ T8256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9387'. [ 1046.147995][ T8046] Set syz1 is full, maxelem 65536 reached [ 1046.174325][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9390'. [ 1046.408526][ T8281] hashlimit_mt_check_common: 55 callbacks suppressed [ 1046.408550][ T8281] xt_hashlimit: size too large, truncated to 1048576 [ 1046.427670][ T8284] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1046.543808][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9394'. [ 1046.563459][ T8266] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1047.065884][ T8307] netlink: 'syz.2.9399': attribute type 1 has an invalid length. [ 1047.108143][ T8307] bond14: entered promiscuous mode [ 1047.114781][ T8307] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1047.123354][ T8298] tipc: Enabling of bearer rejected, failed to enable media [ 1047.312916][ T8266] vxcan1 speed is unknown, defaulting to 1000 [ 1047.332542][T26938] block nbd6: Receive control failed (result -1) [ 1048.281688][ T8353] dvmrp0: entered allmulticast mode [ 1048.308528][ T8353] sit0: entered promiscuous mode [ 1048.453552][ T8353] tipc: Enabled bearer , priority 0 [ 1048.700036][ T8353] syzkaller0: entered promiscuous mode [ 1048.714728][ T8353] syzkaller0: entered allmulticast mode [ 1048.734512][ T8353] tipc: Resetting bearer [ 1048.813180][ T8352] tipc: Resetting bearer [ 1052.316794][ T8352] tipc: Disabling bearer [ 1052.408541][T13381] tipc: Node number set to 2170173345 [ 1052.695650][ T8406] syzkaller0: entered promiscuous mode [ 1052.718716][ T8406] syzkaller0: entered allmulticast mode [ 1052.811852][ T6964] [ 1052.814260][ T6964] ====================================================== [ 1052.821339][ T6964] WARNING: possible circular locking dependency detected [ 1052.826563][ T8424] __nla_validate_parse: 10 callbacks suppressed [ 1052.826608][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9431'. [ 1052.828529][ T6964] syzkaller #0 Not tainted [ 1052.848133][ T6964] ------------------------------------------------------ [ 1052.855248][ T6964] kworker/u8:35/6964 is trying to acquire lock: [ 1052.861513][ T6964] ffffffff8ea84d40 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1052.871532][ T6964] [ 1052.871532][ T6964] but task is already holding lock: [ 1052.878933][ T6964] ffff88804eb40260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1052.888765][ T6964] [ 1052.888765][ T6964] which lock already depends on the new lock. [ 1052.888765][ T6964] [ 1052.899194][ T6964] [ 1052.899194][ T6964] the existing dependency chain (in reverse order) is: [ 1052.908228][ T6964] [ 1052.908228][ T6964] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1052.916262][ T6964] tcp_get_info+0x261/0x2b70 [ 1052.921482][ T6964] mptcp_getsockopt+0x199a/0x1ed0 [ 1052.927131][ T6964] do_sock_getsockopt+0x51d/0x7e0 [ 1052.932709][ T6964] __x64_sys_getsockopt+0x1a4/0x240 [ 1052.938478][ T6964] do_syscall_64+0x174/0x580 [ 1052.943623][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.950085][ T6964] [ 1052.950085][ T6964] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1052.957858][ T6964] lock_sock_nested+0x41/0x100 [ 1052.963176][ T6964] inet_shutdown+0x6a/0x390 [ 1052.968236][ T6964] nbd_mark_nsock_dead+0x2cb/0x550 [ 1052.973996][ T6964] recv_work+0x1cef/0x1e10 [ 1052.978967][ T6964] process_scheduled_works+0xa8e/0x14e0 [ 1052.985092][ T6964] worker_thread+0xa47/0xfb0 [ 1052.990231][ T6964] kthread+0x389/0x470 [ 1052.994853][ T6964] ret_from_fork+0x514/0xb70 [ 1053.000026][ T6964] ret_from_fork_asm+0x1a/0x30 [ 1053.005352][ T6964] [ 1053.005352][ T6964] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1053.013033][ T6964] __mutex_lock+0x19d/0x1590 [ 1053.018170][ T6964] nbd_queue_rq+0x373/0x1150 [ 1053.023309][ T6964] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1053.029519][ T6964] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1053.036459][ T6964] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1053.043004][ T6964] blk_mq_run_hw_queue+0x348/0x4f0 [ 1053.048666][ T6964] blk_mq_dispatch_list+0xd11/0xe10 [ 1053.054421][ T6964] blk_mq_flush_plug_list+0x45f/0x540 [ 1053.060352][ T6964] __blk_flush_plug+0x3ed/0x4d0 [ 1053.065867][ T6964] __submit_bio+0x465/0x560 [ 1053.070919][ T6964] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1053.077120][ T6964] block_read_full_folio+0x599/0x830 [ 1053.082976][ T6964] filemap_read_folio+0x12c/0x3a0 [ 1053.088598][ T6964] do_read_cache_folio+0x354/0x590 [ 1053.094269][ T6964] read_part_sector+0xb6/0x2b0 [ 1053.099666][ T6964] adfspart_check_ICS+0xb1/0x960 [ 1053.105167][ T6964] bdev_disk_changed+0x82b/0x1780 [ 1053.110741][ T6964] blkdev_get_whole+0x372/0x510 [ 1053.116214][ T6964] bdev_open+0x324/0xd70 [ 1053.121000][ T6964] blkdev_open+0x461/0x600 [ 1053.125963][ T6964] do_dentry_open+0x816/0x1380 [ 1053.131267][ T6964] vfs_open+0x3b/0x340 [ 1053.135886][ T6964] path_openat+0x2e3b/0x3890 [ 1053.141023][ T6964] do_file_open+0x23e/0x4a0 [ 1053.146072][ T6964] do_sys_openat2+0x113/0x200 [ 1053.151291][ T6964] __x64_sys_openat+0x138/0x170 [ 1053.156687][ T6964] do_syscall_64+0x174/0x580 [ 1053.161826][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.168272][ T6964] [ 1053.168272][ T6964] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1053.175511][ T6964] __mutex_lock+0x19d/0x1590 [ 1053.180646][ T6964] nbd_queue_rq+0xc1/0x1150 [ 1053.185969][ T6964] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1053.192058][ T6964] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1053.198932][ T6964] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1053.205462][ T6964] blk_mq_run_hw_queue+0x348/0x4f0 [ 1053.211124][ T6964] blk_mq_dispatch_list+0xd11/0xe10 [ 1053.216869][ T6964] blk_mq_flush_plug_list+0x45f/0x540 [ 1053.222783][ T6964] __blk_flush_plug+0x3ed/0x4d0 [ 1053.228208][ T6964] __submit_bio+0x465/0x560 [ 1053.233255][ T6964] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1053.239434][ T6964] block_read_full_folio+0x599/0x830 [ 1053.245284][ T6964] filemap_read_folio+0x12c/0x3a0 [ 1053.250873][ T6964] do_read_cache_folio+0x354/0x590 [ 1053.256542][ T6964] read_part_sector+0xb6/0x2b0 [ 1053.261866][ T6964] adfspart_check_ICS+0xb1/0x960 [ 1053.267353][ T6964] bdev_disk_changed+0x82b/0x1780 [ 1053.272917][ T6964] blkdev_get_whole+0x372/0x510 [ 1053.278313][ T6964] bdev_open+0x324/0xd70 [ 1053.283100][ T6964] blkdev_open+0x461/0x600 [ 1053.288069][ T6964] do_dentry_open+0x816/0x1380 [ 1053.293373][ T6964] vfs_open+0x3b/0x340 [ 1053.297985][ T6964] path_openat+0x2e3b/0x3890 [ 1053.303154][ T6964] do_file_open+0x23e/0x4a0 [ 1053.308210][ T6964] do_sys_openat2+0x113/0x200 [ 1053.313438][ T6964] __x64_sys_openat+0x138/0x170 [ 1053.318831][ T6964] do_syscall_64+0x174/0x580 [ 1053.323960][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.330403][ T6964] [ 1053.330403][ T6964] -> #3 (set->srcu){.+.+}-{0:0}: [ 1053.337565][ T6964] __synchronize_srcu+0xc9/0x2f0 [ 1053.343042][ T6964] elevator_switch+0x1e8/0x7b0 [ 1053.348350][ T6964] elevator_change+0x2fa/0x480 [ 1053.353655][ T6964] elevator_set_default+0x375/0x440 [ 1053.359399][ T6964] blk_register_queue+0x3f3/0x4e0 [ 1053.364972][ T6964] __add_disk+0x6cb/0xe30 [ 1053.369845][ T6964] add_disk_fwnode+0xfb/0x4b0 [ 1053.375073][ T6964] nbd_dev_add+0x733/0xb60 [ 1053.380037][ T6964] nbd_init+0x15f/0x1e0 [ 1053.384864][ T6964] do_one_initcall+0x250/0x870 [ 1053.390170][ T6964] do_initcall_level+0x10a/0x1a0 [ 1053.395738][ T6964] do_initcalls+0x59/0xa0 [ 1053.400613][ T6964] kernel_init_freeable+0x29d/0x3e0 [ 1053.406355][ T6964] kernel_init+0x1d/0x1d0 [ 1053.411230][ T6964] ret_from_fork+0x514/0xb70 [ 1053.416372][ T6964] ret_from_fork_asm+0x1a/0x30 [ 1053.421681][ T6964] [ 1053.421681][ T6964] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1053.429533][ T6964] __mutex_lock+0x19d/0x1590 [ 1053.434698][ T6964] elevator_change+0x1af/0x480 [ 1053.440003][ T6964] elevator_set_none+0xb5/0x140 [ 1053.445394][ T6964] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1053.451757][ T6964] nbd_start_device+0x189/0xb30 [ 1053.457157][ T6964] nbd_genl_connect+0x1597/0x1c10 [ 1053.462724][ T6964] genl_family_rcv_msg_doit+0x233/0x340 [ 1053.468825][ T6964] genl_rcv_msg+0x614/0x7a0 [ 1053.473869][ T6964] netlink_rcv_skb+0x226/0x4a0 [ 1053.479177][ T6964] genl_rcv+0x28/0x40 [ 1053.483709][ T6964] netlink_unicast+0x7bb/0x940 [ 1053.489017][ T6964] netlink_sendmsg+0x813/0xb40 [ 1053.494326][ T6964] ____sys_sendmsg+0x9b9/0xa20 [ 1053.499636][ T6964] ___sys_sendmsg+0x2a5/0x360 [ 1053.504864][ T6964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1053.510373][ T6964] do_syscall_64+0x174/0x580 [ 1053.515511][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.521949][ T6964] [ 1053.521949][ T6964] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 1053.530654][ T6964] blk_alloc_queue+0x544/0x690 [ 1053.535963][ T6964] __blk_mq_alloc_disk+0x194/0x390 [ 1053.541622][ T6964] nbd_dev_add+0x494/0xb60 [ 1053.546583][ T6964] nbd_init+0x15f/0x1e0 [ 1053.551280][ T6964] do_one_initcall+0x250/0x870 [ 1053.556585][ T6964] do_initcall_level+0x10a/0x1a0 [ 1053.562060][ T6964] do_initcalls+0x59/0xa0 [ 1053.566925][ T6964] kernel_init_freeable+0x29d/0x3e0 [ 1053.572668][ T6964] kernel_init+0x1d/0x1d0 [ 1053.577546][ T6964] ret_from_fork+0x514/0xb70 [ 1053.582675][ T6964] ret_from_fork_asm+0x1a/0x30 [ 1053.587981][ T6964] [ 1053.587981][ T6964] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1053.595219][ T6964] __lock_acquire+0x1520/0x2cd0 [ 1053.600641][ T6964] lock_acquire+0x106/0x350 [ 1053.605690][ T6964] fs_reclaim_acquire+0x71/0x100 [ 1053.611180][ T6964] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1053.617545][ T6964] __alloc_skb+0x1d7/0x7a0 [ 1053.622504][ T6964] tcp_stream_alloc_skb+0x3f/0x580 [ 1053.628156][ T6964] tcp_connect+0x15a9/0x53c0 [ 1053.633362][ T6964] tcp_v6_connect+0x131d/0x1b70 [ 1053.638812][ T6964] __inet_stream_connect+0x258/0xe00 [ 1053.644631][ T6964] inet_stream_connect+0x66/0xa0 [ 1053.650112][ T6964] kernel_connect+0x141/0x1c0 [ 1053.655326][ T6964] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1053.661565][ T6964] rds_connect_worker+0x1d8/0x290 [ 1053.667167][ T6964] process_scheduled_works+0xa8e/0x14e0 [ 1053.673265][ T6964] worker_thread+0xa47/0xfb0 [ 1053.678397][ T6964] kthread+0x389/0x470 [ 1053.683003][ T6964] ret_from_fork+0x514/0xb70 [ 1053.688131][ T6964] ret_from_fork_asm+0x1a/0x30 [ 1053.693435][ T6964] [ 1053.693435][ T6964] other info that might help us debug this: [ 1053.693435][ T6964] [ 1053.703687][ T6964] Chain exists of: [ 1053.703687][ T6964] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1053.703687][ T6964] [ 1053.716749][ T6964] Possible unsafe locking scenario: [ 1053.716749][ T6964] [ 1053.724276][ T6964] CPU0 CPU1 [ 1053.729727][ T6964] ---- ---- [ 1053.735163][ T6964] lock(k-sk_lock-AF_INET6); [ 1053.739862][ T6964] lock(sk_lock-AF_INET6); [ 1053.746906][ T6964] lock(k-sk_lock-AF_INET6); [ 1053.754126][ T6964] lock(fs_reclaim); [ 1053.758129][ T6964] [ 1053.758129][ T6964] *** DEADLOCK *** [ 1053.758129][ T6964] [ 1053.766283][ T6964] 4 locks held by kworker/u8:35/6964: [ 1053.771686][ T6964] #0: ffff88807c034940 ((wq_completion)krds_cp_wq#22/0){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1053.783533][ T6964] #1: ffffc90004cdfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1053.796345][ T6964] #2: ffff888069ef9580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1053.807451][ T6964] #3: ffff88804eb40260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1053.817586][ T6964] [ 1053.817586][ T6964] stack backtrace: [ 1053.823492][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: kworker/u8:35 Not tainted syzkaller #0 PREEMPT(full) [ 1053.823515][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.823529][ T6964] Workqueue: krds_cp_wq#22/0 rds_connect_worker [ 1053.823557][ T6964] Call Trace: [ 1053.823565][ T6964] [ 1053.823574][ T6964] dump_stack_lvl+0xe8/0x150 [ 1053.823596][ T6964] print_circular_bug+0x2e1/0x300 [ 1053.823622][ T6964] check_noncircular+0x12e/0x150 [ 1053.823648][ T6964] __lock_acquire+0x1520/0x2cd0 [ 1053.823670][ T6964] ? __lock_acquire+0x683/0x2cd0 [ 1053.823695][ T6964] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1053.823738][ T6964] lock_acquire+0x106/0x350 [ 1053.823756][ T6964] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1053.823782][ T6964] ? ip6_dst_check+0xe2/0x7e0 [ 1053.823875][ T6964] fs_reclaim_acquire+0x71/0x100 [ 1053.823901][ T6964] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1053.823925][ T6964] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 1053.823948][ T6964] ? ip6_default_advmss+0x80/0x3b0 [ 1053.823990][ T6964] ? __alloc_skb+0x1d7/0x7a0 [ 1053.824017][ T6964] __alloc_skb+0x1d7/0x7a0 [ 1053.824042][ T6964] tcp_stream_alloc_skb+0x3f/0x580 [ 1053.824064][ T6964] ? __asan_memset+0x22/0x50 [ 1053.824088][ T6964] tcp_connect+0x15a9/0x53c0 [ 1053.824115][ T6964] ? ktime_get_with_offset+0x93/0x2d0 [ 1053.824147][ T6964] ? __pfx_tcp_connect+0x10/0x10 [ 1053.824165][ T6964] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1053.824193][ T6964] ? lockdep_hardirqs_on+0x7a/0x110 [ 1053.824221][ T6964] ? ktime_get_with_offset+0x93/0x2d0 [ 1053.824248][ T6964] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1053.824279][ T6964] ? __asan_memset+0x22/0x50 [ 1053.824303][ T6964] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1053.824375][ T6964] ? inet6_hash_connect+0xeb/0x170 [ 1053.824399][ T6964] tcp_v6_connect+0x131d/0x1b70 [ 1053.824419][ T6964] ? inet_csk_bind_conflict+0x60/0xa40 [ 1053.824443][ T6964] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1053.824463][ T6964] ? inet_csk_get_port+0x11bc/0x1740 [ 1053.824481][ T6964] ? __local_bh_enable_ip+0xd0/0x130 [ 1053.824498][ T6964] ? __bfs+0x153/0x290 [ 1053.824515][ T6964] ? __bfs+0x153/0x290 [ 1053.824534][ T6964] __inet_stream_connect+0x258/0xe00 [ 1053.824556][ T6964] ? do_raw_spin_lock+0x12b/0x2f0 [ 1053.824580][ T6964] ? lock_sock_nested+0x6a/0x100 [ 1053.824601][ T6964] ? __pfx___inet_stream_connect+0x10/0x10 [ 1053.824621][ T6964] ? inet_stream_connect+0x51/0xa0 [ 1053.824640][ T6964] ? __local_bh_enable_ip+0xd0/0x130 [ 1053.824660][ T6964] inet_stream_connect+0x66/0xa0 [ 1053.824679][ T6964] kernel_connect+0x141/0x1c0 [ 1053.824699][ T6964] ? __pfx_kernel_connect+0x10/0x10 [ 1053.824729][ T6964] ? __local_bh_enable_ip+0xd0/0x130 [ 1053.824749][ T6964] rds_tcp_conn_path_connect+0x6e9/0x920 [ 1053.824782][ T6964] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1053.824810][ T6964] ? process_scheduled_works+0xa20/0x14e0 [ 1053.824828][ T6964] ? process_scheduled_works+0xa20/0x14e0 [ 1053.824849][ T6964] rds_connect_worker+0x1d8/0x290 [ 1053.824870][ T6964] ? process_scheduled_works+0xa20/0x14e0 [ 1053.824887][ T6964] process_scheduled_works+0xa8e/0x14e0 [ 1053.824916][ T6964] ? __pfx_process_scheduled_works+0x10/0x10 [ 1053.824949][ T6964] ? assign_work+0x3cf/0x5d0 [ 1053.824979][ T6964] worker_thread+0xa47/0xfb0 [ 1053.825009][ T6964] kthread+0x389/0x470 [ 1053.825031][ T6964] ? __pfx_worker_thread+0x10/0x10 [ 1053.825048][ T6964] ? __pfx_kthread+0x10/0x10 [ 1053.825071][ T6964] ret_from_fork+0x514/0xb70 [ 1053.825091][ T6964] ? __pfx_ret_from_fork+0x10/0x10 [ 1053.825109][ T6964] ? __switch_to+0xc89/0x1420 [ 1053.825136][ T6964] ? __pfx_kthread+0x10/0x10 [ 1053.825159][ T6964] ret_from_fork_asm+0x1a/0x30 [ 1053.825188][ T6964] [ 1054.406649][ T8424] geneve2: entered promiscuous mode [ 1054.527874][ T8426] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1054.605438][ T8426] vxcan1 speed is unknown, defaulting to 1000 [ 1062.120523][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)