last executing test programs: 5.546041399s ago: executing program 4 (id=11648): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 4.991785223s ago: executing program 1 (id=11655): openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (fail_nth: 28) 4.95277884s ago: executing program 0 (id=11656): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) sendmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f00000001c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f00000002c0)="5606ba8d923a4e046b345ed3816e8e5da576dcbb4663251aa4c993d0b4395e7df5138db2f8043088695497d6173cc365629e90682c2089f1d45db1be1dc90310603d43233c47a4871b91f068de0d70a9130790ca85e9", 0x56}], 0x1, &(0x7f0000000380)=[{0xe0, 0x117, 0x8, "8321e72cb64f5251fe2d4842ae01c2abd3434ca6523d71a9dad844e2ea8f8b8ebeda2bdda238dc716f3e7fe719b5d4cf41071a9d8116a7ead022aeb1cf1d508f47899296b1300e55ff842c8b33ccaa0aaf3b76ae6085be1d6f057723058620a557553fee2c1d52f1712d79e61854416c15267dbb1ba1ee2b06aad6ebebe0cacd0532bc8dc02c15f09d41538841fd91990696c455c09c14662fff0ddeba1a7ebc9f14eaebf4b8cd1e40e8eae9750a3baa6c98e135065014b9ed1afb888d10c415d44f0284a96b508e55"}, {0x58, 0xff, 0xfffffff8, "f6b19c0d052ea2a49d34a17ae4fa3d0681b59f03447fff6407b12e5322fb94f70e658861caee1a3aa8ea72938ef8e18abc43e43c3455e78ce71cf3db51795d5a2bcf9cb7"}], 0x138}}], 0x1, 0x4840) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) (rerun: 32) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, &(0x7f0000000200)="7f", 0x0}, 0x50) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 4.411244539s ago: executing program 1 (id=11658): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x2a83, 0x8, 0x7e611ebf, 0x40, 0xff, 0x3, 0xfffffffe}, 0x1c) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'bridge_slave_0\x00', 0x4000}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) write$tun(r1, &(0x7f0000000240)=ANY=[], 0xfdef) (rerun: 64) 4.410830282s ago: executing program 4 (id=11659): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xce}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000004700)=""/4092, 0xffc}, {&(0x7f00000005c0)=""/4087, 0xff7}, {&(0x7f0000000040)=""/52, 0x34}, {&(0x7f00000036c0)=""/4107, 0x100b}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f00000025c0)=""/4098, 0x1002}, {&(0x7f00000001c0)=""/77, 0x4d}], 0x7}, 0x32120) 4.386263431s ago: executing program 0 (id=11660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xe4, 0x25, 0x800, 0x70bd27, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000080)=0x49e1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) 4.031017665s ago: executing program 3 (id=11662): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x44054}, 0x20005000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0xfff9, 0x99}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028005000600000000000800040001000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) 3.951783259s ago: executing program 3 (id=11664): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x8000000, 0x0, 0x1}, 0x400c0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18027a00eb24879a000000003b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r3}, 0x94) r8 = socket(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, 0x0, &(0x7f0000000280)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f0000000040)='GPL\x00', 0x7, 0xe3, &(0x7f0000000080)=""/227, 0x41000, 0x41, '\x00', r1, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x10, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x1, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x4, 0x3, 0x10, 0xb}, {0x0, 0x3, 0x9, 0x2}, {0x3, 0x4, 0x2, 0x4}, {0x2, 0x4, 0x9, 0xa}, {0x5, 0x4, 0x9, 0xb}, {0x2, 0x3, 0xf, 0x7}, {0x0, 0x5, 0xc, 0x6}], 0x10, 0x1a2}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}]}, 0xf8}}, 0x0) 3.811159031s ago: executing program 3 (id=11665): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}], 0x10}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x4}) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000300)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000c0605000000000000000000020000030900020073797a30000000000500010007000000050001"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 3.731994256s ago: executing program 3 (id=11667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) close(r8) close(0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200000000310000000008000a40fffffffc08000340000000140c0009800800014000000081140000001100010000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f00010000003e11859a3351e595fc65"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 3.672166916s ago: executing program 2 (id=11668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x8a, &(0x7f0000000040)=0x7e, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000140)={{}, [@netrom, @netrom, @rose, @default, @default, @rose, @remote, @rose]}, &(0x7f00000001c0)=0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'vlan1\x00'}) 3.502730853s ago: executing program 4 (id=11669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) sendmsg$key(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4001) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req3={0xe, 0x4, 0x2, 0x7, 0xfff, 0xfff, 0x800}, 0x1c) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.48628871s ago: executing program 0 (id=11670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac404000000afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff5000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r1, 0xc, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ad16b47734"}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x20, r1, 0x400, 0x70bd28, 0x25dfdc00, {{}, {@void, @void, @val={0xc, 0x99, {0x60618d8a, 0x17}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4a, 0x8}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000001) 3.385790801s ago: executing program 1 (id=11671): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'batadv_slave_0\x00', @link_local}) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863}}}, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) (async) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000400)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8b1c}]}, 0x38}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x7800, 0xffff8000, 0x2, {{0x6, 0x4, 0x0, 0x24, 0x18, 0x64, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop]}}}}}) bind$xdp(r9, &(0x7f00000001c0)={0x2c, 0xb, r10, 0x17}, 0x10) 3.3852621s ago: executing program 2 (id=11672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 3.309265608s ago: executing program 3 (id=11673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth0_to_team\x00', @random="986fa4c64f5c"}) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf250300000008000100", @ANYRES32=r5, @ANYBLOB="080001000fedaa02937480e2db471d4bd9bddc9994b83ec2f70339520013b9f1379a53093ced6fd42ecbf00625256f4c848c437e62d2cd82a9f4353e6aeb3401d342139d919906dfda79093ef44ed887ade2c0d6d05f5353485983cf18", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB], 0x57}, 0x1, 0x0, 0x0, 0x4090}, 0x20004805) r11 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffef100000000100000000000000000022eb000000012000e0000200000000000000000000000800655800000000"], 0x0) 3.107375365s ago: executing program 1 (id=11674): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0xb, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-neon\x00'}, 0x58) socket$inet6_sctp(0xa, 0x801, 0x84) 3.106505054s ago: executing program 0 (id=11675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) listen(r5, 0xfffffffd) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, 0x0, 0x0) socket(0x27, 0x2, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ff010000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014e0ffffb6030000000000008500000083000000bf090000000000005509010000000000950000000000000018270000", @ANYRES32=r5, @ANYBLOB="000000000500000069b03000fcffffff294afeff1000000075160100f0ffffffbf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) 3.048116853s ago: executing program 2 (id=11676): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x8}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @remote}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x32) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES64=r4], 0xdc}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x8}, 0x10}, 0x94) 2.942901211s ago: executing program 4 (id=11677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x97, 0x10, 0x10, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4440b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) listen(r6, 0xfffffffd) close(r6) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) read(r11, &(0x7f00000003c0)=""/132, 0x84) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) r12 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @broadcast}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_DEL_MIF(r12, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x0, 0xf7, r13, 0x3}, 0xc) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c2000040042801c0001800600060088480000100015002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a7020017", @ANYRES16=r1, @ANYBLOB="200000200000020000000200000005003d000300000008000a0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x48800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="410027bd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x6c00}, 0x0) 2.930941957s ago: executing program 0 (id=11678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0xd8}}, 0x44000) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x8000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x140b, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44801}, 0x40090) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000006c0)={{r2}, r5, 0x8, @unused=[0x2, 0x75607868, 0x2, 0x6], @name="036f6c29f52f2405443d52444b5427619b55e9a336e487a9f731a533511555b19b1f1900691c708b4e630853b78c154a13c2f9739c8e20af907b9a2f68d93ce52a38f95e10507af879288690303319b8980487b262e89f621999607e86dbcd1125d6b74b9833dea66e30a18602ab244674d298be8cd529c628355869fb5c9a3280be2c0afd129a2a042b317717fdcdbd8f700dff88f5925c65f576e3e3e2269ae9e9ea1f60871d3c427d15b6473f182aab930b14edbb064954c3eca4c3664a3eacab99e60e0a8327298ce2f7c9d049e7b4613700853d47cf4638e840bc34ce8163c2a3917b0270e8d6e8e3a57951b26b678e9d49d468b6b9eb861d4048900aa8eb3f34698d5a3f7fbaf52afbdf34fc8e03de87bfb842324b5cc3c2a5b90e0b077fbfb5da7394974e399593b314d28c7972ba76df2b16762b50321e872caf79d8da108d740a7420fb69782b3bb7640419c76c3a90e5d7ada1919e6fd03d9e7410dc788e5d3a8da13ae5d25bdf6bf6e64dfd3c04cb06289c7a4ab026cd9257474073f6f205c2d0109031568dc8c770797ba64542edbb3f46340e1361269b6a208bc3a868dbe2bb33a4e49db57bec40e2c897492028ba356acf15d270d68b7672b060b1663853f57b375bdfcc7d1314f96b0fdb678290e25499c4b3f97c966e15b33576dec5b9bf7a0196a6f8efdc1e8a943d2ab5eca923a0aadce0b7879de5653e1589f7e7434d065d47d221ef309328a07780023939235cbbe732241965222f7e2460cc0333005047266be9d22da016c0bf1ff7714e4df578014633f826ca6f51420e17b1d1fb4d0d772d1dd7a993496a0fd45a1ab7d1fbe6976aa4212cf6da078834952fbf0adcf1dfe4e3ba2465ff1065c51cc542c237996c8b06adf5c1a7816d163d6de777b4ebdd5203dd5aa7a15b026c6a8f93e280a10bcc86f5a10456a3b4a0a4533e3637bf5d95a39259b423b8904a5acbc4811e4d3d441c3b57ba52089e4e94b95b99dbd900b6587382b0bde683f970f20d7dbca36cb448c7d9ae477a293be565942b0d58c5f62a1179642ca423427667bb4c1bdff60d8adbd202b8737d284a1573c760e328f297fec7b60f10d1209ee5a34a975a213377e4567ad1d54b11671043bc4b8548c929ede9af09e3df5c6051407bd096800eaba507fb21798362b07373be36cc60e5ebad49d836d6dfe058ec1987b53894946e6667b33b34a9443ee874f650b6dbc16584562984dee610f34d72f25639b5a1899dc8306c7ecf1b9f8f59d911712eff3e1a7f813a1a3ce3f569835ea2051dfbd9308cd3807c6c8fe07404b3dee91937073d59a61d1e10ef308a2aebd7c95ecc65e030cec5ff311ea8955966bb031f992487313e084f45a31a9be2f813258a2683ebcacaf030dc75fe33c31e0deefaf97d0f37532aedbf6c29a1a4da5f1c6b261cc67b9af0ef4c8c1e5823eff0007dab89761cb4ca4fbd9e50044ade9775b599c92375396670c23859f2da1e81f339edb08bf94fe6e0b0b293f8f397560f394145c05bff623e59be221a10bb7c663d78fe88c4928f5fa4384e5a96146913ad176d8992ae164b60d7c79c3a20e5fc0bb5849ef99054b3b5ac7d780cd1b237e8ffdbcba785a7a93eb314274ec2397ca49e74b63ddff12c9ec68deedc4f5213b861f764e5efd27d295394c665d16b1a333bd383c3d63e8f51c6aa9846ff9a7654be59333434aea652a61ef09407ddb7ad41878a452fde2bc54de3ea5890ff278f26461a48d9c075658311021297e3f0788e03de936c25f29d4704921543bf19ba80ef1f148ef7df8d64bf67d7dc9abdb10eb8767a9e52803aa757e3da413c2e4499e6e0316ebd699e5158ac9e26b7972c0e0c4cd3321fea69332a676f97c2eda882b48a3941ca101c9618282301ef1b056452bf2587a38681d025dd662c9a7274c754d08b7c050d87ee4ec222f6f792054416343fa2bfe86cfebd6ae6d27b062f839ada19cb659fc41cbcc0355757fa0112edc57ab06887069e0455a31e59b98b50447cb15f58748e4f3900ad131cb2f9a30f413d1bc5b25d8240ae4e1a0a00afa1a13b36ff0ae7d38faf1f8f96b57637ba43af5cb91294b745f491e2eb41935837df50bbb2aeae4665dc3dc46a012e27cd41c69b83f3fc585bec9560b59c01ec52bf90b113e891827dbb0846f42dd851c1be48c531ac07cebeeeea52afa6f88917efe944409e839fe33db04995445cc86920171e39be020db9ec3ba5b14c42beaffad716c362fc606866ee857c85bce72592ecde642e897c4538bd02831d5a42222ace5a1577f0129f2848cc572c171efd3e708555ccc2acd8f399a0ba6bad2bcf678b6da5138220c6f0988967c6b5f3e00e942affac16525715b0588b67903b47d249c4ddefc24528b915101f84963289d9080e41bffdaddda9d0151626c9ca662da1ef5467258a251e7ace331616b5333f9bcb8ab3c0935008bbf041ce9d761286ea3404635047cb6d42531b67e631cded1d2fadde4d74d353b98d167eb9901f3226b56e001d50ed225166cbcfcf3cbfd58366efa239582d160108e16a8297aaf5f27d73d8feadecae83f13066543a10a23519236b64d182cd964049bdd4820e8369f0dfaf23851ebbffd288a2c4d0c18e8d433bb6ff4364fb7c3244963f3dd644a67ad543bcee3cad10999d40cf69fb99a56cac96b2986a82028a088671b004dd6fdf42bf6b14058591bf585197bb381b3abe8d907cb54b2d602f4c556e37a86b47d5f40fc8ad6a8038b247a76df48e07f7d1686370926b052042aa92f85e86596485144f47ebfc9fccc60ca92c0de19a6c44af3dd424478f044d4a3a4699500d5866312a77dd50113d13483bd0af64d7019b9d8b69ef4c201060add5f236764a9f7d87226d9caed400cca9c9775d9f606f427b215da0919b706b71cc7e70defb0c8271d776c9074ca598bd57a13cda5952ab8f088f44a17d906e32c3bf8b19605de7c7d1b2c9adc091004277e5a1c3d51fede4db087f71b31bb46e8a8e1790523fa02bcd397dff6d41705f1de701fb1f0ad826dd117adc26ffbf4095cae758e4dee50b303595d51acc98cf644edbd11cfca99e44cc2401402b420c9b0f47b60f31fe218af0e51c39b3ddb4083d94ca9549ac047e8c0ee62782bbcfa2ea901f5c610d49587610bbb4d2786fc2b0f69cf7dfba52d7fc20df96408632b9d4fc756c081157315d9a15e0196c13ff2e27a7e4375813487ccff20169c97ad8771782ad9cde8a5fd191a9623030e543077b107e58e13d85d04b467fe917f37294dd8a4050c4aaa1ab83be0c6aa3828781b1af79c69736326bc7d1c33de6665aceb4c3c48d560fe0505ab2e4d1acd518f48d7936900bc61546851d664da87efc0705d3ea8b8ded022cf5a1c319e7843dc74eec13b92f4365256693017522dae2b491f7ed9c7db0258bfd286017302594cfda898dfe01516f02b8636b5b1556a3e75d5e3b0ddb58c1caeae00012b3e4d06cd1d543536db520cd55e0986cf873f44613d8700f1fefc16cc9bbf6c11ffc9f0be529c5c90ea3fbf0e093be3edbfee073b5d30bd72179bdec01a6705699d8ca750d17b02b95a2d4e7a9c8760f65c28136d692efba2c68dcf6e74f2ab3b171e8cd051f7a7e0442fbf23d97c9a4dbc2dea28ed574046d318471ccea1245f6c020807578f68500017fc5f312c359b4ddc920d1bf08e0f8c1ad0fbcd90fd68522370a328cc45f2be278d09d7bc2447e82c84f6bd719b4182d34b1f45a1d33f771f65aa666432d06af4ba2bd91112f8ab302aea549f9962a07ba2f2db33899327a7c1e8feb49992c863f692d7bb9ce4af3e51fe93be775c6d20339af78f56c9e8d3c44ab337d28f2b760403c9dfbb5803e73e7fc2415e47e3bee9ecdc22108cb165af64133e34836fc003b49efbbb501b5c68664ca08abd43fd891c6fa60560d404dbb45d1d0b5756645e2ed41d1b36234e8122b1d49ae4c1f92b903e37c53c46eff15006bdc9bbeaaf5eadc0ed2e683545b78ed628187c75cb80cadf26a41139e73d43e85b42e56452da550622b9878b0951cf6e28008dc315f19dbd32c2f6cb30cf0c7b6f760f3413e7d01bd43d8515e9a4f8cdf28a2ea8ab40a79ffacf32ac28a4460e930faf19dfd7ff7744435276a05d3e4e7b708d8a75bce61c9fbb5b21135b45d1e1090cc5c738101f1f01f008d4831e25479a0a90cd69a1c114d65a463e8729820cbf23bdb19895616c69deb9a95411895be0b16f4e355e2ffb7e339be05c2d40fdd4528e4615532ce3844e3adcaeced2fcf60f85c88fe64a907ebdb9584a00ff1c909fc444191f4325676adb027ab1a81dfab0d373030c2ee54859832a0bae86f70b7646dede7999b4f74c6b9b412ee717bfb8a7f16bea6d2d0f2e2225f41a2b22b8f2bc34d989f6c304540f41128a84a5dd6a813312f4bc1b9c4704326a234a60d16aab01908e251e391f2edeae283b67023c9cf3725cd2c70f449392ca06e065e2de4e57df2a242a487b608641819d4ed9d2c750eca6a09b93bf547eb7a4bdb6cb709576d4ee12422b0937b32077466fe09527a6c2f5b10c7764137977bbea6b4a48221dc7315de56cbe76db35349b1d4e320708c0de3744abe0ee1f43ba75cc3c4bb6297a1e6f32e42963c6caa0ccda6084de2148e086b676bbf60cc5ad737c9fbe738c6b57a1d7852dfc1b56edcf7668fdcff7ef109ea9ef403e9f5d2de98aad1626d776ccebea3d4c30c1a9cdefe53eff2530bbaaabba41b8a21b0f545d1b9b2f88bbb5fad6288d1a7a8a8c40caa5d00ce0455139300c23e858db057fa78ffd23ceef61e711d751bf8585552bf7d5559363d6a1cec5ea4a800f103ea4e5f522ecebeba14349f12f448a5b21902ef8e26899df22be40c83b82629dca39ece0344e2591b5f2d95a232eb8b63e15dcce449e9697149220d548f649f6cf9bd6bc7f24a90f76dec9ee819d5dc86245be7489e2f362c5573c1d2808d71b1133c79acc5801eef838228aa712814b5d9235e649b6c1630f86be2a9e154cbf1cac91c5e7265c064157ff98a68f80892afae50d77208bed2e2c6c7831db5c7334d8ea8eaa26af588d407d0878a8e982a0e689ca4c0c646c35a6b85a1dd93c9ceefacbb447bd353a83e88e20088c9550e9d251532b20e80891f09b54e64672c49b8b5d5b4594410954a45ea766fefad39cad8d9230d096c1eb90cc5a20e4e98123dc13035b9c6232403b83bd26b61b404f15cc95bddaee47c61e70492f516a8e654cc2d7fbae9d73691971452c3ac385285edfba4ab5813896720e6591275112e97876ae38ff90272539a069f467d4e82f0b02d8f90c282b5c49a5d923253017cf52bb9142d84ac29ce9717498888f28acbe72a17d83b8fe8598d3b63a0b8138f00b490156ef2da64121d8e933d5d86d26530c826b0ecd1f0bf254770cc9f9083505562f45994e431e7c11d926b8a681a7dff628b0a12f7036c49518e966b83d4d26b2c615f225ee7aa4e9ac7381a0073dbbd52c4915de7e2b0a9f04dbfe996afe5d4ee1119ead435033d81072d251c9a25b01c649059c3019f34e4de7958e580176382ab867a81d8ec78b099661a6835f13c141f270cd2decebf5c565d8d11aa49c3157c536869442ac46fd5399dbf6cf3ff292d4dbe3eeaca915a53d7515c8f4cfdedcde0994e32fa849602526bca63ee15ddc419cc631e5eb23fae9f378039d0"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000016c0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, &(0x7f0000001700), {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff, 0xff000000], [0xff, 0xff, 0xffffff00, 0xff000000], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x1, 0xc, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x29df, 0x3, 0xc0, 'syz0\x00', 'syz1\x00', {0x3}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xff000000, 0xff, 0xff000000, 0xff000000], [0xffffff00, 0xffffffff, 0xff], 'netpci0\x00', 'gretap0\x00', {}, {}, 0x0, 0x6, 0x4, 0x20}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa8, 0x10, "9985ab0f543b72959aabdf0b42cbde7dedf6a26884be5ae7ad6374c97501"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001a80)={r0}, 0x8) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001ac0)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001b80)=[{0xd0, 0x118, 0x8, "8fd1bdf21b2612670763820e85639b115b08c1f8937bca39211088463ebaa9da6574e02035d8a2d771fb051eccb1fb428122aa1a00f8d64bcc9ac02a05f5fe09a477195d2c29260fd66a8b59a4d2c6894fe15afe51daf1e7555e15166666d0b5e829de3953a72da3c415347111eeda5e65ba57fe80ceb5628184be700eb35e08f5c7cfe741fa59010c273f2d43dd355ff3bd159381222705a28aead1a8755825a480ef598ebeb9206f44393d72a35d1cbf2733efe23821ff85"}, {0x100, 0x117, 0x3, "c3303f27f1b15a11dab1320760cb9ac9750531d93750e770f11f301540b641a5ff9badaec448c9591bcaf3371fa869fe3b5ff01b80300a331abed6f98ae00d868ccc18b962a4ff9b77eb96fda8c66aed8c62cd8ba890a14ff109b7b98a284a382f48bf98bf25efa96245151ecd6185e6fe1812a2226742f3c08f0c963a1fdf300b60a91e8c290538c24e96b538af4e0ab77e0a65a266cd16b366cdd4410ee4d51db5fcfa4ddf862edde4dcb9260875215a5557b3f7e1bc31f99a64b0d7c010eeb045484afac0b7301f8ae6701505c1886fa53653c42adac1fefcc9c0cd686378840194a61bee57922e4375b333"}, {0xe0, 0x1, 0x7, "30ee586e8371e8180f95d4d0cfe52a73a1d23afed5d5b6c20196279f147a0d954d108690917fa293b88abc019e77096bc86ce81e7f7569494f862cb7e96614f0a707e49ff641efa94bb42c8d16cab6132500a2d708ce0428f550d7144a51630f4061970517e997cd090ad1762bb4dfe6b71773779925927a13a9194c3c7d9fd135465fd68cef459e985f715d5226a37b3d82033f135acf71bfa7cf396dc15104481f5045096c4126dd91716d05e8dc9b1602df304ad0dd699980351c5e67cc6c978eb61f9be9965633"}, {0x40, 0x108, 0x33b53851, "eea81c93179480e2361588f0158d1f1eb598cb45292eb53466d1c3530fafc262ca5ef27bfb79036df99413"}, {0x80, 0xff, 0x5, "27368dd6b70b4cbe28db7068e7c4f755558e56392600db30c5a4bdf7bc5a9733c653a75172836f7a4da61324b5e08f5f8b8948b1e020928d9e6fcef70809a79bfc23a487940523a4c72a31d1e26cb3b2c2c2e1b55b9a87977af69234681c42886e5b2c154148c163a0e05e9cfe"}, {0x40, 0x113, 0xfffffffa, "b93e242e28c26d611696996ac56d6607408a2aa58fb3e0a26885406152370de34d9ae69b8a790a7439"}, {0x50, 0x84, 0x20aa4d1e, "020e55d9e653d08c077a82ff252832405b0b08ca1282b65b18a581e7ae68d51a9766e6a86a0a41d0c5112a758b98c6a8bd1ccd4331cdcbc09f"}], 0x400}, 0x1010) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r8, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0xc0, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}]}}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x260}]}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x39}]}, @CTA_SEQ_ADJ_REPLY={0x54, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa428}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x98c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x54) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x14, r8, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x40) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f00000023c0)={{r2}, r4, 0x18, @unused=[0x0, 0xd, 0xe, 0xd], @subvolid=0xfff}) socket$netlink(0x10, 0x3, 0xf) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003400), r7) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000003500)={'syztnl2\x00', &(0x7f0000003480)={'syztnl1\x00', r3, 0x4, 0x5, 0x9, 0x9, 0x59, @local, @rand_addr=' \x01\x00', 0x20, 0x1, 0x2}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000036c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003680)={&(0x7f0000003540)={0x140, r10, 0x724, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40000) r13 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000003700)={0x0, 0xf96b, 0x30}, &(0x7f0000003740)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000003780)={0x2df6, 0x203, 0x1000, 0x1000, r14}, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x8004) 2.889321158s ago: executing program 2 (id=11679): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYBLOB="7f736c2009780449eebf07e66a0731ae", @ANYRESDEC=r0, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC=r1], 0x224}}, 0x0) 2.819135351s ago: executing program 2 (id=11680): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x29, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdc03, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0xffbd, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 151.831598ms ago: executing program 2 (id=11681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e40)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {0xfff2}, {0x7, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 151.325484ms ago: executing program 3 (id=11682): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)) close(0x3) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02040009020000000000000000000000ef525da31efe7d288365c3ca6d480bc0c0e571a3ca"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02040009020000000000000000000000ef525da31efe7d288365c3ca6d480bc0c0e571a3ca"], 0x10}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 134.149336ms ago: executing program 4 (id=11683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x7, &(0x7f0000000400)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], &(0x7f0000000300)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x16}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000000)="0df06dc53629d0ad99e41de9b0bcfc0da5b90e8748ed2e98364702c2cfe0dc180f71d38e38ab36119eb9bbf4e009801307cccac7525328a1abc0df", &(0x7f0000000080)=""/17, &(0x7f00000000c0)="7337434e51fe86c9c45b21265428809c6243b170c6738c2b2ff295c52159155eef671dfab1827b857444831f449217448f14c61de90c7f9a2e9e88574735d9e95db29d0a7243d3f54efc8aeb9a859cc28c20cca69a04f3375aaa7e27fe1f60ed52e9004ddc86b1e68983d635f7e146fa7c8ee2264814c20f4ece89156e336b439cd7d3a8130ec14632143675f60e80d1dafc737d43aa94fb6da457df6bdd33d00473de5cdec4d9cb6e40", &(0x7f0000000180)="e6c6935fc76714588427e584d10f68eb2a68067f919ad64d824c30e578adcd6a52f878bd7bca0f5a00249cb0bafb41436345d95aa75b8d03222576803cee9efc2a2b0d3bec0e0ae8ad7920e8680a688a77ca83562a5cd35d62785e67047715b9163c2bc2a2337385f637144e0bdaf98cdb1790d33482e3738354aa8cc34995a5e96cd326", 0xfc, r1, 0x4}, 0x38) 83.526077ms ago: executing program 0 (id=11684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}, [{0x8, 0xb, 0xc0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 81.444344ms ago: executing program 1 (id=11685): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xa, 0x4, @l2={'ib', 0x3a, 'dvmrp1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4804}, 0x4000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf0}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x24004814) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) socket$kcm(0x29, 0x5, 0x0) 32.128247ms ago: executing program 4 (id=11686): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xfffffbff, 'syz1\x00', @bcast, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x82e, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 0s ago: executing program 1 (id=11687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601030000000900000000000000000500010007000000050005000a00000014000300686173683a69702c706f72742c6970000900020073797a32000000001400078008000600000001000800134000000000050004"], 0x60}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140007000000e4ff000000002b"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a5058240c34f786574f25447e6392f58000082a7"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) write(r5, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) kernel console output (not intermixed with test programs): 0.0 with TOS=0x3 [ 1201.289397][T10190] tipc: Started in network mode [ 1201.308144][T10190] tipc: Node identity 3a3ae35c55d5, cluster identity 4711 [ 1201.317329][T10190] tipc: Enabled bearer , priority 0 [ 1201.383010][T10190] syzkaller0: entered promiscuous mode [ 1201.391945][T10190] syzkaller0: entered allmulticast mode [ 1201.400579][T10190] tipc: Resetting bearer [ 1201.497855][T10189] tipc: Resetting bearer [ 1201.580508][T10214] "syz.1.10075" (10214) uses obsolete ecb(arc4) skcipher [ 1203.195176][T10189] tipc: Disabling bearer [ 1203.203675][T10201] netlink: 'syz.4.10072': attribute type 12 has an invalid length. [ 1203.212205][T10201] netlink: 'syz.4.10072': attribute type 29 has an invalid length. [ 1203.220413][T10201] __nla_validate_parse: 5 callbacks suppressed [ 1203.220431][T10201] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1203.236399][T10201] netlink: 59 bytes leftover after parsing attributes in process `syz.4.10072'. [ 1203.272283][T10214] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1203.312319][T10215] 8021q: VLANs not supported on sit0 [ 1203.330828][T24139] tipc: Node number set to 1877992284 [ 1203.492002][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10078'. [ 1203.502851][T10241] netlink: 'syz.4.10078': attribute type 1 has an invalid length. [ 1203.860150][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10088'. [ 1203.907313][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10088'. [ 1203.961438][T10271] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20000 [ 1204.012997][T10265] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1204.053608][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10090'. [ 1204.063366][T10265] syzkaller0: entered promiscuous mode [ 1204.109506][T10265] 0: reclassify loop, rule prio 0, protocol 800 [ 1204.148155][T10275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1204.392345][T10289] netlink: 'syz.3.10095': attribute type 10 has an invalid length. [ 1204.444328][T10294] netlink: 'syz.3.10095': attribute type 10 has an invalid length. [ 1204.487184][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10095'. [ 1204.512773][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10097'. [ 1204.526497][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10097'. [ 1204.543084][T10297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10099'. [ 1204.877737][T10315] validate_nla: 3 callbacks suppressed [ 1204.877753][T10315] netlink: 'syz.0.10103': attribute type 29 has an invalid length. [ 1204.892249][T10312] netlink: 'syz.2.10102': attribute type 5 has an invalid length. [ 1205.029727][T10325] syzkaller1: entered promiscuous mode [ 1205.045472][T10325] syzkaller1: entered allmulticast mode [ 1205.161083][T10337] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 1205.194983][T10337] netlink: 'syz.1.10112': attribute type 5 has an invalid length. [ 1205.326693][T10346] geneve2: entered promiscuous mode [ 1205.335429][T10346] geneve2: entered allmulticast mode [ 1205.343546][T10022] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.360593][T10022] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.425500][T10022] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.438733][T10022] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.519460][T10356] xt_l2tp: invalid flags combination: 8 [ 1205.534914][T10361] IPv6: NLM_F_CREATE should be specified when creating new route [ 1205.625478][T10370] x_tables: unsorted entry at hook 3 [ 1205.825820][T10383] syzkaller0: entered promiscuous mode [ 1205.842866][T10383] syzkaller0: entered allmulticast mode [ 1205.892511][T10383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1206.206660][T10407] netlink: 'syz.2.10134': attribute type 1 has an invalid length. [ 1206.250666][T10407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1206.317407][T10412] netlink: 'syz.2.10136': attribute type 1 has an invalid length. [ 1206.911352][T10460] netlink: 'syz.2.10149': attribute type 8 has an invalid length. [ 1206.951035][T10464] netlink: 'syz.3.10150': attribute type 10 has an invalid length. [ 1206.964220][T10460] gretap0: entered promiscuous mode [ 1206.989987][T10460] gretap0: left promiscuous mode [ 1206.995439][T10469] openvswitch: netlink: Key type 248 is out of range max 32 [ 1207.011411][T10464] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1207.138729][T10475] syzkaller0: entered promiscuous mode [ 1207.144242][T10475] syzkaller0: entered allmulticast mode [ 1207.212951][T10485] macvlan2: mtu less than device minimum [ 1207.365146][T10496] netlink: 'syz.4.10160': attribute type 1 has an invalid length. [ 1207.423513][T10498] netlink: 'syz.2.10161': attribute type 19 has an invalid length. [ 1207.457601][T18871] lec:lec_start_xmit: lec0:No lecd attached [ 1207.736040][T10514] netlink: 'syz.0.10166': attribute type 3 has an invalid length. [ 1207.792020][T10516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1208.380400][T10022] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.397358][T10022] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.416591][T10022] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.431331][T10022] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1208.609276][T10571] xt_CONNSECMARK: invalid mode: 0 [ 1208.773573][T10591] __nla_validate_parse: 25 callbacks suppressed [ 1208.773592][T10591] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10189'. [ 1208.773601][T10589] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10190'. [ 1209.033306][T10605] syzkaller0: entered promiscuous mode [ 1209.039173][T10605] syzkaller0: entered allmulticast mode [ 1209.182842][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10198'. [ 1209.293762][T10625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10202'. [ 1209.394084][T10630] veth0: entered promiscuous mode [ 1209.429528][T10622] veth0: left promiscuous mode [ 1209.473554][T10632] gretap1: entered promiscuous mode [ 1209.489702][T10632] batman_adv: batadv0: Adding interface: gretap1 [ 1209.496062][T10632] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.558240][T10632] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1209.686634][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10205'. [ 1209.701522][T10649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.807600][T10634] bond3: option resend_igmp: invalid value (32767) [ 1209.816652][T10634] bond3: option resend_igmp: allowed values 0 - 255 [ 1209.828510][T10634] bond3 (unregistering): Released all slaves [ 1209.854830][T10660] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10210'. [ 1210.017614][T10666] validate_nla: 5 callbacks suppressed [ 1210.017634][T10666] netlink: 'syz.1.10213': attribute type 1 has an invalid length. [ 1210.078527][T10666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1210.115026][T10671] vlan4: entered promiscuous mode [ 1210.120426][T10671] bond3: entered promiscuous mode [ 1210.129557][T10671] vlan4: entered allmulticast mode [ 1210.134852][T10671] bond3: entered allmulticast mode [ 1210.172233][T10666] bond3: (slave bridge1): making interface the new active one [ 1210.182469][T10666] bridge1: entered promiscuous mode [ 1210.189155][T10666] bridge1: entered allmulticast mode [ 1210.195839][T10666] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1210.234895][T10677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.242142][T10677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.271247][T10680] syzkaller0: entered promiscuous mode [ 1210.277412][T10680] syzkaller0: entered allmulticast mode [ 1210.705671][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10227'. [ 1210.738328][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10227'. [ 1210.761062][T10710] netlink: 'syz.1.10227': attribute type 3 has an invalid length. [ 1210.873576][T10720] syzkaller0: entered promiscuous mode [ 1210.892976][T10720] syzkaller0: entered allmulticast mode [ 1210.936110][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10233'. [ 1211.158058][T10740] netlink: 'syz.4.10238': attribute type 83 has an invalid length. [ 1211.216557][T10744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.277599][T10748] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10241'. [ 1211.304033][T10750] netlink: 'syz.4.10242': attribute type 16 has an invalid length. [ 1211.335185][T10750] netlink: 'syz.4.10242': attribute type 17 has an invalid length. [ 1211.404738][T10750] tunl0: left allmulticast mode [ 1211.434749][T10750] gre0: left allmulticast mode [ 1211.453517][T10750] gretap0: left allmulticast mode [ 1211.456685][T10767] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1211.461854][T10750] erspan0: left allmulticast mode [ 1211.474877][T10750] ip_vti0: left allmulticast mode [ 1211.481198][T10762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.503619][T10767] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1211.540433][T10750] ip6_vti0: left allmulticast mode [ 1211.559961][T10750] sit0: left allmulticast mode [ 1211.570680][T10750] ip6tnl0: left allmulticast mode [ 1211.580123][T10750] ip6gre0: left allmulticast mode [ 1211.597801][T10750] syz_tun: left allmulticast mode [ 1211.613179][T10750] ip6gretap0: left allmulticast mode [ 1211.633771][T10750] vcan0: left allmulticast mode [ 1211.651394][T10750] bond0: left allmulticast mode [ 1211.659670][T10750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.669878][T10750] team0: left allmulticast mode [ 1211.675826][T10750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.702802][T10750] dummy0: left allmulticast mode [ 1211.733177][T10750] nlmon0: left allmulticast mode [ 1211.745849][T10750] caif0: left allmulticast mode [ 1211.760563][T10750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1211.910353][T10787] syzkaller0: entered promiscuous mode [ 1211.915867][T10787] syzkaller0: entered allmulticast mode [ 1212.836923][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms [ 1212.845024][ C1] lec:lec_tx_timeout: lec0 [ 1213.848040][T10839] __nla_validate_parse: 5 callbacks suppressed [ 1213.848059][T10839] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10260'. [ 1213.914186][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1213.934563][T10848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10261'. [ 1213.950066][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1213.980572][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1214.002297][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10263'. [ 1214.079409][T10861] tipc: Enabling of bearer rejected, failed to enable media [ 1214.120663][T10866] syz_tun: entered allmulticast mode [ 1214.138279][T10863] syz_tun: left allmulticast mode [ 1214.399546][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10273'. [ 1214.484134][T10874] syzkaller0: entered promiscuous mode [ 1214.490353][T10874] syzkaller0: entered allmulticast mode [ 1214.581677][T10899] netlink: 'syz.4.10276': attribute type 1 has an invalid length. [ 1216.222765][T10931] netlink: 'syz.2.10283': attribute type 3 has an invalid length. [ 1216.366595][T10899] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1216.741564][T10962] netlink: 'syz.1.10291': attribute type 63 has an invalid length. [ 1216.763908][T10960] netlink: 'syz.1.10291': attribute type 63 has an invalid length. [ 1217.068989][T10983] syzkaller0: entered promiscuous mode [ 1217.100429][T10983] syzkaller0: entered allmulticast mode [ 1217.240985][T10987] netlink: 'syz.4.10299': attribute type 4 has an invalid length. [ 1217.430921][T11001] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10303'. [ 1217.633277][T11014] IPv6: addrconf: prefix option has invalid lifetime [ 1217.695256][T11015] netlink: 'syz.1.10308': attribute type 1 has an invalid length. [ 1217.708659][T11015] netlink: 'syz.1.10308': attribute type 3 has an invalid length. [ 1217.716809][T11015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10308'. [ 1217.863096][T11034] netlink: 'syz.1.10314': attribute type 10 has an invalid length. [ 1217.885762][T11030] bond3: entered promiscuous mode [ 1217.891447][T11034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.899129][T11034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.914046][T11034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.921162][T11034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.929590][T11034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.936692][T11034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.943073][T11035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10314'. [ 1217.950797][T11034] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1218.303846][T11055] netlink: 'syz.4.10323': attribute type 3 has an invalid length. [ 1218.312569][T11055] netlink: 'syz.4.10323': attribute type 1 has an invalid length. [ 1218.354233][T11056] netlink: 'syz.2.10322': attribute type 39 has an invalid length. [ 1218.383522][T11058] bond4: Invalid ad_actor_system MAC address. [ 1218.392643][T11058] bond4: option ad_actor_system: invalid value (1) [ 1218.410524][T11058] bond4 (unregistering): Released all slaves [ 1218.973891][T11076] infiniband sy‡1: set active [ 1218.979245][T11076] infiniband sy‡1: added bond0 [ 1219.057932][T11076] RDS/IB: sy‡1: added [ 1219.062015][T11076] smc: adding ib device sy‡1 with port count 1 [ 1219.073907][T11076] smc: ib device sy‡1 port 1 has no pnetid [ 1219.129624][T11104] __nla_validate_parse: 7 callbacks suppressed [ 1219.129643][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10332'. [ 1219.469481][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10336'. [ 1219.485834][T11118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1219.788304][T11129] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10340'. [ 1219.820601][T11129] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10340'. [ 1220.074609][T11141] netlink: 348 bytes leftover after parsing attributes in process `syz.4.10344'. [ 1221.062109][T11158] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1221.883698][T11165] bridge3: entered promiscuous mode [ 1221.894546][T11165] bridge3: entered allmulticast mode [ 1221.957690][T11172] ip6t_srh: unknown srh match flags 5F28 [ 1222.167725][T11185] netlink: 212 bytes leftover after parsing attributes in process `syz.1.10355'. [ 1222.500471][T11206] validate_nla: 3 callbacks suppressed [ 1222.500491][T11206] netlink: 'syz.0.10360': attribute type 1 has an invalid length. [ 1222.658838][T11212] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1222.706545][T11212] bond5: (slave lo): Enslaving as an active interface with an up link [ 1222.741598][T11212] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1222.823901][T11225] tipc: Started in network mode [ 1222.843858][T11225] tipc: Node identity 32c73ac6436b, cluster identity 4711 [ 1222.885844][T11225] tipc: Enabled bearer , priority 11 [ 1223.168618][T11248] xt_bpf: check failed: parse error [ 1223.430275][T11262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10377'. [ 1223.444634][T11262] tc_dump_action: action bad kind [ 1223.594013][T11274] veth0: entered promiscuous mode [ 1223.614129][T11274] gtp1: entered promiscuous mode [ 1223.637155][T11274] gtp1: entered allmulticast mode [ 1223.666459][T11273] veth0: left promiscuous mode [ 1223.705211][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10384'. [ 1223.970276][T11290] syzkaller1: entered promiscuous mode [ 1223.988627][T11290] syzkaller1: entered allmulticast mode [ 1223.996975][T12690] tipc: Node number set to 1907112646 [ 1224.067072][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10390'. [ 1224.230356][T11305] veth0_to_bond: entered allmulticast mode [ 1224.238376][T11305] veth0: entered promiscuous mode [ 1224.260269][T11304] veth0: left promiscuous mode [ 1224.281923][T11308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1224.293699][T11309] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1224.395006][T11313] xt_hashlimit: size too large, truncated to 1048576 [ 1224.433485][T11315] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1224.480037][T11320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.647267][T11327] : renamed from bond0 [ 1225.068422][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10416'. [ 1225.110188][T11373] x_tables: duplicate underflow at hook 2 [ 1225.209228][T11379] IPv6: NLM_F_CREATE should be specified when creating new route [ 1225.330479][T11392] netlink: 'syz.3.10422': attribute type 1 has an invalid length. [ 1225.434867][T11401] netlink: 'syz.3.10425': attribute type 1 has an invalid length. [ 1225.588095][T11411] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10428'. [ 1225.694706][T11419] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10432'. [ 1225.803102][T11430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10433'. [ 1226.014857][T11447] netlink: 'syz.4.10437': attribute type 7 has an invalid length. [ 1226.035600][T11448] netlink: 'syz.4.10437': attribute type 7 has an invalid length. [ 1226.054247][T11450] netlink: 'syz.2.10439': attribute type 1 has an invalid length. [ 1226.058199][T11448] netlink: 'syz.4.10437': attribute type 7 has an invalid length. [ 1226.072127][T11451] netlink: 'syz.2.10439': attribute type 1 has an invalid length. [ 1226.087084][T11450] netlink: 'syz.2.10439': attribute type 4 has an invalid length. [ 1226.094925][T11450] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1226.106739][T11447] netlink: 'syz.4.10437': attribute type 7 has an invalid length. [ 1226.136490][T11451] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.10439'. [ 1226.155293][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1226.212603][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10442'. [ 1226.242943][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10444'. [ 1226.255347][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1226.377742][T11477] vlan1: entered promiscuous mode [ 1228.425425][T11513] validate_nla: 1 callbacks suppressed [ 1228.425442][T11513] netlink: 'syz.2.10459': attribute type 2 has an invalid length. [ 1228.972802][T11443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1229.063943][T11516] delete_channel: no stack [ 1229.179802][T11519] netlink: 'syz.1.10461': attribute type 1 has an invalid length. [ 1229.265546][T11519] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1229.320610][T11534] openvswitch: netlink: Key type 167 is out of range max 32 [ 1229.338249][T11528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1229.367525][T11528] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1229.386321][T11528] bond4: (slave vcan1): Error -95 calling set_mac_address [ 1229.427902][T11536] __nla_validate_parse: 4 callbacks suppressed [ 1229.427919][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10465'. [ 1229.506975][T11540] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10466'. [ 1229.516304][T11541] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10466'. [ 1229.626940][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10467'. [ 1229.637911][T11548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1229.939090][T11562] ipt_REJECT: ECHOREPLY no longer supported. [ 1229.991700][T11564] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10475'. [ 1230.107866][T11573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10478'. [ 1230.195722][T11577] netlink: 'syz.4.10479': attribute type 39 has an invalid length. [ 1230.372763][T11584] netlink: 'syz.2.10482': attribute type 1 has an invalid length. [ 1230.599873][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10487'. [ 1230.626799][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10486'. [ 1230.720411][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10490'. [ 1230.759950][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10486'. [ 1231.024896][T11627] veth0: entered promiscuous mode [ 1231.076504][T11627] veth0: left promiscuous mode [ 1231.173984][T11636] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 1231.233179][T11641] : entered promiscuous mode [ 1231.350388][T11642] veth0: entered promiscuous mode [ 1231.355976][T11650] veth0: left promiscuous mode [ 1231.514743][T11653] xt_hashlimit: size too large, truncated to 1048576 [ 1231.733650][T11674] lo: left allmulticast mode [ 1231.740910][T11674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1232.354372][T11726] netlink: 'syz.1.10520': attribute type 4 has an invalid length. [ 1232.387749][T11724] netlink: 'syz.1.10520': attribute type 4 has an invalid length. [ 1232.549572][T11742] netlink: 'syz.1.10526': attribute type 1 has an invalid length. [ 1232.633961][T11742] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1232.654411][T11743] macvlan2: entered promiscuous mode [ 1232.670700][T11743] macvlan2: entered allmulticast mode [ 1232.691938][T11743] bond5: entered promiscuous mode [ 1232.699182][T11743] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1232.713098][T11743] bond5: left promiscuous mode [ 1232.783079][T11758] netlink: 'syz.4.10531': attribute type 1 has an invalid length. [ 1232.896661][T11758] bond6: entered promiscuous mode [ 1232.902930][T11758] bond6: entered allmulticast mode [ 1232.926381][T11758] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1233.054544][T11776] netlink: 'syz.2.10534': attribute type 33 has an invalid length. [ 1233.118587][T11776] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1233.158980][T11776] bond0 (unregistering): Released all slaves [ 1233.250875][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1233.350570][T11785] x_tables: duplicate entry at hook 3 [ 1233.764471][T11809] netlink: 'syz.1.10545': attribute type 2 has an invalid length. [ 1234.390859][T11858] ip6tnl1: entered allmulticast mode [ 1238.749752][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.757617][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1243.867911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1243.876018][ C1] lec:lec_tx_timeout: lec0 [ 1243.886811][T10022] team0: left allmulticast mode [ 1243.891931][T10022] batadv1: left allmulticast mode [ 1243.897236][T10022] team0: left promiscuous mode [ 1243.902002][T10022] batadv1: left promiscuous mode [ 1243.908254][T10022] bridge0: port 1(team0) entered disabled state [ 1243.925643][T10022] tipc: Resetting bearer [ 1244.010054][T10022] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 1244.034403][T10022] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 1244.043488][T10022] ip6gretap1 (unregistering): left allmulticast mode [ 1244.084100][T10022] erspan0 (unregistering): left promiscuous mode [ 1244.108506][T10022] tipc: Disabling bearer [ 1244.116254][T10022] gretap0 (unregistering): left promiscuous mode [ 1244.139318][T10022] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1244.162651][T10022] bond13 (unregistering): (slave gretap3): Releasing backup interface [ 1244.185476][T10022] dvmrp0 (unregistering): left allmulticast mode [ 1244.270896][T10022] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1244.420529][T10022] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 1244.429677][T10022] bridge4 (unregistering): left promiscuous mode [ 1244.500469][T10022] team0: Port device bridge6 removed [ 1244.640799][T10022] bond1 (unregistering): Released all slaves [ 1244.653187][T10022] bond2 (unregistering): Released all slaves [ 1244.665258][T10022] bond3 (unregistering): Released all slaves [ 1244.679687][T10022] bond4 (unregistering): Released all slaves [ 1244.693204][T10022] bond5 (unregistering): Released all slaves [ 1244.713721][T10022] bond6 (unregistering): Released all slaves [ 1244.726631][T10022] bond7 (unregistering): Released all slaves [ 1244.742051][T10022] bond8 (unregistering): Released all slaves [ 1244.755575][T10022] bond9 (unregistering): Released all slaves [ 1244.769870][T10022] bond10 (unregistering): Released all slaves [ 1244.783490][T10022] bond11 (unregistering): (slave veth7): Releasing active interface [ 1244.792816][T10022] bond11 (unregistering): Released all slaves [ 1244.810956][T10022] bond12 (unregistering): Released all slaves [ 1244.826107][T10022] bond0 (unregistering): Released all slaves [ 1244.841480][T10022] bond13 (unregistering): (slave bond14): Releasing backup interface [ 1244.850457][T10022] bond13 (unregistering): Released all slaves [ 1244.864783][T10022] bond14 (unregistering): Released all slaves [ 1245.046697][T10022] : left promiscuous mode [ 1245.115430][T10022] tipc: Disabling bearer [ 1245.121035][T10022] tipc: Left network mode [ 1245.649291][T10022] hsr_slave_0: left promiscuous mode [ 1245.664883][T10022] veth1_macvtap: left promiscuous mode [ 1245.725935][T10022] team0 (unregistering): Port device batadv1 removed [ 1246.166409][T10022] IPVS: stop unused estimator thread 0... [ 1254.800088][T11871] __nla_validate_parse: 11 callbacks suppressed [ 1254.800107][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10561'. [ 1254.865098][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10563'. [ 1255.108787][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1255.128907][T11904] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1255.288598][T11918] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.10576'. [ 1255.316756][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10576'. [ 1255.367954][T11930] sctp: [Deprecated]: syz.0.10576 (pid 11930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1255.367954][T11930] Use struct sctp_sack_info instead [ 1255.395751][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10578'. [ 1255.581620][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10583'. [ 1255.684838][T11943] macvtap2: entered promiscuous mode [ 1255.706749][T11943] vlan0: entered promiscuous mode [ 1255.724999][T11943] macvtap2: entered allmulticast mode [ 1255.746601][T11960] syzkaller0: entered promiscuous mode [ 1255.752874][T11960] syzkaller0: entered allmulticast mode [ 1255.904231][T11968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10590'. [ 1256.193978][T11997] netlink: 'syz.1.10592': attribute type 58 has an invalid length. [ 1256.217519][T11997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10592'. [ 1256.837138][T12039] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1257.020982][T12052] syzkaller0: entered promiscuous mode [ 1257.047490][T12052] syzkaller0: entered allmulticast mode [ 1257.224709][T12059] syzkaller0: entered promiscuous mode [ 1257.699787][T12100] syzkaller0: entered promiscuous mode [ 1257.705299][T12100] syzkaller0: entered allmulticast mode [ 1258.483090][T12151] netlink: 'syz.2.10633': attribute type 10 has an invalid length. [ 1258.513924][T12151] veth0_vlan: left promiscuous mode [ 1258.539060][T12151] veth0_vlan: entered promiscuous mode [ 1258.568689][T12151] team0: Device veth0_vlan failed to register rx_handler [ 1258.738928][T12164] syzkaller0: entered promiscuous mode [ 1258.747055][T12164] syzkaller0: entered allmulticast mode [ 1258.921230][T12174] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1259.036583][T12181] xt_hashlimit: size too large, truncated to 1048576 [ 1259.498669][T12218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.536515][T12217] vlan0: left promiscuous mode [ 1259.543394][T11088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.574131][T11088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.602300][T11088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.632212][T11088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.001932][T12240] syzkaller0: entered promiscuous mode [ 1260.008507][T12240] syzkaller0: entered allmulticast mode [ 1260.058696][T12240] __nla_validate_parse: 10 callbacks suppressed [ 1260.058714][T12240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10662'. [ 1260.790920][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10674'. [ 1260.800236][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10674'. [ 1260.805371][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10673'. [ 1260.900561][T12289] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.10675'. [ 1260.978179][T12294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10677'. [ 1260.985610][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10677'. [ 1261.066442][T12300] netlink: 'syz.3.10678': attribute type 17 has an invalid length. [ 1261.098442][T12300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1261.111531][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10678'. [ 1261.269845][T12308] netlink: 'syz.1.10681': attribute type 1 has an invalid length. [ 1261.282671][T12308] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10681'. [ 1261.335649][T12318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1261.553277][T12334] netlink: 'syz.0.10689': attribute type 3 has an invalid length. [ 1261.752983][T12347] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1261.793551][T12353] chnl_net:caif_netlink_parms(): no params data found [ 1261.850838][T12349] pim6reg1: entered promiscuous mode [ 1261.872337][T12349] pim6reg1: entered allmulticast mode [ 1262.038973][T12370] netlink: 'syz.3.10700': attribute type 10 has an invalid length. [ 1262.774340][T12410] netlink: 'syz.1.10712': attribute type 1 has an invalid length. [ 1262.803482][T12410] netlink: 'syz.1.10712': attribute type 2 has an invalid length. [ 1262.846054][T12410] netlink: 'syz.1.10712': attribute type 1 has an invalid length. [ 1262.854419][T12410] netlink: 'syz.1.10712': attribute type 3 has an invalid length. [ 1263.209573][T12460] netlink: 'syz.4.10725': attribute type 1 has an invalid length. [ 1263.264963][T12464] openvswitch: netlink: IP tunnel dst address not specified [ 1263.306739][T12465] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1263.332466][T12465] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1263.395343][T12460] macvlan3: entered promiscuous mode [ 1263.435636][T12460] macvlan3: entered allmulticast mode [ 1263.473421][T12460] bond8: entered promiscuous mode [ 1263.494179][T12460] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1263.512211][T12460] bond8: left promiscuous mode [ 1263.559251][T12477] syzkaller0: entered promiscuous mode [ 1263.567421][T12477] syzkaller0: entered allmulticast mode [ 1263.669613][T12480] tipc: Started in network mode [ 1263.691743][T12480] tipc: Node identity 36970b3fc2f6, cluster identity 4711 [ 1263.712256][T12480] tipc: Enabled bearer , priority 0 [ 1263.751598][T12484] syzkaller0: entered promiscuous mode [ 1263.764569][T12484] syzkaller0: entered allmulticast mode [ 1263.841292][T12487] Cannot find add_set index 0 as target [ 1263.855395][T12493] gretap1: entered promiscuous mode [ 1263.857715][T12492] netlink: 'syz.4.10734': attribute type 1 has an invalid length. [ 1264.380675][T12473] tipc: Resetting bearer [ 1264.459402][T12473] tipc: Disabling bearer [ 1264.612952][T12548] syzkaller0: entered promiscuous mode [ 1264.618637][T12548] syzkaller0: entered allmulticast mode [ 1264.669412][T12551] Bluetooth: MGMT ver 1.23 [ 1264.780781][T12554] tipc: Enabled bearer , priority 0 [ 1264.859538][T12554] syzkaller0: entered promiscuous mode [ 1264.865554][T12554] syzkaller0: entered allmulticast mode [ 1264.873159][T12554] tipc: Resetting bearer [ 1264.912055][T12553] tipc: Resetting bearer [ 1266.557650][T12553] tipc: Disabling bearer [ 1266.652592][T12578] syzkaller0: entered promiscuous mode [ 1266.670842][T12578] syzkaller0: entered allmulticast mode [ 1266.920674][T12599] netlink: 'syz.1.10761': attribute type 10 has an invalid length. [ 1267.554984][T12606] netlink: 'syz.3.10762': attribute type 21 has an invalid length. [ 1267.618909][T12607] netlink: 'syz.3.10762': attribute type 10 has an invalid length. [ 1268.341029][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.349063][T12599] bridge_slave_1: left allmulticast mode [ 1268.356256][T12599] bridge_slave_1: left promiscuous mode [ 1268.363104][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.391674][T15451] IPVS: starting estimator thread 0... [ 1268.396762][T12599] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1268.433867][T12607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.458336][T12607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.465523][T12607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.489483][T12611] IPVS: using max 33 ests per chain, 79200 per kthread [ 1268.494616][T12607] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1268.509077][T12619] netlink: 'syz.0.10764': attribute type 24 has an invalid length. [ 1268.532914][T12613] __nla_validate_parse: 19 callbacks suppressed [ 1268.532934][T12613] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10764'. [ 1268.579685][T12623] netlink: 'syz.4.10765': attribute type 9 has an invalid length. [ 1268.591901][T12623] netlink: 'syz.4.10765': attribute type 11 has an invalid length. [ 1268.602051][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10766'. [ 1268.606714][T12624] netlink: 'syz.3.10767': attribute type 3 has an invalid length. [ 1268.617002][T12623] netlink: 'syz.4.10765': attribute type 12 has an invalid length. [ 1268.661680][T12623] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.10765'. [ 1268.686036][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10766'. [ 1268.692420][T12631] sctp: [Deprecated]: syz.0.10769 (pid 12631) Use of int in maxseg socket option. [ 1268.692420][T12631] Use struct sctp_assoc_value instead [ 1268.720444][T12628] netlink: 76 bytes leftover after parsing attributes in process `syz.4.10765'. [ 1268.741192][T12618] bridge_slave_0 (unregistering): left promiscuous mode [ 1268.783953][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.815821][T12634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10770'. [ 1268.857928][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10771'. [ 1269.044353][T12655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1269.079698][T12659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.149596][T12662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10779'. [ 1269.158876][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10779'. [ 1269.332142][T12677] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10781'. [ 1269.719946][T12718] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1270.062245][T12748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.149825][T12750] netlink: 'syz.1.10804': attribute type 2 has an invalid length. [ 1270.163393][T12754] nbd: couldn't find a device at index 0 [ 1270.180273][T12750] netlink: 'syz.1.10804': attribute type 1 has an invalid length. [ 1270.251166][T12760] sctp: [Deprecated]: syz.3.10807 (pid 12760) Use of int in max_burst socket option deprecated. [ 1270.251166][T12760] Use struct sctp_assoc_value instead [ 1270.303865][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.311605][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.365115][T12757] bridge_slave_0: left allmulticast mode [ 1270.377165][T12757] bridge_slave_0: left promiscuous mode [ 1270.382934][T12757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.405453][T12757] bridge_slave_1: left allmulticast mode [ 1270.416522][T12757] bridge_slave_1: left promiscuous mode [ 1270.423338][T12757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.451945][T12757] : (slave bond_slave_0): Releasing backup interface [ 1270.460364][T12757] bond_slave_0: left promiscuous mode [ 1270.495662][T12757] : (slave bond_slave_1): Releasing backup interface [ 1270.513540][T12757] bond_slave_1: left promiscuous mode [ 1270.531606][T12757] team0: Port device team_slave_0 removed [ 1270.549889][T12757] team0: Port device team_slave_1 removed [ 1270.559803][T12757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.573800][T12757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.594260][T12757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.614311][T12757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.630785][T12757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1270.841585][T12797] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1270.871745][T12801] syzkaller0: entered promiscuous mode [ 1270.887632][T12801] syzkaller0: entered allmulticast mode [ 1271.217954][T12826] xt_hashlimit: size too large, truncated to 1048576 [ 1271.527837][T12855] ipt_REJECT: ECHOREPLY no longer supported. [ 1271.551135][T18871] lec:lec_start_xmit: lec0:No lecd attached [ 1271.725195][T12871] team0: Port device team_slave_0 removed [ 1272.110171][T12896] validate_nla: 11 callbacks suppressed [ 1272.110191][T12896] netlink: 'syz.4.10844': attribute type 1 has an invalid length. [ 1272.172209][T12896] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1272.198815][T12901] bond9: (slave geneve2): making interface the new active one [ 1272.219877][T12901] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1272.232064][T25481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.242517][T25481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.253535][ T7637] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.264561][T12893] syzkaller0: entered promiscuous mode [ 1272.274484][T12893] syzkaller0: entered allmulticast mode [ 1272.298381][ T7637] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.161180][T12900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1275.171290][T12896] __nla_validate_parse: 17 callbacks suppressed [ 1275.171310][T12896] netlink: 54 bytes leftover after parsing attributes in process `syz.4.10844'. [ 1275.187374][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10844'. [ 1275.394757][T12955] syzkaller0: entered promiscuous mode [ 1275.447954][T12955] syzkaller0: entered allmulticast mode [ 1275.455004][T12968] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1275.472667][T12969] netlink: 'syz.1.10863': attribute type 4 has an invalid length. [ 1275.485420][T12968] netlink: 'syz.4.10860': attribute type 3 has an invalid length. [ 1275.500908][T12969] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10863'. [ 1275.515347][T12968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10860'. [ 1275.545967][T12969] .`: renamed from bond0 (while UP) [ 1275.716634][T12978] netlink: 'syz.0.10868': attribute type 3 has an invalid length. [ 1275.757422][T12986] netlink: 'syz.3.10869': attribute type 1 has an invalid length. [ 1275.996984][T12769] IPVS: starting estimator thread 0... [ 1276.021369][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10878'. [ 1276.087241][T13001] IPVS: using max 39 ests per chain, 93600 per kthread [ 1276.103137][T13004] bond10: option xmit_hash_policy: invalid value (64) [ 1276.135542][T13004] bond10 (unregistering): Released all slaves [ 1276.250788][T13024] netlink: 'syz.0.10881': attribute type 1 has an invalid length. [ 1276.331936][T13009] syzkaller0: entered promiscuous mode [ 1276.337909][T13009] syzkaller0: entered allmulticast mode [ 1276.345291][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10881'. [ 1276.403397][T13024] bond3: entered promiscuous mode [ 1276.408767][T13024] bond3: entered allmulticast mode [ 1276.414242][T13024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1276.829188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 1276.837257][ C1] lec:lec_tx_timeout: lec0 [ 1276.837667][T13047] netlink: 'syz.1.10884': attribute type 1 has an invalid length. [ 1276.862362][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10884'. [ 1278.628916][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1278.639533][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1278.653669][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10890'. [ 1278.672389][T13071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.875175][T13091] netlink: 'syz.1.10894': attribute type 2 has an invalid length. [ 1278.879588][T13093] veth0: entered promiscuous mode [ 1278.890847][T13092] veth0: left promiscuous mode [ 1278.950098][T13091] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1278.975560][T13091] bond0 (unregistering): Released all slaves [ 1279.031079][T13101] openvswitch: netlink: Unknown nsh attribute 0 [ 1279.136147][T13107] syzkaller0: entered promiscuous mode [ 1279.142143][T13107] syzkaller0: entered allmulticast mode [ 1279.160975][T13109] netlink: 'syz.1.10901': attribute type 1 has an invalid length. [ 1279.199207][T13109] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1279.210591][T13109] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 1279.306001][T13109] macvlan2: entered promiscuous mode [ 1279.332777][T13109] macvlan2: entered allmulticast mode [ 1279.349020][T13109] bond0: entered promiscuous mode [ 1279.354807][T13109] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1279.370535][T13109] bond0: left promiscuous mode [ 1279.679934][T13135] netlink: 'syz.1.10908': attribute type 32 has an invalid length. [ 1279.756544][T13139] xt_hashlimit: size too large, truncated to 1048576 [ 1279.781025][T13135] bond6: option coupled_control: invalid value (6) [ 1279.802742][T13135] bond6 (unregistering): Released all slaves [ 1279.998183][T13151] syzkaller0: entered promiscuous mode [ 1280.007315][T13151] syzkaller0: entered allmulticast mode [ 1280.044254][T13155] netlink: 'syz.3.10914': attribute type 1 has an invalid length. [ 1280.053462][T13155] netlink: 'syz.3.10914': attribute type 2 has an invalid length. [ 1280.064088][T13155] netlink: 'syz.3.10914': attribute type 1 has an invalid length. [ 1280.075301][T13155] netlink: 'syz.3.10914': attribute type 3 has an invalid length. [ 1280.235588][T13160] syzkaller0: entered promiscuous mode [ 1280.241629][T13160] syzkaller0: entered allmulticast mode [ 1280.602704][T13182] nbd2: detected capacity change from 0 to 127 [ 1280.691981][T13190] __nla_validate_parse: 5 callbacks suppressed [ 1280.691999][T13190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1280.755709][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1281.213238][ T4531] block nbd2: Receive control failed (result -104) [ 1282.194670][T13202] IPv6: sit1: Disabled Multicast RS [ 1282.203688][T13202] sit1: entered allmulticast mode [ 1282.250974][T13211] xt_hashlimit: size too large, truncated to 1048576 [ 1282.421296][T13199] syzkaller0: entered promiscuous mode [ 1282.448096][T13199] syzkaller0: entered allmulticast mode [ 1282.653499][ T29] audit: type=1107 audit(1775689046.140:7): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¦ ®dŠ°³‡ [ 1282.653499][ T29] +€÷¼ L¸á ±SÔJ+ýK³‹sÿ¾ë„\3>kcä`K„£tO8~È*½”½e3xMɶºƒ têQ’-Âê×qׇ,š Xˆ±tÚ¼4Ò[gJ+ï|ø]p9~ [ 1282.653499][ T29] Ù³=†È€T\»O¥@žpáN>ÛQcç.' [ 1283.312785][T13237] xt_hashlimit: overflow, rate too high: 0 [ 1284.334689][T13238] netlink: 1124 bytes leftover after parsing attributes in process `syz.4.10938'. [ 1284.374264][T13243] wireguard0: entered allmulticast mode [ 1284.375507][T13248] netlink: 'syz.3.10942': attribute type 1 has an invalid length. [ 1284.455922][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10944'. [ 1284.576042][T13271] x_tables: duplicate underflow at hook 1 [ 1284.594757][T13272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1284.659034][T13278] netlink: 'syz.4.10947': attribute type 10 has an invalid length. [ 1284.667562][T13271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10948'. [ 1284.857153][T13289] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10953'. [ 1284.912316][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10955'. [ 1284.937355][T13291] netlink: 'syz.1.10954': attribute type 1 has an invalid length. [ 1285.065207][T13300] x_tables: unsorted underflow at hook 3 [ 1285.114722][T13308] netlink: 'syz.0.10957': attribute type 11 has an invalid length. [ 1285.134375][T13308] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.10957'. [ 1285.664469][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10965'. [ 1286.238634][T13360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1286.512113][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10977'. [ 1286.683722][T13372] nftables ruleset with unbound set [ 1286.866333][T13367] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10976'. [ 1287.024142][T13379] netlink: set zone limit has 4 unknown bytes [ 1287.041200][T13381] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10981'. [ 1287.140544][T13387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.183297][T13381] bond10 (unregistering): Released all slaves [ 1287.503048][T13392] syzkaller0: entered promiscuous mode [ 1287.509259][T13392] syzkaller0: entered allmulticast mode [ 1287.877505][T13404] openvswitch: netlink: IP tunnel dst address not specified [ 1288.420404][T13406] netlink: 'syz.0.10987': attribute type 1 has an invalid length. [ 1288.586743][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10987'. [ 1290.325602][T13406] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1290.541409][T13395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1290.561255][T13420] netlink: 'syz.3.10991': attribute type 16 has an invalid length. [ 1290.572993][T13420] netlink: 'syz.3.10991': attribute type 17 has an invalid length. [ 1290.719363][T13420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1290.830007][T13420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10991'. [ 1290.890409][T13430] syzkaller0: entered promiscuous mode [ 1290.895920][T13430] syzkaller0: entered allmulticast mode [ 1290.986514][T13449] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10997'. [ 1292.461165][T13420] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1292.504969][T13445] syzkaller0: entered promiscuous mode [ 1292.522153][T13445] syzkaller0: entered allmulticast mode [ 1294.207453][T13459] syz_tun: entered allmulticast mode [ 1294.213099][T13459] syz_tun: left allmulticast mode [ 1294.219668][T13460] syz_tun: entered allmulticast mode [ 1294.470231][T13476] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1294.604927][T13456] infiniband syz1: set down [ 1294.611747][T13456] infiniband syz1: added team_slave_0 [ 1294.652940][T13456] RDS/IB: syz1: added [ 1294.659365][T13456] smc: adding ib device syz1 with port count 1 [ 1294.659473][T13490] netlink: 'syz.3.11010': attribute type 2 has an invalid length. [ 1294.665633][T13456] smc: ib device syz1 port 1 has no pnetid [ 1294.734754][T13484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11010'. [ 1297.635603][T13502] x_tables: duplicate underflow at hook 1 [ 1297.672608][T13505] netlink: 'syz.4.11016': attribute type 4 has an invalid length. [ 1300.191053][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.199786][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1300.208299][T11088] veth0_to_bridge: left allmulticast mode [ 1300.214033][T11088] veth0_to_bridge: left promiscuous mode [ 1300.220526][T11088] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1300.230271][T11088] bridge_slave_1: left allmulticast mode [ 1300.236042][T11088] bridge_slave_1: left promiscuous mode [ 1300.241890][T11088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.250491][T11088] bridge_slave_0: left allmulticast mode [ 1300.256123][T11088] bridge_slave_0: left promiscuous mode [ 1300.261946][T11088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.340601][T11088] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 1300.446616][T11088] bond9 (unregistering): (slave geneve5): Releasing active interface [ 1300.486241][T11088] bridge0 (unregistering): left allmulticast mode [ 1300.580314][T11088] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1300.700440][T11088] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 1300.708765][T11088] bridge5 (unregistering): left promiscuous mode [ 1300.901237][T11088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1300.910340][T11088] bond_slave_0: left allmulticast mode [ 1300.916719][T11088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.925850][T11088] bond_slave_1: left allmulticast mode [ 1300.932533][T11088] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1300.944330][T11088] bond0 (unregistering): Released all slaves [ 1300.954156][T11088] bond1 (unregistering): Released all slaves [ 1300.966459][T11088] bond2 (unregistering): Released all slaves [ 1300.980197][T11088] bond3 (unregistering): Released all slaves [ 1300.994009][T11088] bond4 (unregistering): Released all slaves [ 1301.014196][T11088] bond5 (unregistering): Released all slaves [ 1301.031091][T11088] bond6 (unregistering): (slave lo): Releasing backup interface [ 1301.039209][T11088] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1301.050656][T11088] bond6 (unregistering): Released all slaves [ 1301.063362][T11088] bond7 (unregistering): Released all slaves [ 1301.075623][T11088] bond8 (unregistering): Released all slaves [ 1301.088556][T11088] bond9 (unregistering): Released all slaves [ 1301.100923][T11088] bond10 (unregistering): Released all slaves [ 1301.122256][T11088] bond11 (unregistering): Released all slaves [ 1301.134569][T11088] bond12 (unregistering): Released all slaves [ 1301.148785][T11088] bond13 (unregistering): Released all slaves [ 1301.319916][T11088] tipc: Disabling bearer [ 1301.333032][T11088] tipc: Left network mode [ 1301.843881][T11088] hsr_slave_0: left promiscuous mode [ 1301.859241][T11088] hsr_slave_1: left promiscuous mode [ 1301.865042][T11088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.874530][T11088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.882783][T11088] veth1_vlan: left allmulticast mode [ 1301.902341][T11088] pim6reg (unregistering): left allmulticast mode [ 1302.033234][T11088] team0 (unregistering): Port device team_slave_1 removed [ 1302.052888][T11088] team0 (unregistering): Port device team_slave_0 removed [ 1302.142873][T11088] smc: removing net device team0 with user defined pnetid SYZ2 [ 1302.424299][T11088] IPVS: stop unused estimator thread 0... [ 1305.866883][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1305.874912][ C1] lec:lec_tx_timeout: lec0 [ 1310.432891][T28932] bridge_slave_1: left promiscuous mode [ 1310.438780][T28932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.591804][T28932] dvmrp1 (unregistering): left allmulticast mode [ 1310.740258][T28932] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 1310.748632][T28932] bond6 (unregistering): (slave bridge4): the permanent HWaddr of slave - 16:12:b2:ce:e0:04 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1310.790408][T28932] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 1310.850600][T28932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.861239][T28932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.871190][T28932] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1310.884519][T28932] bond0 (unregistering): Released all slaves [ 1310.894072][T28932] bond1 (unregistering): Released all slaves [ 1310.905988][T28932] bond2 (unregistering): Released all slaves [ 1310.919415][T28932] bond3 (unregistering): Released all slaves [ 1310.932541][T28932] bond4 (unregistering): Released all slaves [ 1310.946605][T28932] bond5 (unregistering): Released all slaves [ 1310.961534][T28932] bond6 (unregistering): Released all slaves [ 1310.980997][T28932] bond7 (unregistering): (slave veth9): Releasing active interface [ 1310.993385][T28932] bond7 (unregistering): (slave veth11): Releasing active interface [ 1311.002806][T28932] bond7 (unregistering): Released all slaves [ 1311.016206][T28932] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1311.027564][T28932] bond8 (unregistering): Released all slaves [ 1311.041438][T28932] bond9 (unregistering): Released all slaves [ 1311.068221][ T5157] block nbd2: Possible stuck request ffff888027148000: control (read@0,1024B). Runtime 30 seconds [ 1311.081306][ T5157] block nbd2: Possible stuck request ffff888027148200: control (read@1024,1024B). Runtime 30 seconds [ 1311.092407][ T5157] block nbd2: Possible stuck request ffff888027148400: control (read@2048,1024B). Runtime 30 seconds [ 1311.103486][ T5157] block nbd2: Possible stuck request ffff888027148600: control (read@3072,1024B). Runtime 30 seconds [ 1311.916980][T28932] hsr_slave_0: left promiscuous mode [ 1311.922845][T28932] hsr_slave_1: left promiscuous mode [ 1311.932090][T28932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.940287][T28932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.062447][T11088] smc: removing ib device syz0 [ 1312.122010][T28932] team0 (unregistering): Port device team_slave_1 removed [ 1312.136017][T28932] team0 (unregistering): Port device team_slave_0 removed [ 1312.844284][T28932] IPVS: stop unused estimator thread 0... [ 1324.783378][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.806313][T13563] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.821896][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.839163][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.867951][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.908339][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.938052][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.947992][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1324.977107][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1325.006112][T13559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11033'. [ 1325.090828][T13583] netlink: 'syz.1.11041': attribute type 1 has an invalid length. [ 1325.128251][T13583] netlink: 'syz.1.11041': attribute type 2 has an invalid length. [ 1325.299152][T13591] syzkaller0: entered promiscuous mode [ 1325.307004][T13591] syzkaller0: entered allmulticast mode [ 1325.583761][T13615] pim6reg1: entered allmulticast mode [ 1325.589403][T13617] netlink: 'syz.2.11051': attribute type 10 has an invalid length. [ 1325.619949][T13617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.641011][T13617] batadv0: entered promiscuous mode [ 1325.648561][T13617] : (slave batadv0): Enslaving as an active interface with an up link [ 1325.931714][T13641] IPv6: sit3: Disabled Multicast RS [ 1325.953812][T13641] sit3: entered allmulticast mode [ 1327.103440][T13711] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1327.672120][T13769] xfrm1: entered allmulticast mode [ 1327.691965][T13772] nbd: couldn't find a device at index 0 [ 1327.735660][T13774] netlink: 'syz.1.11097': attribute type 15 has an invalid length. [ 1327.811543][T13780] netlink: 'syz.1.11099': attribute type 2 has an invalid length. [ 1327.819673][T13780] netlink: 'syz.1.11099': attribute type 1 has an invalid length. [ 1327.894830][T13785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.930620][T13788] netlink: 'syz.1.11102': attribute type 15 has an invalid length. [ 1327.939024][T13787] netlink: 'syz.1.11102': attribute type 15 has an invalid length. [ 1327.961977][T25484] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1327.968250][T13788] netlink: 'syz.1.11102': attribute type 15 has an invalid length. [ 1327.977478][T25484] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1327.999758][T13787] netlink: 'syz.1.11102': attribute type 15 has an invalid length. [ 1328.010225][T25484] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1328.020717][T25484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1328.424015][T13812] syzkaller0: entered promiscuous mode [ 1328.481429][T13812] syzkaller0: entered allmulticast mode [ 1328.565130][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1328.958497][T13845] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1329.630204][T13879] xt_connbytes: Forcing CT accounting to be enabled [ 1329.741914][T13879] xt_CT: No such helper "pptp" [ 1329.991987][T13892] __nla_validate_parse: 120 callbacks suppressed [ 1329.992010][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11130'. [ 1330.009052][T13890] syzkaller0: entered promiscuous mode [ 1330.024510][T13890] syzkaller0: entered allmulticast mode [ 1330.198274][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11132'. [ 1330.296441][T13901] bond4: entered promiscuous mode [ 1330.305119][T13901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1330.334622][T13911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11135'. [ 1330.343629][T13907] bridge4: entered promiscuous mode [ 1330.344433][T13911] netlink: 92 bytes leftover after parsing attributes in process `syz.4.11135'. [ 1330.389666][T13907] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1330.407760][T13901] macvlan3: entered promiscuous mode [ 1330.413310][T13901] macvlan3: entered allmulticast mode [ 1330.420548][T13901] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 1330.429508][T13919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11135'. [ 1330.473926][T13922] xt_hashlimit: size too large, truncated to 1048576 [ 1330.493902][T13911] ipvlan3: entered allmulticast mode [ 1330.501711][T13911] batman_adv: batadv0: Adding interface: ipvlan3 [ 1330.508606][T13911] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.535862][T13911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.552147][T13911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.562640][T13911] batman_adv: batadv0: Interface activated: ipvlan3 [ 1330.769497][T13941] x_tables: duplicate underflow at hook 1 [ 1330.800943][T13941] x_tables: duplicate underflow at hook 1 [ 1330.801417][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11144'. [ 1330.813722][T13941] x_tables: duplicate underflow at hook 1 [ 1330.825124][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11144'. [ 1330.839955][T13941] x_tables: duplicate underflow at hook 1 [ 1330.855654][T13941] x_tables: duplicate underflow at hook 1 [ 1330.857489][T13943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11144'. [ 1330.873156][T13945] validate_nla: 4 callbacks suppressed [ 1330.873173][T13945] netlink: 'syz.0.11146': attribute type 1 has an invalid length. [ 1330.875141][T13941] x_tables: duplicate underflow at hook 1 [ 1330.895461][T13941] x_tables: duplicate underflow at hook 1 [ 1330.902005][T13941] x_tables: duplicate underflow at hook 1 [ 1330.908920][T13941] x_tables: duplicate underflow at hook 1 [ 1330.916037][T13941] x_tables: duplicate underflow at hook 1 [ 1330.966040][T13954] netlink: 788 bytes leftover after parsing attributes in process `syz.1.11148'. [ 1331.130199][T13965] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11153'. [ 1331.414329][T13992] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1331.914972][T14026] tipc: Enabling not permitted [ 1331.926746][T14026] tipc: Enabling of bearer rejected, failed to enable media [ 1332.063455][T14038] bond5: option all_slaves_active: invalid value (222) [ 1332.083720][T14038] bond5 (unregistering): Released all slaves [ 1332.146955][T14046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1332.321800][T14061] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 1332.350099][T14061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.442511][T14071] syzkaller1: entered promiscuous mode [ 1332.448261][T14071] syzkaller1: entered allmulticast mode [ 1332.483645][T14076] "syz.4.11186" (14076) uses obsolete ecb(arc4) skcipher [ 1332.618444][T14083] netlink: 'syz.3.11189': attribute type 1 has an invalid length. [ 1332.682794][T14083] bond5: entered promiscuous mode [ 1332.697800][T14083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1332.781461][T14083] bond5: (slave bridge8): making interface the new active one [ 1332.789271][T14083] bridge8: entered promiscuous mode [ 1332.795096][T14102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.796318][T14083] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 1333.004297][ T29] audit: type=1107 audit(1775689096.480:8): pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1333.008815][T14119] bridge2: entered promiscuous mode [ 1333.139636][T14119] bridge2: entered allmulticast mode [ 1333.281565][T14140] syzkaller1: entered promiscuous mode [ 1333.290233][T14140] syzkaller1: entered allmulticast mode [ 1333.454720][T14146] bond4: (slave bond_slave_1): Device is not bonding slave [ 1333.485790][T14146] bond4: option active_slave: invalid value (bond_slave_1) [ 1333.497568][T14146] bond4 (unregistering): Released all slaves [ 1333.508100][T14154] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1333.732814][T14175] bond0: entered promiscuous mode [ 1333.744706][T14175] bond_slave_0: entered promiscuous mode [ 1333.757169][T14175] bond_slave_1: entered promiscuous mode [ 1333.765171][T14175] batadv0: entered promiscuous mode [ 1333.777421][T14175] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1333.790486][T14175] hsr1: entered promiscuous mode [ 1333.795778][T14175] hsr1: entered allmulticast mode [ 1333.818614][T14175] bond0: entered allmulticast mode [ 1333.825107][T14175] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1333.837449][T14181] netlink: 'syz.4.11217': attribute type 7 has an invalid length. [ 1333.845757][T14175] bond0: left promiscuous mode [ 1333.849252][T14181] netlink: 'syz.4.11217': attribute type 8 has an invalid length. [ 1333.851819][T14175] bond_slave_0: left promiscuous mode [ 1333.869734][T14175] bond_slave_1: left promiscuous mode [ 1333.877514][T14175] batadv0: left promiscuous mode [ 1333.899338][T14184] netlink: 'syz.2.11219': attribute type 1 has an invalid length. [ 1333.912022][T14178] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1333.962756][T14184] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1333.974228][T14184] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1334.051659][T14188] macvlan2: entered promiscuous mode [ 1334.058103][T14188] macvlan2: entered allmulticast mode [ 1334.065909][T14188] bond4: entered promiscuous mode [ 1334.086225][T14188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1334.125762][T14188] bond4: left promiscuous mode [ 1334.352466][T14217] nbd: couldn't find a device at index 0 [ 1334.451681][T14212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1334.704913][T14247] netlink: 'syz.1.11233': attribute type 8 has an invalid length. [ 1334.751122][T18871] lec:lec_start_xmit: lec0:No lecd attached [ 1334.812349][T14254] netlink: 'syz.4.11235': attribute type 4 has an invalid length. [ 1334.936369][T14266] netlink: 'syz.1.11238': attribute type 1 has an invalid length. [ 1335.138590][T14285] netlink: 'syz.3.11243': attribute type 1 has an invalid length. [ 1335.289733][T14295] netlink: 'syz.4.11246': attribute type 1 has an invalid length. [ 1335.315462][T14293] netlink: 'syz.1.11244': attribute type 11 has an invalid length. [ 1335.323758][T14293] netlink: 'syz.1.11244': attribute type 11 has an invalid length. [ 1335.336198][T14293] __nla_validate_parse: 27 callbacks suppressed [ 1335.336219][T14293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1335.465650][T14305] macvlan3: entered promiscuous mode [ 1335.474802][T14305] macvlan3: entered allmulticast mode [ 1335.498066][T14305] bond11: entered promiscuous mode [ 1335.538160][T14305] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1335.584260][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1335.715911][T14305] bond11: left promiscuous mode [ 1335.891221][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11256'. [ 1335.964500][T14340] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1335.994704][T14341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1336.008763][T14340] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1336.022327][T14340] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1336.031725][T14340] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1336.032206][T14341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1336.040353][T14340] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 1336.047440][T14346] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11259'. [ 1336.081109][T14341] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1336.090495][T14341] batman_adv: batadv0: Removing interface: ipvlan3 [ 1336.193088][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11261'. [ 1336.224264][T14353] nbd: socks must be embedded in a SOCK_ITEM attr [ 1336.290582][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11261'. [ 1336.340333][T14357] netlink: 388 bytes leftover after parsing attributes in process `syz.0.11263'. [ 1336.368314][T14357] netlink: 'syz.0.11263': attribute type 28 has an invalid length. [ 1336.386737][T14359] sctp: [Deprecated]: syz.1.11264 (pid 14359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1336.386737][T14359] Use struct sctp_sack_info instead [ 1336.403915][T14357] netlink: 'syz.0.11263': attribute type 3 has an invalid length. [ 1336.412502][T14357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11263'. [ 1336.451676][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11267'. [ 1336.467843][T14359] netlink: 'syz.1.11264': attribute type 26 has an invalid length. [ 1336.481064][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11267'. [ 1336.565228][T14369] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1336.581852][T14369] bond5 (unregistering): Released all slaves [ 1336.664458][T14377] netlink: 'syz.3.11271': attribute type 3 has an invalid length. [ 1336.693261][T14377] netlink: 'syz.3.11271': attribute type 1 has an invalid length. [ 1337.065371][T14405] tipc: Enabled bearer , priority 0 [ 1337.115347][T14405] syzkaller0: entered promiscuous mode [ 1337.121119][T14405] syzkaller0: entered allmulticast mode [ 1337.129868][T14405] tipc: Resetting bearer [ 1337.201664][T14404] tipc: Resetting bearer [ 1338.972847][T14404] tipc: Disabling bearer [ 1339.346935][T14445] xfrm0: left allmulticast mode [ 1339.359400][T14445] netlink: 'syz.0.11290': attribute type 1 has an invalid length. [ 1339.374612][T14445] netlink: 'syz.0.11290': attribute type 2 has an invalid length. [ 1339.387568][T14445] netlink: 'syz.0.11290': attribute type 1 has an invalid length. [ 1339.867138][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1339.875204][ C1] lec:lec_tx_timeout: lec0 [ 1340.167027][T14502] netlink: 'syz.0.11305': attribute type 1 has an invalid length. [ 1340.340382][T14525] net_ratelimit: 29 callbacks suppressed [ 1340.340400][T14525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.370632][T14514] __nla_validate_parse: 35 callbacks suppressed [ 1340.370652][T14514] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11307'. [ 1340.487932][T14514] bridge0: port 1(0¾x9ÿ) entered disabled state [ 1340.923075][T14555] netlink: 'syz.4.11316': attribute type 15 has an invalid length. [ 1340.996362][T14562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 1341.100926][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11318'. [ 1341.151524][ T5157] block nbd2: Possible stuck request ffff888027148000: control (read@0,1024B). Runtime 60 seconds [ 1341.162490][ T5157] block nbd2: Possible stuck request ffff888027148200: control (read@1024,1024B). Runtime 60 seconds [ 1341.174489][ T5157] block nbd2: Possible stuck request ffff888027148400: control (read@2048,1024B). Runtime 60 seconds [ 1341.188142][ T5157] block nbd2: Possible stuck request ffff888027148600: control (read@3072,1024B). Runtime 60 seconds [ 1341.382349][T14589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11321'. [ 1341.417425][T14582] bond12: Unable to set up delay as MII monitoring is disabled [ 1341.430449][T14582] bond12 (unregistering): Released all slaves [ 1341.455282][T14595] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11325'. [ 1341.465969][T14595] openvswitch: netlink: Flow key attr not present in new flow. [ 1341.484187][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11325'. [ 1341.493516][T14599] openvswitch: netlink: nsh attr 255 is out of range max 3 [ 1341.624953][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11327'. [ 1341.750442][T14613] gre2: entered promiscuous mode [ 1341.755435][T14613] gre2: entered allmulticast mode [ 1341.820600][T14618] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1341.846763][T14618] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1341.994889][T14627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11333'. [ 1342.094762][T14643] syz.2.11338: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1342.110790][T14643] CPU: 1 UID: 0 PID: 14643 Comm: syz.2.11338 Not tainted syzkaller #0 PREEMPT(full) [ 1342.110819][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.110833][T14643] Call Trace: [ 1342.110841][T14643] [ 1342.110850][T14643] dump_stack_lvl+0xe8/0x150 [ 1342.110885][T14643] warn_alloc+0x249/0x340 [ 1342.110910][T14643] ? stack_trace_save+0xa9/0x100 [ 1342.110935][T14643] ? __pfx_warn_alloc+0x10/0x10 [ 1342.110963][T14643] ? kasan_save_track+0x4f/0x80 [ 1342.110984][T14643] ? kasan_save_track+0x3e/0x80 [ 1342.111004][T14643] ? __kasan_kmalloc+0x93/0xb0 [ 1342.111026][T14643] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1342.111045][T14643] ? xskq_create+0x56/0x170 [ 1342.111066][T14643] ? xsk_setsockopt+0x54c/0x990 [ 1342.111083][T14643] ? do_sock_setsockopt+0x17c/0x1b0 [ 1342.111110][T14643] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1342.111132][T14643] ? do_syscall_64+0x14d/0xf80 [ 1342.111158][T14643] __vmalloc_node_range_noprof+0x132/0x1730 [ 1342.111212][T14643] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1342.111239][T14643] ? __kasan_kmalloc+0x93/0xb0 [ 1342.111268][T14643] vmalloc_user_noprof+0xad/0xe0 [ 1342.111289][T14643] ? xskq_create+0xbf/0x170 [ 1342.111311][T14643] xskq_create+0xbf/0x170 [ 1342.111336][T14643] xsk_init_queue+0x8a/0xe0 [ 1342.111359][T14643] xsk_setsockopt+0x54c/0x990 [ 1342.111381][T14643] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1342.111401][T14643] ? __pfx_aa_sk_perm+0x10/0x10 [ 1342.111433][T14643] ? aa_sock_opt_perm+0xff/0x1a0 [ 1342.111468][T14643] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1342.111488][T14643] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1342.111509][T14643] do_sock_setsockopt+0x17c/0x1b0 [ 1342.111536][T14643] __x64_sys_setsockopt+0x13d/0x1b0 [ 1342.111564][T14643] do_syscall_64+0x14d/0xf80 [ 1342.111592][T14643] ? trace_irq_disable+0x3b/0x150 [ 1342.111610][T14643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.111630][T14643] ? clear_bhb_loop+0x40/0x90 [ 1342.111653][T14643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.111673][T14643] RIP: 0033:0x7f3aaaf9c819 [ 1342.111693][T14643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.111707][T14643] RSP: 002b:00007f3aabe15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1342.111729][T14643] RAX: ffffffffffffffda RBX: 00007f3aab215fa0 RCX: 00007f3aaaf9c819 [ 1342.111743][T14643] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1342.111755][T14643] RBP: 00007f3aab032c91 R08: 0000000000000004 R09: 0000000000000000 [ 1342.111767][T14643] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1342.111780][T14643] R13: 00007f3aab216038 R14: 00007f3aab215fa0 R15: 00007ffd22f8bfd8 [ 1342.111812][T14643] [ 1342.111888][T14643] Mem-Info: [ 1342.391958][T14654] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11340'. [ 1342.405861][T14643] active_anon:6707 inactive_anon:7 isolated_anon:0 [ 1342.405861][T14643] active_file:2795 inactive_file:40704 isolated_file:0 [ 1342.405861][T14643] unevictable:768 dirty:103 writeback:0 [ 1342.405861][T14643] slab_reclaimable:13735 slab_unreclaimable:121304 [ 1342.405861][T14643] mapped:29551 shmem:1395 pagetables:3712 [ 1342.405861][T14643] sec_pagetables:0 bounce:0 [ 1342.405861][T14643] kernel_misc_reclaimable:0 [ 1342.405861][T14643] free:1276543 free_pcp:26153 free_cma:0 [ 1342.459969][T14654] netlink: 120 bytes leftover after parsing attributes in process `syz.1.11340'. [ 1342.500459][T14654] netlink: 'syz.1.11340': attribute type 1 has an invalid length. [ 1342.518913][T14643] Node 0 active_anon:26728kB inactive_anon:28kB active_file:11180kB inactive_file:162608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28092kB dirty:408kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14244kB pagetables:14280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1342.553333][T14643] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1342.627588][T14643] Node 0 DMA free:11160kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:52kB free_cma:0kB [ 1342.660232][T14643] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1342.694282][T14643] Node 0 DMA32 free:1410108kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26828kB inactive_anon:28kB active_file:11180kB inactive_file:162608kB unevictable:1536kB writepending:408kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:46372kB local_pcp:21268kB free_cma:0kB [ 1342.729886][T14643] lowmem_reserve[]: 0 0 0 0 0 [ 1342.734868][T14643] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1342.767249][T14643] lowmem_reserve[]: 0 0 0 0 0 [ 1342.772413][T14643] Node 1 Normal free:3686680kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58268kB local_pcp:26960kB free_cma:0kB [ 1342.809558][T14643] lowmem_reserve[]: 0 0 0 0 0 [ 1342.814426][T14643] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 3*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11160kB [ 1342.833109][T14643] Node 0 DMA32: 9021*4kB (UME) 7901*8kB (UME) 3952*16kB (UME) 772*32kB (UME) 864*64kB (UME) 1021*128kB (UME) 651*256kB (UME) 471*512kB (UM) 316*1024kB (UM) 149*2048kB (UM) 0*4096kB = 1409756kB [ 1342.852581][T14643] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1342.893030][T14643] Node 1 Normal: 3*4kB (U) 7*8kB (UM) 13*16kB (UM) 6*32kB (UM) 13*64kB (UM) 16*128kB (UM) 11*256kB (UM) 11*512kB (UM) 9*1024kB (UM) 6*2048kB (U) 892*4096kB (UM) = 3686932kB [ 1342.941356][T14643] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1342.953817][T14680] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1342.967068][T14643] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.978119][T14643] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.010783][T14643] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.029271][T14643] 44891 total pagecache pages [ 1343.039389][T14643] 1 pages in swap cache [ 1343.048227][T14643] Free swap = 124992kB [ 1343.056016][T14643] Total swap = 124996kB [ 1343.074608][T14643] 2097051 pages RAM [ 1343.079713][T14643] 0 pages HighMem/MovableOnly [ 1343.084420][T14643] 427062 pages reserved [ 1343.089331][T14643] 0 pages cma reserved [ 1343.309114][T14697] syzkaller0: entered promiscuous mode [ 1343.314620][T14697] syzkaller0: entered allmulticast mode [ 1343.601089][T14713] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1343.644916][T14718] xt_policy: output policy not valid in PREROUTING and INPUT [ 1343.677102][T14713] IPv6: sit3: Disabled Multicast RS [ 1343.683352][T14713] sit3: entered allmulticast mode [ 1344.018195][T14747] netlink: 'syz.4.11372': attribute type 1 has an invalid length. [ 1344.043822][T14747] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1344.079076][T14742] bond12: (slave veth9): Enslaving as an active interface with a down link [ 1344.093173][T14742] veth0_to_bond: left allmulticast mode [ 1344.102802][T14742] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1344.155106][T14742] bond12: (slave veth11): Enslaving as an active interface with a down link [ 1344.178705][T14742] netlink: 'syz.4.11372': attribute type 1 has an invalid length. [ 1344.186743][T14742] netlink: 'syz.4.11372': attribute type 2 has an invalid length. [ 1344.513138][T14777] netlink: 'syz.3.11382': attribute type 62 has an invalid length. [ 1344.623718][T14782] bond5: option xmit_hash_policy: invalid value (64) [ 1344.644014][T14786] xt_hashlimit: size too large, truncated to 1048576 [ 1344.658052][T14782] bond5 (unregistering): Released all slaves [ 1345.129500][ T5192] udevd[5192]: worker [13188] /devices/virtual/block/nbd2 is taking a long time [ 1345.523523][T14839] __nla_validate_parse: 7 callbacks suppressed [ 1345.523541][T14839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11397'. [ 1345.531803][T14842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1345.566650][T14840] netlink: 'syz.3.11399': attribute type 21 has an invalid length. [ 1345.575113][T14840] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11399'. [ 1345.628124][T14848] netlink: 'syz.3.11399': attribute type 21 has an invalid length. [ 1345.636345][T14848] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11399'. [ 1345.692865][T14840] netlink: 'syz.3.11399': attribute type 4 has an invalid length. [ 1345.712535][T14840] netlink: 'syz.3.11399': attribute type 5 has an invalid length. [ 1345.738944][T14840] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11399'. [ 1345.776111][T14848] netlink: 'syz.3.11399': attribute type 4 has an invalid length. [ 1345.801242][T14848] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11399'. [ 1345.810594][T14855] --map-set only usable from mangle table [ 1345.950604][T14865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11405'. [ 1346.018485][T14867] syzkaller0: entered promiscuous mode [ 1346.036887][T14867] syzkaller0: entered allmulticast mode [ 1346.116716][T14874] tcf_pedit_act: 22 callbacks suppressed [ 1346.116735][T14874] tc action pedit offset must be on 32 bit boundaries [ 1346.444885][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11415'. [ 1346.454245][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11415'. [ 1346.464678][T14903] bond5: Unable to set down delay as MII monitoring is disabled [ 1346.473559][T14903] bond5 (unregistering): Released all slaves [ 1346.507438][T11089] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1346.516296][T11089] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1346.533195][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11414'. [ 1346.550930][T11089] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1346.567227][T11089] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1346.584362][T14913] veth0: entered promiscuous mode [ 1346.607771][T14914] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1346.730814][T14924] tap0: tun_chr_ioctl cmd 1074025673 [ 1346.743762][T14924] tap0: tun_chr_ioctl cmd 1074025673 [ 1346.762373][T14924] tap0: tun_chr_ioctl cmd 1074025673 [ 1346.768604][T14924] tap0: tun_chr_ioctl cmd 1074025673 [ 1346.774497][T14924] tap0: tun_chr_ioctl cmd 1074025673 [ 1346.826152][T14935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1347.280897][T14962] siw: device registration error -23 [ 1347.299837][T14964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1347.337822][T14964] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1347.485666][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1347.499275][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1347.507727][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1347.517278][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1347.524887][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1347.980618][ T4529] syz_tun (unregistering): left allmulticast mode [ 1348.114975][ T5825] block nbd3: Receive control failed (result -1) [ 1348.127886][T15017] syzkaller0: entered promiscuous mode [ 1348.141152][T15017] syzkaller0: entered allmulticast mode [ 1348.172992][T15017] xt_ecn: cannot match TCP bits for non-tcp packets [ 1348.638347][T15032] syzkaller1: entered promiscuous mode [ 1348.654666][T15032] syzkaller1: entered allmulticast mode [ 1348.661516][T15036] validate_nla: 8 callbacks suppressed [ 1348.661532][T15036] netlink: 'syz.2.11454': attribute type 1 has an invalid length. [ 1348.745733][T15036] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1348.801389][T15038] bond5: (slave geneve3): making interface the new active one [ 1348.833526][T15038] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1348.854647][T14976] chnl_net:caif_netlink_parms(): no params data found [ 1348.936357][T15058] netlink: 'syz.2.11458': attribute type 1 has an invalid length. [ 1348.961413][T15058] netlink: 'syz.2.11458': attribute type 11 has an invalid length. [ 1349.101226][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.162216][T14976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.170686][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.181092][T14976] bridge_slave_0: entered allmulticast mode [ 1349.189523][T14976] bridge_slave_0: entered promiscuous mode [ 1349.202005][T14976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.212363][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.219934][T14976] bridge_slave_1: entered allmulticast mode [ 1349.229747][T14976] bridge_slave_1: entered promiscuous mode [ 1349.273719][T14976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.287390][T14976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.333163][T14976] team0: Port device team_slave_0 added [ 1349.342433][T14976] team0: Port device team_slave_1 added [ 1349.380479][T15074] netlink: 'syz.1.11462': attribute type 2 has an invalid length. [ 1349.417765][T14976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.435308][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.461726][T14976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.480821][T14976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.488008][T14976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.515032][T14976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1349.556930][ T5825] Bluetooth: hci3: command tx timeout [ 1349.642166][T14976] hsr_slave_0: entered promiscuous mode [ 1349.658697][T14976] hsr_slave_1: entered promiscuous mode [ 1349.776463][T15087] netlink: 'syz.0.11466': attribute type 21 has an invalid length. [ 1349.972989][T14976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1349.985983][T14976] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.105057][T14976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.130992][T14976] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.294865][T15110] netlink: 'syz.4.11472': attribute type 64 has an invalid length. [ 1350.306417][T14976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.317736][T14976] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.460570][T14976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1350.480058][T14976] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.585340][T15115] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1350.624586][T15115] SET target dimension over the limit! [ 1350.638655][T15115] __nla_validate_parse: 14 callbacks suppressed [ 1350.638674][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11475'. [ 1350.654375][T15115] netlink: 'syz.0.11475': attribute type 7 has an invalid length. [ 1350.662439][T15115] netlink: 'syz.0.11475': attribute type 8 has an invalid length. [ 1350.670722][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11475'. [ 1350.740012][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11476'. [ 1350.760241][T14976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1350.778286][T15118] openvswitch: netlink: Flow key attr not present in new flow. [ 1350.790566][T14976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1350.809771][T14976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1350.848740][T14976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1350.985224][T14976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.014989][T14976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.029556][T11089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.036736][T11089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.071035][T11089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.078260][T11089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1351.160742][T14976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1351.292282][T15148] : entered promiscuous mode [ 1351.525673][T15161] syzkaller0: entered promiscuous mode [ 1351.556705][T14976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.624190][T15169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 1351.635242][ T5825] Bluetooth: hci3: command tx timeout [ 1351.791107][T14976] veth0_vlan: entered promiscuous mode [ 1351.862897][T15180] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1351.881592][T15184] netlink: 'syz.4.11492': attribute type 39 has an invalid length. [ 1352.089325][T15194] netlink: 'syz.0.11494': attribute type 16 has an invalid length. [ 1353.436426][T15194] tunl0: left allmulticast mode [ 1353.443736][T15194] gre0: left allmulticast mode [ 1353.450487][T15194] gretap0: left allmulticast mode [ 1353.460442][T15194] erspan0: left allmulticast mode [ 1353.471191][T15194] ip_vti0: left allmulticast mode [ 1353.478713][T15194] ip6_vti0: left allmulticast mode [ 1353.489284][T15194] sit0: left allmulticast mode [ 1353.511524][T15194] ip6tnl0: left allmulticast mode [ 1353.529808][T15194] ip6gre0: left allmulticast mode [ 1353.547156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.556135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.576440][T15194] ip6gretap0: left allmulticast mode [ 1353.584351][T15194] bridge0: left allmulticast mode [ 1353.591300][T15194] bond0: left allmulticast mode [ 1353.599981][T15199] FAULT_INJECTION: forcing a failure. [ 1353.599981][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.602408][T15194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.615081][T15199] CPU: 1 UID: 0 PID: 15199 Comm: syz.2.11495 Not tainted syzkaller #0 PREEMPT(full) [ 1353.615103][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1353.615114][T15199] Call Trace: [ 1353.615121][T15199] [ 1353.615129][T15199] dump_stack_lvl+0xe8/0x150 [ 1353.615157][T15199] should_fail_ex+0x412/0x560 [ 1353.615189][T15199] should_failslab+0xa8/0x100 [ 1353.615213][T15199] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1353.615235][T15199] ? __alloc_workqueue+0x8ec/0x1e90 [ 1353.615258][T15199] __alloc_workqueue+0x8ec/0x1e90 [ 1353.615289][T15199] alloc_workqueue_noprof+0xe3/0x210 [ 1353.615312][T15199] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1353.615336][T15199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1353.615361][T15199] nci_register_device+0x22c/0xa00 [ 1353.615391][T15199] ? __pfx_nci_register_device+0x10/0x10 [ 1353.615418][T15199] ? __raw_spin_lock_init+0x45/0x100 [ 1353.615437][T15199] ? __init_waitqueue_head+0xa9/0x150 [ 1353.615460][T15199] virtual_ncidev_open+0x129/0x1a0 [ 1353.615488][T15199] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1353.615511][T15199] misc_open+0x2d5/0x350 [ 1353.615538][T15199] chrdev_open+0x4cd/0x5e0 [ 1353.615563][T15199] ? __pfx_chrdev_open+0x10/0x10 [ 1353.615584][T15199] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1353.615608][T15199] ? __pfx_chrdev_open+0x10/0x10 [ 1353.615627][T15199] do_dentry_open+0x785/0x14e0 [ 1353.615663][T15199] vfs_open+0x3b/0x340 [ 1353.615684][T15199] ? path_openat+0x2df0/0x3860 [ 1353.615705][T15199] path_openat+0x2e08/0x3860 [ 1353.615737][T15199] ? __pfx_stack_trace_save+0x10/0x10 [ 1353.615759][T15199] ? stack_depot_save_flags+0x33/0x810 [ 1353.615797][T15199] ? __pfx_path_openat+0x10/0x10 [ 1353.615814][T15199] ? __x64_sys_openat+0x138/0x170 [ 1353.615836][T15199] ? do_syscall_64+0x14d/0xf80 [ 1353.615857][T15199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.615888][T15199] ? __lock_acquire+0x6b5/0x2cf0 [ 1353.615916][T15199] do_file_open+0x23e/0x4a0 [ 1353.615940][T15199] ? __pfx_do_file_open+0x10/0x10 [ 1353.615978][T15199] ? _raw_spin_unlock+0x28/0x50 [ 1353.615996][T15199] ? alloc_fd+0x64b/0x6c0 [ 1353.616030][T15199] do_sys_openat2+0x113/0x200 [ 1353.616055][T15199] ? __pfx_do_sys_openat2+0x10/0x10 [ 1353.616080][T15199] ? ksys_write+0x242/0x270 [ 1353.616101][T15199] ? __pfx_ksys_write+0x10/0x10 [ 1353.616123][T15199] __x64_sys_openat+0x138/0x170 [ 1353.616153][T15199] do_syscall_64+0x14d/0xf80 [ 1353.616172][T15199] ? trace_irq_disable+0x3b/0x150 [ 1353.616188][T15199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.616205][T15199] ? clear_bhb_loop+0x40/0x90 [ 1353.616227][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.616244][T15199] RIP: 0033:0x7f3aaaf9c819 [ 1353.616260][T15199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.616274][T15199] RSP: 002b:00007f3aabe15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1353.616293][T15199] RAX: ffffffffffffffda RBX: 00007f3aab215fa0 RCX: 00007f3aaaf9c819 [ 1353.616305][T15199] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1353.616317][T15199] RBP: 00007f3aabe15090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.616328][T15199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1353.616338][T15199] R13: 00007f3aab216038 R14: 00007f3aab215fa0 R15: 00007ffd22f8bfd8 [ 1353.616365][T15199] [ 1353.717836][ T5825] Bluetooth: hci3: command tx timeout [ 1353.721220][T15194] team0: left allmulticast mode [ 1353.969038][T15194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.976178][T15194] nlmon0: left allmulticast mode [ 1353.982401][T15194] caif0: left allmulticast mode [ 1353.988049][T15194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1354.029358][T14976] veth1_vlan: entered promiscuous mode [ 1354.040985][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11496'. [ 1354.188607][T14976] veth0_macvtap: entered promiscuous mode [ 1354.208305][T14976] veth1_macvtap: entered promiscuous mode [ 1354.262809][T14976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.300667][T14976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.330483][T25484] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.357143][T25484] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.386375][T25484] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.426363][T15226] netlink: 232 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1354.442013][T25484] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.523085][T15226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11503'. [ 1354.659870][T15239] FAULT_INJECTION: forcing a failure. [ 1354.659870][T15239] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.673597][T11089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.685805][T11089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.697977][T15239] CPU: 0 UID: 0 PID: 15239 Comm: syz.0.11506 Not tainted syzkaller #0 PREEMPT(full) [ 1354.698001][T15239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1354.698011][T15239] Call Trace: [ 1354.698019][T15239] [ 1354.698027][T15239] dump_stack_lvl+0xe8/0x150 [ 1354.698057][T15239] should_fail_ex+0x412/0x560 [ 1354.698090][T15239] should_failslab+0xa8/0x100 [ 1354.698115][T15239] __kmalloc_noprof+0xe8/0x760 [ 1354.698136][T15239] ? apply_wqattrs_prepare+0xf6/0xdc0 [ 1354.698165][T15239] apply_wqattrs_prepare+0xf6/0xdc0 [ 1354.698190][T15239] ? pcpu_alloc_noprof+0x10e4/0x19c0 [ 1354.698227][T15239] __alloc_workqueue+0x1253/0x1e90 [ 1354.698259][T15239] alloc_workqueue_noprof+0xe3/0x210 [ 1354.698283][T15239] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1354.698309][T15239] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1354.698336][T15239] nci_register_device+0x22c/0xa00 [ 1354.698366][T15239] ? __pfx_nci_register_device+0x10/0x10 [ 1354.698391][T15239] ? __raw_spin_lock_init+0x45/0x100 [ 1354.698409][T15239] ? __init_waitqueue_head+0xa9/0x150 [ 1354.698432][T15239] virtual_ncidev_open+0x129/0x1a0 [ 1354.698460][T15239] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1354.698484][T15239] misc_open+0x2d5/0x350 [ 1354.698508][T15239] chrdev_open+0x4cd/0x5e0 [ 1354.698534][T15239] ? __pfx_chrdev_open+0x10/0x10 [ 1354.698553][T15239] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1354.698575][T15239] ? __pfx_chrdev_open+0x10/0x10 [ 1354.698594][T15239] do_dentry_open+0x785/0x14e0 [ 1354.698627][T15239] vfs_open+0x3b/0x340 [ 1354.698646][T15239] ? path_openat+0x2df0/0x3860 [ 1354.698666][T15239] path_openat+0x2e08/0x3860 [ 1354.698697][T15239] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.698721][T15239] ? stack_depot_save_flags+0x33/0x810 [ 1354.698760][T15239] ? __pfx_path_openat+0x10/0x10 [ 1354.698776][T15239] ? __x64_sys_openat+0x138/0x170 [ 1354.698798][T15239] ? do_syscall_64+0x14d/0xf80 [ 1354.698817][T15239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.698844][T15239] ? __lock_acquire+0x6b5/0x2cf0 [ 1354.698873][T15239] do_file_open+0x23e/0x4a0 [ 1354.698898][T15239] ? __pfx_do_file_open+0x10/0x10 [ 1354.698938][T15239] ? _raw_spin_unlock+0x28/0x50 [ 1354.698957][T15239] ? alloc_fd+0x64b/0x6c0 [ 1354.698994][T15239] do_sys_openat2+0x113/0x200 [ 1354.699022][T15239] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.699049][T15239] ? ksys_write+0x242/0x270 [ 1354.699071][T15239] ? __pfx_ksys_write+0x10/0x10 [ 1354.699095][T15239] __x64_sys_openat+0x138/0x170 [ 1354.699126][T15239] do_syscall_64+0x14d/0xf80 [ 1354.699148][T15239] ? trace_irq_disable+0x3b/0x150 [ 1354.699163][T15239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.699181][T15239] ? clear_bhb_loop+0x40/0x90 [ 1354.699203][T15239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.699221][T15239] RIP: 0033:0x7fb1aed9c819 [ 1354.699238][T15239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.699254][T15239] RSP: 002b:00007fb1afd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1354.699273][T15239] RAX: ffffffffffffffda RBX: 00007fb1af015fa0 RCX: 00007fb1aed9c819 [ 1354.699285][T15239] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1354.699296][T15239] RBP: 00007fb1afd16090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.699307][T15239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.699318][T15239] R13: 00007fb1af016038 R14: 00007fb1af015fa0 R15: 00007ffd9e2a1218 [ 1354.699349][T15239] [ 1354.874856][T15244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11507'. [ 1354.968095][T25487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.114837][T25487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.335053][T15261] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 1355.444783][T15273] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11515'. [ 1355.462655][T15274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11513'. [ 1355.570973][T15280] FAULT_INJECTION: forcing a failure. [ 1355.570973][T15280] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.670946][T15280] CPU: 0 UID: 0 PID: 15280 Comm: syz.3.11516 Not tainted syzkaller #0 PREEMPT(full) [ 1355.670973][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.670985][T15280] Call Trace: [ 1355.670992][T15280] [ 1355.671001][T15280] dump_stack_lvl+0xe8/0x150 [ 1355.671030][T15280] should_fail_ex+0x412/0x560 [ 1355.671062][T15280] should_failslab+0xa8/0x100 [ 1355.671088][T15280] __kmalloc_cache_noprof+0x88/0x660 [ 1355.671111][T15280] ? apply_wqattrs_prepare+0x12d/0xdc0 [ 1355.671133][T15280] ? __kmalloc_noprof+0x1b8/0x760 [ 1355.671156][T15280] apply_wqattrs_prepare+0x12d/0xdc0 [ 1355.671183][T15280] ? pcpu_alloc_noprof+0x10e4/0x19c0 [ 1355.671223][T15280] __alloc_workqueue+0x1253/0x1e90 [ 1355.671257][T15280] alloc_workqueue_noprof+0xe3/0x210 [ 1355.671282][T15280] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1355.671307][T15280] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1355.671333][T15280] nci_register_device+0x22c/0xa00 [ 1355.671366][T15280] ? __pfx_nci_register_device+0x10/0x10 [ 1355.671393][T15280] ? __raw_spin_lock_init+0x45/0x100 [ 1355.671414][T15280] ? __init_waitqueue_head+0xa9/0x150 [ 1355.671438][T15280] virtual_ncidev_open+0x129/0x1a0 [ 1355.671466][T15280] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1355.671488][T15280] misc_open+0x2d5/0x350 [ 1355.671517][T15280] chrdev_open+0x4cd/0x5e0 [ 1355.671543][T15280] ? __pfx_chrdev_open+0x10/0x10 [ 1355.671564][T15280] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1355.671591][T15280] ? __pfx_chrdev_open+0x10/0x10 [ 1355.671611][T15280] do_dentry_open+0x785/0x14e0 [ 1355.671650][T15280] vfs_open+0x3b/0x340 [ 1355.671672][T15280] ? path_openat+0x2df0/0x3860 [ 1355.671694][T15280] path_openat+0x2e08/0x3860 [ 1355.671737][T15280] ? __pfx_stack_trace_save+0x10/0x10 [ 1355.671760][T15280] ? stack_depot_save_flags+0x33/0x810 [ 1355.671797][T15280] ? __pfx_path_openat+0x10/0x10 [ 1355.671815][T15280] ? __x64_sys_openat+0x138/0x170 [ 1355.671836][T15280] ? do_syscall_64+0x14d/0xf80 [ 1355.671857][T15280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.671883][T15280] ? __lock_acquire+0x6b5/0x2cf0 [ 1355.671913][T15280] do_file_open+0x23e/0x4a0 [ 1355.671939][T15280] ? __pfx_do_file_open+0x10/0x10 [ 1355.671982][T15280] ? _raw_spin_unlock+0x28/0x50 [ 1355.672000][T15280] ? alloc_fd+0x64b/0x6c0 [ 1355.672037][T15280] do_sys_openat2+0x113/0x200 [ 1355.672065][T15280] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.672092][T15280] ? ksys_write+0x242/0x270 [ 1355.672114][T15280] ? __pfx_ksys_write+0x10/0x10 [ 1355.672137][T15280] __x64_sys_openat+0x138/0x170 [ 1355.672168][T15280] do_syscall_64+0x14d/0xf80 [ 1355.672189][T15280] ? trace_irq_disable+0x3b/0x150 [ 1355.672204][T15280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.672222][T15280] ? clear_bhb_loop+0x40/0x90 [ 1355.672245][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.672262][T15280] RIP: 0033:0x7fbab619c819 [ 1355.672280][T15280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.672295][T15280] RSP: 002b:00007fbab6f84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1355.672314][T15280] RAX: ffffffffffffffda RBX: 00007fbab6415fa0 RCX: 00007fbab619c819 [ 1355.672327][T15280] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1355.672339][T15280] RBP: 00007fbab6f84090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.672351][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1355.672362][T15280] R13: 00007fbab6416038 R14: 00007fbab6415fa0 R15: 00007fffcde61ce8 [ 1355.672392][T15280] [ 1356.050110][ T5825] Bluetooth: hci3: command tx timeout [ 1356.370636][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11520'. [ 1356.471687][T15293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11520'. [ 1356.717221][T15311] validate_nla: 1 callbacks suppressed [ 1356.717246][T15311] netlink: 'syz.3.11524': attribute type 13 has an invalid length. [ 1356.754952][T15313] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11526'. [ 1356.823683][T15315] FAULT_INJECTION: forcing a failure. [ 1356.823683][T15315] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.890801][T15315] CPU: 1 UID: 0 PID: 15315 Comm: syz.0.11527 Not tainted syzkaller #0 PREEMPT(full) [ 1356.890827][T15315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1356.890838][T15315] Call Trace: [ 1356.890845][T15315] [ 1356.890854][T15315] dump_stack_lvl+0xe8/0x150 [ 1356.890884][T15315] should_fail_ex+0x412/0x560 [ 1356.890916][T15315] should_failslab+0xa8/0x100 [ 1356.890941][T15315] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1356.890964][T15315] ? alloc_unbound_pwq+0xac8/0xe00 [ 1356.890993][T15315] alloc_unbound_pwq+0xac8/0xe00 [ 1356.891026][T15315] apply_wqattrs_prepare+0x3ba/0xdc0 [ 1356.891070][T15315] __alloc_workqueue+0x1253/0x1e90 [ 1356.891102][T15315] alloc_workqueue_noprof+0xe3/0x210 [ 1356.891126][T15315] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1356.891149][T15315] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1356.891173][T15315] nci_register_device+0x22c/0xa00 [ 1356.891204][T15315] ? __pfx_nci_register_device+0x10/0x10 [ 1356.891228][T15315] ? __raw_spin_lock_init+0x45/0x100 [ 1356.891249][T15315] ? __init_waitqueue_head+0xa9/0x150 [ 1356.891272][T15315] virtual_ncidev_open+0x129/0x1a0 [ 1356.891308][T15315] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1356.891331][T15315] misc_open+0x2d5/0x350 [ 1356.891360][T15315] chrdev_open+0x4cd/0x5e0 [ 1356.891385][T15315] ? __pfx_chrdev_open+0x10/0x10 [ 1356.891407][T15315] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1356.891433][T15315] ? __pfx_chrdev_open+0x10/0x10 [ 1356.891454][T15315] do_dentry_open+0x785/0x14e0 [ 1356.891492][T15315] vfs_open+0x3b/0x340 [ 1356.891515][T15315] ? path_openat+0x2df0/0x3860 [ 1356.891536][T15315] path_openat+0x2e08/0x3860 [ 1356.891569][T15315] ? __pfx_stack_trace_save+0x10/0x10 [ 1356.891592][T15315] ? stack_depot_save_flags+0x33/0x810 [ 1356.891628][T15315] ? __pfx_path_openat+0x10/0x10 [ 1356.891647][T15315] ? __x64_sys_openat+0x138/0x170 [ 1356.891670][T15315] ? do_syscall_64+0x14d/0xf80 [ 1356.891691][T15315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.891718][T15315] ? __lock_acquire+0x6b5/0x2cf0 [ 1356.891746][T15315] do_file_open+0x23e/0x4a0 [ 1356.891771][T15315] ? __pfx_do_file_open+0x10/0x10 [ 1356.891809][T15315] ? _raw_spin_unlock+0x28/0x50 [ 1356.891827][T15315] ? alloc_fd+0x64b/0x6c0 [ 1356.891861][T15315] do_sys_openat2+0x113/0x200 [ 1356.891888][T15315] ? __pfx_do_sys_openat2+0x10/0x10 [ 1356.891912][T15315] ? ksys_write+0x242/0x270 [ 1356.891934][T15315] ? __pfx_ksys_write+0x10/0x10 [ 1356.891957][T15315] __x64_sys_openat+0x138/0x170 [ 1356.891987][T15315] do_syscall_64+0x14d/0xf80 [ 1356.892007][T15315] ? trace_irq_disable+0x3b/0x150 [ 1356.892022][T15315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.892039][T15315] ? clear_bhb_loop+0x40/0x90 [ 1356.892062][T15315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.892078][T15315] RIP: 0033:0x7fb1aed9c819 [ 1356.892094][T15315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.892107][T15315] RSP: 002b:00007fb1afd16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1356.892125][T15315] RAX: ffffffffffffffda RBX: 00007fb1af015fa0 RCX: 00007fb1aed9c819 [ 1356.892138][T15315] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1356.892150][T15315] RBP: 00007fb1afd16090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.892160][T15315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.892169][T15315] R13: 00007fb1af016038 R14: 00007fb1af015fa0 R15: 00007ffd9e2a1218 [ 1356.892197][T15315] [ 1357.362172][T15328] SET target dimension over the limit! [ 1357.775742][T15356] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1357.857622][T15362] netlink: 'syz.2.11542': attribute type 13 has an invalid length. [ 1357.877110][T15362] macvtap0: entered allmulticast mode [ 1357.882968][T15362] macvtap0: refused to change device tx_queue_len [ 1358.123624][T15384] netlink: 724 bytes leftover after parsing attributes in process `syz.1.11548'. [ 1358.791116][T15408] netlink: 'syz.3.11554': attribute type 1 has an invalid length. [ 1359.015069][T15417] netlink: 'syz.2.11557': attribute type 13 has an invalid length. [ 1359.048591][T15417] macvtap0: refused to change device tx_queue_len [ 1359.061861][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11558'. [ 1359.248372][T28932] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.318059][T28932] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.341245][T28932] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.434728][T11090] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.464463][T15453] netlink: 'syz.3.11567': attribute type 21 has an invalid length. [ 1359.474995][T15453] netlink: 'syz.3.11567': attribute type 1 has an invalid length. [ 1359.738296][T15475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.981539][T15494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11579'. [ 1360.092807][T15511] netlink: 184 bytes leftover after parsing attributes in process `syz.3.11584'. [ 1360.301431][T15521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1360.314736][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1360.330181][T25487] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.333986][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11585'. [ 1360.339773][T25487] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.360102][T25487] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1360.369419][T25487] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1361.629556][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.637504][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1362.427276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.912204][T15489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1363.083485][T15536] netlink: 'syz.2.11590': attribute type 1 has an invalid length. [ 1363.115940][T15536] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1363.123675][T15539] __nla_validate_parse: 1 callbacks suppressed [ 1363.123694][T15539] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11591'. [ 1363.191267][T15536] veth0_to_bond: left allmulticast mode [ 1363.204531][T15536] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1363.266359][T15541] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1363.275863][T15541] bond6: (slave bond7): Enslaving as an active interface with a down link [ 1363.285711][T15539] tipc: Resetting bearer [ 1363.353027][T15543] netlink: 'syz.3.11594': attribute type 1 has an invalid length. [ 1363.392112][T15549] syzkaller1: entered promiscuous mode [ 1363.395937][T15543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1363.404910][T15543] IPv6: NLM_F_CREATE should be set when creating new route [ 1363.417037][T15549] syzkaller1: entered allmulticast mode [ 1363.557785][T15575] netlink: 256 bytes leftover after parsing attributes in process `syz.3.11598'. [ 1363.606415][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11597'. [ 1363.620141][T15544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.727993][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11600'. [ 1363.778067][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11600'. [ 1366.666494][T15586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1366.826895][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 1366.834946][ C1] lec:lec_tx_timeout: lec0 [ 1366.841573][T15618] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11608'. [ 1367.083044][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11612'. [ 1367.097141][T15639] 8021q: VLANs not supported on ip6gre0 [ 1367.283499][T15653] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1367.402902][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11620'. [ 1367.487149][T15659] ip6tnl0: Caught tx_queue_len zero misconfig [ 1367.501109][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11620'. [ 1367.533260][T15659] netlink: 'syz.2.11620': attribute type 1 has an invalid length. [ 1367.553603][T15673] openvswitch: netlink: Message has 1 unknown bytes. [ 1367.561090][T15659] netlink: 'syz.2.11620': attribute type 2 has an invalid length. [ 1367.569712][T15673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1367.575997][T15659] netlink: 'syz.2.11620': attribute type 1 has an invalid length. [ 1367.594855][T15680] netlink: 'syz.2.11620': attribute type 1 has an invalid length. [ 1367.637781][T15659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11620'. [ 1367.728100][T15687] netlink: 'syz.1.11628': attribute type 21 has an invalid length. [ 1368.054339][T15715] netdevsim netdevsim4: Direct firmware load for [ 1368.054339][T15715] failed with error -2 [ 1368.076201][T15715] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 1368.076201][T15715] [ 1368.202325][T15721] syzkaller1: entered promiscuous mode [ 1368.219383][T15721] syzkaller1: entered allmulticast mode [ 1368.254266][T15726] Bluetooth: MGMT ver 1.23 [ 1368.610925][T15742] tipc: Failed to remove unknown binding: 66,0,0/1877992284:2215648300/2215648301 [ 1368.621343][T15742] tipc: Failed to remove unknown binding: 66,0,0/1877992284:2215648300/2215648301 [ 1368.955391][T15755] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1368.965311][T15755] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1369.004660][T15759] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11646'. [ 1369.040717][T15761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11647'. [ 1369.139940][T15770] macsec0: left allmulticast mode [ 1369.148901][T15768] macsec0: entered promiscuous mode [ 1369.150324][T15770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.163803][T15768] macsec0: entered allmulticast mode [ 1369.400472][T15783] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.11652'. [ 1369.672084][T15795] FAULT_INJECTION: forcing a failure. [ 1369.672084][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.733619][T15795] CPU: 1 UID: 0 PID: 15795 Comm: syz.1.11655 Not tainted syzkaller #0 PREEMPT(full) [ 1369.733646][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1369.733657][T15795] Call Trace: [ 1369.733665][T15795] [ 1369.733673][T15795] dump_stack_lvl+0xe8/0x150 [ 1369.733704][T15795] should_fail_ex+0x412/0x560 [ 1369.733736][T15795] should_failslab+0xa8/0x100 [ 1369.733762][T15795] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 1369.733785][T15795] ? __alloc_workqueue+0x8ec/0x1e90 [ 1369.733807][T15795] __alloc_workqueue+0x8ec/0x1e90 [ 1369.733841][T15795] alloc_workqueue_noprof+0xe3/0x210 [ 1369.733865][T15795] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1369.733890][T15795] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1369.733916][T15795] nci_register_device+0x3ff/0xa00 [ 1369.733949][T15795] ? __pfx_nci_register_device+0x10/0x10 [ 1369.733976][T15795] ? __raw_spin_lock_init+0x45/0x100 [ 1369.733997][T15795] ? __init_waitqueue_head+0xa9/0x150 [ 1369.734019][T15795] virtual_ncidev_open+0x129/0x1a0 [ 1369.734043][T15795] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1369.734067][T15795] misc_open+0x2d5/0x350 [ 1369.734097][T15795] chrdev_open+0x4cd/0x5e0 [ 1369.734123][T15795] ? __pfx_chrdev_open+0x10/0x10 [ 1369.734145][T15795] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1369.734171][T15795] ? __pfx_chrdev_open+0x10/0x10 [ 1369.734192][T15795] do_dentry_open+0x785/0x14e0 [ 1369.734232][T15795] vfs_open+0x3b/0x340 [ 1369.734252][T15795] ? path_openat+0x2df0/0x3860 [ 1369.734281][T15795] path_openat+0x2e08/0x3860 [ 1369.734311][T15795] ? __pfx_stack_trace_save+0x10/0x10 [ 1369.734330][T15795] ? stack_depot_save_flags+0x33/0x810 [ 1369.734362][T15795] ? __pfx_path_openat+0x10/0x10 [ 1369.734378][T15795] ? __x64_sys_openat+0x138/0x170 [ 1369.734402][T15795] ? do_syscall_64+0x14d/0xf80 [ 1369.734423][T15795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.734450][T15795] ? __lock_acquire+0x6b5/0x2cf0 [ 1369.734477][T15795] do_file_open+0x23e/0x4a0 [ 1369.734502][T15795] ? __pfx_do_file_open+0x10/0x10 [ 1369.734540][T15795] ? _raw_spin_unlock+0x28/0x50 [ 1369.734558][T15795] ? alloc_fd+0x64b/0x6c0 [ 1369.734591][T15795] do_sys_openat2+0x113/0x200 [ 1369.734618][T15795] ? __pfx_do_sys_openat2+0x10/0x10 [ 1369.734646][T15795] ? ksys_write+0x242/0x270 [ 1369.734666][T15795] ? __pfx_ksys_write+0x10/0x10 [ 1369.734681][T15795] __x64_sys_openat+0x138/0x170 [ 1369.734698][T15795] do_syscall_64+0x14d/0xf80 [ 1369.734710][T15795] ? trace_irq_disable+0x3b/0x150 [ 1369.734720][T15795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.734730][T15795] ? clear_bhb_loop+0x40/0x90 [ 1369.734742][T15795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.734752][T15795] RIP: 0033:0x7fc5fa19c819 [ 1369.734762][T15795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.734771][T15795] RSP: 002b:00007fc5fb088028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1369.734783][T15795] RAX: ffffffffffffffda RBX: 00007fc5fa415fa0 RCX: 00007fc5fa19c819 [ 1369.734790][T15795] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 1369.734797][T15795] RBP: 00007fc5fb088090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.734803][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1369.734809][T15795] R13: 00007fc5fa416038 R14: 00007fc5fa415fa0 R15: 00007ffe46be7988 [ 1369.734825][T15795] [ 1370.815322][T15831] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11665'. [ 1370.878322][T15836] netlink: 'syz.3.11667': attribute type 1 has an invalid length. [ 1370.921889][T15836] bond1: (slave geneve2): making interface the new active one [ 1370.930705][T15836] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1370.940391][T11089] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1370.944030][T15836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11667'. [ 1370.953552][T11089] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1370.984430][T11089] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1371.007745][T15836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1371.015454][T11089] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1371.120048][T15847] netlink: 'syz.4.11669': attribute type 8 has an invalid length. [ 1371.132076][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11669'. [ 1371.180799][T15847] bond0: entered promiscuous mode [ 1371.194378][T15847] bond_slave_0: entered promiscuous mode [ 1371.230052][ T5157] block nbd2: Possible stuck request ffff888027148000: control (read@0,1024B). Runtime 90 seconds [ 1371.242508][ T5157] block nbd2: Possible stuck request ffff888027148200: control (read@1024,1024B). Runtime 90 seconds [ 1371.253781][ T5157] block nbd2: Possible stuck request ffff888027148400: control (read@2048,1024B). Runtime 90 seconds [ 1371.254415][T15847] bond_slave_1: entered promiscuous mode [ 1371.265572][ T5157] block nbd2: Possible stuck request ffff888027148600: control (read@3072,1024B). Runtime 90 seconds [ 1371.322269][T15847] gretap0: entered promiscuous mode [ 1371.357727][T15847] gretap0: left promiscuous mode [ 1371.380512][T15847] bond0: left promiscuous mode [ 1371.402241][T15847] bond_slave_0: left promiscuous mode [ 1371.413925][T15847] bond_slave_1: left promiscuous mode [ 1371.523882][T15877] syzkaller0: entered promiscuous mode [ 1371.533927][T15872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1371.534941][T15877] syzkaller0: entered allmulticast mode [ 1371.814924][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11680'. [ 1371.876645][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11680'. [ 1371.888120][T15903] netlink: 'syz.2.11680': attribute type 22 has an invalid length. [ 1371.938402][T15903] netlink: 'syz.2.11680': attribute type 22 has an invalid length. [ 1374.352096][T15868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1374.539422][T15907] netdevsim netdevsim3: Direct firmware load for t failed with error -2 [ 1374.564847][T15907] netdevsim netdevsim3: Falling back to sysfs fallback for: t [ 1374.598728][T15916] [ 1374.601095][T15916] ====================================================== [ 1374.608114][T15916] WARNING: possible circular locking dependency detected [ 1374.615140][T15916] syzkaller #0 Not tainted [ 1374.619558][T15916] ------------------------------------------------------ [ 1374.626575][T15916] syz.4.11686/15916 is trying to acquire lock: [ 1374.632728][T15916] ffffffff8fd4d0d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1374.642078][T15916] [ 1374.642078][T15916] but task is already holding lock: [ 1374.649441][T15916] ffff888057038870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1374.658867][T15916] [ 1374.658867][T15916] which lock already depends on the new lock. [ 1374.658867][T15916] [ 1374.669271][T15916] [ 1374.669271][T15916] the existing dependency chain (in reverse order) is: [ 1374.678293][T15916] [ 1374.678293][T15916] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1374.686301][T15916] _raw_spin_lock_bh+0x36/0x50 [ 1374.691580][T15916] nr_rt_device_down+0x153/0x860 [ 1374.697027][T15916] nr_device_event+0x137/0x150 [ 1374.702296][T15916] notifier_call_chain+0x1be/0x400 [ 1374.707916][T15916] __dev_notify_flags+0x16d/0x310 [ 1374.713442][T15916] netif_change_flags+0xe8/0x1a0 [ 1374.718894][T15916] dev_change_flags+0x130/0x260 [ 1374.724248][T15916] dev_ioctl+0x7b4/0x1150 [ 1374.729083][T15916] sock_do_ioctl+0x23e/0x320 [ 1374.734204][T15916] sock_ioctl+0x5c6/0x7f0 [ 1374.739039][T15916] __se_sys_ioctl+0xfc/0x170 [ 1374.744134][T15916] do_syscall_64+0x14d/0xf80 [ 1374.749253][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.755649][T15916] [ 1374.755649][T15916] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1374.763452][T15916] _raw_spin_lock_bh+0x36/0x50 [ 1374.768744][T15916] nr_rt_device_down+0xbe/0x860 [ 1374.774105][T15916] nr_device_event+0x137/0x150 [ 1374.779372][T15916] notifier_call_chain+0x1be/0x400 [ 1374.784997][T15916] __dev_notify_flags+0x16d/0x310 [ 1374.790527][T15916] netif_change_flags+0xe8/0x1a0 [ 1374.795970][T15916] dev_change_flags+0x130/0x260 [ 1374.801336][T15916] dev_ioctl+0x7b4/0x1150 [ 1374.806180][T15916] sock_do_ioctl+0x23e/0x320 [ 1374.811306][T15916] sock_ioctl+0x5c6/0x7f0 [ 1374.816214][T15916] __se_sys_ioctl+0xfc/0x170 [ 1374.821339][T15916] do_syscall_64+0x14d/0xf80 [ 1374.826435][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.832844][T15916] [ 1374.832844][T15916] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1374.840727][T15916] __lock_acquire+0x15a5/0x2cf0 [ 1374.846089][T15916] lock_acquire+0xf0/0x2e0 [ 1374.851010][T15916] _raw_spin_lock_bh+0x36/0x50 [ 1374.856280][T15916] nr_remove_neigh+0x25/0xe0 [ 1374.861407][T15916] nr_add_node+0x1e41/0x2630 [ 1374.866506][T15916] nr_rt_ioctl+0xe59/0xf90 [ 1374.871447][T15916] sock_do_ioctl+0x101/0x320 [ 1374.876547][T15916] sock_ioctl+0x5c6/0x7f0 [ 1374.881381][T15916] __se_sys_ioctl+0xfc/0x170 [ 1374.886502][T15916] do_syscall_64+0x14d/0xf80 [ 1374.891604][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.898002][T15916] [ 1374.898002][T15916] other info that might help us debug this: [ 1374.898002][T15916] [ 1374.908210][T15916] Chain exists of: [ 1374.908210][T15916] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1374.908210][T15916] [ 1374.922006][T15916] Possible unsafe locking scenario: [ 1374.922006][T15916] [ 1374.929439][T15916] CPU0 CPU1 [ 1374.934787][T15916] ---- ---- [ 1374.940134][T15916] lock(&nr_node->node_lock); [ 1374.944880][T15916] lock(nr_node_list_lock); [ 1374.951978][T15916] lock(&nr_node->node_lock); [ 1374.959245][T15916] lock(nr_neigh_list_lock); [ 1374.963904][T15916] [ 1374.963904][T15916] *** DEADLOCK *** [ 1374.963904][T15916] [ 1374.972030][T15916] 1 lock held by syz.4.11686/15916: [ 1374.977231][T15916] #0: ffff888057038870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1374.987045][T15916] [ 1374.987045][T15916] stack backtrace: [ 1374.992927][T15916] CPU: 1 UID: 0 PID: 15916 Comm: syz.4.11686 Not tainted syzkaller #0 PREEMPT(full) [ 1374.992941][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1374.992949][T15916] Call Trace: [ 1374.992954][T15916] [ 1374.992959][T15916] dump_stack_lvl+0xe8/0x150 [ 1374.992977][T15916] print_circular_bug+0x2e1/0x300 [ 1374.992996][T15916] check_noncircular+0x12e/0x150 [ 1374.993012][T15916] __lock_acquire+0x15a5/0x2cf0 [ 1374.993030][T15916] lock_acquire+0xf0/0x2e0 [ 1374.993042][T15916] ? nr_remove_neigh+0x25/0xe0 [ 1374.993058][T15916] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1374.993069][T15916] ? nr_remove_neigh+0x25/0xe0 [ 1374.993082][T15916] _raw_spin_lock_bh+0x36/0x50 [ 1374.993094][T15916] ? nr_remove_neigh+0x25/0xe0 [ 1374.993107][T15916] nr_remove_neigh+0x25/0xe0 [ 1374.993121][T15916] nr_add_node+0x1e41/0x2630 [ 1374.993136][T15916] ? nr_call_to_digi+0x126/0x1b0 [ 1374.993156][T15916] nr_rt_ioctl+0xe59/0xf90 [ 1374.993181][T15916] ? kasan_quarantine_put+0xbb/0x1f0 [ 1374.993203][T15916] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1374.993220][T15916] ? apparmor_capable+0x126/0x170 [ 1374.993234][T15916] ? capable+0x88/0xe0 [ 1374.993247][T15916] ? nr_ioctl+0x1b1/0x3b0 [ 1374.993259][T15916] sock_do_ioctl+0x101/0x320 [ 1374.993275][T15916] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1374.993289][T15916] ? do_futex+0x395/0x420 [ 1374.993305][T15916] sock_ioctl+0x5c6/0x7f0 [ 1374.993320][T15916] ? __pfx_sock_ioctl+0x10/0x10 [ 1374.993334][T15916] ? __fget_files+0x2a/0x420 [ 1374.993343][T15916] ? __fget_files+0x3a0/0x420 [ 1374.993351][T15916] ? __fget_files+0x2a/0x420 [ 1374.993360][T15916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1374.993374][T15916] ? __pfx_sock_ioctl+0x10/0x10 [ 1374.993388][T15916] __se_sys_ioctl+0xfc/0x170 [ 1374.993401][T15916] do_syscall_64+0x14d/0xf80 [ 1374.993415][T15916] ? trace_irq_disable+0x3b/0x150 [ 1374.993424][T15916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.993439][T15916] ? clear_bhb_loop+0x40/0x90 [ 1374.993459][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.993478][T15916] RIP: 0033:0x7f489759c819 [ 1374.993496][T15916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.993506][T15916] RSP: 002b:00007f48984b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.993519][T15916] RAX: ffffffffffffffda RBX: 00007f4897815fa0 RCX: 00007f489759c819 [ 1374.993527][T15916] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 1374.993534][T15916] RBP: 00007f4897632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1374.993541][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.993547][T15916] R13: 00007f4897816038 R14: 00007f4897815fa0 R15: 00007ffedfcb1a88 [ 1374.993558][T15916]