last executing test programs: 6.109615273s ago: executing program 4 (id=6119): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ee, &(0x7f0000000300)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000004) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000005142106000000000000000008000100000000000800e5f2fce600000800010000000000f800000000000000080001000200000008000380040000009a1080616a6f073bbbaf877396f22092a7cfd36ea73f977bcd7e75f280f4025939ecdd0082405c7653cab2ad1b5b33feb525bf37948b299d89b61d7d19cd497c606b2f0237a506c46f3f145cf4591552e59b23757af4dfd6"], 0x40}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 5.87717289s ago: executing program 4 (id=6124): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0700000000000000050005000000180003"], 0x44}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x5e, &(0x7f00000002c0)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "08ae00", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ae5fe43241c6803e18000000000000000000009f2f212d7e9784870000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) 5.658117338s ago: executing program 4 (id=6128): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x2404c0c5) r1 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x80, 0x800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x2cdb, 0x5, {{0x50, 0x4, 0x2, 0x1, 0x140, 0x64, 0x0, 0x18, 0x29, 0x0, @multicast1, @local, {[@cipso={0x86, 0x76, 0x3, [{0x5, 0x11, "4e74d0074e69e52cf7077f8961b8b1"}, {0x2, 0xc, "83eaabb27a75794bf004"}, {0x2, 0x5, "ffea10"}, {0x4, 0xf, "e8303ef29d32741ca7bf4b6e68"}, {0x0, 0x2}, {0x2, 0x11, "73df16aa690df435ae03d44b390efe"}, {0x6, 0xc, "ee64735440fe2f287585"}, {0x2, 0x9, "1668dcb77bee8c"}, {0x7, 0xc, "efe50678a73045b6f9b7"}, {0x7, 0xb, "2ec50b3857b613a85d"}]}, @noop, @generic={0x82, 0xe, "61f313ed2ccf009795d2e38f"}, @timestamp_prespec={0x44, 0x2c, 0x38, 0x3, 0x9, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@empty, 0x835}]}, @end, @ssrr={0x89, 0x27, 0x5b, [@empty, @multicast2, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @loopback, @local, @remote]}, @timestamp={0x44, 0x10, 0x8c, 0x0, 0x7, [0x6, 0xd82, 0xfff]}, @generic={0x7, 0x10, "de0f7683ee0311d689c276f64a6a"}, @timestamp={0x44, 0x2c, 0x82, 0x0, 0x2, [0xb401, 0x8, 0x48, 0x8fd, 0x8, 0xa654, 0x14000000, 0x5, 0xfffffffd, 0x10]}, @ra={0x94, 0x4, 0x1}]}}}}}) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'gre0\x00', 0x0, 0x0, 0x8000, 0x160c, 0x2, {{0x19, 0x4, 0x3, 0x19, 0x64, 0x67, 0x0, 0x90, 0x4, 0x0, @remote, @multicast1, {[@timestamp={0x44, 0x8, 0xc1, 0x0, 0x8, [0x2]}, @timestamp_prespec={0x44, 0x3c, 0x87, 0x3, 0xa, [{@private=0xa010101, 0xfffffffe}, {@rand_addr=0x64010100, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x16b74ffa}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x401}, {@rand_addr=0x64010101, 0x4}, {@local, 0x3}]}, @lsrr={0x83, 0xb, 0x26, [@broadcast, @private=0xa010102]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x88}}, &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0xfc, 0x80, 0x4, 0x61, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0xf800, 0x20800000, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x40, 0x80, 0x4, 0x5, {{0x14, 0x4, 0x3, 0x9, 0x50, 0x64, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xb, [@multicast1, @private=0xa010100, @empty, @private=0xa010101, @local]}, @timestamp={0x44, 0x24, 0x34, 0x0, 0x9, [0x800, 0x88cc, 0x9b, 0x10000, 0x8001, 0x10001, 0x6, 0x6]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r2, @ANYBLOB="000429bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="0801028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000300cd09060000002570f705040000000600ff7e08000000000406970400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="f40002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="8000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040004000507040000000800095300000000"], 0x2a8}}, 0x4040815) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000700), 0x4) 5.523197041s ago: executing program 4 (id=6132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x40010) 5.345360408s ago: executing program 4 (id=6133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f000000a500)) r1 = socket(0x22, 0x2, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0xac, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x88, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}]}, 0xac}, 0x1, 0x1000000, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x7101}) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x2b}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}]}}]}, 0x48}}, 0x4000) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x25dfdbfe, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x8000000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x2070bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0x2}, {0xfff1, 0x1}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r10, 0x6, 0x11, 0x0, 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) connect$rxrpc(r11, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x24000800) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000000)=""/69, &(0x7f0000000080)=0x45) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@bridge_newneigh={0x98, 0x1c, 0x10, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x44, 0xc0, 0x1}, [@NDA_VNI={0x8, 0x7, 0x6e}, @NDA_FLAGS_EXT={0x8}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_MASTER={0x8, 0x9, 0x2}, @NDA_FLAGS_EXT={0x8}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_NH_ID={0x8, 0xd, 0xf}, @NDA_FDB_EXT_ATTRS={0x34, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xc}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5e}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xef}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xbf}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, &(0x7f0000000800)) 5.018683106s ago: executing program 4 (id=6137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xd, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xb, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$packet(r8, &(0x7f0000000140)="bad386dd", 0x4, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) 1.886123963s ago: executing program 3 (id=6183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x6c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}}, 0x4040015) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="f5568b32"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008890}, 0x20000040) getsockopt$packet_int(r5, 0x107, 0x8, 0x0, &(0x7f0000000140)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r12, 0x0) syz_emit_ethernet(0x96, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x60, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x7, "9595f429ae08a565c9a41d413a70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c692056"}]}}}}}}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r13, 0x12, 0x7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000950000001f000200"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffe, 0x20}, 0x10}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 1.844056936s ago: executing program 2 (id=6184): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00df6727bd70000000000007000000", @ANYRES32=r4, @ANYBLOB="80008e040a000200aaaaaaaaaa0c"], 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) 1.681198408s ago: executing program 3 (id=6187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000180)={0x22, 0x9, 0x9, 0x6, 0x1, 0x81}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 1.631652039s ago: executing program 0 (id=6188): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) socket$pptp(0x18, 0x1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0xff, @local, 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000001300)="208a32038484d9c04212e87628cb3573bba35bc38e5428077063eb5b5e5252d3b4346e382d7f9eda5e427fbbf181c7b416a99d12bec7ec8f02100f9515a752b7bc8646e818b9590d192d2daf8f14f2ca68d1cad9eaa36a45bf71a98d33374a211897207c3e0ce76f38b93eb2fc557bde920370439e416ba5cc4bd73b9367b29af0981e67a190351eb79cb7de6cc4604d16f19c648fdeeb2366de1f8ab9ba4662c9f72916c3d6674eafe3efd1bad32e8bdb73387b8203990b42c3901dafcc9da46a4abf9a866b79c2625f3fa99ab4097c1e610316dcc01e7b0ee85fd234bb9fa4a847af99c9e6ea56cb24f9de01667926d0ff985f85b925b5d9a125d59e5fbe7af9ced2cfe77354034f1e5fa6910ca91cc51d4b47cb940ed89797d6a2cdaa2c86971f9ea5f09a633dfab42e35e9841d8cb571fb8af247d59a32bf11db9f0679ec922b8fffe8f3f3f8ff00e90cc3207241f3cc4def355b0f326bd03f49429196bb6262726dc82e6191882fc7cd6b1e8ca9cc1cc45c844109c8db2865a4fd84a418b1fcc8b12a34cbbe923dd6d82083bf77ad2c887f1bb188e5c205c6dc7dba0e7abbff574724b916beda7ca6de6bd4bf2655293906be156932e010e2279368a79773dcd8b1ba52636535142fffce554e05890c1f7d4cecc2b9d4eb700ce8f793a483e8d56a142e9d2d82dd9a4697fd6afc40eef5902147f61a107c57a1db5260d9bacbb312d140291bba7273cf904bf70f3a96f8517989597fa949135e92437f38fd4026d93f3e20fd91a298589fb5844f74a3c2e4c5566387e7f4d4680472eb70690ad98a697f34ea6edc86612354373a7b339c2a52ec6283780fff6afb12f292cc25d0d2740f1c5245534668157704515ebe2601c1f135d1f4738a2620bef240dd3b54f2dc231c680a5be45726c539bbc24f0f877916c3cecea1d2ec7f733a7bfdf414a03874bea112f0b455f06f84774b85d942eb8efed530840ad915b6f6d7be75a67812a584a1ec1ec3df7c0e46399be41f76f226f730b00c50c26680f03f9ea873c00d810a79558ccadcd04944a9951f4c64480051040ba1675400dd5f33f46a04b8668896a5feff4e11740ade3b4df24736156b4c6bde4a8f229c2df06259fa307ebdf34bbbdfe8f3ae139bbf9e9a0056029a5eba2ee5f174cc133f592d97233d8bcaafac2face0d2d6ce7d99bb70016a5f448e350d8b94b224c0e2ce31094e02849ea6efb2a1d8b69076a42eb7b0176d9b6682e7b3e91bf5141241fd9b70fc63169b252e308622a974aa3d4aa7b2d9c54639b2be4f271c36835d9fb1cce6524ff77b6d0ec3ceb8ae960cf2b52e484be34afc48a72a725139f7e7872ae7dabef2a1704c1f8604f75175f8a15fc3f382d22bb91c6d60ca52c3c0632127f73663964aaabee48a6d87e4704626f79d6b26278f729667cd7f1b694796dfc300a9ed67711d5fbe2b80b17fd329c004b55d2d70c2ced0bb76b6e027e1791ca1521725a4028879d081800e495d78ea33796f78777d6b7fac20a74ff4dca5a63f43876f6b6b31378b3c0b80370bc97e3c991b8cb45fd3c0cabdab0382ad292f57538723133ba06daaf07ffe634270b8f109c701a07c0df72699fbb53648d3f6dd2bf8d7f1acda87807855817395c99791723f33e0286dffad15245a8aade696adb3b18b632ec66d9c2d2bae7d5ad795da2dff837ca1e3ddf087d3cd23aaa8ff848153181d5759189bec7db8b94f6febd889a500bfb493a61e14fa8f1d7134eae23dfe4774af4fd58478bbaea9e9869cdcea4745ea0f616e8cb32c407364e480a1f49280c75f04313779bd347059b71b570f85822f52ff1c34efaf8a8a95892097c22b03a582675371a89579bfa4f0c0553c36379c962880a9808ed0d1b0de6829d222e33985fe76f902ad712cc525ea50d562d3d4b36b823c96de73d438e929b130031f451be86966c8bcfa15f7b7076ba546ce5929a6ecd9893b0f21ff70611a4b03f8805d7059b20582ee6349e49394772c4fd98b0a95b56569ca4e87d423c428967cbeabd81a2e59f6f631592b80511db51ceba7bdfc7a28c1ded33e3ca5c6e37c02071a48d38f915f895e9a4fd6b63599c0b484da41cb840773cdcc906d87498509175bd9c1d6a437a303c8af7e929516c38dad610d25ac94f13207893768c33c963c657c70315a6cdbd7805799aeea3f75cac3a8ab5ba9cbf72b58e0e20231cd78249f9f1fa339e601008236e9e38b45fe2f5f9fd5b33bfa583a23c617b78ca0cd8247550c0b1707734017d6d50694f94972ac1b6543781d16b8c2a4e8ebf9c2c944f2132aaebc475d47fef9eede0f5d74e213eba4e01ca9e4db8f13595a83cbead0e2a2776e5997856d99e9a4db8ac47a75ebdc1d79595577ca09f023d61be797ba0ac395d2c1e6a1d6180511bddfb54adc916ba2d7da5c78a35a8983d4d841c8578b1567ecfa26242144f62eaf8de51c7f15126e6d8a4796d132902c01af0c8b6d8f0b5bba21067b08976322dfc77c6631845a86d7fbffc250ea5e5d32442079f2541bfe3a505b124b099c64656846b83820426df704288f85807fdb1b02025dcd24db4397d86284469a44b96ba8328d2cb745bd349dc90473346d1926e2d2b9ad7e35234d6ee9a442c0bfa301ffd18adce3b5e1c037587bd7259878ca9815c0a977dd52df00ac8e6f70defcf8707cf11c440e47195e47d2f2d11e90b00a1303f749675c4c75966888cb4f699591ba6781f8634bf8fc2a68354b021376fd6dfeff7462d61f26cb813ceff441f939efbb4b268dff2cb035bbdac041b741c1fffa65c4fbd26b94d471705b62f4281aa79bf2fe77eff02709482391a5117ab2866579ef6fc574ef79aae0b5c625a32efee5167824c1c124ec5402ddbb274b75443b110a9e89dfcdf1301c7c6ab07be7600b21af509626fb2f2e5088af6247e26b4ed380f4d2ff578e8729d4563611b4c3b7e1a866a7c79f4b2f51d708cc03f1b149e905781c626b40cccd23b3ffae3ca660670f8b5ad0e25f1babccf828663e950ef05953e73c2c132ffb2ebe46620a0edf83512238fcaaf7d8e75052e12dc6e9a091bb64b181005f475429ba011bf6094262961f1a9847ced08b4fe306f5365e3caed6056f63ff6f6b7f0c2108a87046e0ab1bd9a64e3d3d8443e1d8df3bbc0234ad5e503bbc740d7cb9d3ae20c69f35e10e5068dbef1478b00083b5bc77f305787e9475e64987ac76e20d36809b3f2dfb51560de81fc96743b4d0d99d418bc5b9f0da0ef783a7c6c26c07ee780700c020cd7dac75643c46958ba5ff3f89bcb0b79736163c904d20507347b75ef02cffea64e6ef615c46ee5fb9ba0158e51d3f3146ed0320c8ce1a54c7b4f9e7938058e3cd448c5017612d91b62c80e543cfb698b4830dc6aa2bf5ab2548305d91adf7cd2f33c74bec65bb98af7b0ad9496568db045e94ba115e2f3e732b0abe895f531557d779984f4a05d37cc242e1e4eeafb6c097b96d8982ec10904bf2e505c7c03b2064b7c5a7bb7b47901784eca1bd30f058886db9a7fbccacf422ddd050b7ae1e79bca66a990346004ed8645f2bdaa22c2b75adb550857d017b50ed4a4d325b8671e1e06de273f0e2c2e420ad7e093e2d6fb42c2c0fea4aa333a811d3d6314610df7eda3aa7b863a183aebf303906fb26e5c850180939aeb6f1ee99285a3058a2b60e2507649a9544e219583211779278dad3ab6351d6f0ce157fe0a586e40356a96baec445b5231d3282dc455dd8bb69ed6bce6c1d09924a0e21dcfccda3dbd748041934c2da594633d5ab7740fcfccb4e2405c6a37aece56d06b11b8e0d1d49846a065c595d8e80157bf70daf3ba83d1bd0f3db049017d3f630c1f11d8a4f17c64cf1894fe89e98dc887459239bd5b094734cf4f2baea77764f5ee7f6b09cb3417ac16a649fd4b3fd47030b9639573fdadd6e286bf94b9b2908da8055341c05c24a9045fc1f5508505f56e281ac6e0a5c7751436d52de6feee3edc81dc4eae948495a7b6a4c6f8e850b884c90d866f36f2fb996aeb5351c7432cf85cf6ee80a774da33f2c81e9af3aa6aa101b5fa9d6362bf46f8e10117751189af4713e72e3cfe7bcca2db819a59eef1c21304c9df330b863316b0b78902421fae4461df988e79ae132a8649f1eef0d6165b97d5b720e5f41aa81e22acd8deb349ba43fe660b13d86620c91daa69f6e5e9738cd3e6436878bce2a74b255350f638a8d081f7681a7200b3d3222ceff761505c0d423039ad4129cb44594c3e00de605061a6904e35cbe3959ad539af28129a84c5e8ba112d635d3c893dd47de07058d6aea4fae175376bd7271ccc85d6ceabe6f05ebdd9d7cb719c7e82fe55443445ca941e78f6e143cf8fee8996e8772d08f854db54272b602017736f963b163dcd8033ef7dfb0159a539af5b583f4d991fa60729a137f2402f4c4a98365ff27f1f84276e61ab81699d7e27ef3d35c72c618feaf6be297fc13ccb4785c4c4db0c3f353765c7c720bf20aeaceacfb3ee45134eb4143de5137b2ea6b571a910c8835bb96111f11813466a54417260ce6e61d451236b8c0335ca1d738fd5ff0257f14e57b3c24e8d0e54bd0844e91e4d81154c06349720ce14f133e14cf7c30f0db73e2a99cab6b08b408d5760e8bc8998b84260202e5b729e92261b34592c0a0a49cb7b569a8100c18328e315714f3c2d515b5c813286a7f0a2e7a4d8a44c3f81f5d0749be1db1298e05070266800c6dc89c67f87ff27c02bb082eb2e9600fbde659c73f2201f6bd332066a04beaf7aab46e73125b7ed1bd1e3d054de690df8cce59e72e7c775c5e0f6aff131ab2d4c4560a72a4b1804291095a0729c0eee1b7493ae4dde999b32bf2777e182307e258d5fc53ccb96accac2ba2a1c01feb212d0e6921a2d34bba2bf577de6c55065537b799511b40e8563d76a3f4b6568f782580db8e84851a87a8f027ce9051a2fedf42a14431193055a03317b7dbfcdeb606d3f69ade5cd259a6c382bca2b4ee6b3e51412c60040ebaca495e8ab7a0db18b3ce272965e96396f5af4b2ff28eeb322fff3bd585f3cedf9797e75d02e3ad49022560a3bde789a9129f156bac6f58433a0e241edc6cc2b8853c2bba4c962a611953cea3816184d6d8c1f461dc05835291e68ea625cbc314ccf207e9fa7e93c9ffb041d95e620a952433dbb0761aaeed4b768dc9ed195a14d9162832e84300061708b3b3b48c40ef57ce0258efc32f765488d9c031922c0b6a2ef3eeb51287b84535ae0092c3991ae1477f3c9675a3e0fabf08ca933de7cbdf2ee93b88efba067c29b0dbc8015aa06dd64d8573a929ebeaeb98da3eef68b283bbbcdc46ed9ef0aea235f5bb8e95a260933d018687f71d9a5807e1dc223a239158adee13bd45fbf4740dd83d7f1690ef31efa3a1deadc2ffd0133a601daa97f39686832d527e11b243e4b712a9db9ec4e3676bab94c8855b57e6c3ec2ff46bf925dd2a3b28a0481fadf1cdba88d8ca6c8e12a2c9d75ec3ec9e7ad0a56719adbffa22a8a76fc623f62d9e4310cedbcf2cff8138400f71559f14650aed86cc89a053ad283bbbdda70ca87ed6870acb84a3de1d2a9868506dcfb470ab32a60843ab5ffdb44250d3ed5cae4f18e23388e93e8a95943a9f09326cb4a8c15c119556381f4dcd2227542faf54a737470a9a46db492dfd563bc47f5d869b558d4944ecaac7dd7746628ae13524cf76c3d7a393a4fb39d5004dcff7c5abf601ae255b42ce0234fe2172a9242b0479a9b428dd661808371a431a127db28dc6281925", 0x1000}, {&(0x7f0000000180)="9226a5f93157", 0x6}, {&(0x7f00000003c0)="5f98bf7aa552871a6417d5cf505e54538816d042ff7cd1dc9a43678a4ace5851f1c420bf889a2f7be180df2a94de9a61d951d2c942a314cb18c942a5f0129113c8dfb908fe0e5c0a29153693a2f62232032337dead7267145c841bed59747bffb822f27730de29b6be5a9893fe17b631c65a4349c351c1ce996ac1c2ca6ac19e57f20db67ce0049fc1dabac5a264d4ea5575e3a64755dc46739012cd6809e3ae8d072366a7ba8914d0c3e7d114a0a63c1d9451a11f735c047c15415641db88103a4fe1cd399bbbac20cd3a75d8df690ee40108efe30dc298eaee", 0xda}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="4626fdd5cd855128e35cb78bd30b7155ed6d63be1e042cec885795ac9e9083d1cb0eb777553a55d8ce9a5a6e99adceb85d0981628fb399de78067dd206b6ddff320981c760eee3e1fb057467e144b90a18e0aa2c1ef703016b9d57a7f69feaf1d963460aa1710743d55d94becfe94861696491822256b9f48af92375918f0dea4ddbf9cf612d8819eeee8f86b15eed62dd82b419add39755724dbb93324dc8dec52e8e81bece72a6e4934252c7dcef9607389e09cbf815ce56c70b560adb2a444898e8860a4160fb111ede2ae821496c8c066053fbfafc0512e13c89a829e8fe67314ed4407bae913d773ebb5575334056195751216151837bae2e2fdd1d2f124928d13e25afd02ec7cc078e754c628dceea22f430de08e17999d7c103fd2d0049a657981f8ce3531af40df56fa15c3e0d39624dfbadfc2be56f55560a0e313a66b734962255013fea4f22fffc299afd316fa7de991aad03fc0418e5437c1898155d2959323fda595183e3c9cb51174683ff381ed1147083101fc8139e57e84c1147fe7ef7004372621df469c5703fcdc4f22bf3d1813a7b8673522736c230b73b691a80d5f9b3d6cd9e8a4942735e6d8eaea55681a577933e17f3ec62c6065c97d6535023440a5ca80286bc3ca795d09ee0570d831ea7dbe1d6490a5dc003c76cb2d43d9786f34d721b175e7d92dc89b3b0ac56226ef68cfa9cd0ab48ec8ead51410896401c134eddaf1e22346dd125a1afd443821831299ec38f83b168354aefa295bdbc0604d8083b6d8b3785e795b4c653dd824d5e3c8e6217e0a8c646886a81c997148ec031f528ab472a1a22a6c174b2a6854886e8e99e65785b9bb3e0242f457564eb439060b38febf1b5d20506781b485e5f2b63b1e72f815a4f23e3553b768d5926ed3e1d6b8d62c06d0f465693a98e3290dfbc79dff0fa1fa27071d645ba8ce2b5633680fada346befcd4897e5953877d9fa1f73254681e82d6537d0d5b946c789e94cf1d3d5c2d6ab286fc1285975a7dc399455cb78184c4992e3ab98afb83a0b3796c9705dfb694a22e14920cc82112edb669b2eaf4aab4671a2b842316a259414da1f3dee9787388395e5ef4bd38e56eb6a16e90629fe5eb119bd8a35de85e31343487dee78a5fbd5c1514ff590b7b90c16b945c415b420834ec7029b935931df9cb4cc1e6c56db069da2c1d3ebf966123be0245888655a2d6bcf92b2d85656774eb4f12cdbc4be2882ca472375546ccdbc2a387492e91eb61bac5d113bd541b34557bedc9f22b68d311cb788723a5552d3ae73c29871f2a775fd8a29cbe434d0c90b9bdeec24baa0a2e17e2453a78fb95f3a99df1db08488e2a6c13fc87752324ca356ee12d2ff73e93609f48a5b380cfa6bb9e67419bff739b6c0a75076ea4f9bb14a353d898c1756d5d78c813a7587be091c9793bd99015d4a64a1a27bc504a9042577f2be0ab400505d98b3109c2752f2122a515e8d951b6c39406f1898b2936d9da543d1942e50f91597b8fd2dbef41992884b38a9c24174258d8c17ab067e32d1a342a891a937ff7359bd024fbdda3885786759e48857deaa5813070cb4efebfe478cf53780ce1ba3d535f0888015114474de43f90818246004e07b5944d5f897c3ac17d0b46ae2003b9388337e41a86e9f8565693ff7b3e54e9d00fb8747fc5abbecb2939969eab031af146a1cb96871133a88d79ac5d127f4893fea201913c985d1d3828a8e5bc20a9d27a3b5e333d2d84861f6e3c924ad964db149772965f91ca7e229054ecd604edae055a7c87ba14454e0f9fded9c90636f369dab08b8e45103838be29943df9c197b76e477ce4ba75f1f234185d50aa4603cfae91825c8d400fc87fc5644c5aee74b522d075fe5b5f28d6377d9e8a9ced2c435c48864778df1955b8a0c6241a79ebbf311a2ace11c4f891a33617931de7e51162adc17271dff9fdc7a6e472a7de76af376cbd8f12745eba7503e5851825b1803cbc893ffbc19d919bb59671af0bc9a876ffe1abcad78cc9b1f7b6d7d9495c468d0330ec7daf5606c06e1b986d047031237676c54e22147dfff68fb9d8987058bb8d0ab954cd8f8b15a650cf59c49f50ca74a51885c6ff0899e37ec6cfddfdfdbe80ca21072fafeee28ff80ad20d1a2031c259c27918d9a8a9f03d9f62b320eb01eb264598e690e809bdf6cc1e40afeeffde5a1980201880b6e885b82a8146badc387cebc5d795f930c778eca94ff9848f454d20c3deebff4c1b317eb1524d29bedde5194223e7ea4ba4db0752b08474bf3cda4fc0b4b8a97b8d57103e32363c09c16c823d3db5a3d1a84bf12e4ee1b79691cef41797c8d35f7e6a7879996801c87e3687e35f8d919f74a53f00a8088d7f8e45a1b4af5c29c5a307ff5a70868a106a2d0beff560975d31eeec63a96e4824208b8862e33d9e9c4e58b1299d854b8022366b3e1d858c7ae1a0cd1d3790f85a1ca151f7390d201c97ec510d518a23ae29fe215347440a4f48037270086135d1d917a4195d7643ee6dbe5cf4b20cc294a19805714432033f389b30aa5409d2a6a862378941641a9456d06604a23f51f0910af2769d5841299c94a6520d0b72091f75aa605be70425c31252417454810725a4eefb41f17c4438e1365c5f67a7963698096e903387c9257dd14e461a6f253acb2f6008ed66c30fcb50d1c5e9947386a616f83f2fe9bc2f08e637220e804928fe5c34276038a8c3bac566fe5e8ad24e6c91e70c25c51f3e0f322c2ceb54c5f5c5ce70de0504da9bc71269362fb7943b284ec0e88703cd74d4fcd448cac0f5e5930d685ce0f54570b0f09f903ccca83da158df8cc80a805076c8e2deb7ddb4d34c9d2394da98d5b3199b6cd6fa01239fd5c908d00105f1f61fecbbdc5eee3912b595436f6446a1fa061b6164e330491b66d62795c23209cef273d92abcb55fb151c70508cc89b0f5162a3aa40309c6a5b980c96595f224a85364845ffaba02c3307cca104ad9842dcdf45f5ba4865350f82df7c4ea9b7c71c843f98d3a7982cc7c20f00f783d45cfe18c21fe351a3d8f544b4f8889944f58c7e5d21880c5ccf0627bfe9e3860b1350ba23630b69dd59659b22b2016bc43da327c27b4180d68c767bec5cee67169ea4551e2a0a1aa91a04586732977709221ac05449f62298900cd657c768c58ac1965f34bb6005152c4d9ba9521303073bfe93a99f792053aeec584a86d2e677f259f7760eb5c375c0a85014c7fcea04beda2640bf3510a6b409bc5ce69676e37e0e273961a14730ec49b2878710df084fabb2fb8f6b073527f76a4f3bd123d13ba8c1fab6a2306d1f10358f00228d911ad46238bc4c7a123c4c70cd80d6fd53a381ad36ce585dc831a7749ca40542937328ab2a66c2e4937eb66797239d829d417b262a7f35fe111f503f572641a1c941635f62e514025bb4881cae897c9b320e40f19f2dd8a89d542aad2c7e5926e23d3874d269ac1bdb38a7545042cac6ae525109edb8f5bbe33f0c0d65ef956bf96d7cb83980d1fd6d55ccfb59f50904a805d728ddb3e33e5a02f27b594ac604887b4ffad255a46498a41111dd1f559d9043e754028e8826443a770ac90de223d957e67bba44c40223d21c8f5df5184993c12f01b9a2baaf545938f6cae456d34d31cedb6cc50eb0a68a1c203856976436145fb4abfe5b358a103c85621cbb7928d8a736eee6347d7ea1e9e26edcaab0e8c3b38b30a75c5fb40f99ddfecd91361db4a14d6afbbd3ceef48bfbab92e8706134d5dec2799ac6754aec19e0f347bd1e8d68b8b9d54b8bfa273bc08fe3eedcb01ba3060aa216b06cb64d94b307e89fe5b84488369ed878d5d15bf74e312bf268bf1c7e6a8db21151eaba87d09fec818dcad791a1c0608ee8ab021b0d5d7269c7f8863ed71cd275d5639980f3e18e4dfa3484344a65bf400e612ab1653dd0d217d836725dddbe82bdfd4034c4df8a1ada336aaad0430f5eb3bab66367b874f9c27dad05a6c45e6d1c282b83c2f56c226bae81844ab0c5523f602f90be33aae195e4900297cccb23ddf426c6724b5a9f9f35a70854251fafe47769860b3502336c82d01d45a4a9a93d27f2feaa6ac6ae6ec3e9f34a65b80214becbf5c3954474b52bdcdaae0c43ed2838a61383bb72f1c00ce6d06e2d80cfed6db53c54b11618f9c64e636f5b06b8ab0a5ccbc1b27180f6857edbc2571d28edb9271a158a053c4367667b568ffca1aa7c46f89c5473bf66916b46e42c724690075151aa6e2189c209f00111d7bf71ae38ea59414efe3cab2a58e824ec1f2d295e7f470a6f7dc15c3a252361230d5d94390e572fbf63b30f504c09dc0af89aba645190768fa5386c2c3c5763c5fff29dbfc71b52fc236e673f36e68677c1ccc2e9238479cbfa152742d75e382def205531dc89db8438325ce4de63573c3063c8ee0603e6c7e8eae2878aa996dc4c63e95b813294ee59dc8a52fd8a6209a6cd7b5ab74ff3c3b45a6f9ec4a39505150d5c4db496d91a6991a6830749a0bcbde9784558de691b20a9051fc192cfca630be02af21758102a3ff1a1fd3d49a3d9855a94edcba86b635a43a910ae831fb6d238869625e8a6c023f0e4b4d17714cbea953678f18a85c4d5f33b702dc07ef3e8917c203144f12b40172bc1aad75c62b998eaf8793c302aae574e30628b3a9c8be476f3334ff30f637aa1c25cc23a9ce32fef305d885bb1cc722ccfb7968e1b4a8574eb22306311320344bdde18c353e79d9fdbd578c566ea66ed7e0e0359ec972f5c6a16660819f449ac7721c3f86efd8180e342c6ac57500a92573c4015beee610822cae271e1c31d4d315aeda53bff1ea0bfe8ea08e71c5a3858a34fc176c2f5a6dd794560e51f08f0230f545b58546e8bdd73ca84fbfe7637859e156be09ade9e0ccb29c4bbc0deac2816b7ee79478249b1fd4c5b4396c1c1be42e1f34d17ac4c9398366e19d21d2d9c5a143c22ca90047b5abb2c1b754fcdbf63deba02f4233c49fcadfd7685e2d90bde5b404ee05546b975e35b0a2507658e3106dd150ec4f5b5b92cadb02134d52af3b9a96389450c9108bd553052cae11c19ecbedc476075e7cdb1fc1a175ddd73b4e308d4ac51d6c6969052edd43cf346ceb5d834011f88f81d2377011114bed5a3fa238616f5afa47586e3c9762e6fd0d944d156023690d71301295f66a0579b334639b07952b399995987aa4eef5aa59520ec98d9bfe6bb12e40d764e5b911fde1a118d39ac182a57453f750d62df4f5b3d437bae864a15b9f703b758e2549adcdb46cfa889e4a2f29211ae9d486956bff3045262a3037c45eca637cee9be4c214b87c0c871639c865ceac98970e1d0326029497e17449b557424bdc1f956165f1f9ba47a3a7c1ab218cda67ca5a36cdaa8bf4c2f0b475d11850d9afbc604a3d8d4e06370a2b2c05d258f08f3ca4484ad126f7b9c10db3279af7e7821377eb2942db7a9717dd867725276d10d52cd0b3332d6f0652972080b88bc9204fffe9e1d2b1892cdeb1801354d4e265960442161de97af6b8ce9e2f46895464417f0cc9213e0b485f267ed606eb3f6d192700e32c2628435ee3ed5c9fc6abaad92ad38be5873d436789bbb34d84bf8dd3cda9f223807a8bd95162e905f5f33bfb9da011354ab41fd2e6a8ddb664f53c2eb3a91dbf29a3430b1acae856474d4cceb79c443652e03710263eb674dd4c2920642619be2c24ab66f4fdce1e7410ad27a94f0258db87eb809f5b766d9702233f97ef52ccb0035821946474376d38e8529cdba", 0x1000}, {&(0x7f00000004c0)="35eda5cbf4c7eef6e1904e2faccdaec6d5146fc9fbb4e75eac677381b746abe2e7eb6692e1996a8e2fa4fb412656c2a0d22ee3fe6f5a2e8a38da0b4221f4771ef19f4998e81125340ab851ef2814fada349e5c88cb53af0624f23b960ed50cb5d5661ce93ff7a1d97bed968c74f4be71b8dfacd95c0c9c117d9a46bf1d9e6c3a8bb47429d5612f8ab346e4", 0x8b}], 0x6, &(0x7f0000000580)=[@rthdr={{0x98, 0x29, 0x39, {0x62, 0x10, 0x0, 0xa, 0x0, [@dev={0xfe, 0x80, '\x00', 0x12}, @dev={0xfe, 0x80, '\x00', 0xd}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0xb0}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x8, @mcast1, 0xe0}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000640)="c8d207f19affc134b252503be0aa11638ded1e0456012cf3aae64ac878eee21645a05854385526c0b0c28d09f36df9018ea89e0d6603845eb1c90983fef7bdebf23a9eb2384a4a86de31d0aa97a11dc2b91f90d8c83770fb61a5ed624c86152d961e21ba3957c92cfc374715c05d22aeee3ef53ff6a706285a600cc0a7062dd232bc51bd735c32f52aaa874f2ef44abb6ded52fb1c", 0x95}, {&(0x7f0000000700)="2fa0df7b65ec41fb97486428b9303a98d802c6b9144273c8bb56715f4e67570534805e13f34e1b6da15ff8c3485983552d910dfd2b0682541c0847b3dc44d9a906956e90fa15ffbc52b33f1a6e4e6ba8cb5a6b15419d4f2af15c50b3c3f1db2c8c870ebe5c4e0513369fd17ca58955564359b94f3ba4e9eb684266f81628b83fecbc4808a2ba1a3496866c133121016275c32d910cefc1709b", 0x99}, {&(0x7f00000007c0)="7801762d8e297ed2b460379e5d4b2de59233", 0x12}, {&(0x7f0000000800)="6fff547aca361e1113a13e4b227f84927ebc06973c6c118aa816716817671cc90f6bc376bc5010e27e7cce21add88072a71a2f0126f0044858cd24e4f2e82c7e1d01dfef8a059c2d614789987e9e53e9a2c879ef778d33cc93225cb36eb64fae2a7a1419c2750c4f464e881bf4c7", 0x6e}, {&(0x7f0000000880)="b79b1f302cb2bf5c2fed4de4f4ccf9f3f117f29f2778793e71755d8e18a0f49acb99b29f2f58b64b92faf9c1ee8721949bec1e00dbb5b06c3baef283f17f2fb0a5b01e4eac12ef18ec5f97f3efe3efe346848fd213283059c5f2f952fa514d11f460725d0138591a0c56267f311f44efdbf7b80b4be3391f19c7e4a4bcaa21dc7f676b621532478aeefabfa11cfbd8611f80030505cf2d7854d4799ec00fe5e0c9bbfb5b60fef118043b3e0d5631d7e3ba9db0a99ff9ffa8ad6d73950b110313d8e4b159d395b03ad2b523476d8943ffb10e9cfa287eace665342768519af588a0ffd6ac", 0xe4}, {&(0x7f0000000980)="cc147fd4e2057c85b94c5f1b0d3947535c6beb94236a18f49b8cc79a2ef00b2b710088dfe421c381b6f977f942df1af1b49c2695530c4e2d06b4981e20725a35cafbe4d18f83434b7ceaf98dfc5b9c450946afc1205a1d27010f01d860fb72fd1495f4de2c1cc981f669baf39116676961773ac6eff823634ef739d2aa3fb587281d0e4c7ca727e35b0e1f66f4b21d41a0cee89aff2838b4b37fd60db7c79e97793987164f4c88058cf2c005bb8c068e973db2eb9bcda883e71f7bce08183b6ffef5fa5ecff503699f30055fe547c84057111b64f64d", 0xd6}, {&(0x7f0000000a80)="ec5c57cbde367f6bbcde8f75f781d530a5e4d473ca6e041e4c4bb69a75fcb2", 0x1f}], 0x7, &(0x7f0000000b40)=ANY=[@ANYBLOB="1400000000000000290000003e0000006709000000000000280000000000000029000000360000003c01000000000000010000010000010005000000000000001400000000000000290000003e000000090000000000000014000000000029000000430000008400000000000000"], 0x70}}], 0x2, 0x4000) bind$packet(r3, &(0x7f00000000c0)={0x11, 0xf5, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000fd2000128008000100677265001400028006001100"/40], 0x40}}, 0x0) 1.297498151s ago: executing program 1 (id=6190): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.296451221s ago: executing program 3 (id=6191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0x6a, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x3, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x50, r4, 0x101, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "03c15f153f886a98a5b90c0a6d2141c9"}, @NL80211_ATTR_PMKID={0x14, 0x55, "d3c85b5c45fb7f0a3456a836c0fed7fe"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20028020}, 0x40850) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 1.187564546s ago: executing program 0 (id=6192): socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c081}, 0xc0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x70bd26}}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x10040080}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000000)=0x40) 1.130135276s ago: executing program 3 (id=6193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4088, 0xff8}], 0x5}}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) recvmsg$unix(r2, &(0x7f00000002c0)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000100)}, 0x2040) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x41, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 994.058879ms ago: executing program 1 (id=6194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000004c0001800d0001007564703a73797a310000000038000400200001"], 0x60}}, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0xb0, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local}, {0x4e23, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "e9244fc04a5d0a5861b55cff0be058f92dd99fe94244772f1a3261a4ab6f3147", "884500b0eb3131ec456a044e02e6881290c9693bd22477c82be30f283d636d287e466735805180bfea2717a15f784528", "fcf488347f2d1dd087860b227e14439a37fdb701c157ed71f60f7825", {"a28056b94c337bfd564b2b5e1db09cb2", "6ad47b01d4e7faa74106e6d168638e87"}}}}}}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xec, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x5, 0x1, {0x34, 0x4, 0x0, 0x9, 0x686, 0x67, 0xfff9, 0x7, 0x2f, 0x1000, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0xc7, 0x3, 0xc, [{@broadcast, 0x4}, {@multicast1, 0x9}, {@private=0xa010100, 0x1000}, {@empty, 0x100}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x2, [{@local}, {@broadcast, 0x6}, {@multicast2, 0x8}, {@multicast2, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x7f, 0x3, 0x8, [{@local}, {@multicast1, 0x6}]}, @lsrr={0x83, 0x1b, 0xf7, [@remote, @multicast2, @private=0xa010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp={0x44, 0x20, 0xb3, 0x0, 0xd, [0x2, 0xd, 0x8, 0x80000001, 0xffffffff, 0x5, 0xb2a0]}, @lsrr={0x83, 0x23, 0x71, [@empty, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}}}}}, 0x0) (async) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 993.431954ms ago: executing program 0 (id=6195): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x101, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) listen(r0, 0x6) (async, rerun: 32) accept4(r0, 0x0, 0x0, 0x80800) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000003400)={0x2, 0x4e22, @broadcast}, 0x10) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 32) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x118, 0xc, 0x0, 0x5, 0xff, @local}, 0x10) 894.544908ms ago: executing program 1 (id=6196): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x15, 0x80805, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x1, 0xe7}}, 0x44) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) splice(r2, 0x0, r3, &(0x7f0000000040), 0x8f5, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e26, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 822.847852ms ago: executing program 0 (id=6197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket(0x11, 0x5, 0x85) (async, rerun: 64) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) (async, rerun: 64) close(r3) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004523ab522b92e8d9fe0a1401d0e03ffbeedb9eee83d5dd011f6814f212780c799af82d706c0aca5b8f7b00ec689ed530331fdec4d1f063abb58aa99254f85cfed40ae6b324b9a6eeff90", @ANYRES16, @ANYRES8=r0], 0x18}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0xa}, 0x8) (async, rerun: 64) shutdown(r0, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) (async, rerun: 32) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000500)={'hsr0\x00', {0x2, 0x0, @initdev}}) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000004c0)='cgroup.events\x00', 0x0, 0x0) (async, rerun: 32) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async, rerun: 64) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000640)={0x0, @in={0x2, 0x4e24, @loopback}, @vsock={0x28, 0x0, 0x2711, @my=0x1}, @sco={0x1f, @none}, 0x9, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)='bridge0\x00', 0x545, 0x1, 0x5}) (rerun: 64) sendmsg$NL80211_CMD_NEW_MPATH(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r9, 0xc04, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x39}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) (async, rerun: 64) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10) (async, rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 749.094852ms ago: executing program 2 (id=6198): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x652f64244006f219, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="20000000280e0400280012800b0001006d6163736563000018000280050003000800000d0c00040001000001000280"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="bd5b0ddd0ad7", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @private2, @local, {[], {0x4e21, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x0, @val=0x80}}}}}}}}, 0x0) 677.993033ms ago: executing program 0 (id=6199): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a280000"], 0x7c}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/263, 0x107}, {&(0x7f0000001f40)=""/4107, 0x100b}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000c00)=""/120, 0x78}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}, {&(0x7f0000000140)=""/16, 0x10}], 0xa}, 0x1008}], 0x1, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in6=@private1}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev, @in6=@private1}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) 547.838675ms ago: executing program 0 (id=6200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x80800) (rerun: 64) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmmsg$unix(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000040000000aaff02000000000000000000000000000106"], 0xffe) close(r3) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async) r9 = socket$isdn(0x22, 0x3, 0x25) ioctl$IMCTRLREQ(r9, 0x80044945, &(0x7f0000000300)={0x2, 0x9, 0x3, 0x4}) (async) close(r8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYBLOB="00ccc4859acaad6e9308fa2a938355d2f8fc8a9d7ab6895faf5cdb167acc2650da9d7160f8efd71987eaf8940e722bb2f6570dd693b7b19b70a8a964e37a994e5c8ba0a6607da7c249f9edbce64d4d8179058269e239fb50034c015e53d86234c429fe31f041a0b57f61671a41ccb667246d96f640a5cfc09eb2c123ba303b77d83fc8d2fa9a1921"]) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 541.295606ms ago: executing program 3 (id=6201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x8004) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r0, 0x10000, 0x2, 0xffffffffffffffff}) connect$caif(r5, &(0x7f0000000240)=@util={0x25, "0aea0231ae03f327ed181dd563abfa46"}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r4}, 0x18) 525.571722ms ago: executing program 2 (id=6202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000010000104000000ff000000000027e3331bad410fadc415558c41000000", @ANYRES32=0x0, @ANYBLOB="408000000000000008002c002000000028001a8004000700040007000400d30018000280140001800800190002000000080009000000008008000d0008000000b20e03a6d9ae18f4b150adb4d193fbfb98650472c77740915495a4790f74885d234fe169667cc5f685680dec884f2f3c536d76bf842281c7cfc0b6a961fa68965ee712a93593e853a71269b0bd2fff1dbc9e71da8c678af6d4e3d552"], 0x58}}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x25, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7fffffffffffffff500"}, @NFTA_TARGET_REV={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x2, 0x80805, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f00000002c0)=0x8) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0x28, 0x30, 0x911, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x28}}, 0x4050) 474.288779ms ago: executing program 1 (id=6203): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e00"], 0x0) 408.668738ms ago: executing program 2 (id=6204): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newlink={0x44, 0x10, 0x8, 0xc47, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x8}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x44}}, 0x0) 382.759004ms ago: executing program 1 (id=6205): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x9, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x3, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x9, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 289.835458ms ago: executing program 3 (id=6206): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000000000000000000f0300000063d038000000000000000f01000000de0000"], 0x0, 0x36}, 0x28) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9fe0307681f5c8c989a14f088a8657988a8", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001800ef01000000004d8000000a140000fe0100000024000014000500e9b54463000000000000000000000001069e23bf988fbf01132f629db81bccb2c003de807db495de5f155096579bf1334426c32e166e1788310aa30c17aeb471b2512b43e790102a49541e21e74254df7051401b6b26ece603b8c7ae80f79a1e35aeb173df0fa304b7fc95ac91a2ade336773195161514f6e056d8082b00e093c96befa967d2aa8bf98af79589ce9e36f10622c62d711e3a11ed091dfd6aef579d4a234fb9971c5e7daa58d46b6c203f27207c45"], 0x30}, 0x1, 0x11}, 0x20000080) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="ce1a07cd0e4677", @ANYRES32=r12, @ANYBLOB="08003700000000000a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x20040041}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x3c, 0xe2, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 263.598122ms ago: executing program 2 (id=6207): syz_emit_ethernet(0x6e, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}, @srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x25, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4000) 176.744155ms ago: executing program 2 (id=6208): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3", 0x30}], 0x1}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x2000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8044) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x47, 0x8, 0xff, 0x81, {{0x6, 0x4, 0x0, 0x19, 0x18, 0x66, 0x0, 0x20, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(r10, &(0x7f0000000900)={0x2c, 0x19, r3, 0x13, r8}, 0x10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, 0x0, 0xf) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r13}, 0x10) r14 = socket$packet(0x11, 0x2, 0x300) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r14, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r16, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xa2, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x4, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x4d, 0x10, 0x0, 0x54, @loopback, @private0, 0x10, 0x20, 0x4, 0xdc}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1d8, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x24000001}, 0x14) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r1, @ANYBLOB="0800c300741300000800c40001000000"], 0x30}}, 0x0) 0s ago: executing program 1 (id=6209): r0 = socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xf, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1406, 0x200, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_deladdr={0x78, 0x15, 0x400, 0x70bd27, 0x25dfdbfe, {0x2, 0x10, 0x2, 0xfe, r1}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x80000001, 0x2, 0x2}}, @IFA_LABEL={0x14, 0x3, 'tunl0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_LOCAL={0x8, 0x2, @private=0xa010100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}]}, 0x78}}, 0x0) kernel console output (not intermixed with test programs): g estimator thread 0... [ 414.811167][T19257] IPVS: using max 28 ests per chain, 67200 per kthread [ 414.828592][T19267] SET target dimension over the limit! [ 414.957990][T19274] netlink: 'syz.3.3842': attribute type 23 has an invalid length. [ 415.111388][T19280] xt_l2tp: invalid flags combination: 8 [ 415.171884][T19285] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 415.197959][T19289] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 415.242991][T19291] netlink: 'syz.3.3848': attribute type 26 has an invalid length. [ 415.251999][T19291] netlink: 'syz.3.3848': attribute type 26 has an invalid length. [ 415.454115][T19309] ipt_rpfilter: unknown options [ 415.632607][T19323] netlink: 'syz.3.3858': attribute type 19 has an invalid length. [ 415.656607][T19323] netlink: 'syz.3.3858': attribute type 19 has an invalid length. [ 415.656619][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.675108][T16522] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.695253][T16522] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.723884][T16522] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.803578][T19336] openvswitch: netlink: Missing key (keys=40, expected=100) [ 416.063662][T19356] bridge_slave_1: entered allmulticast mode [ 416.181040][T19363] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 416.319185][T19371] Unsupported ieee802154 address type: 0 [ 416.475069][T19379] xt_CONNSECMARK: invalid mode: 0 [ 416.625405][T19392] IPVS: Error connecting to the multicast addr [ 416.660137][T19397] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 417.151651][T19422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.161790][T19422] bridge_slave_1: left allmulticast mode [ 417.170637][T19422] bridge_slave_1: left promiscuous mode [ 417.180136][T19422] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.201866][T19422] bridge_slave_0: left allmulticast mode [ 417.207838][T19422] bridge_slave_0: left promiscuous mode [ 417.213797][T19422] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.312940][T19426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.346205][T19431] bond2: (slave gretap1): making interface the new active one [ 417.364962][T19431] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 417.620650][T19450] 8021q: VLANs not supported on ipvlan1 [ 417.642313][T19451] gretap0: entered promiscuous mode [ 417.650803][T19451] gretap0: left promiscuous mode [ 417.780713][T19462] syzkaller0: entered promiscuous mode [ 417.787208][T19462] syzkaller0: entered allmulticast mode [ 417.794810][T19461] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.860058][T19467] FAULT_INJECTION: forcing a failure. [ 417.860058][T19467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.884949][T19467] CPU: 1 UID: 0 PID: 19467 Comm: syz.2.3903 Not tainted syzkaller #0 PREEMPT(full) [ 417.884973][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 417.884982][T19467] Call Trace: [ 417.884988][T19467] [ 417.884994][T19467] dump_stack_lvl+0x189/0x250 [ 417.885020][T19467] ? __pfx____ratelimit+0x10/0x10 [ 417.885047][T19467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 417.885069][T19467] ? __pfx__printk+0x10/0x10 [ 417.885087][T19467] ? __might_fault+0xb0/0x130 [ 417.885121][T19467] should_fail_ex+0x414/0x560 [ 417.885150][T19467] _copy_from_user+0x2d/0xb0 [ 417.885170][T19467] kstrtouint_from_user+0xc4/0x170 [ 417.885190][T19467] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 417.885222][T19467] proc_fail_nth_write+0x88/0x200 [ 417.885243][T19467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 417.885269][T19467] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 417.885291][T19467] vfs_write+0x27e/0xb30 [ 417.885322][T19467] ? __pfx_vfs_write+0x10/0x10 [ 417.885345][T19467] ? __fget_files+0x2a/0x420 [ 417.885365][T19467] ? __fget_files+0x3a0/0x420 [ 417.885377][T19467] ? __fget_files+0x2a/0x420 [ 417.885400][T19467] ksys_write+0x145/0x250 [ 417.885422][T19467] ? __pfx_ksys_write+0x10/0x10 [ 417.885447][T19467] ? do_syscall_64+0xbe/0xfa0 [ 417.885473][T19467] do_syscall_64+0xfa/0xfa0 [ 417.885502][T19467] ? lockdep_hardirqs_on+0x9c/0x150 [ 417.885525][T19467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.885542][T19467] ? clear_bhb_loop+0x60/0xb0 [ 417.885564][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.885581][T19467] RIP: 0033:0x7f1c2e38e17f [ 417.885597][T19467] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 417.885612][T19467] RSP: 002b:00007f1c2f307030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 417.885632][T19467] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1c2e38e17f [ 417.885644][T19467] RDX: 0000000000000001 RSI: 00007f1c2f3070a0 RDI: 0000000000000005 [ 417.885655][T19467] RBP: 00007f1c2f307090 R08: 0000000000000000 R09: 0000000000000000 [ 417.885665][T19467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 417.885676][T19467] R13: 00007f1c2e5e6038 R14: 00007f1c2e5e5fa0 R15: 00007ffcc2cf8628 [ 417.885709][T19467] [ 418.559453][T19491] __nla_validate_parse: 23 callbacks suppressed [ 418.559471][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'. [ 418.581955][T19491] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3908'. [ 418.607633][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3908'. [ 418.653728][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3908'. [ 418.682572][T19504] validate_nla: 6 callbacks suppressed [ 418.682589][T19504] netlink: 'syz.0.3914': attribute type 62 has an invalid length. [ 418.708591][T19502] x_tables: duplicate underflow at hook 1 [ 418.774413][T19513] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 418.781582][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 418.919558][T19518] x_tables: duplicate entry at hook 2 [ 419.234199][T19535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3924'. [ 419.246909][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3925'. [ 419.259391][T19535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3924'. [ 419.456354][T19551] netlink: 'syz.3.3922': attribute type 1 has an invalid length. [ 419.468195][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3927'. [ 419.790817][T19556] bond8: (slave bridge2): making interface the new active one [ 419.799891][T19556] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 420.173894][T19595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.200017][T19597] netlink: 'syz.3.3938': attribute type 39 has an invalid length. [ 421.023490][T19610] team0: Caught tx_queue_len zero misconfig [ 421.135506][T19617] tipc: Enabled bearer , priority 0 [ 421.165098][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'. [ 421.199849][T19621] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 421.213855][T19621] bond3 (unregistering): Released all slaves [ 421.243148][T19618] sch_tbf: burst 127 is lower than device pim6reg0 mtu (1514) ! [ 421.327587][T19617] syzkaller0: mtu greater than device maximum [ 421.436539][T19638] bond0: Caught tx_queue_len zero misconfig [ 421.573492][T19647] netlink: 'syz.2.3955': attribute type 22 has an invalid length. [ 421.654365][T19655] xt_cgroup: xt_cgroup: no path or classid specified [ 421.745105][T19650] netlink: 'syz.4.3953': attribute type 29 has an invalid length. [ 421.755868][T19647] netlink: 'syz.2.3955': attribute type 22 has an invalid length. [ 421.765110][T16525] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.781727][T16525] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.827537][ T64] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.877169][ T64] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.958435][T19671] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 422.118021][T19683] 8021q: VLANs not supported on ipvlan1 [ 422.334021][T16099] tipc: Node number set to 891184345 [ 422.434938][T19696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.834498][T19723] veth0: entered promiscuous mode [ 422.837353][T19722] netlink: 'syz.4.3977': attribute type 11 has an invalid length. [ 422.888221][T19726] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 422.988130][T19723] veth0: left promiscuous mode [ 423.035302][T19735] netlink: 'syz.1.3983': attribute type 1 has an invalid length. [ 423.037195][T19737] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 423.079858][T19741] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 423.166697][T19735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.207821][T19748] bond1: (slave geneve2): making interface the new active one [ 423.218332][T19748] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 423.569788][T19771] __nla_validate_parse: 17 callbacks suppressed [ 423.569806][T19771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3994'. [ 423.689301][T19780] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3995'. [ 423.822042][T19781] "syz.4.3996" (19781) uses obsolete ecb(arc4) skcipher [ 424.011614][T19797] syzkaller0: entered promiscuous mode [ 424.047931][T19797] syzkaller0: entered allmulticast mode [ 424.096905][T19807] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 424.109471][T19797] syzkaller0: mtu less than device minimum [ 424.323144][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4009'. [ 424.501496][T19834] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4016'. [ 424.520373][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4016'. [ 424.530437][T19834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4016'. [ 424.706032][T19848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 424.975477][T19872] syz_tun: entered allmulticast mode [ 425.002739][T19872] syz_tun: left allmulticast mode [ 425.008372][T19873] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 425.055529][T19879] batadv_slave_1: entered allmulticast mode [ 425.135826][T19881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4031'. [ 425.213328][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 425.284105][T19894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4034'. [ 425.473041][T19915] mac80211_hwsim hwsim31 syzkaller0: Caught tx_queue_len zero misconfig [ 425.533064][T19914] netlink: 'syz.1.4039': attribute type 1 has an invalid length. [ 425.566064][T19914] netlink: 'syz.1.4039': attribute type 2 has an invalid length. [ 425.682657][T19922] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 425.691859][T19922] bond9: option packets_per_slave: allowed values 0 - 65535 [ 425.703411][T19922] bond9 (unregistering): Released all slaves [ 425.783911][T19934] v: renamed from vlan0 (while UP) [ 425.793252][T19934] veth0_vlan: left promiscuous mode [ 426.031934][T19951] macsec1: entered promiscuous mode [ 426.213582][T19959] syzkaller0: entered promiscuous mode [ 426.230821][T19959] syzkaller0: entered allmulticast mode [ 426.305585][T19959] tipc: Enabled bearer , priority 0 [ 426.347768][T19958] tipc: Resetting bearer [ 426.401369][T19958] tipc: Disabling bearer [ 426.767701][T19995] bond3 (unregistering): Released all slaves [ 426.868817][T20004] IPVS: length: 8 != 1152 [ 427.131327][T20028] Cannot find add_set index 0 as target [ 427.143976][T20028] netlink: 'syz.4.4073': attribute type 2 has an invalid length. [ 427.152106][T20031] lo: Caught tx_queue_len zero misconfig [ 427.160574][T20031] ip6tnl0: Caught tx_queue_len zero misconfig [ 427.613173][T20059] vxcan1: entered allmulticast mode [ 427.805133][T20068] macsec1: entered promiscuous mode [ 427.811431][T20068] macsec1: entered allmulticast mode [ 427.816847][T20068] bridge0: entered allmulticast mode [ 427.829245][T20068] bridge0: port 3(macsec1) entered blocking state [ 427.844290][T20068] bridge0: port 3(macsec1) entered disabled state [ 427.898582][T20068] bridge0: left allmulticast mode [ 428.083388][T20089] netlink: 'syz.3.4096': attribute type 3 has an invalid length. [ 428.095331][T20089] netlink: 'syz.3.4096': attribute type 3 has an invalid length. [ 428.219290][T20093] netlink: 'syz.2.4099': attribute type 1 has an invalid length. [ 428.533474][T20114] syzkaller0: entered promiscuous mode [ 428.555970][T20114] syzkaller0: entered allmulticast mode [ 428.604541][T20129] netlink: 'syz.1.4107': attribute type 11 has an invalid length. [ 428.633063][T20129] __nla_validate_parse: 17 callbacks suppressed [ 428.633080][T20129] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4107'. [ 428.658638][T20123] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 428.671740][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4113'. [ 428.894793][T20140] IPVS: persistence engine module ip_vs_pe_ not found [ 428.911337][T20140] tipc: Failed to remove unknown binding: 66,1,1/0:4136987493/4136987495 [ 428.918186][T20143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4115'. [ 429.154683][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4117'. [ 429.326691][T20160] netlink: 'syz.0.4116': attribute type 10 has an invalid length. [ 430.399861][T20163] netlink: 'syz.4.4118': attribute type 7 has an invalid length. [ 430.408716][T20163] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4118'. [ 430.543256][T20168] bond3: option resend_igmp: invalid value (32767) [ 430.558215][T20168] bond3: option resend_igmp: allowed values 0 - 255 [ 430.584642][T20168] bond3 (unregistering): Released all slaves [ 430.680533][T20183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 431.053271][T20207] Cannot find add_set index 2 as target [ 431.089791][T20214] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4132'. [ 431.090489][T20217] Cannot find add_set index 2 as target [ 431.428679][T20235] netlink: 'syz.0.4137': attribute type 1 has an invalid length. [ 431.436495][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4137'. [ 431.606338][T20248] netlink: 'syz.0.4142': attribute type 10 has an invalid length. [ 431.616679][T20248] team0: Device hsr0 failed to enter team mode [ 431.623469][T20248] team0: Device hsr0 failed to enter team mode [ 431.720710][T20252] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4145'. [ 431.890342][T20265] syzkaller0: entered promiscuous mode [ 431.910780][T20265] syzkaller0: entered allmulticast mode [ 431.972149][T20265] 8021q: adding VLAN 0 to HW filter on device bond9 [ 431.983992][T20275] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4151'. [ 432.021006][T20275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4151'. [ 432.031367][T20277] xt_l2tp: unknown flags: 10 [ 432.249436][T20293] tipc: Enabled bearer , priority 0 [ 432.257822][T20293] syzkaller0: entered promiscuous mode [ 432.269294][T20293] syzkaller0: entered allmulticast mode [ 432.288745][T20293] tipc: Resetting bearer [ 432.319206][T20291] tipc: Resetting bearer [ 432.382232][T20291] tipc: Disabling bearer [ 432.570936][T20326] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 432.646872][T20331] netlink: 'syz.0.4165': attribute type 83 has an invalid length. [ 432.883349][T20348] netlink: 'syz.4.4169': attribute type 29 has an invalid length. [ 433.143499][T20367] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 433.195977][T20367] bond10: (slave lo): Enslaving as a backup interface with an up link [ 433.204905][T20367] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 433.300358][T20369] vlan1: entered allmulticast mode [ 433.305516][T20369] veth0_vlan: entered allmulticast mode [ 433.344111][T20377] netlink: 'syz.1.4177': attribute type 1 has an invalid length. [ 433.722048][T20402] __nla_validate_parse: 17 callbacks suppressed [ 433.722066][T20402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4185'. [ 433.778510][T20403] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4185'. [ 433.824742][T20406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4186'. [ 433.976017][T20414] vlan0: entered allmulticast mode [ 434.055144][T20419] vlan2: entered promiscuous mode [ 434.061262][T20419] bridge0: entered promiscuous mode [ 434.089684][T20422] netlink: zone id is out of range [ 434.109063][T20422] netlink: set zone limit has 4 unknown bytes [ 434.239976][T20431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4196'. [ 434.248892][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4195'. [ 434.924620][T20476] netlink: 'syz.1.4210': attribute type 1 has an invalid length. [ 435.059634][T20482] wlan0 speed is unknown, defaulting to 1000 [ 435.075433][T20484] wlan0 speed is unknown, defaulting to 1000 [ 435.093811][T20482] wlan0 speed is unknown, defaulting to 1000 [ 435.124627][T20484] wlan0 speed is unknown, defaulting to 1000 [ 435.127410][T20482] hsr0 speed is unknown, defaulting to 1000 [ 435.181736][T20484] hsr0 speed is unknown, defaulting to 1000 [ 435.812940][T20522] netlink: 'syz.1.4222': attribute type 58 has an invalid length. [ 435.842272][T20528] netlink: 'syz.2.4224': attribute type 64 has an invalid length. [ 435.857567][T20522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4222'. [ 435.874774][T20528] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4224'. [ 436.012375][T20531] bond11: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 436.080562][T20531] bond11 (unregistering): Released all slaves [ 436.304176][T20547] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4231'. [ 436.454068][T20550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 436.468523][T20569] lo: left promiscuous mode [ 436.473852][T20569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.511189][T20569] sctp: [Deprecated]: syz.1.4235 (pid 20569) Use of int in max_burst socket option. [ 436.511189][T20569] Use struct sctp_assoc_value instead [ 436.666881][T20582] xt_ecn: cannot match TCP bits for non-tcp packets [ 436.760525][T20587] IPv6: addrconf: prefix option has invalid lifetime [ 436.794157][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4240'. [ 436.859162][T20463] Bluetooth: hci4: command 0x0405 tx timeout [ 437.045552][T20609] netlink: 'syz.1.4245': attribute type 9 has an invalid length. [ 437.121323][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4249'. [ 437.192095][T20607] wlan0 speed is unknown, defaulting to 1000 [ 437.220393][T20623] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.262971][T20623] bridge_slave_1 (unregistering): left allmulticast mode [ 437.272851][T20623] bridge_slave_1 (unregistering): left promiscuous mode [ 437.281425][T20623] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.336649][T20607] wlan0 speed is unknown, defaulting to 1000 [ 437.356901][T20607] hsr0 speed is unknown, defaulting to 1000 [ 437.803810][T20652] tipc: Enabling of bearer rejected, already enabled [ 438.796210][T20728] netlink: 'syz.2.4281': attribute type 10 has an invalid length. [ 438.820089][T20731] __nla_validate_parse: 8 callbacks suppressed [ 438.820107][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 438.856104][T20728] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.969245][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.976635][T20728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.023700][T20728] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 439.237404][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4287'. [ 439.351136][T20765] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 439.394490][T20763] tipc: Enabling of bearer rejected, failed to enable media [ 439.482688][T20782] netlink: 'syz.4.4294': attribute type 4 has an invalid length. [ 439.630717][T20801] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4292'. [ 439.723154][T20801] bond2 (unregistering): Released all slaves [ 439.980754][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290075][T20787] netlink: 'syz.0.4293': attribute type 11 has an invalid length. [ 440.306478][T20787] netlink: 'syz.0.4293': attribute type 11 has an invalid length. [ 440.321517][T20787] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4293'. [ 440.645304][T20862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4305'. [ 440.690389][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4305'. [ 440.710392][T20862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 440.738691][T20862] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 440.755874][T20867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 440.762799][T20864] tipc: Enabled bearer , priority 0 [ 440.781981][T20864] syzkaller0: entered promiscuous mode [ 440.787949][T20864] syzkaller0: entered allmulticast mode [ 440.800683][T20863] tipc: Resetting bearer [ 440.829850][T20863] tipc: Disabling bearer [ 440.871217][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 440.881383][T20873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.041685][T20873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.050813][T20883] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4312'. [ 441.218818][T20896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4314'. [ 441.465162][T20909] v: renamed from vlan0 [ 441.725065][T20932] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 441.738725][T20935] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 442.668896][T20947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.724463][T20948] netlink: 'syz.0.4330': attribute type 1 has an invalid length. [ 442.764793][T20948] bond4: entered promiscuous mode [ 442.782627][T20948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.870758][T20948] bond4: (slave bridge4): making interface the new active one [ 442.920288][T20948] bridge4: entered promiscuous mode [ 442.945345][T20948] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 443.005964][T20974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.231288][ T5845] hid-generic 0005:0B57:1001.0002: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 443.398384][T20999] netlink: 'syz.2.4342': attribute type 1 has an invalid length. [ 443.413291][T20997] wlan0 speed is unknown, defaulting to 1000 [ 443.422144][T20997] wlan0 speed is unknown, defaulting to 1000 [ 443.433301][T20997] hsr0 speed is unknown, defaulting to 1000 [ 443.590090][T21012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.228063][T21059] __nla_validate_parse: 6 callbacks suppressed [ 444.228079][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4357'. [ 444.461413][T21072] lo: entered promiscuous mode [ 444.466836][T21072] tunl0: entered promiscuous mode [ 444.474312][T21072] gre0: entered promiscuous mode [ 444.483083][T21072] gretap0: entered promiscuous mode [ 444.490698][T21072] erspan0: entered promiscuous mode [ 444.496437][T21072] ip_vti0: entered promiscuous mode [ 444.810719][T21090] lo: entered promiscuous mode [ 444.841462][T21090] tunl0: entered promiscuous mode [ 444.875849][T21090] gre0: entered promiscuous mode [ 444.922385][T21090] gretap0: entered promiscuous mode [ 444.945688][T21090] erspan0: entered promiscuous mode [ 444.956750][T21090] ip_vti0: entered promiscuous mode [ 444.975178][T21092] netlink: 'syz.0.4373': attribute type 11 has an invalid length. [ 444.988128][T21092] netlink: 'syz.0.4373': attribute type 12 has an invalid length. [ 445.001291][T21090] netlink: 'syz.1.4371': attribute type 17 has an invalid length. [ 445.012431][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4371'. [ 445.022753][T21090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4371'. [ 445.033417][T21095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.042243][T21095] bond0: (slave bond5): Enslaving as an active interface with an up link [ 445.097198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.191997][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4378'. [ 445.317978][T21128] Unsupported ieee802154 address type: 0 [ 445.332578][T21129] netlink: 'syz.4.4381': attribute type 39 has an invalid length. [ 445.408972][T21136] tipc: Enabled bearer , priority 0 [ 445.443610][T21136] tipc: Disabling bearer [ 445.476313][T21141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4384'. [ 445.709847][T21154] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.722347][T21154] bond0: (slave bond6): Enslaving as an active interface with an up link [ 445.864966][T21169] netlink: 'syz.2.4391': attribute type 1 has an invalid length. [ 445.873592][T21169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.884641][T21169] netlink: 'syz.2.4391': attribute type 30 has an invalid length. [ 445.923544][T21169] bond27: option arp_missed_max: invalid value (0) [ 445.930907][T21169] bond27: option arp_missed_max: allowed values 1 - 255 [ 445.940827][T21169] bond27 (unregistering): Released all slaves [ 446.060036][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4393'. [ 446.155097][T21178] netlink: 'syz.2.4394': attribute type 2 has an invalid length. [ 446.164458][T21178] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4394'. [ 446.178733][T21178] netlink: 'syz.2.4394': attribute type 2 has an invalid length. [ 446.619929][T21191] syzkaller0: entered promiscuous mode [ 446.625451][T21191] syzkaller0: entered allmulticast mode [ 446.636231][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4401'. [ 446.666628][T21197] bond27: Invalid ad_actor_system MAC address. [ 446.673583][T21197] bond27: option ad_actor_system: invalid value (1) [ 446.681885][T21197] bond27 (unregistering): Released all slaves [ 446.871087][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4404'. [ 446.900396][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4404'. [ 446.946146][T21210] xt_l2tp: missing protocol rule (udp|l2tpip) [ 446.980479][T21210] bond2: option lp_interval: invalid value (0) [ 446.994165][T21210] bond2: option lp_interval: allowed values 1 - 2147483647 [ 447.032095][T21210] bond2 (unregistering): Released all slaves [ 447.177334][T21217] tipc: Can't bind to reserved service type 1 [ 447.332594][T21241] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 447.412549][T21241] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 447.457323][T21241] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 447.799204][T21268] validate_nla: 2 callbacks suppressed [ 447.799221][T21268] netlink: 'syz.2.4421': attribute type 10 has an invalid length. [ 448.041148][T21279] nbd5: detected capacity change from 0 to 127 [ 448.063525][ T5828] block nbd5: Receive control failed (result -32) [ 449.655094][T21316] __nla_validate_parse: 9 callbacks suppressed [ 449.655113][T21316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4435'. [ 449.875728][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4440'. [ 450.186600][T21361] netlink: 'syz.4.4446': attribute type 21 has an invalid length. [ 450.191894][T21360] netlink: 'syz.2.4447': attribute type 16 has an invalid length. [ 450.203798][T21360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 450.206112][T21362] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4445'. [ 450.256809][T21362] xt_policy: neither incoming nor outgoing policy selected [ 450.369505][T21361] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 450.408620][T21361] bond3 (unregistering): Released all slaves [ 450.446812][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4448'. [ 450.464057][T21369] veth1_to_bond: entered allmulticast mode [ 450.481622][T21373] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4450'. [ 450.495833][T21372] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4450'. [ 450.669152][T21367] veth1_to_bond: left allmulticast mode [ 451.033781][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4457'. [ 451.385983][T21435] x_tables: duplicate underflow at hook 1 [ 451.459647][T21441] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4470'. [ 451.540910][T21450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4472'. [ 451.608595][T21454] gretap1: entered promiscuous mode [ 451.614154][T21454] gretap1: entered allmulticast mode [ 452.231220][T21488] syzkaller0: entered promiscuous mode [ 452.236917][T21488] syzkaller0: entered allmulticast mode [ 452.244476][T21487] tipc: Enabled bearer , priority 0 [ 452.285377][T21485] tipc: Resetting bearer [ 453.715308][T21485] tipc: Disabling bearer [ 453.854965][T21522] sock: sock_timestamping_bind_phc: sock not bind to device [ 453.942196][T21526] bond2: Removing last arp target with arp_interval on [ 453.951818][T21522] pim6reg1: entered promiscuous mode [ 453.969343][T21522] pim6reg1: entered allmulticast mode [ 454.214561][T21548] netlink: 'syz.1.4496': attribute type 1 has an invalid length. [ 454.400299][T21555] team0: Device ip6gre2 is of different type [ 454.494460][T21560] syzkaller0: entered promiscuous mode [ 454.502205][T21560] syzkaller0: entered allmulticast mode [ 454.865777][T21572] __nla_validate_parse: 140 callbacks suppressed [ 454.865798][T21572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4504'. [ 454.903492][T21572] unsupported nla_type 56354 [ 455.083161][T21585] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4509'. [ 455.235888][T21591] bond3: entered promiscuous mode [ 455.261903][T21591] bond3: entered allmulticast mode [ 455.271572][T21591] 8021q: adding VLAN 0 to HW filter on device bond3 [ 455.808943][T21638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4521'. [ 455.820950][T21639] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 455.831546][T21638] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.845089][T21636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4522'. [ 455.845330][T21638] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4521'. [ 455.896371][T21636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4522'. [ 456.005886][T21645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4523'. [ 456.141049][T21651] can: request_module (can-proto-0) failed. [ 456.451844][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 456.466447][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'. [ 456.642461][T21690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.962964][T21716] x_tables: duplicate underflow at hook 3 [ 457.040070][T21723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4547'. [ 457.055014][T21724] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 457.092133][T21724] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 457.384587][T21750] netlink: 'syz.4.4554': attribute type 2 has an invalid length. [ 457.446572][T21754] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 457.459548][T21754] bond4 (unregistering): Released all slaves [ 457.829224][T21772] syzkaller0: entered promiscuous mode [ 457.834703][T21772] syzkaller0: entered allmulticast mode [ 458.473807][T21792] netlink: 'syz.2.4563': attribute type 1 has an invalid length. [ 458.561530][T21789] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 458.596419][T21784] veth11: entered promiscuous mode [ 458.639243][T21784] veth11: entered allmulticast mode [ 458.713213][T21802] xfrm1: entered promiscuous mode [ 458.719409][T21802] xfrm1: entered allmulticast mode [ 458.731230][T21805] IPVS: length: 8 != 1152 [ 458.745614][T21802] netlink: 'syz.0.4568': attribute type 1 has an invalid length. [ 458.847480][T21807] sock: sock_set_timeout: `syz.3.4569' (pid 21807) tries to set negative timeout [ 458.914062][T21811] netlink: 'syz.2.4571': attribute type 6 has an invalid length. [ 459.212759][T21825] syzkaller0: entered promiscuous mode [ 459.220695][T21825] syzkaller0: entered allmulticast mode [ 459.363811][T21843] netlink: 'syz.1.4581': attribute type 12 has an invalid length. [ 460.760511][T21867] __nla_validate_parse: 5 callbacks suppressed [ 460.760530][T21867] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4589'. [ 460.967905][T21883] tipc: Enabling of bearer rejected, failed to enable media [ 460.990806][T21883] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4594'. [ 461.080524][T21883] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 461.101060][T21893] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 461.116713][T21883] bond0 (unregistering): (slave bond5): Releasing backup interface [ 461.136604][T21883] bond0 (unregistering): (slave bond6): Releasing backup interface [ 461.148865][T21883] bond0 (unregistering): Released all slaves [ 461.169283][T21886] wlan0 speed is unknown, defaulting to 1000 [ 461.181955][T21886] wlan0 speed is unknown, defaulting to 1000 [ 461.190981][T21886] hsr0 speed is unknown, defaulting to 1000 [ 461.832264][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4602'. [ 462.018417][T21932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4604'. [ 462.073145][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4604'. [ 463.093379][T21945] netlink: 'syz.0.4606': attribute type 1 has an invalid length. [ 463.101979][T21945] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4606'. [ 463.526023][T21973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4614'. [ 463.594190][T21976] sctp: [Deprecated]: syz.4.4616 (pid 21976) Use of int in maxseg socket option. [ 463.594190][T21976] Use struct sctp_assoc_value instead [ 463.765615][T21984] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4621'. [ 464.044419][T22002] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 464.055408][T22002] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 464.071417][T22002] tipc: Resetting bearer [ 464.121611][T22008] netlink: 'syz.3.4625': attribute type 33 has an invalid length. [ 464.136390][T22008] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 464.145632][T22008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.202378][T22013] veth5: entered promiscuous mode [ 464.268756][T22012] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 464.285188][T22012] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 464.293928][T22012] tipc: Resetting bearer [ 464.309138][T22018] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4628'. [ 464.320623][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4628'. [ 464.378755][T22021] xt_hashlimit: size too large, truncated to 1048576 [ 464.415989][T22023] vlan3: entered promiscuous mode [ 464.421787][T22021] warn_alloc: 1 callbacks suppressed [ 464.421803][T22021] syz.2.4629: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 464.421991][T22021] CPU: 0 UID: 0 PID: 22021 Comm: syz.2.4629 Not tainted syzkaller #0 PREEMPT(full) [ 464.422029][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.422052][T22021] Call Trace: [ 464.422059][T22021] [ 464.422066][T22021] dump_stack_lvl+0x189/0x250 [ 464.422095][T22021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.422117][T22021] ? __pfx__printk+0x10/0x10 [ 464.422135][T22021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 464.422157][T22021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 464.422181][T22021] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 464.422207][T22021] warn_alloc+0x214/0x310 [ 464.422239][T22021] ? __pfx_warn_alloc+0x10/0x10 [ 464.422267][T22021] ? __get_vm_area_node+0x28f/0x300 [ 464.422289][T22021] ? htable_create+0x101/0x7a0 [ 464.422315][T22021] __vmalloc_node_range_noprof+0x690/0x12d0 [ 464.422361][T22021] ? alloc_pages_mpol+0x3cd/0x4a0 [ 464.422378][T22021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.422405][T22021] ? rcu_is_watching+0x15/0xb0 [ 464.422423][T22021] ? htable_create+0x101/0x7a0 [ 464.422450][T22021] __kvmalloc_node_noprof+0x674/0x910 [ 464.422474][T22021] ? htable_create+0x101/0x7a0 [ 464.422491][T22021] ? hashlimit_pernet+0x23/0x240 [ 464.422511][T22021] ? hashlimit_pernet+0x23/0x240 [ 464.422528][T22021] ? hashlimit_pernet+0x23/0x240 [ 464.422554][T22021] htable_create+0x101/0x7a0 [ 464.422581][T22021] hashlimit_mt_check_common+0x719/0xa10 [ 464.422611][T22021] xt_check_match+0x3d1/0xab0 [ 464.422636][T22021] ? __pfx_xt_check_match+0x10/0x10 [ 464.422659][T22021] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 464.422691][T22021] ? xt_find_match+0x1f7/0x250 [ 464.422718][T22021] translate_table+0x1553/0x2040 [ 464.422762][T22021] ? __pfx_translate_table+0x10/0x10 [ 464.422787][T22021] ? __might_fault+0xb0/0x130 [ 464.422827][T22021] ? _copy_from_user+0x94/0xb0 [ 464.422853][T22021] do_ip6t_set_ctl+0x970/0xce0 [ 464.422879][T22021] ? rcu_is_watching+0x15/0xb0 [ 464.422898][T22021] ? trace_contention_end+0x39/0x120 [ 464.422917][T22021] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 464.422957][T22021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 464.422985][T22021] ? file_init_path+0x3b/0x590 [ 464.423007][T22021] ? __lock_acquire+0xab9/0xd20 [ 464.423028][T22021] nf_setsockopt+0x26f/0x290 [ 464.423053][T22021] rawv6_setsockopt+0x23b/0x5b0 [ 464.423074][T22021] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 464.423090][T22021] ? aa_sock_opt_perm+0xff/0x1b0 [ 464.423115][T22021] ? sock_common_setsockopt+0x36/0xc0 [ 464.423136][T22021] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 464.423160][T22021] do_sock_setsockopt+0x17c/0x1b0 [ 464.423182][T22021] __x64_sys_setsockopt+0x13f/0x1b0 [ 464.423204][T22021] do_syscall_64+0xfa/0xfa0 [ 464.423225][T22021] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.423246][T22021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.423262][T22021] ? clear_bhb_loop+0x60/0xb0 [ 464.423282][T22021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.423302][T22021] RIP: 0033:0x7f1c2e38f6c9 [ 464.423319][T22021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.423332][T22021] RSP: 002b:00007f1c2f2e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 464.423348][T22021] RAX: ffffffffffffffda RBX: 00007f1c2e5e6090 RCX: 00007f1c2e38f6c9 [ 464.423360][T22021] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 464.423370][T22021] RBP: 00007f1c2e411f91 R08: 0000000000000528 R09: 0000000000000000 [ 464.423381][T22021] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 464.423392][T22021] R13: 00007f1c2e5e6128 R14: 00007f1c2e5e6090 R15: 00007ffcc2cf8628 [ 464.423422][T22021] [ 464.423546][T22021] Mem-Info: [ 464.822505][T22021] active_anon:4783 inactive_anon:0 isolated_anon:0 [ 464.822505][T22021] active_file:3271 inactive_file:40022 isolated_file:0 [ 464.822505][T22021] unevictable:768 dirty:42 writeback:0 [ 464.822505][T22021] slab_reclaimable:12764 slab_unreclaimable:145186 [ 464.822505][T22021] mapped:30147 shmem:1397 pagetables:1236 [ 464.822505][T22021] sec_pagetables:0 bounce:0 [ 464.822505][T22021] kernel_misc_reclaimable:0 [ 464.822505][T22021] free:1275609 free_pcp:16018 free_cma:0 [ 464.887705][T22021] Node 0 active_anon:19116kB inactive_anon:0kB active_file:13084kB inactive_file:159888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116844kB dirty:168kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17172kB pagetables:4728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 464.993009][T22021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.080410][T22021] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.135353][T22021] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 465.142053][T22021] Node 0 DMA32 free:1194868kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18816kB inactive_anon:0kB active_file:13084kB inactive_file:159888kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:47232kB local_pcp:27332kB free_cma:0kB [ 465.189680][T22021] lowmem_reserve[]: 0 0 0 0 0 [ 465.194527][T22021] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.225014][T22021] lowmem_reserve[]: 0 0 0 0 0 [ 465.230419][T22021] Node 1 Normal free:3895364kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14944kB local_pcp:5600kB free_cma:0kB [ 465.263928][T22021] lowmem_reserve[]: 0 0 0 0 0 [ 465.269313][T22021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 465.284465][T22021] Node 0 DMA32: 1611*4kB (UME) 603*8kB (UME) 309*16kB (UME) 62*32kB (UM) 5*64kB (UM) 3*128kB (U) 22*256kB (UME) 34*512kB (UM) 24*1024kB (U) 5*2048kB (UM) 273*4096kB (UM) = 1194964kB [ 465.308939][T22021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 465.338747][T22021] Node 1 Normal: 143*4kB (UE) 47*8kB (UME) 43*16kB (UME) 117*32kB (UME) 39*64kB (UME) 5*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3895364kB [ 465.383406][T22021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.394879][T22021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.404497][T22021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.415472][T22021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.438604][T22050] sit0: entered promiscuous mode [ 465.456367][T22050] netlink: 'syz.1.4641': attribute type 1 has an invalid length. [ 465.501471][T22021] 44662 total pagecache pages [ 465.515524][T22021] 0 pages in swap cache [ 465.521027][T22021] Free swap = 124996kB [ 465.526384][T22021] Total swap = 124996kB [ 465.553488][T22021] 2097051 pages RAM [ 465.559995][T22021] 0 pages HighMem/MovableOnly [ 465.567378][T22021] 424119 pages reserved [ 465.574920][T22021] 0 pages cma reserved [ 465.619254][T22063] tipc: Enabled bearer , priority 0 [ 465.650134][T22063] syzkaller0: entered promiscuous mode [ 465.655636][T22063] syzkaller0: entered allmulticast mode [ 465.699015][T22063] tipc: Resetting bearer [ 465.724456][T22062] tipc: Resetting bearer [ 465.782822][T22062] tipc: Disabling bearer [ 465.813570][T22074] __nla_validate_parse: 27 callbacks suppressed [ 465.813587][T22074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4648'. [ 466.064167][T22091] syzkaller0: entered promiscuous mode [ 466.087859][T22091] syzkaller0: entered allmulticast mode [ 466.214267][T22101] tipc: Enabled bearer , priority 0 [ 466.222957][T22101] veth1_macvtap: left promiscuous mode [ 466.238171][T22101] macsec0: entered allmulticast mode [ 466.264095][T22101] tipc: Resetting bearer [ 466.296065][T22100] tipc: Disabling bearer [ 466.404304][T22122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4661'. [ 466.511395][T22130] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4665'. [ 466.604141][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4667'. [ 466.621968][T22134] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 466.736435][T22143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4672'. [ 466.784977][T22144] netlink: 'syz.3.4671': attribute type 21 has an invalid length. [ 466.805188][T22144] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4671'. [ 466.842938][T22144] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4671'. [ 466.925873][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4676'. [ 466.978942][T22159] netlink: 'syz.3.4678': attribute type 1 has an invalid length. [ 467.035877][T22159] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 467.043479][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4681'. [ 467.275516][T22183] tipc: Enabling of bearer rejected, failed to enable media [ 467.515342][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4693'. [ 467.640333][T22206] vlan0: entered promiscuous mode [ 467.645654][T22206] bridge0: entered promiscuous mode [ 467.748128][T22210] IPVS: set_ctl: invalid protocol: 135 172.20.20.9:19998 [ 469.980682][T22366] x_tables: duplicate underflow at hook 1 [ 470.848958][T22387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.976282][T22392] netlink: 'syz.3.4754': attribute type 1 has an invalid length. [ 471.260551][T22411] __nla_validate_parse: 9 callbacks suppressed [ 471.260568][T22411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 471.329213][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 471.622465][T22436] xt_addrtype: ipv6 does not support BROADCAST matching [ 471.890775][T22460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4775'. [ 471.935117][T22460] netlink: 'syz.0.4775': attribute type 7 has an invalid length. [ 471.943797][T22460] netlink: 'syz.0.4775': attribute type 8 has an invalid length. [ 471.951841][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4775'. [ 471.992539][T22464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4776'. [ 472.063905][T22464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4776'. [ 472.100118][T22469] bridge9: entered promiscuous mode [ 472.107201][T22469] bridge9: entered allmulticast mode [ 472.121017][T22469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.187841][T22475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.191699][T22469] bridge10: entered promiscuous mode [ 472.245975][T22469] bridge10: entered allmulticast mode [ 472.430878][T22493] netlink: 'syz.4.4786': attribute type 8 has an invalid length. [ 472.543607][T22496] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4787'. [ 472.588487][T22496] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4787'. [ 472.700247][T22509] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4791'. [ 472.730412][T22510] netlink: 7076 bytes leftover after parsing attributes in process `syz.1.4791'. [ 472.751303][T22510] openvswitch: netlink: Flow key attr not present in new flow. [ 472.777575][T20463] Bluetooth: hci1: command 0x0406 tx timeout [ 472.891825][T22518] bond0 (unregistering): Released all slaves [ 472.914823][T22525] ip6gre2: entered promiscuous mode [ 472.921518][T22525] ip6gre2: entered allmulticast mode [ 472.958000][T22526] netlink: 'syz.1.4795': attribute type 1 has an invalid length. [ 473.030276][T22532] netlink: 'syz.0.4798': attribute type 2 has an invalid length. [ 473.038756][T22532] netlink: 'syz.0.4798': attribute type 11 has an invalid length. [ 473.052537][T22533] netlink: 'syz.1.4795': attribute type 1 has an invalid length. [ 473.662688][T22545] netlink: 'syz.4.4799': attribute type 1 has an invalid length. [ 473.671243][T22545] netlink: 'syz.4.4799': attribute type 1 has an invalid length. [ 474.464413][ T1170] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 474.472697][ T1170] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 474.487671][T18997] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 474.573546][T22539] veth37: entered promiscuous mode [ 474.746663][T22560] bridge3: entered promiscuous mode [ 474.762975][T22560] bridge3: entered allmulticast mode [ 474.877500][T18993] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 474.904302][T22571] IPv6: sit2: Disabled Multicast RS [ 474.925011][T22571] sit2: entered allmulticast mode [ 475.035362][T22584] veth0_vlan: entered promiscuous mode [ 475.240663][T22606] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 475.418806][ T5948] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 475.975358][T22631] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 476.113862][T22639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.136537][T22640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.451388][T22665] __nla_validate_parse: 10 callbacks suppressed [ 476.451406][T22665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4836'. [ 476.508065][T22669] validate_nla: 1 callbacks suppressed [ 476.508082][T22669] netlink: 'syz.0.4836': attribute type 21 has an invalid length. [ 476.526238][T22665] bond0 (unregistering): Released all slaves [ 476.561308][T22669] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4836'. [ 476.574521][T22672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4838'. [ 476.654006][T22678] macsec2: entered promiscuous mode [ 477.573398][T22744] netlink: zone id is out of range [ 477.599766][T22744] netlink: set zone limit has 4 unknown bytes [ 478.189908][T22775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4862'. [ 478.377363][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 478.492003][T22781] bond3: option resend_igmp: invalid value (32767) [ 478.507723][T22781] bond3: option resend_igmp: allowed values 0 - 255 [ 478.529281][T22781] bond3 (unregistering): Released all slaves [ 478.711831][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4870'. [ 478.770974][T22802] bond0: entered allmulticast mode [ 479.220249][T22833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4876'. [ 479.582455][T22864] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 479.605829][T22864] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 479.670338][T22864] tipc: Resetting bearer [ 479.684111][T22866] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 479.695604][T22877] sctp: [Deprecated]: syz.0.4889 (pid 22877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.695604][T22877] Use struct sctp_sack_info instead [ 479.699472][T22878] lo: entered allmulticast mode [ 479.749345][T22871] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 479.772634][T22883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 479.782244][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 479.858901][T22889] netlink: 'syz.2.4892': attribute type 1 has an invalid length. [ 479.914882][T22889] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address [ 479.925974][T22889] bond27: (slave vxcan3): Error -95 calling set_mac_address [ 479.970819][T22889] gretap2: entered promiscuous mode [ 479.984337][T22889] bond27: (slave gretap2): making interface the new active one [ 480.003682][T22889] bond27: (slave gretap2): Enslaving as an active interface with an up link [ 480.034077][T22889] macvlan2: entered promiscuous mode [ 480.040422][T22889] macvlan2: entered allmulticast mode [ 480.046712][T22889] bond27: entered promiscuous mode [ 480.053631][T22889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 480.071159][T22889] bond27: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 480.108517][T22889] bond27: left promiscuous mode [ 480.146869][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.158811][T22904] sctp: Trying to GSO but underlying device doesn't support it. [ 480.163533][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.184658][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.195174][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.201510][T22895] sit2: entered promiscuous mode [ 480.208906][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.212528][T22895] sit2: entered allmulticast mode [ 480.217590][T22906] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 480.243474][T22909] mac80211_hwsim hwsim29 wlan0: Caught tx_queue_len zero misconfig [ 480.359807][T22913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4900'. [ 480.548085][T22925] netlink: 'syz.2.4905': attribute type 2 has an invalid length. [ 480.556519][T22925] netlink: 'syz.2.4905': attribute type 11 has an invalid length. [ 480.568665][T22925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4905'. [ 486.697221][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 488.142183][T22947] Bluetooth: hci5: command 0x0406 tx timeout [ 488.149192][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 493.257608][T20463] Bluetooth: hci2: command 0x0406 tx timeout [ 501.421804][ T1304] net_ratelimit: 59 callbacks suppressed [ 501.421822][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.438024][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.057223][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 534.057231][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 539.069263][T22958] __nla_validate_parse: 3 callbacks suppressed [ 539.069281][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4915'. [ 539.107005][T22958] netlink: 'syz.1.4915': attribute type 62 has an invalid length. [ 539.279445][T22979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4925'. [ 539.300625][T22975] netlink: 'syz.4.4920': attribute type 6 has an invalid length. [ 539.521984][T22996] syzkaller1: entered promiscuous mode [ 539.545664][T22996] syzkaller1: entered allmulticast mode [ 539.730949][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4937'. [ 539.741670][T23016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4937'. [ 539.844264][T23022] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4938'. [ 539.914327][T23022] veth5: entered allmulticast mode [ 539.918973][T23031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4941'. [ 539.930469][T23031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4941'. [ 539.956460][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'. [ 540.430871][T23071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4949'. [ 540.443639][T23059] bond4 (unregistering): Released all slaves [ 540.787929][T23085] wlan0 speed is unknown, defaulting to 1000 [ 540.795578][T23085] wlan0 speed is unknown, defaulting to 1000 [ 540.820697][T23085] hsr0 speed is unknown, defaulting to 1000 [ 540.831301][T23094] openvswitch: netlink: EtherType 50a is less than min 600 [ 540.870646][T23094] openvswitch: netlink: EtherType 50a is less than min 600 [ 540.923493][T23102] tipc: Enabling of bearer rejected, media not registered [ 540.974584][T23106] netlink: 'syz.0.4961': attribute type 1 has an invalid length. [ 540.986357][T23106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4961'. [ 541.254497][T23120] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 541.273903][ T981] IPVS: starting estimator thread 0... [ 541.398413][T23133] IPVS: using max 29 ests per chain, 69600 per kthread [ 541.652720][T23149] sit0: Caught tx_queue_len zero misconfig [ 541.673813][T23150] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 541.681875][T23150] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 541.826521][T23168] netlink: 'syz.0.4978': attribute type 5 has an invalid length. [ 541.971415][T23171] geneve2: entered promiscuous mode [ 541.996602][T23171] geneve2: entered allmulticast mode [ 542.410233][T23195] sctp: [Deprecated]: syz.0.4986 (pid 23195) Use of int in max_burst socket option. [ 542.410233][T23195] Use struct sctp_assoc_value instead [ 542.448833][T23202] bond4: option mode: invalid value (133) [ 542.453443][T23217] netlink: 'syz.3.4990': attribute type 1 has an invalid length. [ 542.532760][T23202] bond4 (unregistering): Released all slaves [ 542.682909][T23217] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.770692][T23223] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.778268][T23223] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 542.802028][T23223] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 542.862379][T23229] veth9: entered promiscuous mode [ 542.895475][T23229] bond12: (slave veth9): Enslaving as an active interface with a down link [ 542.916006][T23234] 8021q: adding VLAN 0 to HW filter on device bond12 [ 543.142717][T23268] netlink: 'syz.1.5000': attribute type 1 has an invalid length. [ 543.440870][T23286] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 543.501624][T23291] dvmrp6: entered allmulticast mode [ 543.511916][T23292] openvswitch: netlink: Flow actions attr not present in new flow. [ 543.742896][T23304] kthread_run failed with err -4 [ 543.894258][T23323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.093438][T23348] __nla_validate_parse: 16 callbacks suppressed [ 544.093450][T23348] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5028'. [ 544.340101][T23366] netlink: 'syz.3.5034': attribute type 16 has an invalid length. [ 544.348746][T23366] netlink: 'syz.3.5034': attribute type 17 has an invalid length. [ 544.368240][T23366] erspan0: entered promiscuous mode [ 544.400709][T23366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.411346][T23366] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.435304][T23366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.615147][T23386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 545.001275][T23408] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5050'. [ 545.021876][T23409] dvmrp0: entered allmulticast mode [ 545.093429][T23412] netlink: 'syz.4.5051': attribute type 10 has an invalid length. [ 545.104276][T23412] veth0_virt_wifi: entered allmulticast mode [ 545.128035][T23412] team0: Port device veth0_virt_wifi added [ 545.134521][T23413] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5052'. [ 545.229185][T23417] sch_fq: defrate 0 ignored. [ 545.248873][T23419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.664598][T23453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.701624][T23455] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5064'. [ 546.299233][T23498] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 546.394200][T23507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5082'. [ 546.524720][T23516] tipc: Enabling of bearer rejected, failed to enable media [ 546.898613][T23537] netlink: 'syz.4.5088': attribute type 1 has an invalid length. [ 546.925905][T23538] netlink: 'syz.4.5088': attribute type 1 has an invalid length. [ 547.076454][T23551] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 547.446837][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5099'. [ 547.467806][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5099'. [ 547.790685][T23592] vlan2: entered promiscuous mode [ 547.801524][T23586] xt_CT: No such helper "snmp_trap" [ 547.806172][T23592] vlan2: entered allmulticast mode [ 547.816104][T23592] hsr_slave_1: entered allmulticast mode [ 548.068084][T23615] netlink: 'syz.3.5109': attribute type 6 has an invalid length. [ 548.109038][T23618] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 548.117268][T23614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5112'. [ 548.194616][T23626] dvmrp6: entered allmulticast mode [ 548.443706][T23637] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5116'. [ 548.642910][T23652] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5122'. [ 548.663376][T23652] batman_adv: batadv0: Interface deactivated: dummy0 [ 548.716652][T23652] batman_adv: batadv0: Removing interface: dummy0 [ 548.827075][T23658] tipc: Enabled bearer , priority 0 [ 548.847684][T23656] syzkaller0: entered promiscuous mode [ 548.865029][T23656] syzkaller0: entered allmulticast mode [ 548.891770][T23656] tipc: Resetting bearer [ 548.941896][T23654] tipc: Resetting bearer [ 548.999667][T23654] tipc: Disabling bearer [ 549.230581][T23686] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 549.251167][T23686] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 549.275708][T23686] tipc: Resetting bearer [ 549.294930][T23686] xt_bpf: check failed: parse error [ 549.312427][T23693] netlink: 'syz.4.5131': attribute type 1 has an invalid length. [ 549.318153][T23697] pim6reg1: entered promiscuous mode [ 549.325559][T23697] pim6reg1: entered allmulticast mode [ 549.331298][T23693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.435630][T23706] vlan2: entered promiscuous mode [ 549.460273][T23706] bond0: entered promiscuous mode [ 549.519224][T23715] __nla_validate_parse: 1 callbacks suppressed [ 549.519240][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5139'. [ 549.563905][T23715] netlink: 'syz.3.5139': attribute type 3 has an invalid length. [ 549.572514][T23715] netlink: 'syz.3.5139': attribute type 1 has an invalid length. [ 549.695310][T23726] veth0_to_bridge: entered promiscuous mode [ 549.776542][T23726] veth0_to_bridge: left promiscuous mode [ 549.893733][T23746] xt_ecn: cannot match TCP bits for non-tcp packets [ 549.923582][T23746] netlink: 'syz.2.5150': attribute type 10 has an invalid length. [ 549.942887][T23746] netlink: 'syz.2.5150': attribute type 10 has an invalid length. [ 550.034714][T23756] syzkaller0: entered promiscuous mode [ 550.048422][T23756] syzkaller0: entered allmulticast mode [ 550.057944][T23754] tipc: Enabled bearer , priority 0 [ 550.079376][T23758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5155'. [ 550.105122][T23759] tipc: Resetting bearer [ 550.144153][T23767] netlink: 'syz.4.5157': attribute type 29 has an invalid length. [ 550.159118][T23767] netlink: 'syz.4.5157': attribute type 29 has an invalid length. [ 550.178644][T23767] netlink: 500 bytes leftover after parsing attributes in process `syz.4.5157'. [ 550.192226][T23759] tipc: Resetting bearer [ 550.221331][T23759] tipc: Disabling bearer [ 550.285400][T23775] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 550.563846][T23793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5164'. [ 550.585227][T23793] IPVS: Error connecting to the multicast addr [ 550.621099][T23792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5165'. [ 550.751386][T23802] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5168'. [ 550.765798][T23802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5168'. [ 550.777701][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5168'. [ 551.324794][T23839] netlink: 'syz.4.5174': attribute type 10 has an invalid length. [ 551.346022][T23839] batman_adv: batadv0: Adding interface: netdevsim0 [ 551.357575][T23839] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.433514][T23839] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 551.485331][T23850] tipc: Enabled bearer , priority 0 [ 551.503387][T23850] syzkaller0: entered promiscuous mode [ 551.511826][T23850] syzkaller0: entered allmulticast mode [ 551.537984][T23850] tipc: Resetting bearer [ 551.552871][T23848] tipc: Resetting bearer [ 551.616236][T23848] tipc: Disabling bearer [ 551.649851][T23856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.854763][T23880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.088259][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5187'. [ 552.309055][T23913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5193'. [ 552.322502][T23913] tipc: Invalid UDP bearer configuration [ 552.322554][T23913] tipc: Enabling of bearer rejected, failed to enable media [ 552.390946][T23921] tipc: Enabled bearer , priority 0 [ 552.413269][T23921] syzkaller0: entered promiscuous mode [ 552.437806][T23921] syzkaller0: entered allmulticast mode [ 552.505464][T23913] bond5: Removing last ns target with arp_interval on [ 552.531371][T23916] tipc: Resetting bearer [ 552.663545][T23937] wlan0 speed is unknown, defaulting to 1000 [ 552.674599][T23937] wlan0 speed is unknown, defaulting to 1000 [ 552.683161][T23937] hsr0 speed is unknown, defaulting to 1000 [ 553.231141][T23915] tipc: Resetting bearer [ 553.294010][T23915] tipc: Disabling bearer [ 553.546056][T23997] siw: device registration error -23 [ 554.339081][T24027] netlink: 'syz.1.5221': attribute type 3 has an invalid length. [ 554.681856][T24053] macvtap0: entered promiscuous mode [ 554.688071][T24053] macvtap0: entered allmulticast mode [ 554.694431][T24053] gretap0: entered allmulticast mode [ 554.705971][T24053] team0: Device macvtap0 failed to register rx_handler [ 554.724874][T24057] xt_hashlimit: overflow, try lower: 3/0 [ 554.738531][T24053] gretap0: left allmulticast mode [ 554.744029][T24056] xt_hashlimit: overflow, try lower: 3/0 [ 554.905550][T24065] netlink: 'syz.3.5234': attribute type 21 has an invalid length. [ 554.914028][T24065] netlink: 'syz.3.5234': attribute type 6 has an invalid length. [ 554.925509][T24065] __nla_validate_parse: 10 callbacks suppressed [ 554.925524][T24065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5234'. [ 555.040333][T24077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5239'. [ 555.073434][T24081] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5240'. [ 555.330846][T24092] IPVS: persistence engine module ip_vs_pe_ not found [ 555.530168][T24111] netlink: 'syz.4.5248': attribute type 12 has an invalid length. [ 555.563837][T24110] netlink: 'syz.2.5247': attribute type 1 has an invalid length. [ 555.682439][T24114] bond28: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 555.716847][T24120] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5250'. [ 555.727136][T24120] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 555.736068][T24114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5247'. [ 555.772965][T24110] veth13: entered promiscuous mode [ 555.813048][T24110] bond28: (slave veth13): Enslaving as a backup interface with a down link [ 555.871019][ T13] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 555.906232][T24114] 8021q: adding VLAN 0 to HW filter on device bond28 [ 555.968901][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5253'. [ 556.007267][ T13] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 556.011621][T24131] vlan4: entered allmulticast mode [ 556.034533][T24131] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 556.111645][T24143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5256'. [ 556.196575][T24151] siw: device registration error -23 [ 556.331402][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5264'. [ 556.393444][T24170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.484371][T24177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5267'. [ 556.625262][T24184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.685643][T24187] syzkaller1: entered promiscuous mode [ 556.695985][T24184] netlink: 'syz.1.5269': attribute type 33 has an invalid length. [ 556.707494][T24187] syzkaller1: entered allmulticast mode [ 556.795549][T24184] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 556.818956][T24184] bond6 (unregistering): Released all slaves [ 556.916780][T24212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5274'. [ 556.944211][T24205] openvswitch: netlink: Unknown key attributes 2 [ 557.189429][T24230] bridge7: entered promiscuous mode [ 557.196826][T24230] bridge7: entered allmulticast mode [ 557.570591][T24253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.668326][T24257] veth0: entered promiscuous mode [ 557.715487][T24257] tc_dump_action: action bad kind [ 557.748727][T24256] veth0: left promiscuous mode [ 558.750416][T24276] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 558.808507][T24275] x_tables: unsorted entry at hook 2 [ 558.823132][T24282] netlink: 'syz.2.5294': attribute type 1 has an invalid length. [ 558.858068][T24282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.139941][T24301] netlink: 'syz.1.5301': attribute type 1 has an invalid length. [ 559.235123][T24301] bond6: entered promiscuous mode [ 559.258192][T24301] macvlan4: entered promiscuous mode [ 559.277313][T24301] macvlan4: entered allmulticast mode [ 559.304527][T24310] sctp: [Deprecated]: syz.4.5303 (pid 24310) Use of int in max_burst socket option. [ 559.304527][T24310] Use struct sctp_assoc_value instead [ 559.330782][T24301] bond6: entered allmulticast mode [ 559.361453][T24301] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 559.405691][T24301] bond6: left promiscuous mode [ 559.673776][T24324] tipc: Enabling of bearer rejected, already enabled [ 559.828177][T24343] netlink: 'syz.4.5311': attribute type 3 has an invalid length. [ 559.856262][T24349] netlink: 'syz.1.5315': attribute type 4 has an invalid length. [ 559.924285][T24357] xt_nat: multiple ranges no longer supported [ 560.231225][T24377] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.402781][T24390] __nla_validate_parse: 14 callbacks suppressed [ 560.402799][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5328'. [ 560.424160][T24396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5326'. [ 560.442613][T24394] tipc: Enabling of bearer rejected, media not registered [ 560.693198][T24410] : entered promiscuous mode [ 561.144142][T24438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5342'. [ 561.289951][T24448] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5346'. [ 561.303330][T24449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5346'. [ 561.320693][T24448] syzkaller1: entered promiscuous mode [ 561.324389][T24451] netlink: 'syz.0.5347': attribute type 1 has an invalid length. [ 561.326459][T24448] syzkaller1: entered allmulticast mode [ 561.343308][T24447] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 561.353047][T24447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5346'. [ 561.363782][T24447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5346'. [ 561.374659][T24451] bond7: entered promiscuous mode [ 561.380169][T24451] bond7: entered allmulticast mode [ 561.385746][T24451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 561.440600][T24455] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5348'. [ 561.799535][T24482] netlink: 'syz.2.5356': attribute type 12 has an invalid length. [ 561.846226][T24487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5355'. [ 561.855907][T24487] netlink: 'syz.4.5355': attribute type 7 has an invalid length. [ 561.864302][T24487] netlink: 'syz.4.5355': attribute type 8 has an invalid length. [ 561.879833][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5355'. [ 562.090022][T24496] netlink: 'syz.2.5359': attribute type 9 has an invalid length. [ 562.099103][T24496] netlink: 'syz.2.5359': attribute type 11 has an invalid length. [ 562.111345][T24496] netlink: 'syz.2.5359': attribute type 12 has an invalid length. [ 562.123956][T24496] openvswitch: netlink: Message has 4 unknown bytes. [ 562.240400][T24508] delete_channel: no stack [ 562.257514][T24508] delete_channel: no stack [ 562.367932][T24519] netlink: 'syz.1.5369': attribute type 1 has an invalid length. [ 562.385044][ T1170] bond0: (slave bridge0): link status definitely down, disabling slave [ 562.445604][T24519] bond7: (slave bridge0): making interface the new active one [ 562.455425][T24519] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 562.557938][T24532] tipc: Enabled bearer , priority 0 [ 562.573733][T24532] syzkaller0: entered promiscuous mode [ 562.590746][T24532] syzkaller0: entered allmulticast mode [ 562.650130][T24532] tipc: Resetting bearer [ 562.665073][T24530] tipc: Resetting bearer [ 562.709162][T24530] tipc: Disabling bearer [ 562.742004][T24540] geneve3: entered promiscuous mode [ 562.869609][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.879961][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.123233][T24563] netem: incorrect ge model size [ 563.128663][T24563] netem: change failed [ 563.286148][T24580] netlink: 'syz.0.5387': attribute type 27 has an invalid length. [ 563.308479][T24583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.625709][T24602] netlink: 'syz.4.5396': attribute type 10 has an invalid length. [ 563.654179][T24602] team0: Device veth1_macvtap failed to register rx_handler [ 564.316546][T24651] tipc: Enabled bearer , priority 0 [ 564.341472][T24651] bridge6: entered promiscuous mode [ 564.346905][T24651] bridge6: entered allmulticast mode [ 564.356036][T24651] syzkaller0: entered promiscuous mode [ 564.362284][T24651] syzkaller0: entered allmulticast mode [ 564.373635][T24654] v: renamed from vlan0 (while UP) [ 564.491929][T24667] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 564.504498][T24651] tipc: Resetting bearer [ 564.528613][T24650] tipc: Resetting bearer [ 564.560321][T24650] tipc: Disabling bearer [ 565.693539][T24736] __nla_validate_parse: 22 callbacks suppressed [ 565.693556][T24736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5431'. [ 565.715062][T24737] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5430'. [ 565.869583][T24749] xt_cluster: node mask cannot exceed total number of nodes [ 566.010212][T24745] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5436'. [ 566.178575][T24762] syzkaller0: entered promiscuous mode [ 566.184095][T24762] syzkaller0: entered allmulticast mode [ 566.406754][T24781] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.624864][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5452'. [ 566.749765][T24808] netlink: 'syz.4.5456': attribute type 11 has an invalid length. [ 566.758209][T24808] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5456'. [ 566.769728][T24808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5456'. [ 566.779694][T24808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5456'. [ 566.856051][T24814] : entered promiscuous mode [ 566.893194][T24816] validate_nla: 1 callbacks suppressed [ 566.893210][T24816] netlink: 'syz.3.5462': attribute type 1 has an invalid length. [ 566.937868][T24823] netlink: 'syz.3.5462': attribute type 1 has an invalid length. [ 567.152147][T24833] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 567.193977][ T30] audit: type=1800 audit(1763048552.809:5): pid=24840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5468" name="memory.events" dev="tmpfs" ino=2201 res=0 errno=0 [ 567.195421][T24840] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 567.250778][T24839] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 567.270349][T24844] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5471'. [ 567.278809][T24839] IPVS: Unknown mcast interface: vcan0 [ 567.786196][T24886] netlink: 'syz.1.5482': attribute type 9 has an invalid length. [ 567.837581][T24890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.183922][T24905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5487'. [ 568.215312][T24910] syzkaller0: entered promiscuous mode [ 568.232204][T24910] syzkaller0: entered allmulticast mode [ 568.249694][T24905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5487'. [ 568.262246][T24916] netlink: 'syz.4.5493': attribute type 4 has an invalid length. [ 568.282891][T24910] sctp: [Deprecated]: syz.2.5489 (pid 24910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.282891][T24910] Use struct sctp_sack_info instead [ 568.309582][T24916] netlink: 'syz.4.5493': attribute type 4 has an invalid length. [ 568.602562][T24925] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 569.777897][T25011] netlink: 'syz.2.5524': attribute type 1 has an invalid length. [ 569.785781][T25011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.872527][T25020] netlink: 'syz.3.5525': attribute type 10 has an invalid length. [ 569.920436][T25020] team0: Port device geneve0 added [ 569.948979][T25022] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:599 [ 569.987562][T16522] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.031548][T16522] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.091170][T16522] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.126345][T16522] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.268236][T25045] netlink: 'syz.2.5533': attribute type 1 has an invalid length. [ 570.701006][T25073] netlink: 'syz.4.5539': attribute type 11 has an invalid length. [ 570.783130][T25048] infiniband sy: set down [ 570.795553][T25048] infiniband sy: added bond_slave_0 [ 570.935218][T25048] RDS/IB: sy: added [ 570.964576][T25048] smc: adding ib device sy with port count 1 [ 570.973300][T25089] __nla_validate_parse: 9 callbacks suppressed [ 570.973316][T25089] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5543'. [ 570.987227][T25048] smc: ib device sy port 1 has no pnetid [ 571.030886][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5542'. [ 571.438311][T25118] netlink: 'syz.2.5553': attribute type 21 has an invalid length. [ 571.483195][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5553'. [ 571.508798][T25118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5553'. [ 571.701159][T25134] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5558'. [ 571.710775][T25134] nbd: illegal input index -8454144 [ 571.809370][T25140] syzkaller0: entered promiscuous mode [ 571.822059][T25140] syzkaller0: entered allmulticast mode [ 571.863054][T25140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5560'. [ 571.898534][T25147] validate_nla: 1 callbacks suppressed [ 571.898550][T25147] netlink: 'syz.2.5559': attribute type 12 has an invalid length. [ 571.949388][T25137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5559'. [ 572.000855][T25147] bond30: option primary_reselect: invalid value (255) [ 572.010973][T25147] bond30 (unregistering): Released all slaves [ 572.028538][T25150] erspan0: entered allmulticast mode [ 572.056523][T25140] netlink: 'syz.4.5560': attribute type 58 has an invalid length. [ 572.074603][T25140] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5560'. [ 572.410644][T25165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 572.537677][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 572.704355][T25182] tipc: Enabled bearer , priority 0 [ 572.719883][T25186] syzkaller0: entered promiscuous mode [ 572.725443][T25186] syzkaller0: entered allmulticast mode [ 572.753537][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5573'. [ 572.781126][T25187] tipc: Resetting bearer [ 572.798553][T25180] tipc: Resetting bearer [ 572.888650][T25180] tipc: Disabling bearer [ 573.039656][T25195] syzkaller0: entered promiscuous mode [ 573.045300][T25195] syzkaller0: entered allmulticast mode [ 573.109059][T25212] netlink: 'syz.2.5578': attribute type 1 has an invalid length. [ 573.157700][T25213] netlink: 'syz.2.5578': attribute type 1 has an invalid length. [ 574.708947][T25223] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 574.938220][T25239] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 575.093778][T25255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.715792][T25292] netlink: 'syz.2.5599': attribute type 62 has an invalid length. [ 575.838372][T25296] netlink: 'syz.2.5602': attribute type 3 has an invalid length. [ 576.326326][T25329] __nla_validate_parse: 6 callbacks suppressed [ 576.326344][T25329] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5609'. [ 576.342713][T25328] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5609'. [ 576.497327][T25337] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5612'. [ 576.542302][T25339] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 576.559041][T25339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5613'. [ 576.645505][T25343] netlink: 'syz.2.5613': attribute type 1 has an invalid length. [ 576.782060][T25345] bond30: (slave gretap3): making interface the new active one [ 576.791138][T25345] bond30: (slave gretap3): Enslaving as an active interface with an up link [ 576.805722][T25348] tipc: Enabling of bearer rejected, already enabled [ 576.911693][T25356] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5619'. [ 577.031526][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5622'. [ 577.041002][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5622'. [ 577.045591][T25370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5619'. [ 577.059464][T25369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.059775][T25368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.161436][T25375] erspan0: left promiscuous mode [ 577.172214][T25375] erspan0: entered allmulticast mode [ 577.179231][T25379] openvswitch: netlink: IP tunnel dst address not specified [ 577.272674][T25385] netlink: 'syz.3.5628': attribute type 2 has an invalid length. [ 577.297963][T25385] netlink: 'syz.3.5628': attribute type 2 has an invalid length. [ 577.505564][T25402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5632'. [ 577.839364][T25427] tipc: Enabled bearer , priority 0 [ 577.846804][T25427] syzkaller0: entered promiscuous mode [ 577.852844][T25427] syzkaller0: entered allmulticast mode [ 577.874263][T25427] tipc: Resetting bearer [ 577.901003][T25425] tipc: Resetting bearer [ 577.932279][T25428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5640'. [ 577.942012][T25425] tipc: Disabling bearer [ 578.177097][T25444] tipc: Enabled bearer , priority 10 [ 578.190050][T25448] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 578.198960][T25448] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 578.232020][T25448] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 578.243250][T25448] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 578.399649][T25459] syzkaller0: entered promiscuous mode [ 578.405149][T25459] syzkaller0: entered allmulticast mode [ 579.882821][T25482] siw: device registration error -23 [ 579.946061][T25491] netlink: 'syz.0.5660': attribute type 33 has an invalid length. [ 580.166134][T25506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.176544][T25506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.202886][T25506] batman_adv: batadv0: Removing interface: netdevsim0 [ 580.248720][T25510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.269954][T25510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.363432][T25522] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 580.380694][T25522] bond13 (unregistering): Released all slaves [ 580.763433][T25551] net veth1_virt_wifi .: renamed from virt_wifi0 [ 581.002798][T25562] netlink: 'syz.3.5683': attribute type 12 has an invalid length. [ 581.033247][T25568] netlink: 'syz.2.5685': attribute type 9 has an invalid length. [ 581.046675][T25568] netlink: 'syz.2.5685': attribute type 9 has an invalid length. [ 581.089938][T25570] sock: sock_timestamping_bind_phc: sock not bind to device [ 581.112357][T25567] hsr_slave_0 (unregistering): left promiscuous mode [ 581.335126][T25582] __nla_validate_parse: 23 callbacks suppressed [ 581.335142][T25582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5693'. [ 581.561460][T25602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5697'. [ 581.650634][T25607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5698'. [ 581.708498][T25613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5701'. [ 581.859577][T25619] syzkaller1: entered promiscuous mode [ 581.874738][T25619] syzkaller1: entered allmulticast mode [ 581.928910][T25631] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 2, id = 0 [ 581.930569][T25634] macsec0: left allmulticast mode [ 582.050415][T25640] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 582.332677][T25657] dvmrp6: left allmulticast mode [ 582.673723][T25688] netlink: 528 bytes leftover after parsing attributes in process `syz.3.5723'. [ 582.739315][T25688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5723'. [ 582.902288][T25699] bond7: option mode: invalid value (133) [ 582.941525][T25699] bond7 (unregistering): Released all slaves [ 582.993459][T25713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5729'. [ 583.019861][T25713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5729'. [ 583.204681][T25723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5733'. [ 583.222078][T25727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5733'. [ 583.299962][T25731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 583.756428][T25763] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 583.834535][T25769] xt_TPROXY: Can be used only with -p tcp or -p udp [ 584.432579][T25802] nbd: couldn't find device at index 0 [ 584.916686][T25834] validate_nla: 1 callbacks suppressed [ 584.916704][T25834] netlink: 'syz.2.5769': attribute type 12 has an invalid length. [ 585.293599][T25853] netlink: 'syz.1.5775': attribute type 10 has an invalid length. [ 585.511525][T25865] tipc: Enabling of bearer rejected, already enabled [ 585.892434][T25891] netlink: 'syz.4.5784': attribute type 4 has an invalid length. [ 586.447686][T25923] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 586.498992][T25926] __nla_validate_parse: 19 callbacks suppressed [ 586.499019][T25926] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5793'. [ 586.520477][T25922] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 586.673020][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'. [ 586.913305][T25949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5799'. [ 586.933052][T25949] xfrm1: entered promiscuous mode [ 586.939005][T25949] xfrm1: entered allmulticast mode [ 586.949464][T25949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5799'. [ 587.127746][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5804'. [ 587.264904][T25967] xfrm1: entered allmulticast mode [ 587.285203][T25973] tipc: Enabling of bearer rejected, failed to enable media [ 587.295096][ T5828] block nbd6: Receive control failed (result -32) [ 587.377793][T25970] tipc: Enabling of bearer rejected, failed to enable media [ 587.384494][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5811'. [ 587.395666][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5811'. [ 587.411586][T25984] delete_channel: no stack [ 587.625658][T26000] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5817'. [ 587.682157][T26008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5816'. [ 587.926138][T26022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'. [ 589.321064][T26049] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 589.344333][T26049] bond8 (unregistering): Released all slaves [ 589.369505][T26060] netlink: 'syz.2.5835': attribute type 10 has an invalid length. [ 589.410959][T26051] tipc: Enabled bearer , priority 0 [ 589.418829][T26051] syzkaller0: entered promiscuous mode [ 589.424305][T26051] syzkaller0: entered allmulticast mode [ 589.451837][T26051] tipc: Resetting bearer [ 589.467840][T26047] tipc: Resetting bearer [ 589.489375][T26047] tipc: Disabling bearer [ 589.563202][T26070] 8021q: VLANs not supported on ip6_vti0 [ 589.917481][T26091] xt_connbytes: Forcing CT accounting to be enabled [ 589.925826][T26091] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 590.572395][T26108] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1536) ! [ 590.593683][T26108] syzkaller0: entered promiscuous mode [ 590.600525][T26108] syzkaller0: entered allmulticast mode [ 590.624774][T26108] tipc: Enabled bearer , priority 0 [ 590.636538][T26106] tipc: Resetting bearer [ 590.668723][T26106] tipc: Disabling bearer [ 590.675216][T26111] netlink: 'syz.1.5848': attribute type 4 has an invalid length. [ 590.968823][T26131] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 590.999943][T26131] bond8 (unregistering): Released all slaves [ 591.431292][T26153] bond0: entered allmulticast mode [ 591.484377][T26150] sctp: [Deprecated]: syz.2.5859 (pid 26150) Use of int in maxseg socket option. [ 591.484377][T26150] Use struct sctp_assoc_value instead [ 598.697258][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.300627][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.310104][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 655.017363][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 666.112406][ T6540] tipc: Subscription rejected, illegal request [ 666.295226][T26186] Bluetooth: MGMT ver 1.23 [ 666.334804][T26188] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 666.525337][T26198] tipc: Enabled bearer , priority 0 [ 666.541695][T26198] syzkaller0: entered promiscuous mode [ 666.577109][T26198] syzkaller0: entered allmulticast mode [ 666.817805][T26222] sctp: [Deprecated]: syz.4.5884 (pid 26222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 666.817805][T26222] Use struct sctp_sack_info instead [ 666.835232][ T30] audit: type=1107 audit(1763048652.449:6): pid=26220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-Z4D6zR'FOa["ԂV%Ѹ܇1 ϲèb#%iʏ<W' [ 666.859761][T26223] __nla_validate_parse: 5 callbacks suppressed [ 666.859778][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5882'. [ 666.898906][T26221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5881'. [ 667.110470][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5886'. [ 667.119837][T26233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5886'. [ 667.806614][T26221] macvtap1: entered promiscuous mode [ 667.811996][T26221] vlan0: entered promiscuous mode [ 667.817455][T26221] erspan0: entered promiscuous mode [ 667.823033][T26221] macvtap1: entered allmulticast mode [ 667.828438][T26221] vlan0: entered allmulticast mode [ 667.841478][T26197] tipc: Resetting bearer [ 667.861261][T26197] tipc: Disabling bearer [ 667.918056][ T5948] tipc: Node number set to 3609949063 [ 668.063433][T26257] pim6reg: entered allmulticast mode [ 668.134104][T26267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5892'. [ 668.176199][T26266] wlan0 speed is unknown, defaulting to 1000 [ 668.193802][T26266] wlan0 speed is unknown, defaulting to 1000 [ 668.306222][T26266] hsr0 speed is unknown, defaulting to 1000 [ 668.396775][T26285] ieee802154 phy0 wpan0: encryption failed: -22 [ 668.426482][T26285] macvtap2: entered allmulticast mode [ 668.432801][T26285] veth0_macvtap: entered allmulticast mode [ 668.640957][T26301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5905'. [ 668.761896][T26308] tipc: Enabled bearer , priority 0 [ 668.786553][T26308] tipc: Resetting bearer [ 668.819424][T26313] netlink: 'syz.1.5909': attribute type 21 has an invalid length. [ 668.843275][T26313] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5909'. [ 668.854012][T26307] tipc: Disabling bearer [ 668.898276][T26314] netlink: 'syz.1.5909': attribute type 1 has an invalid length. [ 669.335129][T26348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5918'. [ 669.543839][T26364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5922'. [ 669.802251][T26375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 669.922236][T26385] lo: left promiscuous mode [ 669.993212][T26385] tunl0: left promiscuous mode [ 670.028108][T26385] gre0: left promiscuous mode [ 670.032968][T26385] gretap0: left promiscuous mode [ 670.039317][T26385] ip_vti0: left promiscuous mode [ 670.064056][T26385] sit0: left promiscuous mode [ 670.245712][T26385] bridge_slave_1: left allmulticast mode [ 670.292020][T26385] batadv_slave_1: left allmulticast mode [ 670.365280][T26385] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 670.385790][T26385] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 670.608736][T26385] tipc: Resetting bearer [ 670.622019][T26385] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 670.632413][T26385] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 670.736558][T26385] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 670.763682][T26383] syzkaller1: entered promiscuous mode [ 670.769502][T26383] syzkaller1: entered allmulticast mode [ 670.795370][T26404] mac80211_hwsim hwsim36 : renamed from wlan1 (while UP) [ 670.820322][T16523] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.832472][T16523] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.874855][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5935'. [ 670.885532][T16523] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.919698][T26413] syzkaller1: entered promiscuous mode [ 670.925311][T26413] syzkaller1: entered allmulticast mode [ 671.197653][T26432] netlink: 'syz.4.5940': attribute type 17 has an invalid length. [ 671.234192][T26439] vlan3: entered promiscuous mode [ 671.500751][T26465] netlink: 'syz.4.5948': attribute type 1 has an invalid length. [ 671.976727][T20463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 671.988003][T20463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 671.998856][T20463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.008402][T20463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.016114][T20463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 672.040666][T26480] __nla_validate_parse: 4 callbacks suppressed [ 672.040683][T26480] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5952'. [ 672.072288][T26478] wlan0 speed is unknown, defaulting to 1000 [ 672.080971][T26478] wlan0 speed is unknown, defaulting to 1000 [ 672.090015][T26478] hsr0 speed is unknown, defaulting to 1000 [ 672.174395][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5953'. [ 672.253589][T26482] 0: reclassify loop, rule prio 0, protocol 800 [ 672.487842][T26494] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5957'. [ 672.489969][T26495] tipc: Failed to remove unknown binding: 66,1,1/0:3507425475/3507425477 [ 672.506675][T26495] tipc: Failed to remove unknown binding: 66,1,1/0:3507425475/3507425477 [ 672.700236][T26507] netlink: 'syz.2.5960': attribute type 153 has an invalid length. [ 672.728385][T26507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5960'. [ 672.823153][T26478] chnl_net:caif_netlink_parms(): no params data found [ 672.871711][T26516] netlink: 'syz.1.5963': attribute type 10 has an invalid length. [ 672.882247][T26514] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 672.887452][T26516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5963'. [ 672.920097][T26516] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 672.927511][T26516] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 672.936877][T26516] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 673.015630][T26521] netlink: 'syz.4.5965': attribute type 5 has an invalid length. [ 673.148674][T26533] netlink: 'syz.4.5968': attribute type 1 has an invalid length. [ 673.156649][T26478] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.164589][T26478] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.182985][T26478] bridge_slave_0: entered allmulticast mode [ 673.205046][T26478] bridge_slave_0: entered promiscuous mode [ 673.223957][T26478] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.243565][T26478] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.251637][T26478] bridge_slave_1: entered allmulticast mode [ 673.262817][T26478] bridge_slave_1: entered promiscuous mode [ 673.378322][T26478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.394722][T26478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.503196][T26478] team0: Port device team_slave_0 added [ 673.516406][T26478] team0: Port device team_slave_1 added [ 673.621769][T26478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.645999][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.723488][T26478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.736495][T26556] tipc: Enabled bearer , priority 0 [ 673.752890][T26478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.760849][T26478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.796656][T26478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.811511][T26568] syzkaller0: entered promiscuous mode [ 673.817932][T26568] syzkaller0: entered allmulticast mode [ 673.827163][T26556] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5976'. [ 673.905162][T26574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5978'. [ 673.921818][T26478] hsr_slave_0: entered promiscuous mode [ 673.930236][T26478] hsr_slave_1: entered promiscuous mode [ 673.936656][T26478] debugfs: 'hsr0' already exists in 'hsr' [ 673.943254][T26478] Cannot create hsr debugfs directory [ 673.949822][T26556] syzkaller0: left promiscuous mode [ 673.955053][T26556] syzkaller0: left allmulticast mode [ 673.964497][T26556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 674.016252][T26579] netlink: 'syz.2.5980': attribute type 12 has an invalid length. [ 674.025254][T26579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5980'. [ 674.034725][T26579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5980'. [ 674.034852][T26554] tipc: Resetting bearer [ 674.060426][T20463] Bluetooth: hci0: command tx timeout [ 674.067960][T26554] tipc: Disabling bearer [ 674.173514][T26584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5982'. [ 674.183925][T26581] syzkaller0: entered promiscuous mode [ 674.190096][T26581] syzkaller0: entered allmulticast mode [ 674.634858][T26605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.141912][T20463] Bluetooth: hci0: command tx timeout [ 676.159929][T26636] netlink: 'syz.3.5997': attribute type 1 has an invalid length. [ 676.241303][T26633] tipc: Enabling of bearer rejected, already enabled [ 676.256802][T26639] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 676.269655][T26639] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 676.281156][T26639] tipc: Resetting bearer [ 676.759626][T26478] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 676.805376][T26478] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 676.846351][T26478] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 676.893980][T26478] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 676.934983][T26684] tipc: Enabled bearer , priority 0 [ 676.944004][T26684] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 676.972939][T26682] tipc: Disabling bearer [ 677.069503][T26478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.116055][T26478] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.136671][T16523] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.143876][T16523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.170245][T16523] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.177450][T16523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.254188][T26707] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 677.426492][T26718] syzkaller0: entered promiscuous mode [ 677.438508][T26718] syzkaller0: entered allmulticast mode [ 677.615708][T26478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.786083][T26478] veth0_vlan: entered promiscuous mode [ 677.832259][T26478] veth1_vlan: entered promiscuous mode [ 677.925495][T26478] veth0_macvtap: entered promiscuous mode [ 677.948472][T26745] xt_l2tp: wrong L2TP version: 0 [ 677.961788][T26478] veth1_macvtap: entered promiscuous mode [ 677.974881][T26745] netlink: 'syz.4.6028': attribute type 1 has an invalid length. [ 677.996264][T26478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.007387][T26745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.023624][T26478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.038441][T26747] __nla_validate_parse: 3 callbacks suppressed [ 678.038456][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6029'. [ 678.059595][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.082322][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.108890][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.139993][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.227792][T20463] Bluetooth: hci0: command tx timeout [ 678.280673][ T1170] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.378402][ T1170] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.419188][ T1170] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.500741][T16523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.519653][T16523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.567482][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.600108][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.878835][T26785] v: renamed from vlan0 (while UP) [ 679.240252][T26805] netlink: 'syz.4.6046': attribute type 1 has an invalid length. [ 679.322192][T26807] netlink: 'syz.4.6046': attribute type 1 has an invalid length. [ 679.540614][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.553592][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.562334][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.571345][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.580482][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.596782][T26826] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6052'. [ 679.632891][T26820] wlan0 speed is unknown, defaulting to 1000 [ 679.642360][T26820] wlan0 speed is unknown, defaulting to 1000 [ 679.651002][T26820] hsr0 speed is unknown, defaulting to 1000 [ 679.862782][T26842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6057'. [ 679.981039][T26847] netlink: 'syz.4.6059': attribute type 16 has an invalid length. [ 680.001756][T26847] netlink: 'syz.4.6059': attribute type 17 has an invalid length. [ 680.029732][T26847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 680.201673][T26820] chnl_net:caif_netlink_parms(): no params data found [ 680.300981][ T5828] Bluetooth: hci0: command tx timeout [ 680.532012][T26820] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.546659][T26820] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.564655][T26820] bridge_slave_0: entered allmulticast mode [ 680.582882][T26820] bridge_slave_0: entered promiscuous mode [ 680.593329][T26876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6069'. [ 680.603491][T26820] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.620362][T26820] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.628813][T26820] bridge_slave_1: entered allmulticast mode [ 680.636722][T26820] bridge_slave_1: entered promiscuous mode [ 680.673340][T26886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.723241][T26820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.740365][T26820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.806777][T26893] netlink: 'syz.2.6074': attribute type 4 has an invalid length. [ 680.808820][T26820] team0: Port device team_slave_0 added [ 680.828431][T26820] team0: Port device team_slave_1 added [ 680.844148][T26893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6074'. [ 680.902935][T26820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.912918][T26820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.977763][T26820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.009216][T26820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.025523][T26820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.070472][T26905] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6077'. [ 681.081651][T26820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.149753][T26911] syzkaller0: entered promiscuous mode [ 681.167474][T26911] syzkaller0: entered allmulticast mode [ 681.226184][T26820] hsr_slave_0: entered promiscuous mode [ 681.236305][T26820] hsr_slave_1: entered promiscuous mode [ 681.259497][T26820] debugfs: 'hsr0' already exists in 'hsr' [ 681.268080][T26820] Cannot create hsr debugfs directory [ 681.504896][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 681.520791][T26936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 681.540891][T26936] xfrm1: entered promiscuous mode [ 681.546346][T26936] xfrm1: entered allmulticast mode [ 681.552656][T26936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 681.586250][T26934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6083'. [ 681.608559][T26938] netlink: 'syz.4.6084': attribute type 2 has an invalid length. [ 681.658207][ T5828] Bluetooth: hci1: command tx timeout [ 681.719634][T26938] : entered promiscuous mode [ 681.821781][T26820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.832828][T26820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.010411][T26820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.022604][T26820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.162252][T26820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.182313][T26820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.231821][T26958] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.240168][T26958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.242436][T26963] tipc: Enabled bearer , priority 0 [ 682.247883][T26958] IPv6: NLM_F_CREATE should be set when creating new route [ 682.247944][T26958] IPv6: NLM_F_CREATE should be set when creating new route [ 682.255444][T26962] syzkaller0: entered promiscuous mode [ 682.276126][T26962] syzkaller0: entered allmulticast mode [ 682.340163][T26820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.350968][T26820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.389404][T26962] tipc: Resetting bearer [ 682.454053][T26962] tipc: Disabling bearer [ 682.559628][T26967] syzkaller0: entered promiscuous mode [ 682.565204][T26967] syzkaller0: entered allmulticast mode [ 682.731332][T26983] nbd: must specify a size in bytes for the device [ 683.301154][T26990] __nla_validate_parse: 127 callbacks suppressed [ 683.301182][T26990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6102'. [ 683.738910][ T5828] Bluetooth: hci1: command tx timeout [ 684.020031][T26986] bridge_slave_1: entered promiscuous mode [ 684.159481][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6103'. [ 684.174805][T26996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6103'. [ 684.210190][T26820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 684.245138][T26820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 684.272299][T26820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 684.302979][T26820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.570128][T26820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.605356][T26820] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.639255][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.646568][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.712064][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.719266][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.842122][T26820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.035581][T27058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6119'. [ 685.061077][T27058] wlan0 speed is unknown, defaulting to 1000 [ 685.071737][T27058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6119'. [ 685.161376][T27065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6121'. [ 685.277170][T26820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.282921][T27072] No such timeout policy "syz0" [ 685.365165][T27074] netlink: 'syz.0.6126': attribute type 11 has an invalid length. [ 685.379611][T26820] veth0_vlan: entered promiscuous mode [ 685.409823][T26820] veth1_vlan: entered promiscuous mode [ 685.519506][T26820] veth0_macvtap: entered promiscuous mode [ 685.558723][T26820] veth1_macvtap: entered promiscuous mode [ 685.634367][T26820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.646559][T27089] netlink: 'syz.1.6131': attribute type 1 has an invalid length. [ 685.651890][T26820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.706726][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.735155][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.758938][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805611][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.818497][T20463] Bluetooth: hci1: command tx timeout [ 685.827912][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.933536][T27101] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6135'. [ 685.944179][T27102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6133'. [ 685.970759][T27104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6134'. [ 685.991992][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.021701][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.064139][T27104] bond31: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 686.079227][T27104] bond31 (unregistering): Released all slaves [ 686.112102][T27112] syzkaller0: entered promiscuous mode [ 686.119293][T27112] syzkaller0: entered allmulticast mode [ 686.161225][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.185117][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.223150][T27116] sctp: [Deprecated]: syz.1.6138 (pid 27116) Use of int in max_burst socket option. [ 686.223150][T27116] Use struct sctp_assoc_value instead [ 686.455551][T27124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6039'. [ 686.484906][T27123] netlink: 'syz.1.6140': attribute type 10 has an invalid length. [ 686.541717][T27131] bridge_slave_1: left allmulticast mode [ 686.567553][T27131] bridge_slave_1: left promiscuous mode [ 686.573353][T27131] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.670188][T27131] bridge_slave_0: left allmulticast mode [ 686.675866][T27131] bridge_slave_0: left promiscuous mode [ 686.734509][T27131] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.928651][T27123] syz_tun: entered promiscuous mode [ 686.942546][T27123] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 687.106172][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 687.123474][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 687.132495][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 687.148791][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 687.158025][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 687.373843][T27154] wlan0 speed is unknown, defaulting to 1000 [ 687.383445][T27154] wlan0 speed is unknown, defaulting to 1000 [ 687.411187][T27154] hsr0 speed is unknown, defaulting to 1000 [ 687.899668][T20463] Bluetooth: hci1: command 0x0419 tx timeout [ 688.192530][T27224] netlink: 'syz.0.6162': attribute type 4 has an invalid length. [ 688.514547][T27154] chnl_net:caif_netlink_parms(): no params data found [ 688.536633][T27250] netlink: 'syz.3.6171': attribute type 3 has an invalid length. [ 688.558101][T27250] netlink: 'syz.3.6171': attribute type 1 has an invalid length. [ 688.629717][T27253] __nla_validate_parse: 10 callbacks suppressed [ 688.629734][T27253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6172'. [ 688.661047][T27253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6172'. [ 688.736353][T27267] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 688.736727][T27255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 688.835043][T27265] xt_CT: No such helper "snmp_trap" [ 688.935365][T27154] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.946888][T27154] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.954306][T27154] bridge_slave_0: entered allmulticast mode [ 688.962383][T27154] bridge_slave_0: entered promiscuous mode [ 688.970949][T27154] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.978500][T27154] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.999282][T27154] bridge_slave_1: entered allmulticast mode [ 689.020899][T27154] bridge_slave_1: entered promiscuous mode [ 689.034466][T27277] tc_dump_action: action bad kind [ 689.109782][T27277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6177'. [ 689.119783][T27277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6177'. [ 689.159276][T27154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.180400][ T5828] Bluetooth: hci4: command tx timeout [ 689.184176][T27154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.292214][T27154] team0: Port device team_slave_0 added [ 689.303853][T27154] team0: Port device team_slave_1 added [ 689.422382][T27154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.430978][T27154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.459121][T27154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.481402][T27309] SET target dimension over the limit! [ 689.545684][T27307] bond1: invalid ARP target 0.0.0.0 specified for addition [ 689.553848][T27307] bond1: option arp_ip_target: invalid value (0) [ 689.563089][T27307] bond1 (unregistering): Released all slaves [ 689.604483][T27154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.621150][T27154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.652933][T27154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.661258][T27319] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 689.703810][T27320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 689.870179][T27154] hsr_slave_0: entered promiscuous mode [ 689.887963][T27154] hsr_slave_1: entered promiscuous mode [ 689.899443][T27154] debugfs: 'hsr0' already exists in 'hsr' [ 689.905244][T27154] Cannot create hsr debugfs directory [ 689.977717][ T5828] Bluetooth: hci1: command 0x0419 tx timeout [ 690.070964][T27335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6194'. [ 690.084015][T27335] tipc: Invalid UDP bearer configuration [ 690.084066][T27335] tipc: Enabling of bearer rejected, failed to enable media [ 690.322259][T27333] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.329963][T27333] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.431341][T27333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 690.653306][T27365] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 690.667316][T27365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.776084][T27154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.795753][T27154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.008890][T27380] bridge0: port 3(veth0_to_bridge) entered blocking state [ 691.022198][T27380] bridge0: port 3(veth0_to_bridge) entered disabled state [ 691.034781][T27380] veth0_to_bridge: entered allmulticast mode [ 691.044589][T27380] veth0_to_bridge: entered promiscuous mode [ 691.178424][T18999] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 691.190354][T18999] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 691.198759][T18999] CPU: 1 UID: 0 PID: 18999 Comm: kworker/1:15 Not tainted syzkaller #0 PREEMPT(full) [ 691.208303][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.218340][T18999] Workqueue: events l2cap_info_timeout [ 691.223791][T18999] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 691.229685][T18999] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e [ 691.249279][T18999] RSP: 0018:ffffc9000f017788 EFLAGS: 00010202 [ 691.255337][T18999] RAX: dffffc0000000000 RBX: ffffffff891f0888 RCX: 890bafb962d70300 [ 691.263328][T18999] RDX: 0000000000000000 RSI: ffffffff891f0888 RDI: 000000000000004c [ 691.271291][T18999] RBP: ffffffff8a4ff8f5 R08: 0000000000000001 R09: 0000000000000000 [ 691.279253][T18999] R10: dffffc0000000000 R11: ffffffff8a4ff8b0 R12: 0000000000000000 [ 691.287215][T18999] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 691.295178][T18999] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 691.304090][T18999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.310656][T18999] CR2: 00007f3048039e9c CR3: 000000002756e000 CR4: 00000000003526f0 [ 691.318611][T18999] Call Trace: [ 691.321873][T18999] [ 691.324785][T18999] __kasan_check_byte+0x12/0x40 [ 691.329621][T18999] lock_acquire+0x8d/0x360 [ 691.334016][T18999] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.339199][T18999] ? __cancel_work+0x254/0x2e0 [ 691.343945][T18999] lock_sock_nested+0x48/0x100 [ 691.348701][T18999] ? l2cap_sock_ready_cb+0x45/0x140 [ 691.353887][T18999] l2cap_sock_ready_cb+0x45/0x140 [ 691.358896][T18999] l2cap_conn_start+0x76d/0xe50 [ 691.363741][T18999] ? __pfx_l2cap_conn_start+0x10/0x10 [ 691.369097][T18999] ? __lock_acquire+0xab9/0xd20 [ 691.373929][T18999] ? __pfx___mutex_lock+0x10/0x10 [ 691.378938][T18999] ? process_scheduled_works+0x9ef/0x17b0 [ 691.384648][T18999] l2cap_info_timeout+0x68/0xa0 [ 691.389484][T18999] ? process_scheduled_works+0x9ef/0x17b0 [ 691.395188][T18999] process_scheduled_works+0xae1/0x17b0 [ 691.400723][T18999] ? __pfx_process_scheduled_works+0x10/0x10 [ 691.406688][T18999] worker_thread+0x8a0/0xda0 [ 691.411259][T18999] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 691.417580][T18999] ? __kthread_parkme+0x7b/0x200 [ 691.422505][T18999] kthread+0x711/0x8a0 [ 691.426556][T18999] ? __pfx_worker_thread+0x10/0x10 [ 691.431645][T18999] ? __pfx_kthread+0x10/0x10 [ 691.436225][T18999] ? _raw_spin_unlock_irq+0x23/0x50 [ 691.441494][T18999] ? lockdep_hardirqs_on+0x9c/0x150 [ 691.446673][T18999] ? __pfx_kthread+0x10/0x10 [ 691.451244][T18999] ret_from_fork+0x4bc/0x870 [ 691.455817][T18999] ? __pfx_ret_from_fork+0x10/0x10 [ 691.460910][T18999] ? __switch_to_asm+0x39/0x70 [ 691.465648][T18999] ? __switch_to_asm+0x33/0x70 [ 691.470388][T18999] ? __pfx_kthread+0x10/0x10 [ 691.474962][T18999] ret_from_fork_asm+0x1a/0x30 [ 691.479709][T18999] [ 691.482717][T18999] Modules linked in: [ 691.488605][T18999] ---[ end trace 0000000000000000 ]--- [ 691.503474][ T5828] Bluetooth: hci4: command tx timeout [ 691.509059][T18999] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 691.515142][T18999] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 80 9e 23 09 cc 66 66 66 66 66 66 2e [ 691.535475][T18999] RSP: 0018:ffffc9000f017788 EFLAGS: 00010202 [ 691.539591][T27398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6210'. [ 691.542067][T18999] RAX: dffffc0000000000 RBX: ffffffff891f0888 RCX: 890bafb962d70300 [ 691.557925][T27398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6210'. [ 691.559512][T18999] RDX: 0000000000000000 RSI: ffffffff891f0888 RDI: 000000000000004c [ 691.573593][T27154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.576097][T18999] RBP: ffffffff8a4ff8f5 R08: 0000000000000001 R09: 0000000000000000 [ 691.576112][T18999] R10: dffffc0000000000 R11: ffffffff8a4ff8b0 R12: 0000000000000000 [ 691.611281][T18999] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 691.615257][T27154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.619388][T18999] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 691.619407][T18999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 691.619421][T18999] CR2: 00007f241fb75060 CR3: 0000000056b4c000 CR4: 00000000003526f0 [ 691.619440][T18999] Kernel panic - not syncing: Fatal exception [ 691.619690][T18999] Kernel Offset: disabled