last executing test programs: 3.674979379s ago: executing program 3 (id=14927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x58, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x44, 0x1, [@m_ctinfo={0x40, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) 3.525087043s ago: executing program 3 (id=14932): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/244, 0xf4}], 0x5, &(0x7f0000000600)=""/220, 0xdc}, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) 3.372367043s ago: executing program 3 (id=14936): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) pread64(r0, &(0x7f0000000200)=""/4089, 0x170, 0x7) 3.183303332s ago: executing program 3 (id=14940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 3.049106937s ago: executing program 3 (id=14944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c000780080013400000040e0500010006000008050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000007040)=ANY=[@ANYRES64=r0], 0x3828}, 0x1, 0x0, 0x0, 0x91}, 0x10) recvfrom(r0, &(0x7f0000000000)=""/87, 0x57, 0x0, &(0x7f0000000080)=@phonet={0x23, 0x9, 0x8, 0x1}, 0x80) (async) recvfrom(r0, &(0x7f0000000000)=""/87, 0x57, 0x0, &(0x7f0000000080)=@phonet={0x23, 0x9, 0x8, 0x1}, 0x80) socket$isdn(0x22, 0x3, 0x22) (async) r2 = socket$isdn(0x22, 0x3, 0x22) sendto$isdn(r2, &(0x7f0000000100)={0x3ff, 0x2}, 0x8, 0x20000000, 0x0, 0x0) 2.86243545s ago: executing program 3 (id=14949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c000000060a090400000000000000000200000060000480300001800e000100696d6d6564696174650000001c000280100002800c000280080001800000000108000140000000002c0001800b0001006e756d67656e00001c0002800800034000000001080001400000000408000240000000940900010073797a30000000000900020073797a32"], 0xb4}}, 0x0) 1.707849228s ago: executing program 2 (id=14967): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x28, 0x3, 0x72, &(0x7f0000000080)) (async) socketpair(0x28, 0x3, 0x72, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r2, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.59913887s ago: executing program 4 (id=14968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYBLOB="05e5eda147b500491a8a47d40be5a21b11ca5249c7220e2e0f936c055c85fbf7f0f23ba2205129bfd131eae9dd7098bb5b56cc939d4dad77bde3049f28419c7fdcdb2a810068aba23ae32c4aa197", @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x4001050}, 0x40408c4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000180)="bb2fa78d625645943415e5c7b18eff77e647e51d034c04284d4ce053e9", &(0x7f00000001c0)=""/69, &(0x7f0000000300)="853570b666d019ecfbc7417744d76c1f1d5f48eb1d06f4ae874c54b8d4128ae0af369bcd2321027f672a509370f56d997493087f679ec710b5540e9f5f6571fbfc2d2adb4b761864cc9df32c92a94682ff76344bf38fa568462353965be7f2580dba21f281ada3eb9f853e48858530ed084573305ad7a5c4d94b5de80050cf0af0c2269dd2fd9ee19c113024d183a8a50283a9c314715389ba0c3ceddbac9141c640f9521619b27ae40b068d85710d8a9f9ad1725883c1fa20428a7d6f89c2d748e14a951a", &(0x7f0000000a40)="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", 0x0, r1}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3, r4}, 0xc) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000080)=@random="60c4d6ca2bdf0ac6e4116554c0f2d8c1b7168d80fa9a68e9d99923813a99", 0x1e, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_80211_join_ibss(&(0x7f00000000c0)='wlan0\x00', &(0x7f0000000100)=@default_ibss_ssid, 0x6, 0x1) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_80211_join_ibss(&(0x7f0000000600)='wlan0\x00', &(0x7f0000000640)=@default_ap_ssid, 0x6, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa0, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xbe}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x25}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x4}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x48084) 1.59846076s ago: executing program 2 (id=14969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00'}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0xffdd) r1 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) recvmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x4, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40000121) 1.254458135s ago: executing program 1 (id=14972): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x40, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x6}}]}}]}, 0x40}}, 0x20004084) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$caif_stream(0x25, 0x1, 0x3) r6 = getuid() r7 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000001740), &(0x7f00000017c0)=0x60) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ac1414aa00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000000206c000000e0000001000000000000000000000000feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008"], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r11}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async, rerun: 32) sendmsg$netlink(r4, &(0x7f0000001840)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc, &(0x7f0000001700)=[{&(0x7f0000000040)={0x1d4, 0x18, 0x200, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@broadcast}, @generic="a634f6c15d2b291bb088db536fb9a5c7dc4b95e8f0dac269", @generic="b913d5422ffe722e14dad893e5d7d282283564a3791126b15afe813f427cabefa625e566ab61bbb9318f26c7f1bf30947fa80506b44461f4ae191c5dc1a3230dcbf7226e208600d64a3b6bb1ac4b030703511573b0a297013d3dd331c4cbeb6b08e9ef202e1df80b5b9b46af8dd9aa7ae8e50353a5093b2f9e6b32de8faadee132a400d2582c9a3fc1f1ed10", @nested={0x8, 0x132, 0x0, 0x1, [@nested={0x4, 0x8}]}, @generic="4981a8d7e39004ddf0b22f0bb70a9ca2beb94a0989d3c176db72fe2d892bdb56dd051e97aa0f5a81be6d83faa51147fadeabcf9c76ff72ca", @generic="b94729d5743002a123ef6a0006c57ca9aa3f1d8a65dbbff0345e6642e1b3c1cefd229472ebd9f6d09f8d7daa01d36477f8c6e780f022706d02cadf75d5c21d44f6f4505f5949082fa7ebc5ffbc1331094529c0393fde5f8aeed9ce17c6bbf12196f17255c465e284bafbf572e1bcfb859af3090939818a61b89217e3e5fddbe89d170d3970fc5a9c479b10905030aa3865aafa61ed4b011236f9fb18d15c082f5be879e5cb585d31a17d829b0696bdc5f709cd64041e9c1cd3fa99617a6452f596323c1f8f6fe4e1cd09f6e1", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x3}]}, 0x1d4}, {&(0x7f0000001880)={0x1290, 0x3a, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x113, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0xf5, 0x0, 0x0, @fd=r0}, @nested={0x10fe, 0x4, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @ipv4=@remote}, @generic="1e1c722fedec1cc39b69bacd0c11b9d571fd8eee75f6c2dc3cd740eed55ec9ee18903c5672113b4b9bff623739f94aaf791f82976a077a3b76b521877f60b8fee2865a459e284b630588af85b6fe2a840c221de412146f388b153f194aa054f9c4c86838f13c9c18f38ab7b53597569920632bf01313f2d2668e7ac0d763bc74bcdc27fee8b51fd4c48a4d932905de4bf7df179f70cf4867d7019cb38fd702982d347a5d63a1a9acb975fecb093d6338584b075ba9bb4a6fb2396ae02a60f2212bf4ae334147ef988266a0e789945793394b400f465e3008f0ea5dec0890d960fbfc85b14f3e28a3329f", @typed={0x8, 0x90, 0x0, 0x0, @u32=0x4819}, @generic="6b3a15f47ffe5d4deec41a6715fa7250340c83c7d3f5ea793b8f0b5fe6b9f76d9a449238dbaea1f76fa1181018ed046c5814352bb59b0628b3e2a489cd03855d565b3bd9a1b896d5484e5dda925472343c6ec8d8e1b08982e92ef7f16c8d1240547f16391801ea02368e97494a2322b14121e388def247cae63edc7f5a59a3094f9e01cca17e5436b2f8f9ade611a18ce16c701aca366b0a8eaf9fd15401199929d288db7ebae79a8f787519a567a477b7ffe945bd49c52f7542a20d32b938535cbbf2446acb0bc7e859bcda9b11c0069172e86c1a1e6d37a54e8c61619e4f5fab62322ba25264c13efe260c9c1a8cf596310c319a14bae7c14f5d157bfddfdb38adffab1bb26c6bb2c95987450ff4878f59de9a63c287204c556426e63452c03c2754adee3742bc70eae8e764fc3b9efe9f3199c46ad53209a60d95a6498453810f3b76ac2b9b40e0321eed053eb57469c20778c014345dc226387bf705845f20593163429c7e9693a30369eefa7b8736165c531058efbf61ff7dafda867a95c37d6c7f87412980c431ed559eddf00d11cad97881c206d3966af6dc3441573fb42cd076a279bc2208b834abf372e52bad990b13f1bed4323ae47239e20d9f96b35418dcd074fefac6ccdcc2715eaa4b664f8e59d2e48ce22aa5cd78b7c210a8bcb047adf668b1963c839a8441783ec02ef4ca092d3f06f498409654401778ef9640ddc5a698dfc4252588b56083588897821cb2e5859396cca5eb857bf34335ce7ff1610103aa10b5a4e89e712744981f6c3045974b234b4c4a4ae4e3e9ae8add274364398ff60a31df764b1275c39c4b6da9f3bc0a914ca9a36865d2236e21ae7fb787771e612221dc8d4e766955b86ba42005582d15b9269f02ea22e56716cbc84f3802b1505e617910959ddff2d3a9f8a8221a8e6add6269babb58243a47694ca37b3018974f22f4458931a67694ae7c05b1262cfca550ffa9a03906b23aaac4d22314dbc00ac0d12ebc5d05bee0b797ddf6ce173fe539a24c371c1568faea681b2fd7261b3edb2452b48a584ff1152ccb12e462723f46db55ef855a116893b7d048c415d9956d0d5a3bbbe48e30ef7f859a0e6cc75506c733bb6f99d6b54489c6867df04d7cf0888086973bfad4a8b7eb0b7f6e3b505f4105493cc186effb5197d297fc0c62497356e7fe70de44bce958dd78f476b7598ef5f248f150fb4a4a19c5a629764416032aad74c6aafd7a8c1a1a4aff3fae7785037483c82a91e0c0520e3c9be986a30f8667e65e8466b5fd6213a3d8e459056f0fb6de213373e2e56f554db5ce4a108156bff90e98a40971c5648f64755a755b703d8eb50697ede0e0484da4c390495468979ab48de9510717e37c039b210a3e810843d79b825d24166438f898031626f7eb140d2379c5c3e09df2defab1a9d20087f5e198041ee5a26e8ca0857af77a8749616b85bf019ecac1079847137ae0463d485b7b4184075b550f0c668e22e28aa4191ae53d04d3e2996b09d37721bd013749a7e3b685f064e274300577d3fac646c27b82b5e4c55ac4119df1a5a3e0c897fe7660758499aeff7658b89bdce2445576a07ae77e66fcfe4b3ac043e90288a5a1b7fc797c6bee1b1df510f4525f24749bc76149fe1106e95a5fe736d1edf36a5194e9618df9619ca299e215387bba212ca1be7ee18cd92c5fdf0277ed78e729e3672f4723c1f93d82f086973603aae6a6e36e723b0de53975635de92f4b3e8b7d02ca59b2a0401a95cc62fc9b1ad31ee835ab457b064631f3a2d6fa6dd1e14f0f4f558cc6683e11b68a2d1da6ef5b322d6b7547812496c99b8846d67aa01ac04f14a63084d4c2df9dc7a307e5a89ca442073b32d961fe2a6c4ef19f306e1aa7ba8215cfa62003bac08647ae9c74728b909899f8e350024845e66f4b5329e94ba0d4e4156cb50e1ed9eb335fb2fd1b847b8ca74ff40a34bd6b3eadbf630f9db4ee4c55be7045ed79ef98b6b0cb69891fe19b8ca53168776d895845703658a9613622b75d9a95e39de666c130a928d4f2db30d9a54be6d7d99119513ca42e6e02127c9d08c8fa518056d623197b18265cf08e65a9d43ddb433dc19ffd1d3a772dafd0754e328e1b21d45ee901f8b6b325e90168805615b4e3f27a25676caad1b1401ba98d2aeb5b94e7c1ede67cc490db5da8f35ffd8ccdce762ce4a278162ce9e734036327616ce46e5e198f2ae338b575dcfdf7379bb83ee238e9ad4566b1df7cde8a9957f0c63723045208c627592eb5ddfcda9287bef598ba38f0809dfb676d299db8de86bf8fe9ca6167c5da724bb72693e5b3377615b620fead3ff93b64dff6ce2b57505f44cad2cccfa2eeb4b6cfd3895a9253de5882c210d76ecca1d2c7c4521195954aeb9d8ed0196afc9f6bdcb8d89c22f45af53bd70b641172bfd3693ba55e3ffae54e3149b52e1ee883e4a38c641b6ec5f89cba16190c1c03bdc714ec08e215c259f9394db6f25d41ae13f51119735f38777581bb94baefec2104bad263f67ab7b1577dd5905ee226cbfd53fe998a1a0418bb73ea39db5f64ed74428def1720f7ca4fbffcc31ba623fcd2cd55a63e700d9ae247cc4748db696fb6b84035af9877b64d0a443585c719859915272305a09e21bad9f9ffbfd9a876697d0a69c243d198747fc5d8dedfdbcf29d3e3711edc754f5a172fa0dc08e09bc15f5d5617ba751613dd5928e456db9d7e6c1b29a78d567acc92bc71fc3ebc956e39e4a3307a950d9edfca70ac4ce058326b61bd356298de8fd20dda234253484040c0cd4451301333e06f36be622cf63b5f108b9a6873b8508cdf08193dbc9d7231f94bd5605b3fe73571c7e575a5239f63a091394a8d2fe2527ebeec4b07a2e536ad6eb40943d65edc43ec3ee2c4defc359378afdc51914271ce11348c5129de7af00662846c856e929603b4f385c0dd02a737c455fb3a07115efae1551d51aca342a4d9cd8c2f6f4031cd40ff8e8e58b821c18cc44c5ba8c730aca12f98cac5b4beb54ef0fb33087bc7e07c836a83d4117169674f10a00ea0646850f50bc4b75dd646987f4959bdb830bfcabf4096119d5d558db372b4f94bc7076e4b07bb195cf6b48197548d9dd0e4c4382497ea4a4c35be36b7388aa55917baf1494847c55b08199bbb2227c75a33749ffeb49eff66d4a6807cc746ca54df1d76b79d91d5312d3ce3eac8b8822259afaa07f2736c46bb54dd283fb4c1aa454935b11777eb64b5b227ce9578cd71229728e9eb727f9d0e4990a963391236e8a8fdb0a1974737daf2b7aac29fc38c26fd301d1036cd6bde0c75287d083f85aba320b8b14cd5ca0a894c86aef47355c7515823043146bdbdb604124502b02ad5ebbd2c2093482b1b173b4376a4d97d588f8fc8fb961ec34e49cf5208b7a6f3b5a23fe071dec56201888a5e195f5f0b647f0e73f2de910d0315b6a6192ba18900799a342ef64e51d30ced056abfbe3e814cce87d0a1d1407ffb541fb90e6797d0a49de09b016855b5f8010750ad0a6a31f69acc18711ba8cd26f6100b7c3ff6fa0f7c809a75fe5dbdec60f693db23237dc37351541cfef05bd5ca3964944a3e9456ed669d61ac50e9ebce7235dd948b1af195150949e24c21eb15bfad254adb4b46da7c312bb33f6a529ac1bc971a826ca60a2aa7dcf657c3745b2a62132ca395403becba8367c6b6b36dd167643eb04c9119c5dc50af765c43d3dab69146f213b49c5fc5e967f42c71bf48e9a3def31713ce810a1cc8dba3cbf48dd5b915a78f8c1ce0f1d9100fcab1cd3bd777493df76a96c4a14fe06d99c5de85992070be0645d42cc59e82d4b1dde242d5896cd357407829c287ae6f135fd13a611287efeb227b675296568ff5cdec5052c28a2e774c2708646f13d9bf1d4811a75f4d6ed382eba691cfcff1ee65a5406ac9356fb6c5cebd16ab135bb24aa0d2aa8d27ea2beb0e7b0d6e78f4a5dd6d1ec702642f03cd7a8551e8ade10f1fa207fddb37ab460c3add5dcfa5ea65bda637e7747f7e4feb448e1b319287e6ebcf620786ebf99fe25ea8bc7c0e2493a65f23e2e43586523f472d5f27ca221a94dcac85290e83f98142303cc8b4652883126953840369893c9d87d24586753dbc1a2381fbd9c79b15c470185254a3ce5a75b62d98463ca5c0a92c17be44ef1b3fd94a4417fcf5e1172347117619eaf6e64b8d7a0d76380f5e68d95d0b5c3f8ab6ef274585b341bf146d99bc0ab3ca874fa348de3a90df7e7aeb76fd715aa4d8c520f507f9b53fd1b72d99e629d11462497c6171076ab2eee1f6dd8423dcd307a40cbf6b0c5335e950f9fdb465fde7689f500a9269cca836f973df1cdeaff7f0f9fc262d2f9935d3a1ad1586b93d63da1027f3b4084668a2e0d8534f787772105cceb1b4266b798dcc6cde04198e4f7346e1633d2baa68bd1334b3c4ba6d6af95de0c4b72d22cadc3fa6e58f0c78b40ee907128a19b529748f974c7a1f14d6503e43bf8e9d5f4faf63b9cfb38584f1c8d87ed7ba9c7d466ea6406b4c0faa17182985d7c95a3cdb7ce0ad64b07e85fba3881040af82c84886fadcff98c1ec762ecac0021fc1ff89ecabbe2ec2c4ff88b14afed8ca2379cb558d9677b585e657957bdc7801f3e21f6c9a5adc500e802456a601f86c5137acaa677bcee8c7976bd940cf1582e2c570f8c20dbb7b07f78eb0e9e7e148d8dfaa76627abb8462d510463adab11c1a58b7cbb261c675726ea4c5dd4a4fe8b85e1182faa911859992fc812222cf52027619ea8d876a231e6a65d8b69c387bea96213f5c8a838a1875419a13188cf06515d554cc8e42213cae1247677ca8c61c5c259757c4f7cd3cee87d4b1f104edc1c5fb35af6cf41b1f0a7a93f7762a330d1caf3bf4f2d400450d6bdc973a865da6951d29cc4ffce85b333dbe774c68bbffe08e1ac40d0d8c7aa1a0907f359669be06c1cac92b19c74d2615f940341386222b89c689339074493a3d45cc6e80d4a4eb15e01afdaeca0a28b4b20b320a11482f87e016c7719b95fd9b642ff1450f684718c3cdaf8d4401b18e5125ce4923f81ad5cf619c6bc7d74682449f112c67fc1a9ebfe3fb36c6382d5c5fe982b8ecadfad631b6295f37cf17476ae5d252499df82fc8af938f3b57aef445fd8494d7bcb564fbe06b0c8d00f1710ae4760845ce207f72395a3ee888ffdde1eb1eabf5bc0d4ccfc8acab21d0349f0c448daad760512fc6456c4bb00aa0c898fba4a50c342a67dc0e03bb6d93921bd662a92b519f87aa7ba7d3f7ee8f9580b1befa78b1080f53305d7f13b655c62d9b9e3b0396decabdcdc0a99c19042eaf899791bfb01ee87a516116a539dc2377533d00c2b1e571daed7f58e616f93a0215c3a3291c51ea59bc20854abd742240dd38e2fb644d23ac678d7b77f02091a0247570a0c8d7b1ce13a0cc484f3078e0581228ed0b238207818d905e30c760f8cd4378dc50e1c76f2b555bb1bbac8fc3d83c6284accecd66718c93796db7f46dee6bdd3ea3814aa297447e7c56d2c28735141306769d2dad27099ce613858fa15bf2c6bfe0247896e1ecf5dfa1bd984617bb9d3ac54d74d9fe308e211e9075f97c569476623572d32a7057f2e5430621ebbacbf6a8834d14f5637927dad7f96ad1729b2415e7c0c606052a5d0f63d13094ca4aebddc7dd6420bfa0a15065670d941847021ff204611492b876d9078b02617a9c7f81751a1e2abd5532c44356b76ec96834cfcd94accee053592c2364169a504a01d0b26f13260b1c6da5f1b2e0b72aa0"]}, @generic="759a07f292c1211f5a0bd95fce997c973eba9495754571208d25ae0f36ac4890b41e04a86a04a5c43cc34c803cf7a889290425bbe46141ce0a4674ccdc55ad7c38fe2e0e6a53589ddfb1eca7eb9a0d6f46d2c27e086014ad035e36ff9172fc0ec37463be5a08d4416c1f2ebcfac2387a", @nested={0xdb, 0x7b, 0x0, 0x1, [@generic, @typed={0x8, 0xf, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x24}, @generic="49034f487ae0f235673300604412e50f41b21bb2753fa8eb13ad2ccc6ac1728504745222c21e637122cba781de698079d023fe0520a9b4abddf62d2d79c3c5575e2d1917f5b9d357781054a2d742e8c2a415d595c9fb09df059f71a51ed3c36b1f4d7ff32d377dc501a9fe1912b30b21414bb9b119bbf84749eaddade3f370b9ed99af204fd79481119ac7e99a34fde26d1a696865e09e6a96b3c90f73c19ade243f79b106aac1ef88bd3bf8b0ee4fa00b78ce0d8079c459b9adae3c8e21f3f6e8b926d6f16a598198f38a"]}, @typed={0x8, 0x9d, 0x0, 0x0, @uid=r11}, @nested={0x1b, 0xea, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @u32=0x8a7f}, @nested={0x4, 0xc9}, @generic="10529147838cb66da4f616"]}]}, 0x1290}, {&(0x7f0000001500)={0x11c, 0x3e, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@generic="c3ac879bbbdec9fbc92d02c0d35aa654539abec130a0b43b0aa1941e7e167effe7a6b9f238df1f80a6c2e644265e11466f382b79b365c6f64d2a8227163cb78febbb9724a2c656319b31126574a833e0a837c7705b6317541fa5292ee07a1b43c75761f9076bb36935920d7ebcbee67d19b34c", @nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x6, 0x10a, 0x0, 0x0, @str='.\x00'}]}, @generic="6809464c8400a006c929a8a8a3ca0f2ec41711db06c9ac072cf31892fb4ac3cae760fe7b06eafdad62a2cd3052b068d03e41a5fca83537f96c", @generic="c4b85fc621c971c0687557b2dd19d4c7f406dd948aaf111544c355c7a3472543b157b3eb7786f3e242d5fbb1c2543a6e80dfbe29c75dcf72c4ad80ba10c80b3c91bd57e4d3b92a2d6caf27164bb534caad"]}, 0x11c}, {&(0x7f0000001640)={0x90, 0x21, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x11c}]}, @generic="0993a222f6a5ff95f48a7358d128", @typed={0x8, 0x3b, 0x0, 0x0, @uid=r6}, @generic="ddb94085d29a3ecf9751cdc7f1472c1245890bc4c25c7adcec95df269248b2fed05c41dd84d2172a96241982b2a0911342dda0ad7c492d7f77bca43442baf5038b549628e80a61120526c8da866b9d9a7e1fa15073480c4e25756d8ef0a71aa9d2"]}, 0x90}], 0x4, &(0x7f0000001800)=[@rights={{0x30, 0x1, 0x1, [r0, r8, r0, r0, r0, r0, r7, r0]}}], 0x30, 0x14001}, 0x2004c000) (rerun: 32) 1.254030312s ago: executing program 2 (id=14973): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 1.075027447s ago: executing program 2 (id=14974): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009800)=ANY=[@ANYBLOB="1c0000002200010a29bd7000000000000a0000fd"], 0x1c}}, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000180)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r5, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r5, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x3c, 0x3, "b75620a8d12372ac61a742229bb93dadcb5749869ef08ca1d2200be1a832a8a8fb7c70d21e0caed58f206d93d1dbf7c94c1c1173c73ce8ec"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) write$6lowpan_control(r0, &(0x7f00000012c0)='connect aa:aa:aa:aa:aa:11 2', 0x56) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x18, &(0x7f00000000c0)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}, @generic={0x8, 0x1, 0x3, 0x6, 0xe}]}, &(0x7f0000000480)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.029305031s ago: executing program 4 (id=14975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}]}, &(0x7f0000000080)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) (async) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={r4, 0x1, 0x401, 0x6, 0x6dada434, 0xfff}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffed}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001", @ANYRESOCT=r6, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'netdevsim0\x00'}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) (async) shutdown(r9, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000140)={r10, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x3d0, 0x1398, 0x1398, 0x3d0, 0x1398, 0x3, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x2b8, 0x2e0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x8, 0x7c7, 0x5d, 0x2, 0x4, 0x2, 0x99, 0x0, 0x80, 0x78}, {0x8000000000000001}}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0xff000000, 0xffff00], 0x0, 0x8, 0x89, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) (async) write$tun(r11, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0xfffffffffffffd36, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="edc6762f937d4d866f87d881c75dd400b662cde5ce1db29bd430a31a4b1f780daedf5eacaeb7ddfecba91112b54f21232f1b9e2091ccab225c22a166e712e03ee4809c84978854a07ad26a228ad14d7cbc9d3f4ea87bc6bdf0c24573f3023cb37b41fbee05aa7cfe7b76d0e1326c344faf843a5e7c55431a08d7850eca5006f93dbe42634993fa0ca879429ac29c41cbe7b8d2dc174575b612ac46ce511dbd57c353c1eaa384449d7c289563ba0ad5a3f481aee5ab03a37f3df4c505f2366e26bda32402afc40ac57d59b563af09388c0492a2f8251f8820707cf6e3ff2df721fcc6b71e9a91a01cdc6c9c3f6b8468732967"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x50) 933.241107ms ago: executing program 1 (id=14976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x1000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000063012d00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 901.184698ms ago: executing program 0 (id=14978): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x14000, &(0x7f0000000080)={@_ha_fsid={[0x10001, 0x91]}, {0x40, 0x9, 0xfffffffe, 0x7}}, 0xfffffffd, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0xfffffffc}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x7, 0x40, 0x9, 0xfffffff8, 0x3}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x7, 0x2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 847.378074ms ago: executing program 0 (id=14979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_CIDR={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 771.286708ms ago: executing program 1 (id=14980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x1, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c74657200000000000000000000000020000000000000000000000000000500"/120], 0x78) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b504a5d7df22bed11a6400000400", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) 701.063122ms ago: executing program 4 (id=14981): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x8c04}, 0x20048080) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 647.930233ms ago: executing program 1 (id=14982): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800ebf9cd8caecb3d000000000000000000000071102b00000000000008000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 542.928416ms ago: executing program 4 (id=14983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffd75, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 542.483057ms ago: executing program 2 (id=14984): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 513.412157ms ago: executing program 0 (id=14985): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)='\xaa\xaa\xaa\xaa\xaa', 0x2000, &(0x7f00000000c0)={@align=0x1, {0x8, 0x43d8, 0x401, 0x8}}, 0x2, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1e91b5cc}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a8, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000000000000}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfac}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffd923}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7679}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf7a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffdfc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xba}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x67fabfe9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f038730}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x800}, 0x20080000) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 512.456826ms ago: executing program 1 (id=14986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085a9d382db00000095b2ea773f7784273ff2d74f2b1f8ac0c5e90fb85e4ec4915d"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000035254d2a787e9df402010101000000000000000000000006060012400002bc15"], 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x0) 398.798668ms ago: executing program 2 (id=14987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000240)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @igmp={{0x18, 0x4, 0x3, 0x5, 0xa3, 0x64, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@noop, @lsrr={0x83, 0x7, 0x9a, [@loopback]}, @ssrr={0x89, 0x2b, 0x54, [@empty, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @broadcast, @multicast2, @multicast1, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0x1e, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x7fffffff}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xcb, [@multicast2]}]}}, {0x17, 0x7, 0x0, @empty, "2b9e9a01c80c49bd87f071b47757618ee9f0d0f89d935d129046a77efc98a5e044c1a52e70e4586ed595072010b2b35eee5e9ac263c20f3fdadd9c"}}}}}}, 0xbd) 286.596046ms ago: executing program 0 (id=14988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x30b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000012000300686173683a6e65742c706f72740000000900020073797a32000000000500040000000000050005000a0000000500010006000000140007800800064000000000080008"], 0x60}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r6}) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt$packet_int(r6, 0x107, 0x17, 0x0, &(0x7f0000000100)) 267.37347ms ago: executing program 4 (id=14989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7a33a972d93350dee48c326e7220a6ed"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x18c4877}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="749eb8f45a5e100351cb66deac024635"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5a846537948fd9dd"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001840}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffccc, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x1a0}, 0x1, 0x0, 0x0, 0x4c050}, 0x4008000) r5 = socket$inet(0x10, 0x3, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 197.404822ms ago: executing program 0 (id=14990): r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x0, 0x8c, 0x80000001, r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0xe3, "75eedc0e4944c8142951c0f16112dead1cf2728939b61510fe191521430f5bbcfbfd788a41c39758b07f150d85f93b5c8f83ffd1f48d38e1fb3ed5b335e2c92ca9a9737d2f8b6cbb2a2de2420abeb05265c54489696c5e5676b9a6d01cfb6868e9630cf75ea9b85fa5a06f8a2528025d7d9645f751a901f9cabdf11eaa3297438f47cacc7f2b2d540c657443fe0d07ec9646981629743e536d73f325550c8efcf9f050b502923af56154efac714bad16fa54fbf3979fed6aeabb028f7ef7c279af3f700daf439e37425c87330f936252431a5c2a718f35998b17f8ad62db48a9bc88ce"}, &(0x7f00000001c0)=0xeb) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r2, 0x7f, 0xbf, "7ad9e3a1e2a5e4c1555fa5ebdeb54fb41a8002195239cb3dbe0cb668c8f73a0acb3135bdb008f1ac265b23a4b7aa4283e07eb24b4fadcc786b010248f1f4e51ba624fa73d33be1040430d0d509c92198f918943ad6bce0ca2afe08357ea0c60a184a2c6ffac81d8984ad6dc93427697f2ba240951a30a91e2940bd4c28a26a7d88d41eb822063cef662a2e8f8efbc8a745c233653e2c6ee94512cffb1ba6273736e0931f9514e67d6e1f85e8de593a7fc33c69a912c37fabb0519a0a2eb637"}, 0xc7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc3}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r3 = socket$inet(0x2, 0x1, 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000380), &(0x7f00000003c0)=0x4) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000400)="c7bb933908bb08aa6a01a861c54b3da110d8e7f184c8c0050a341f", 0x1b, 0x1, &(0x7f0000000440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32) write(r3, &(0x7f0000000480)="eef66fe16b80ebcb5c7944c99b0c9755bb4878c8e88ada3686392152981c05c37158d47283073ebd23ff305f477def3d0fce64188c14770ae74464ad69ed4004049a641d12e0122ea25dd7d767ce4cc1961af518", 0x54) (async) r4 = accept4$phonet_pipe(r3, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x0) bind$phonet(r4, &(0x7f0000000580)={0x23, 0x76, 0x47, 0xc0}, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfc75}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000700)={r1, 0xffffffff}, &(0x7f0000000740)=0x8) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000007c0)={0x7, &(0x7f0000000780)=[{0xe, 0x47, 0x1, 0xfff}, {0x3338, 0x10, 0x9, 0x9}, {0x1, 0x34, 0x4, 0x8}, {0x7ff, 0x40, 0x3, 0x2}, {0x2, 0x7, 0x10, 0x1}, {0x1, 0xe, 0xd, 0x5}, {0xfffd, 0x1, 0x1, 0x1}]}, 0x10) (async, rerun: 32) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000800)) (rerun: 32) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000840)={r7, 0x4}, 0x8) (async) r8 = accept4(r3, &(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000900)=0x80, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r5) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xcc, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_systemctl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:printer_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000b40)=0x86, 0x4) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r9) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r11, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20008840}, 0x8844) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000001100)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000001140)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000001240)=0xe8) sendmsg$nl_xfrm(r8, &(0x7f0000001640)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001600)={&(0x7f0000001280)=@polexpire={0x34c, 0x1b, 0x4, 0x70bd2a, 0x25dfdbfe, {{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e21, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x2b, r12, r13}, {0x1, 0x6, 0x3, 0x3, 0xffffffff, 0x80, 0xafd, 0x1}, {0x0, 0x3e, 0xfffffffffffffff4, 0x4}, 0xfce, 0x6e6bb2, 0x1, 0x1, 0x2, 0x2}, 0x2}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@remote, @in=@broadcast, @in=@remote, 0x6c, 0x3, 0x0, 0x3506, 0x2, 0xa}]}, @etimer_thresh={0x8, 0xc, 0xc86f}, @algo_auth={0x147, 0x1, {{'rmd128-generic\x00'}, 0x7f8, "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"}}, @tfcpad={0x8, 0x16, 0x7}, @sa={0xe4, 0x6, {{@in6=@private0, @in=@local, 0x4e23, 0x0, 0x4e20, 0x8, 0x2, 0x80, 0x180, 0x8, 0x0, r14}, {@in=@remote, 0x4d3, 0x6c}, @in=@local, {0x4, 0x5, 0x3, 0x1, 0x7, 0xf801, 0x2, 0x6}, {0xffffffffffffffff, 0x38f6, 0x8}, {0x10000, 0x91, 0xfffeffff}, 0x70bd2d, 0x3506, 0x14, 0x3, 0x9, 0x4}}]}, 0x34c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 139.435175ms ago: executing program 1 (id=14991): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'team_slave_0\x00'}) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) (async, rerun: 32) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 137.176536ms ago: executing program 4 (id=14992): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$sock(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) listen(r1, 0x2) r3 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xe}, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x6, 0x1, 0xfc, 0x2, @vifc_lcl_addr=@empty, @multicast1}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) (async) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$sock(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x80) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) listen(r1, 0x2) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0xe}, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x6, 0x1, 0xfc, 0x2, @vifc_lcl_addr=@empty, @multicast1}, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) 0s ago: executing program 0 (id=14993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xb}, {0x7, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @private1, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x900, 0x4, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x20}) r5 = socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x2, 0x0, 0x35, 0x5, 0x40, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0x2, 0x7, 0x10, 0x5}, @sadb_x_sa2={0x2, 0x13, 0xaa, 0x0, 0x0, 0x70bd25, 0x3502}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0xf, @private2, 0x9}, @in6={0xa, 0x4e24, 0x643, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}}, @sadb_key={0x11, 0x9, 0x3f0, 0x0, "524c6f4020dd9007188a2f1479cf533666a55bb22b17e53f5ac1505642ae006983b481fd89db5d77afb5d6b99d0cb7a86c34ea9295272b2c0a99547122f2ca992a023ed3de45353967e70574e2b9694d9ccd1b0a01ac4e6f6f663507c52efdd1021e29b1805041d6de4fa4f3695519a01dceb77a8f84744dd2e9787ef7aa"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd2b, 0x3503}, @sadb_address={0x3, 0x6, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @loopback}}, @sadb_x_sec_ctx={0x17, 0x18, 0x6, 0x8, 0xad, "b39aaf96f68ed8c687e35c5244feb59230c3c35c57b44d06def1ab8fcdc3a02e846db61fe081b4a03f0daec300ef095b23173607241eb6ca8cd7ac1e5a60e358f517f135e932eeac6561074a5abf38615446b2daf319a0081401a128c445b514bd42139fd17ef3dac320552a06d4755ec7705693179ee71e025023dcc4d5f5c509e22b1772f60af57802cc73426cabaa48529146f6899979557ed6a1f9e10b3c869e72eee498cf34271e9662a5"}]}, 0x200}}, 0x4004) (async) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x8, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x94) recvfrom(r6, 0x0, 0x0, 0x40000020, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600003f00000000008490783fffff20ac1414aa00000000"], 0xfd6c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000001000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r7, r8, 0x4, r10}, 0x10) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): de [ 1125.702580][T12307] bond6 (unregistering): (slave geneve4): Releasing active interface [ 1125.848286][T12307] team0: Port device bridge2 removed [ 1126.084418][T12307] bond0 (unregistering): left promiscuous mode [ 1126.109336][ T7348] smc: removing ib device syz0 [ 1126.109510][T12307] bond0 (unregistering): Released all slaves [ 1126.134680][T16363] Bluetooth: hci5: command tx timeout [ 1126.140393][T12307] bond1 (unregistering): Released all slaves [ 1126.170665][T12307] bond2 (unregistering): Released all slaves [ 1126.204927][T12307] bond3 (unregistering): (slave vlan2): Releasing active interface [ 1126.216086][T12307] bond3 (unregistering): Released all slaves [ 1126.233733][T12307] bond4 (unregistering): Released all slaves [ 1126.252750][T12307] bond5 (unregistering): Released all slaves [ 1126.277846][T12307] bond6 (unregistering): Released all slaves [ 1126.565657][T19757] __nla_validate_parse: 1 callbacks suppressed [ 1126.565675][T19757] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12606'. [ 1126.640134][T19580] chnl_net:caif_netlink_parms(): no params data found [ 1126.831805][T19769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12610'. [ 1127.219052][T19797] netlink: 124 bytes leftover after parsing attributes in process `syz.1.12615'. [ 1127.285710][T19580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.292872][T19580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.327519][T19580] bridge_slave_0: entered allmulticast mode [ 1127.373038][T19806] netlink: 'syz.3.12617': attribute type 9 has an invalid length. [ 1127.382340][T19806] netlink: 'syz.3.12617': attribute type 11 has an invalid length. [ 1127.390989][T19806] netlink: 'syz.3.12617': attribute type 12 has an invalid length. [ 1127.393149][T19580] bridge_slave_0: entered promiscuous mode [ 1127.453389][T19806] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.12617'. [ 1127.461450][T19580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.488347][T19580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.532209][T19580] bridge_slave_1: entered allmulticast mode [ 1127.562296][T19580] bridge_slave_1: entered promiscuous mode [ 1127.643036][T19814] IPv6: sit1: Disabled Multicast RS [ 1127.663298][T19814] sit1: entered allmulticast mode [ 1127.994560][T19840] netlink: 'syz.1.12623': attribute type 21 has an invalid length. [ 1127.997943][T19580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.083674][T19840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12623'. [ 1128.137140][T19580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.218795][T16363] Bluetooth: hci5: command tx timeout [ 1128.311321][T19847] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 1128.337620][T19580] team0: Port device team_slave_0 added [ 1128.376899][T19580] team0: Port device team_slave_1 added [ 1128.450776][T19853] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12626'. [ 1128.569129][T19580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1128.584499][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.639049][T19580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1128.670737][T19580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.686134][T19580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.752959][T19580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.083085][T19881] netlink: 'syz.1.12634': attribute type 8 has an invalid length. [ 1129.209714][T19580] hsr_slave_0: entered promiscuous mode [ 1129.236165][T19580] hsr_slave_1: entered promiscuous mode [ 1129.255608][T19889] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.12636'. [ 1129.267396][T19580] debugfs: 'hsr0' already exists in 'hsr' [ 1129.287394][T19580] Cannot create hsr debugfs directory [ 1130.294574][T16363] Bluetooth: hci5: command tx timeout [ 1131.687149][T19903] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1131.697056][T19903] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1131.705322][T19903] veth0_to_bridge: entered allmulticast mode [ 1131.713307][T19903] veth0_to_bridge: entered promiscuous mode [ 1131.722473][T19903] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1131.729726][T19903] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 1131.730307][T19920] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1131.765973][T19920] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1131.995374][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12643'. [ 1132.145613][T19934] bond3: Removing last ns target with arp_interval on [ 1132.178024][T12307] : left promiscuous mode [ 1132.291724][T19940] vcan1: entered promiscuous mode [ 1132.301410][T19940] vcan1: entered allmulticast mode [ 1132.391082][T19580] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.435394][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12646'. [ 1132.466776][T12307] tipc: Left network mode [ 1132.570638][T19580] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.728004][T12307] IPVS: stopping master sync thread 10073 ... [ 1132.946345][T19580] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.035545][T19972] bond1 (unregistering): Released all slaves [ 1133.288835][T19580] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.388500][T19987] netlink: 'syz.4.12654': attribute type 1 has an invalid length. [ 1133.437634][T20007] netlink: 'syz.3.12657': attribute type 1 has an invalid length. [ 1133.447352][T20007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12657'. [ 1133.582378][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12659'. [ 1133.828240][T19580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1133.854802][T19580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1133.920013][T19580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1134.103266][T12307] hsr_slave_0: left promiscuous mode [ 1134.117718][T12307] hsr_slave_1: left promiscuous mode [ 1134.143795][T12307] veth1_macvtap: left promiscuous mode [ 1134.149809][T12307] veth0_macvtap: left promiscuous mode [ 1134.156953][T12307] veth1_vlan: left promiscuous mode [ 1134.162314][T12307] veth0_vlan: left promiscuous mode [ 1134.232610][T20051] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1135.021302][T19580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1135.207334][T20083] syzkaller0: entered promiscuous mode [ 1135.212847][T20083] syzkaller0: entered allmulticast mode [ 1135.222622][T20099] netlink: 'syz.0.12669': attribute type 10 has an invalid length. [ 1137.110011][T20109] dvmrp0: entered allmulticast mode [ 1137.310000][T20130] netlink: 'syz.0.12674': attribute type 1 has an invalid length. [ 1137.329335][T19580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.363384][T20131] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12675'. [ 1137.387661][T19580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.409949][T20134] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12676'. [ 1137.462112][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.469354][T14011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.519712][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.526907][T14011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.537697][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12679'. [ 1137.656991][T20147] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1137.697554][T20151] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12681'. [ 1137.776207][T12307] IPVS: stop unused estimator thread 0... [ 1138.122155][T20169] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.12685'. [ 1138.198477][T19580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.300189][T19580] veth0_vlan: entered promiscuous mode [ 1138.308261][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12688'. [ 1138.329151][T19580] veth1_vlan: entered promiscuous mode [ 1138.395120][T19580] veth0_macvtap: entered promiscuous mode [ 1138.419798][T19580] veth1_macvtap: entered promiscuous mode [ 1138.452292][T20181] netlink: 'syz.1.12693': attribute type 1 has an invalid length. [ 1138.460216][T19580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.469947][T20181] netlink: 'syz.1.12693': attribute type 2 has an invalid length. [ 1138.470908][T19580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.498044][T20184] IPVS: length: 24 != 3221225496 [ 1138.521204][T20185] netlink: 'syz.4.12691': attribute type 1 has an invalid length. [ 1138.561335][T20185] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12691'. [ 1138.566188][T16562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.582207][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12695'. [ 1138.604752][T16562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.614011][T20192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12695'. [ 1138.658140][T16562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.681711][T16562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.837372][T14015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.849773][T14015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.860199][T20203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12699'. [ 1138.981297][T20211] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1139.009139][T14011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.021533][T14011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.131116][T20224] netlink: 'syz.3.12706': attribute type 1 has an invalid length. [ 1139.144749][T20224] netlink: 'syz.3.12706': attribute type 2 has an invalid length. [ 1139.156436][T20224] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1139.188934][T20217] netlink: 'syz.0.12704': attribute type 13 has an invalid length. [ 1139.298828][T20229] syzkaller0: entered promiscuous mode [ 1139.329404][T20229] syzkaller0: entered allmulticast mode [ 1139.940010][T20275] netlink: 'syz.0.12721': attribute type 4 has an invalid length. [ 1140.465805][T20315] netlink: 'syz.2.12733': attribute type 13 has an invalid length. [ 1140.990218][T20342] net veth1_virt_wifi : renamed from virt_wifi0 [ 1141.146680][T20346] xt_hashlimit: invalid interval [ 1141.573537][T20375] block nbd4: not configured, cannot reconfigure [ 1142.177183][T20431] IPVS: set_ctl: invalid protocol: 22 172.20.20.64:20003 [ 1142.443340][T20442] __nla_validate_parse: 14 callbacks suppressed [ 1142.443361][T20442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1142.475738][T20442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1142.504779][T20442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12768'. [ 1142.533854][T20446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12770'. [ 1142.543889][T20446] netlink: 'syz.1.12770': attribute type 7 has an invalid length. [ 1142.553265][T20446] netlink: 'syz.1.12770': attribute type 8 has an invalid length. [ 1142.566574][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12770'. [ 1142.740157][T20458] sit0: Caught tx_queue_len zero misconfig [ 1142.798779][T20459] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1142.815431][T20459] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1142.862976][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12771'. [ 1142.873836][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12771'. [ 1142.913140][T20469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1142.946271][T20459] ip6tnl0: Caught tx_queue_len zero misconfig [ 1143.096285][T20481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12779'. [ 1143.112156][ T29] audit: type=1800 audit(1771438293.675:10): pid=20473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12777" name="memory.events" dev="tmpfs" ino=3028 res=0 errno=0 [ 1143.154931][T20481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12779'. [ 1143.165990][T20483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12781'. [ 1143.331825][T20499] xt_hashlimit: size too large, truncated to 1048576 [ 1143.427970][T20509] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 1143.525600][T20513] syzkaller0: entered promiscuous mode [ 1143.546821][T20513] syzkaller0: entered allmulticast mode [ 1143.652836][T20522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.671827][T20523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1143.866246][T20534] validate_nla: 1 callbacks suppressed [ 1143.866267][T20534] netlink: 'syz.0.12796': attribute type 1 has an invalid length. [ 1144.305338][T20566] sctp: [Deprecated]: syz.3.12804 (pid 20566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1144.305338][T20566] Use struct sctp_sack_info instead [ 1144.315685][T20567] syzkaller0: entered promiscuous mode [ 1144.329072][T20567] syzkaller0: entered allmulticast mode [ 1144.639402][T20598] netlink: 'syz.4.12814': attribute type 2 has an invalid length. [ 1144.652406][T20597] syzkaller1: entered promiscuous mode [ 1144.659026][T20597] syzkaller1: entered allmulticast mode [ 1144.849974][T20609] xt_hashlimit: size too large, truncated to 1048576 [ 1145.490799][T27345] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1145.508748][T27345] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1145.517738][T27345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1145.536935][T27345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1145.545246][T27345] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1145.546609][T20659] xt_TCPMSS: Only works on TCP SYN packets [ 1145.660142][T20666] syzkaller0: entered promiscuous mode [ 1145.671807][T20666] syzkaller0: entered allmulticast mode [ 1145.696548][T20661] tipc: Started in network mode [ 1145.713450][T20661] tipc: Node identity 4a0b57e53659, cluster identity 4711 [ 1145.733884][T20661] tipc: Enabled bearer , priority 0 [ 1145.765467][T20654] ip6_vti0 speed is unknown, defaulting to 1000 [ 1145.785319][T20665] netlink: 'syz.2.12832': attribute type 1 has an invalid length. [ 1145.822969][T20661] tipc: Resetting bearer [ 1145.907915][T20661] tipc: Disabling bearer [ 1145.932840][T20665] lo: Caught tx_queue_len zero misconfig [ 1145.979584][T20665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1146.174636][T20697] netlink: 'syz.0.12842': attribute type 1 has an invalid length. [ 1146.577006][T20654] chnl_net:caif_netlink_parms(): no params data found [ 1146.753046][T20654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.764635][T20654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.772009][T20654] bridge_slave_0: entered allmulticast mode [ 1146.780180][T20654] bridge_slave_0: entered promiscuous mode [ 1146.790713][T20654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.808518][T20654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.824670][T20654] bridge_slave_1: entered allmulticast mode [ 1146.842147][T20654] bridge_slave_1: entered promiscuous mode [ 1146.951919][T20654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.973180][T20654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.106019][T20736] ip6_vti0 speed is unknown, defaulting to 1000 [ 1147.122404][T20654] team0: Port device team_slave_0 added [ 1147.144945][T20654] team0: Port device team_slave_1 added [ 1147.251630][T20654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.274418][T20654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.335450][T20654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.348257][T20654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.368232][T20654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.402409][T20654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.537574][T20654] hsr_slave_0: entered promiscuous mode [ 1147.568257][T20654] hsr_slave_1: entered promiscuous mode [ 1147.580018][T20654] debugfs: 'hsr0' already exists in 'hsr' [ 1147.589407][T20654] Cannot create hsr debugfs directory [ 1147.590921][T20770] netlink: 'syz.4.12860': attribute type 10 has an invalid length. [ 1147.631206][T20764] sctp: [Deprecated]: syz.2.12861 (pid 20764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1147.631206][T20764] Use struct sctp_sack_info instead [ 1147.654820][T16363] Bluetooth: hci0: command tx timeout [ 1147.701863][T20770] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1147.882971][T20780] netlink: 'syz.0.12864': attribute type 1 has an invalid length. [ 1147.989864][T20654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.177009][T20798] __nla_validate_parse: 21 callbacks suppressed [ 1148.177028][T20798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12868'. [ 1148.228293][T20654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.379807][T20798] veth0_to_team: entered promiscuous mode [ 1148.393364][T20806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12869'. [ 1148.405343][T20798] veth0_to_team: left promiscuous mode [ 1148.430660][T20654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.533855][T20654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.561775][T20812] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12871'. [ 1148.570977][T20810] xt_ecn: cannot match TCP bits for non-tcp packets [ 1148.579078][T20812] gretap0: entered promiscuous mode [ 1148.611406][T20810] bridge0: port 3(syz_tun) entered blocking state [ 1148.618618][T20810] bridge0: port 3(syz_tun) entered disabled state [ 1148.625491][T20810] syz_tun: entered allmulticast mode [ 1148.631916][T20810] syz_tun: entered promiscuous mode [ 1148.638215][T20810] bridge0: port 3(syz_tun) entered blocking state [ 1148.644817][T20810] bridge0: port 3(syz_tun) entered forwarding state [ 1148.676439][T20812] gretap0: left promiscuous mode [ 1148.727215][T20812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1148.919420][T20820] ip6_vti0 speed is unknown, defaulting to 1000 [ 1148.968326][T20654] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1148.969632][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12876'. [ 1148.980181][T20833] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12874'. [ 1149.082177][T20654] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1149.102167][T20654] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1149.122544][T20654] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1149.246746][T20845] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 1149.280042][T20654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.294362][T20847] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12878'. [ 1149.320209][T20845] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1149.359674][T20654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.429829][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.437090][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.486252][T20853] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12880'. [ 1149.583106][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.590344][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.735002][T16363] Bluetooth: hci0: command tx timeout [ 1149.802621][T20861] netlink: 'syz.4.12884': attribute type 22 has an invalid length. [ 1149.845663][T20861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12884'. [ 1150.003289][T20872] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1150.326237][T20889] netlink: 576 bytes leftover after parsing attributes in process `syz.4.12890'. [ 1150.486643][T20654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.572483][T20907] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12894'. [ 1150.627543][T20654] veth0_vlan: entered promiscuous mode [ 1150.673549][T20654] veth1_vlan: entered promiscuous mode [ 1150.810819][T20654] veth0_macvtap: entered promiscuous mode [ 1150.827412][T20654] veth1_macvtap: entered promiscuous mode [ 1150.887091][T20654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.945461][T20654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.989317][T12307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.017344][T12307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.042279][T12307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.131227][T12307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.329156][T12307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.364311][T12307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.452928][T12306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.470471][T12306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.536125][T20949] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1151.676128][T20963] netlink: 'syz.2.12912': attribute type 15 has an invalid length. [ 1151.815187][T16363] Bluetooth: hci0: command tx timeout [ 1151.989639][T20990] ip6tnl0: Caught tx_queue_len zero misconfig [ 1152.368055][T21011] syzkaller0: entered promiscuous mode [ 1152.373886][T21011] syzkaller0: entered allmulticast mode [ 1152.442202][T21017] netlink: 'syz.4.12928': attribute type 21 has an invalid length. [ 1152.451216][T21016] delete_channel: no stack [ 1152.524563][T21022] netlink: 'syz.2.12930': attribute type 4 has an invalid length. [ 1152.629326][T21030] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1152.865161][T21046] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1152.909288][T21046] lo: Caught tx_queue_len zero misconfig [ 1153.151103][T21067] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1153.231177][T21069] netlink: 'syz.3.12941': attribute type 6 has an invalid length. [ 1153.240557][T21069] __nla_validate_parse: 16 callbacks suppressed [ 1153.240577][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12941'. [ 1153.761491][T21107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12952'. [ 1153.847100][T21060] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1153.865051][T21060] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1153.894748][T16363] Bluetooth: hci0: command tx timeout [ 1153.972980][T21060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1153.987140][T21060] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1154.247810][T21139] Cannot find add_set index 0 as target [ 1154.292580][T21130] bond4: Unable to set up delay as MII monitoring is disabled [ 1154.314594][T21130] bond4 (unregistering): Released all slaves [ 1154.403023][T21150] netlink: 'syz.1.12964': attribute type 1 has an invalid length. [ 1154.425836][T21150] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12964'. [ 1154.457991][T21150] netlink: 'syz.1.12964': attribute type 1 has an invalid length. [ 1154.467174][T21150] netlink: 'syz.1.12964': attribute type 8 has an invalid length. [ 1154.479788][T21150] netlink: 606 bytes leftover after parsing attributes in process `syz.1.12964'. [ 1154.489440][T21151] netlink: 'syz.1.12964': attribute type 1 has an invalid length. [ 1154.500318][T21151] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12964'. [ 1154.511048][T21151] netlink: 'syz.1.12964': attribute type 1 has an invalid length. [ 1154.519940][T21151] netlink: 606 bytes leftover after parsing attributes in process `syz.1.12964'. [ 1154.571634][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12963'. [ 1154.608753][T21153] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12963'. [ 1154.623029][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12963'. [ 1154.650526][T21159] netlink: 252 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1156.979220][T21172] validate_nla: 1 callbacks suppressed [ 1156.979238][T21172] netlink: 'syz.1.12971': attribute type 29 has an invalid length. [ 1157.002421][T21196] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1159.035844][T21228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.121540][T21233] __nla_validate_parse: 10 callbacks suppressed [ 1159.121558][T21233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12981'. [ 1159.175082][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12981'. [ 1159.199408][T21228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.207083][T21228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.282656][T21251] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12983'. [ 1159.383482][T21228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.396428][T21228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1159.478289][T21233] geneve2: entered promiscuous mode [ 1159.483548][T21233] geneve2: entered allmulticast mode [ 1159.617744][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12989'. [ 1159.629336][T21261] syzkaller0: entered promiscuous mode [ 1159.636309][T21261] syzkaller0: entered allmulticast mode [ 1159.775347][T21274] IPVS: length: 122 != 24 [ 1159.790474][T21274] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12993'. [ 1161.503232][T21271] netlink: 'syz.4.12992': attribute type 13 has an invalid length. [ 1161.511920][T21274] 8021q: VLANs not supported on ip6_vti0 [ 1161.682350][T21282] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12998'. [ 1161.757832][T21299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13000'. [ 1161.774799][T21298] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1161.881965][T21306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13004'. [ 1162.070698][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13008'. [ 1162.208895][T21324] netlink: 'syz.0.13007': attribute type 1 has an invalid length. [ 1162.236055][T21324] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13007'. [ 1162.938831][T21387] netlink: 'syz.4.13026': attribute type 1 has an invalid length. [ 1162.950268][T21387] netlink: 'syz.4.13026': attribute type 2 has an invalid length. [ 1162.969760][T21387] netlink: 'syz.4.13026': attribute type 1 has an invalid length. [ 1163.003433][T21394] netlink: 'syz.3.13029': attribute type 7 has an invalid length. [ 1163.024195][T21394] netlink: 'syz.3.13029': attribute type 8 has an invalid length. [ 1163.351634][T21426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1163.721969][T21453] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1163.748281][T21453] bond2 (unregistering): Released all slaves [ 1163.962804][T21467] netlink: 'syz.1.13044': attribute type 21 has an invalid length. [ 1164.077921][T21478] veth3: entered allmulticast mode [ 1164.133096][T21484] __nla_validate_parse: 9 callbacks suppressed [ 1164.133114][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13049'. [ 1164.153127][T21484] netlink: 'syz.4.13049': attribute type 7 has an invalid length. [ 1164.167183][T21484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13049'. [ 1164.231525][T21484] gretap0: entered promiscuous mode [ 1164.278482][T21484] gretap0: left promiscuous mode [ 1164.524242][T21503] netlink: 'syz.1.13052': attribute type 15 has an invalid length. [ 1164.566870][T21503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13052'. [ 1164.917103][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13059'. [ 1165.240127][T21553] batadv_slave_0: entered promiscuous mode [ 1165.277319][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13065'. [ 1165.281335][T21551] batadv_slave_0: left promiscuous mode [ 1165.357959][T21559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13068'. [ 1165.370947][T21559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13068'. [ 1165.438561][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13069'. [ 1165.463076][T21562] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1165.673808][T21581] netlink: 'syz.2.13076': attribute type 21 has an invalid length. [ 1165.703995][T21581] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13076'. [ 1165.718410][T21589] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13076'. [ 1165.892583][T21584] syzkaller0: entered promiscuous mode [ 1165.935049][T21584] syzkaller0: entered allmulticast mode [ 1166.000519][T21609] Cannot find add_set index 0 as target [ 1167.840525][T31698] lec:lec_start_xmit: lec0:No lecd attached [ 1168.038311][T21621] validate_nla: 3 callbacks suppressed [ 1168.038333][T21621] netlink: 'syz.1.13087': attribute type 4 has an invalid length. [ 1168.157754][T21640] xt_policy: too many policy elements [ 1168.183308][T21640] netlink: 'syz.0.13095': attribute type 1 has an invalid length. [ 1168.278428][T21654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1168.298624][T21636] syzkaller0: entered promiscuous mode [ 1168.306717][T21636] syzkaller0: entered allmulticast mode [ 1168.350309][T21653] macvtap1: entered promiscuous mode [ 1168.358076][T21653] macvtap1: entered allmulticast mode [ 1168.363457][T21653] veth1_vlan: entered allmulticast mode [ 1169.111382][T21713] Cannot find set identified by id 0 to match [ 1169.194568][T21719] netlink: 'syz.2.13119': attribute type 5 has an invalid length. [ 1169.210136][T21719] __nla_validate_parse: 8 callbacks suppressed [ 1169.210154][T21719] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13119'. [ 1169.316738][T21730] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13121'. [ 1169.517644][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13127'. [ 1169.539206][T21745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13127'. [ 1169.716654][T21767] syzkaller0: entered promiscuous mode [ 1169.722166][T21767] syzkaller0: entered allmulticast mode [ 1169.916905][T21780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13132'. [ 1170.044318][T21786] nbd5: detected capacity change from 0 to 127 [ 1170.061361][T27345] block nbd5: Receive control failed (result -104) [ 1170.137172][T21791] netlink: 'syz.1.13136': attribute type 4 has an invalid length. [ 1170.150316][T21793] netlink: 'syz.4.13135': attribute type 25 has an invalid length. [ 1170.182689][T21791] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1170.385226][T21808] netlink: 'syz.0.13142': attribute type 1 has an invalid length. [ 1170.406842][T21811] netlink: 'syz.1.13143': attribute type 3 has an invalid length. [ 1170.447447][T21819] netlink: 'syz.2.13145': attribute type 2 has an invalid length. [ 1170.539674][T21821] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1170.553429][T21821] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1170.564888][T21821] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1170.576853][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13146'. [ 1170.595273][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13146'. [ 1170.624405][T21826] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 1170.637856][T21826] bond3: (slave vcan0): making interface the new active one [ 1170.646982][T21826] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 1170.647779][T21821] netlink: 'syz.0.13142': attribute type 11 has an invalid length. [ 1170.656312][T21827] netlink: 'syz.4.13147': attribute type 33 has an invalid length. [ 1170.715124][T21833] hsr_slave_0: left promiscuous mode [ 1170.732646][T21833] hsr_slave_1: left promiscuous mode [ 1171.086015][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13156'. [ 1171.223427][T21867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1171.268323][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13161'. [ 1171.677715][T21894] ip6_vti0 speed is unknown, defaulting to 1000 [ 1171.709114][T21903] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1171.715212][T21905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13170'. [ 1171.863046][T21910] syzkaller0: entered promiscuous mode [ 1171.869072][T21910] syzkaller0: entered allmulticast mode [ 1172.854415][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1172.862516][ C0] lec:lec_tx_timeout: lec0 [ 1173.791754][T21918] openvswitch: netlink: Key type 220 is out of range max 32 [ 1173.970165][T21929] netlink: 'syz.2.13178': attribute type 10 has an invalid length. [ 1174.450454][T21960] __nla_validate_parse: 4 callbacks suppressed [ 1174.450474][T21960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13188'. [ 1174.491009][T21960] openvswitch: netlink: Flow actions attr not present in new flow. [ 1174.642718][T21970] tipc: Started in network mode [ 1174.649753][T21970] tipc: Node identity 0a6790356a6e, cluster identity 4711 [ 1174.657215][T21970] tipc: Enabled bearer , priority 0 [ 1174.711194][T21975] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13194'. [ 1174.731410][T21970] syzkaller0: entered promiscuous mode [ 1174.737012][T21970] syzkaller0: entered allmulticast mode [ 1174.743375][T21970] tipc: Resetting bearer [ 1174.760957][T21975] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1174.824705][T21420] tipc: Resetting bearer [ 1174.831477][T21969] tipc: Resetting bearer [ 1176.472778][T21969] tipc: Disabling bearer [ 1176.549854][T29765] tipc: Node number set to 1611239477 [ 1176.610424][T21989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.622500][T21988] Cannot find set identified by id 0 to match [ 1176.675888][T21992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13198'. [ 1176.686690][T21989] ip6_vti0 speed is unknown, defaulting to 1000 [ 1176.746692][T21998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13201'. [ 1176.789313][T21992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1176.884845][T21996] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1176.907295][T21992] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1176.915139][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1176.960888][T21992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.999967][T21996] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 1177.013020][T21996] bond4 (unregistering): Released all slaves [ 1177.033034][T22006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13203'. [ 1177.079934][T22006] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1177.092704][T22006] bond1: entered promiscuous mode [ 1177.121645][T22006] bond1: entered allmulticast mode [ 1177.127863][T22006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1177.151411][T22015] batadv1: entered allmulticast mode [ 1177.202971][T22020] netlink: 56 bytes leftover after parsing attributes in process `syz.4.13207'. [ 1177.264314][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.277034][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1177.436948][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13211'. [ 1177.485813][T22028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13211'. [ 1177.571193][T22037] netlink: 'syz.0.13213': attribute type 1 has an invalid length. [ 1177.580089][T22037] netlink: 'syz.0.13213': attribute type 3 has an invalid length. [ 1177.614781][T22037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13213'. [ 1178.417373][T22100] 8021q: VLANs not supported on ip_vti0 [ 1178.491050][T22106] netlink: 'syz.1.13233': attribute type 1 has an invalid length. [ 1178.612217][T22106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1178.661037][T22106] bond2: (slave gretap1): making interface the new active one [ 1178.671592][T22106] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1179.040374][T22145] ip6_vti0 speed is unknown, defaulting to 1000 [ 1179.135870][T22156] syzkaller0: entered promiscuous mode [ 1179.145306][T22156] syzkaller0: entered allmulticast mode [ 1179.541343][T22170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1179.610329][T22174] __nla_validate_parse: 6 callbacks suppressed [ 1179.610347][T22174] netlink: 1760 bytes leftover after parsing attributes in process `syz.2.13250'. [ 1179.742467][T22182] netlink: 'syz.3.13251': attribute type 9 has an invalid length. [ 1179.751179][T22182] netlink: 'syz.3.13251': attribute type 11 has an invalid length. [ 1179.777772][T22182] netlink: 'syz.3.13251': attribute type 12 has an invalid length. [ 1179.790055][T22182] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.13251'. [ 1179.801564][T22182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13251'. [ 1179.845444][T22182] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13251'. [ 1179.899339][T22188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13254'. [ 1180.299108][T22195] syzkaller0: entered promiscuous mode [ 1180.308205][T22195] syzkaller0: entered allmulticast mode [ 1180.364404][T22206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13259'. [ 1180.471165][T22210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13261'. [ 1180.618305][T22217] netlink: 'syz.2.13263': attribute type 1 has an invalid length. [ 1180.641272][T22217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.652440][T22217] netlink: 'syz.2.13263': attribute type 33 has an invalid length. [ 1180.660476][T22217] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13263'. [ 1180.692651][T22211] block nbd6: server does not support multiple connections per device. [ 1180.703489][T22211] block nbd6: shutting down sockets [ 1180.725106][T22219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13263'. [ 1181.039980][T22227] x_tables: duplicate underflow at hook 1 [ 1182.684622][T22236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13265'. [ 1182.756115][T22243] netlink: zone id is out of range [ 1182.761926][T22231] netlink: set zone limit has 4 unknown bytes [ 1182.780122][T22243] netlink: zone id is out of range [ 1182.796987][T22244] syzkaller1: entered promiscuous mode [ 1182.802528][T22244] syzkaller1: entered allmulticast mode [ 1182.854573][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1182.862670][ C0] lec:lec_tx_timeout: lec0 [ 1182.910221][T22253] xt_hashlimit: invalid rate [ 1182.921608][T22252] netem: unknown loss type 8 [ 1182.940073][T22252] netem: change failed [ 1183.037825][T22262] rdma_op ffff88805af171f0 conn xmit_rdma 0000000000000000 [ 1183.060335][T22260] syzkaller0: entered promiscuous mode [ 1183.075975][T22260] syzkaller0: entered allmulticast mode [ 1183.481889][T22293] netlink: 'syz.2.13284': attribute type 10 has an invalid length. [ 1183.695913][T22293] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1184.146134][T22332] syzkaller0: entered promiscuous mode [ 1184.151655][T22332] syzkaller0: entered allmulticast mode [ 1184.203782][T22334] syzkaller0: entered promiscuous mode [ 1184.219746][T22334] syzkaller0: entered allmulticast mode [ 1184.377726][T22343] netlink: 'syz.2.13294': attribute type 1 has an invalid length. [ 1184.573470][T22353] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1184.755630][T22363] __nla_validate_parse: 8 callbacks suppressed [ 1184.755647][T22363] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13300'. [ 1186.861691][T16562] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.889040][T16562] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.904693][T16562] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.913597][T16562] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.955110][T22414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13310'. [ 1187.099658][T22423] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13314'. [ 1187.133829][T22423] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13314'. [ 1187.497763][T22452] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13321'. [ 1187.508751][T22452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13321'. [ 1187.519761][T22452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13321'. [ 1187.598760][T22454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13322'. [ 1188.076085][T22466] netlink: 256 bytes leftover after parsing attributes in process `syz.2.13328'. [ 1188.100111][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13328'. [ 1188.177194][T22468] syzkaller0: entered promiscuous mode [ 1188.182879][T22468] syzkaller0: entered allmulticast mode [ 1188.386003][T22482] syzkaller0: entered promiscuous mode [ 1188.408148][T22482] syzkaller0: entered allmulticast mode [ 1188.433636][T22482] 0: reclassify loop, rule prio 0, protocol 800 [ 1188.447663][T22487] syzkaller0: entered promiscuous mode [ 1188.466139][T22487] syzkaller0: entered allmulticast mode [ 1188.553360][ T8475] IPVS: starting estimator thread 0... [ 1188.644580][T22497] IPVS: using max 37 ests per chain, 88800 per kthread [ 1188.684436][T14015] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.728648][T14015] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.784976][T22508] syzkaller0: entered promiscuous mode [ 1188.790637][T22508] syzkaller0: entered allmulticast mode [ 1188.806452][T14015] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.818233][T14015] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1188.878282][T22518] netlink: 'syz.2.13342': attribute type 1 has an invalid length. [ 1191.453930][T22542] __nla_validate_parse: 11 callbacks suppressed [ 1191.453947][T22542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13351'. [ 1191.627419][T22568] netlink: 'syz.4.13359': attribute type 11 has an invalid length. [ 1191.664489][T22568] netlink: 160 bytes leftover after parsing attributes in process `syz.4.13359'. [ 1191.912070][T22585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13365'. [ 1192.205434][T22608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13368'. [ 1192.228372][T22611] tipc: Enabling of bearer rejected, failed to enable media [ 1192.254927][T22607] sctp: [Deprecated]: syz.1.13369 (pid 22607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1192.254927][T22607] Use struct sctp_sack_info instead [ 1192.302991][T22618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13370'. [ 1192.394576][T22614] ip6_vti0 speed is unknown, defaulting to 1000 [ 1192.600583][T22637] netlink: 'syz.3.13376': attribute type 1 has an invalid length. [ 1192.675220][T22637] bond4: (slave ip6gretap1): making interface the new active one [ 1192.683964][T22637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1192.693278][T22637] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1192.708243][T22637] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1192.868216][T22647] netlink: 'syz.3.13378': attribute type 10 has an invalid length. [ 1192.886188][T22648] netlink: 'syz.1.13377': attribute type 1 has an invalid length. [ 1192.903260][T22647] netlink: 'syz.3.13378': attribute type 4 has an invalid length. [ 1193.159688][T22673] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 1193.190000][T22675] netlink: 59 bytes leftover after parsing attributes in process `syz.4.13385'. [ 1193.437166][T22684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13388'. [ 1193.635834][T22691] tipc: Started in network mode [ 1193.644212][T22691] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 1193.661164][T22691] tipc: Enabled bearer , priority 2 [ 1193.694748][T22706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13393'. [ 1193.729955][T22698] syzkaller1: entered promiscuous mode [ 1193.747736][T22698] syzkaller1: entered allmulticast mode [ 1193.866518][T22722] netlink: 'syz.0.13396': attribute type 21 has an invalid length. [ 1193.887721][T22718] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13397'. [ 1193.995029][T22725] syzkaller0: entered promiscuous mode [ 1194.000671][T22725] syzkaller0: entered allmulticast mode [ 1194.009870][T22723] netlink: 228 bytes leftover after parsing attributes in process `syz.0.13396'. [ 1194.022115][T22725] netlink: 'syz.4.13398': attribute type 1 has an invalid length. [ 1194.072001][T22725] erspan1: entered allmulticast mode [ 1194.237913][T22740] can: request_module (can-proto-0) failed. [ 1194.407664][T22747] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 1194.607852][T22766] openvswitch: netlink: Flow key attr not present in new flow. [ 1194.810151][T29775] tipc: Node number set to 10463914 [ 1195.103472][T16562] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.128539][T16562] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.147662][T16562] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.170293][T16562] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.364506][T22794] netlink: 'syz.4.13417': attribute type 11 has an invalid length. [ 1195.720193][T22830] netlink: 'syz.1.13428': attribute type 11 has an invalid length. [ 1195.880792][T22839] netlink: 'syz.3.13429': attribute type 13 has an invalid length. [ 1196.028234][T22853] team_slave_1: Caught tx_queue_len zero misconfig [ 1196.144267][T22859] pim6reg1: entered promiscuous mode [ 1196.149773][T22859] pim6reg1: entered allmulticast mode [ 1196.232471][T22865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1196.402883][T22879] netlink: 'syz.1.13444': attribute type 33 has an invalid length. [ 1196.472297][T22879] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1196.486110][T22879] bond4 (unregistering): Released all slaves [ 1196.539366][T22886] netlink: 'syz.4.13447': attribute type 21 has an invalid length. [ 1196.548908][T22886] __nla_validate_parse: 12 callbacks suppressed [ 1196.548921][T22886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13447'. [ 1196.802206][T22910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13452'. [ 1196.824667][T22901] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 1197.101371][T22930] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1197.169558][T22935] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13457'. [ 1197.260899][T22945] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13460'. [ 1197.309790][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13457'. [ 1197.330902][T22943] vlan3: entered allmulticast mode [ 1197.337516][T22943] mac80211_hwsim hwsim119 wlan0: entered allmulticast mode [ 1197.390523][T22952] syzkaller0: entered promiscuous mode [ 1197.400212][T22952] syzkaller0: entered allmulticast mode [ 1197.484830][T22961] netlink: 'syz.2.13465': attribute type 1 has an invalid length. [ 1197.493428][T22961] netlink: 'syz.2.13465': attribute type 16 has an invalid length. [ 1197.501958][T22961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13465'. [ 1197.512772][T22963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13464'. [ 1197.578885][T22966] net veth1_virt_wifi : renamed from virt_wifi0 [ 1197.763352][T22975] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13469'. [ 1197.773471][T22975] 8021q: VLANs not supported on gre0 [ 1197.783833][T22977] netlink: 'syz.2.13469': attribute type 1 has an invalid length. [ 1197.820199][T22978] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.886433][T22984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13471'. [ 1197.896521][T22983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13471'. [ 1198.056488][T23000] netlink: 'syz.4.13476': attribute type 14 has an invalid length. [ 1198.291158][T23012] bond4: option xmit_hash_policy: invalid value (64) [ 1198.341716][T23012] bond4 (unregistering): Released all slaves [ 1198.399113][T23026] IPv4: Oversized IP packet from 172.20.20.24 [ 1198.413369][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1198.420125][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1198.608101][T23039] veth1_macvtap: left promiscuous mode [ 1198.628586][T23038] lo: Caught tx_queue_len zero misconfig [ 1198.637203][T23041] syzkaller0: entered promiscuous mode [ 1198.642971][T23041] syzkaller0: entered allmulticast mode [ 1199.072386][T23054] veth1_vlan: left allmulticast mode [ 1199.090629][ T7357] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.129156][ T7357] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.151119][ T7357] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.165574][ T7357] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.181680][ T7357] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.207270][ T7357] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.240605][ T7357] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.290736][ T7357] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.595032][T23105] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1199.611520][T23105] bond2: (slave lo): Enslaving as an active interface with an up link [ 1199.621617][T23105] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1199.770350][T23120] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1199.858184][T23124] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1199.876854][T23124] bond3 (unregistering): Released all slaves [ 1199.961544][T23137] validate_nla: 2 callbacks suppressed [ 1199.961563][T23137] netlink: 'syz.4.13510': attribute type 13 has an invalid length. [ 1199.982350][T23137] syz_tun: refused to change device tx_queue_len [ 1200.142919][T23150] Cannot find add_set index 65532 as target [ 1200.308017][ T2345] block nbd5: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 30 seconds [ 1200.322887][ T2345] block nbd5: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 30 seconds [ 1200.334275][ T2345] block nbd5: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 30 seconds [ 1200.348661][ T2345] block nbd5: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 30 seconds [ 1200.475293][T23180] IPVS: set_ctl: invalid protocol: 29 172.20.20.170:20002 [ 1200.509973][T23177] bond4: Removing last ns target with arp_interval on [ 1200.571572][T23186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1200.659820][T23190] syzkaller0: entered promiscuous mode [ 1200.675070][T23190] syzkaller0: entered allmulticast mode [ 1200.701654][T23195] IPVS: length: 25 != 8 [ 1200.725700][T23197] .: renamed from bridge_slave_1 (while UP) [ 1200.888039][T23211] veth0: entered promiscuous mode [ 1200.896449][T23210] veth0: left promiscuous mode [ 1201.530768][T23255] netlink: 'syz.2.13546': attribute type 10 has an invalid length. [ 1201.530785][T23256] netlink: 'syz.2.13546': attribute type 10 has an invalid length. [ 1201.533584][T23256] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1201.563643][T23258] __nla_validate_parse: 17 callbacks suppressed [ 1201.563661][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13548'. [ 1201.580630][T23258] netlink: 'syz.3.13548': attribute type 5 has an invalid length. [ 1201.591314][T23258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13548'. [ 1201.627105][T23258] geneve2: entered promiscuous mode [ 1201.632351][T23258] geneve2: entered allmulticast mode [ 1201.640088][T16562] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1201.649812][T16562] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1201.659588][T16562] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1201.702751][T16562] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1201.798320][T23276] netlink: 'syz.2.13551': attribute type 29 has an invalid length. [ 1201.945072][T23288] veth1_macvtap: left promiscuous mode [ 1201.965070][T23288] macsec0: entered promiscuous mode [ 1201.970312][T23288] macsec0: entered allmulticast mode [ 1202.029138][T23288] veth1_macvtap: entered promiscuous mode [ 1202.035358][T23288] veth1_macvtap: entered allmulticast mode [ 1202.041419][T23288] macsec0: left promiscuous mode [ 1202.067840][T23298] nbd: illegal input index 2958377 [ 1202.074544][T23288] macsec0: left allmulticast mode [ 1202.079705][T23288] veth1_macvtap: left allmulticast mode [ 1202.188024][T23300] xt_l2tp: unknown flags: 10 [ 1202.619640][T23330] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13569'. [ 1202.818741][T23343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13573'. [ 1202.831713][T23344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13574'. [ 1202.867582][T23346] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13575'. [ 1202.875571][T23344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13574'. [ 1202.907193][T23346] tunl0: Caught tx_queue_len zero misconfig [ 1203.020430][T23349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.110138][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13581'. [ 1203.188569][T23365] netlink: 84 bytes leftover after parsing attributes in process `syz.4.13583'. [ 1203.398172][T23383] netlink: 'syz.0.13588': attribute type 1 has an invalid length. [ 1203.443607][T23387] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13590'. [ 1203.578077][T23392] ip6_vti0 speed is unknown, defaulting to 1000 [ 1203.673171][T23399] netlink: 'syz.2.13594': attribute type 10 has an invalid length. [ 1203.706164][T23399] netlink: 'syz.2.13594': attribute type 1 has an invalid length. [ 1203.728369][T23399] netlink: 'syz.2.13594': attribute type 2 has an invalid length. [ 1203.940876][T23422] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1204.086488][T23430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.752377][T23463] netlink: 'syz.3.13612': attribute type 2 has an invalid length. [ 1204.888358][T23474] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1204.926705][T23474] bond4 (unregistering): Released all slaves [ 1205.026727][T23486] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1205.098252][T23493] validate_nla: 1 callbacks suppressed [ 1205.098273][T23493] netlink: 'syz.3.13622': attribute type 1 has an invalid length. [ 1205.206405][T23500] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1205.258431][T23504] netlink: 'syz.1.13626': attribute type 1 has an invalid length. [ 1205.279839][T23505] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1205.370238][T23510] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1205.380932][T23510] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1205.398054][T23514] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1205.402248][T23510] bond4: (slave vcan1): making interface the new active one [ 1205.412370][T23510] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 1205.469434][T23518] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1205.638837][T23532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1206.243741][T23561] netlink: 'syz.0.13643': attribute type 1 has an invalid length. [ 1206.256516][T23569] netlink: 'syz.2.13644': attribute type 1 has an invalid length. [ 1206.406556][T23573] 8021q: VLANs not supported on sit0 [ 1206.450512][T23579] nbd: illegal input index 2958377 [ 1206.716365][T23586] syzkaller0: entered promiscuous mode [ 1206.723022][T23586] syzkaller0: entered allmulticast mode [ 1206.798347][T23595] IPv6: addrconf: prefix option has invalid lifetime [ 1206.929684][T23601] __nla_validate_parse: 15 callbacks suppressed [ 1206.929699][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13653'. [ 1207.023606][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13657'. [ 1207.089926][T23605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13657'. [ 1208.799458][T23595] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1208.907256][T23613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13659'. [ 1208.920814][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13660'. [ 1208.947404][T23614] netlink: 'syz.0.13658': attribute type 8 has an invalid length. [ 1208.955433][T23614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13658'. [ 1208.977604][T23614] bond0: entered promiscuous mode [ 1208.999585][T23614] bond_slave_0: entered promiscuous mode [ 1209.008742][T23614] bond_slave_1: entered promiscuous mode [ 1209.015151][T23623] netlink: 'syz.2.13662': attribute type 58 has an invalid length. [ 1209.017276][T23614] gretap0: entered promiscuous mode [ 1209.030799][T23614] ip6gretap0: entered promiscuous mode [ 1209.037984][T23623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13662'. [ 1209.045664][T23614] hsr1: entered promiscuous mode [ 1209.077649][T23625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13663'. [ 1209.097681][T23625] netlink: 80 bytes leftover after parsing attributes in process `syz.4.13663'. [ 1209.107197][T23625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13663'. [ 1209.468455][T23650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.539304][T23661] syzkaller0: entered promiscuous mode [ 1209.556351][T23661] syzkaller0: entered allmulticast mode [ 1209.743329][T23672] netlink: 'syz.3.13677': attribute type 19 has an invalid length. [ 1209.940124][T23676] can: request_module (can-proto-0) failed. [ 1210.113849][ T29] audit: type=1107 audit(1771438360.685:11): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ZIegzjߤf|ha#s~lXl|k.vR; BkߥCo#;{Q=xvȡ|H]sJ+}F?Rm [ 1210.113849][ T29] $Rey,_ s @_!sJT+^^'.' [ 1210.211924][T23699] netlink: 'syz.3.13685': attribute type 1 has an invalid length. [ 1210.500508][T23699] bond5: entered promiscuous mode [ 1210.508584][T23699] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1210.732366][T23742] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 1210.740186][T23742] netlink: 'syz.0.13689': attribute type 18 has an invalid length. [ 1211.012448][T23761] netlink: 'syz.1.13697': attribute type 7 has an invalid length. [ 1211.027441][T23761] netlink: 'syz.1.13697': attribute type 7 has an invalid length. [ 1211.053267][T23763] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1211.170352][T23768] ip6_vti0 speed is unknown, defaulting to 1000 [ 1211.170856][T23772] netlink: 'syz.2.13700': attribute type 2 has an invalid length. [ 1211.706555][T23803] tipc: Enabled bearer , priority 0 [ 1211.785604][T23787] tipc: Disabling bearer [ 1212.072078][T23822] __nla_validate_parse: 1 callbacks suppressed [ 1212.072097][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13715'. [ 1212.228092][T23825] xt_NFQUEUE: number of total queues is 0 [ 1212.289650][T23832] netlink: 'syz.2.13719': attribute type 1 has an invalid length. [ 1212.471309][T23840] ip6gre1: entered promiscuous mode [ 1212.541618][T23848] x_tables: duplicate underflow at hook 3 [ 1212.549999][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13724'. [ 1212.618113][T23846] delete_channel: no stack [ 1212.876163][T23869] xt_TCPMSS: Only works on TCP SYN packets [ 1212.895346][T23869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13733'. [ 1212.907351][T23873] xt_TCPMSS: Only works on TCP SYN packets [ 1213.213841][T23887] sctp: [Deprecated]: syz.2.13737 (pid 23887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1213.213841][T23887] Use struct sctp_sack_info instead [ 1213.313687][T23891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13739'. [ 1213.325486][T23890] delete_channel: no stack [ 1213.407316][T23899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13742'. [ 1213.463265][T23903] Bluetooth: MGMT ver 1.23 [ 1213.468082][T23903] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1213.563685][T23908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13746'. [ 1213.584329][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13746'. [ 1213.603879][T23908] IPv6: addrconf: prefix option has invalid lifetime [ 1213.616175][T23913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13748'. [ 1213.626173][T23913] nbd: socks must be embedded in a SOCK_ITEM attr [ 1213.680877][T23911] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1213.695168][T23917] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13747'. [ 1213.855839][T23928] netlink: 'syz.0.13752': attribute type 83 has an invalid length. [ 1213.910900][T23930] xt_hashlimit: overflow, try lower: 3/0 [ 1214.210954][T23962] netlink: 'syz.0.13765': attribute type 26 has an invalid length. [ 1214.257059][T23964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1215.566241][T24085] netlink: 'syz.0.13799': attribute type 2 has an invalid length. [ 1215.750152][T24097] openvswitch: netlink: Key type 220 is out of range max 32 [ 1215.820147][T24101] netlink: 'syz.0.13805': attribute type 13 has an invalid length. [ 1215.836421][T24101] netlink: 'syz.0.13805': attribute type 17 has an invalid length. [ 1215.952227][T24101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1216.906456][T24192] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1217.156833][T24204] __nla_validate_parse: 18 callbacks suppressed [ 1217.156851][T24204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13835'. [ 1217.170766][T24209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13837'. [ 1217.220949][T24209] bond0: entered promiscuous mode [ 1217.228409][T24209] bond_slave_0: entered promiscuous mode [ 1217.234566][T24209] bond_slave_1: entered promiscuous mode [ 1217.242370][T24209] batadv0: entered promiscuous mode [ 1217.249948][T24209] debugfs: 'hsr0' already exists in 'hsr' [ 1217.256192][T24209] Cannot create hsr debugfs directory [ 1217.262061][T24209] hsr0: entered promiscuous mode [ 1217.267866][T24209] hsr0: entered allmulticast mode [ 1217.273079][T24209] bond0: entered allmulticast mode [ 1217.278985][T24209] bond_slave_0: entered allmulticast mode [ 1217.288069][T24209] bond_slave_1: entered allmulticast mode [ 1217.296228][T24209] batadv0: entered allmulticast mode [ 1217.302096][T24209] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1217.311082][T24209] bond0: left promiscuous mode [ 1217.316201][T24209] bond_slave_0: left promiscuous mode [ 1217.322072][T24209] bond_slave_1: left promiscuous mode [ 1217.329243][T24209] batadv0: left promiscuous mode [ 1217.491085][T24218] Bluetooth: MGMT ver 1.23 [ 1217.579475][T24226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.675616][T24233] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13843'. [ 1217.768091][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13846'. [ 1217.773865][T24237] x_tables: duplicate underflow at hook 1 [ 1217.805378][T24241] netlink: 260 bytes leftover after parsing attributes in process `syz.0.13845'. [ 1217.850456][T24244] netlink: 712 bytes leftover after parsing attributes in process `syz.2.13848'. [ 1217.860249][T24244] openvswitch: netlink: Key type 191 is out of range max 32 [ 1218.273425][T24259] syz_tun: entered allmulticast mode [ 1218.279454][T24261] ip6t_srh: unknown srh match flags 4000 [ 1218.290694][T24259] syzkaller0: entered promiscuous mode [ 1218.300643][T24259] syzkaller0: entered allmulticast mode [ 1218.327081][T24263] lo: MTU too low for tipc bearer [ 1218.332263][T24263] tipc: Enabling of bearer rejected, failed to enable media [ 1218.416297][T24258] syz_tun: left allmulticast mode [ 1218.453023][T24267] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1218.481686][T24267] tipc: Enabled bearer , priority 0 [ 1218.523092][T24267] syzkaller0: entered promiscuous mode [ 1218.529061][T24267] syzkaller0: entered allmulticast mode [ 1218.536250][T24267] tipc: Resetting bearer [ 1218.664402][T24266] tipc: Resetting bearer [ 1218.867839][T24297] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1218.876558][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13865'. [ 1218.907065][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.915839][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.924007][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.932266][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.940495][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.948722][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.956939][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.965141][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.973341][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1218.981557][T24293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1219.003638][T24306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13866'. [ 1220.996918][T24266] tipc: Disabling bearer [ 1221.604580][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13875'. [ 1221.649711][T24341] netlink: 'syz.2.13875': attribute type 1 has an invalid length. [ 1221.658484][T24341] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13875'. [ 1221.746687][T24353] netlink: 'syz.2.13881': attribute type 1 has an invalid length. [ 1221.763570][T24353] netlink: 'syz.2.13881': attribute type 11 has an invalid length. [ 1221.785351][T24345] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1222.167197][T24386] netlink: 'syz.1.13888': attribute type 7 has an invalid length. [ 1222.369234][T24402] bond5: option mode: invalid value (162) [ 1222.380460][T24402] bond5 (unregistering): Released all slaves [ 1222.428697][T24408] __nla_validate_parse: 5 callbacks suppressed [ 1222.428716][T24408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13895'. [ 1222.641543][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1222.651127][T24415] syzkaller0: entered promiscuous mode [ 1222.656925][T24415] syzkaller0: entered allmulticast mode [ 1222.667700][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1222.738235][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1222.947732][T24421] infiniband : set active [ 1222.952266][T24421] infiniband : added ipvlan0 [ 1223.003836][T29765] ipvlan0 speed is unknown, defaulting to 1000 [ 1223.012021][T24421] RDS/IB: : added [ 1223.018624][T24421] smc: adding ib device  with port count 1 [ 1223.024664][T24421] smc: ib device  port 1 has no pnetid [ 1223.030688][T29765] ipvlan0 speed is unknown, defaulting to 1000 [ 1223.037181][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1223.216485][T24444] syzkaller0: entered promiscuous mode [ 1223.221993][T24444] syzkaller0: entered allmulticast mode [ 1223.315890][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1223.441013][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13909'. [ 1223.462227][T24449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13909'. [ 1223.706979][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1223.909950][T24478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13917'. [ 1224.021415][T21420] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.064745][T21420] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.074852][T21420] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.083761][T21420] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1224.200573][T24497] netlink: 'syz.0.13923': attribute type 21 has an invalid length. [ 1224.225432][T24497] netlink: 'syz.0.13923': attribute type 1 has an invalid length. [ 1224.325310][T24504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1224.340575][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1224.383346][T24508] netlink: 'syz.0.13927': attribute type 21 has an invalid length. [ 1224.597043][T24521] erspan0: entered allmulticast mode [ 1224.906874][T24550] netlink: 'syz.4.13938': attribute type 3 has an invalid length. [ 1224.934741][T24550] netlink: 'syz.4.13938': attribute type 3 has an invalid length. [ 1224.982393][T24552] sctp: [Deprecated]: syz.1.13939 (pid 24552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1224.982393][T24552] Use struct sctp_sack_info instead [ 1225.053723][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1225.094604][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13941'. [ 1225.136734][T24561] xt_hashlimit: size too large, truncated to 1048576 [ 1225.151964][T24561] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13941'. [ 1225.493304][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1225.621498][T24588] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13950'. [ 1225.646953][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13949'. [ 1225.658754][T24588] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1225.697975][T24588] lo: Caught tx_queue_len zero misconfig [ 1227.280080][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1227.300853][T24608] syzkaller0: entered promiscuous mode [ 1227.307827][T24608] syzkaller0: entered allmulticast mode [ 1227.421726][T24618] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1227.549092][T24617] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1227.836437][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1227.949043][T24643] bond3: option all_slaves_active: invalid value (222) [ 1228.010143][T24643] bond3 (unregistering): Released all slaves [ 1228.166473][T24657] netlink: 'syz.2.13965': attribute type 7 has an invalid length. [ 1228.184731][T24657] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13965'. [ 1228.251375][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1228.390213][T24665] netlink: 'syz.4.13970': attribute type 5 has an invalid length. [ 1228.608403][T24677] syzkaller0: entered promiscuous mode [ 1228.614504][T24677] syzkaller0: entered allmulticast mode [ 1228.741879][T24680] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13975'. [ 1228.858539][T24421] ipvlan0 speed is unknown, defaulting to 1000 [ 1228.918953][T24691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.926803][T24691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.954388][T24691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13978'. [ 1229.144053][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13982'. [ 1229.146361][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13984'. [ 1229.180791][T24706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13984'. [ 1229.493347][T24711] bridge0: port 3(syz_tun) entered disabled state [ 1229.525491][T24711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.533179][T24711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.588928][T24729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13988'. [ 1229.785698][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1229.816198][T24711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.125165][ T7357] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.150365][ T7357] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.183720][ T7357] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.208515][ T7357] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.257714][ T7357] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.284427][ T7357] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.293376][ T7357] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1230.324901][T24738] net_ratelimit: 3320 callbacks suppressed [ 1230.324922][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.338698][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.346647][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.354583][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.362535][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.370495][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.378732][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.386747][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.394719][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.402640][T24738] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1230.434193][ T7357] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.462990][ T2345] block nbd5: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 60 seconds [ 1230.473757][ T2345] block nbd5: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 60 seconds [ 1230.485373][ T2345] block nbd5: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 60 seconds [ 1230.496336][ T2345] block nbd5: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 60 seconds [ 1230.673624][T24750] veth1_macvtap: left promiscuous mode [ 1230.760100][T24755] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1230.875303][T24771] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13998'. [ 1230.895243][T24771] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13998'. [ 1230.924014][T24771] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13998'. [ 1231.231214][T31698] lec:lec_start_xmit: lec0:No lecd attached [ 1231.513448][T24819] netlink: 'syz.4.14010': attribute type 1 has an invalid length. [ 1231.691015][T24829] syzkaller0: entered promiscuous mode [ 1231.697140][T24829] syzkaller0: entered allmulticast mode [ 1231.951372][T24846] netlink: 'syz.1.14021': attribute type 2 has an invalid length. [ 1231.969384][T24846] veth0: entered promiscuous mode [ 1232.084036][T24853] veth0: left promiscuous mode [ 1232.281076][T24880] syzkaller0: entered promiscuous mode [ 1232.294844][T24880] syzkaller0: entered allmulticast mode [ 1233.118227][T24928] bond0: (slave gre0): Error: Device type is different from other slaves [ 1233.209697][T24932] __nla_validate_parse: 75 callbacks suppressed [ 1233.209717][T24932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14048'. [ 1233.670531][T24969] netlink: 'syz.3.14061': attribute type 1 has an invalid length. [ 1233.702800][T24969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1234.046001][T25003] netlink: 'syz.4.14071': attribute type 4 has an invalid length. [ 1234.046858][ T29] audit: type=1107 audit(1771438384.625:12): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1234.078511][T25003] netlink: 'syz.4.14071': attribute type 4 has an invalid length. [ 1234.092764][T25003] netlink: 'syz.4.14071': attribute type 4 has an invalid length. [ 1234.200083][T25008] bond_slave_1: entered promiscuous mode [ 1234.659734][T25051] netlink: 'syz.0.14083': attribute type 16 has an invalid length. [ 1234.672434][T25046] netlink: 'syz.3.14084': attribute type 1 has an invalid length. [ 1234.691661][T25051] netlink: 'syz.0.14083': attribute type 17 has an invalid length. [ 1234.700998][T25051] netlink: 'syz.0.14083': attribute type 27 has an invalid length. [ 1234.800729][T25046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1234.861740][T25054] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1234.931571][T25059] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1234.941357][T25059] bond7: (slave bond8): Enslaving as an active interface with a down link [ 1234.964877][T25062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14087'. [ 1234.991394][T25076] netlink: 'syz.1.14091': attribute type 1 has an invalid length. [ 1235.023560][T25046] batadv_slave_1: entered promiscuous mode [ 1235.036914][T25046] batadv_slave_1: left promiscuous mode [ 1235.105577][T25087] xt_hashlimit: invalid rate [ 1235.195885][T25081] syzkaller0: entered promiscuous mode [ 1235.218823][ T5188] udevd[5188]: worker [21638] /devices/virtual/block/nbd5 is taking a long time [ 1235.229351][T25081] syzkaller0: entered allmulticast mode [ 1235.492224][T25116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14098'. [ 1235.620413][T25123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14103'. [ 1235.897685][T25148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14110'. [ 1235.924906][T25148] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14110'. [ 1235.945088][T25148] net_ratelimit: 45 callbacks suppressed [ 1235.945107][T25148] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 1236.093777][T25159] syzkaller0: entered promiscuous mode [ 1236.101284][T25158] netlink: 'syz.0.14112': attribute type 11 has an invalid length. [ 1236.114911][T25159] syzkaller0: entered allmulticast mode [ 1236.122055][T25158] netlink: 228 bytes leftover after parsing attributes in process `syz.0.14112'. [ 1236.190440][T25165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.249954][T25173] sch_fq: defrate 0 ignored. [ 1236.341719][T25178] netlink: 'syz.2.14118': attribute type 4 has an invalid length. [ 1236.850618][T25211] bond9: (slave geneve3): making interface the new active one [ 1236.859047][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5620 ms [ 1236.859104][ C0] lec:lec_tx_timeout: lec0 [ 1236.874001][T25211] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 1236.883770][T21420] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1236.911359][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14129'. [ 1236.927457][T21420] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1236.939611][T21420] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1236.951074][T21420] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1237.417833][T16363] block nbd4: Receive control failed (result -111) [ 1237.501445][T25255] macvlan2: entered promiscuous mode [ 1237.516502][T25255] macvlan2: entered allmulticast mode [ 1237.522619][T25255] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1237.551573][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14140'. [ 1237.626749][T25262] syzkaller0: entered promiscuous mode [ 1237.632254][T25262] syzkaller0: entered allmulticast mode [ 1237.657182][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14145'. [ 1237.753192][T25264] bond3: Setting coupled_control to off (0) [ 1237.792356][T25273] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1238.151970][T25302] syzkaller0: entered promiscuous mode [ 1238.158361][T25302] syzkaller0: entered allmulticast mode [ 1238.535220][T25324] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1238.604041][T25331] __nla_validate_parse: 1 callbacks suppressed [ 1238.634963][T25331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14168'. [ 1238.699173][ T1296] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.712850][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 1238.840813][T25349] validate_nla: 6 callbacks suppressed [ 1238.840834][T25349] netlink: 'syz.4.14171': attribute type 1 has an invalid length. [ 1238.959642][T25354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14175'. [ 1238.973993][T25349] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1239.250845][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14181'. [ 1239.263505][T25373] netlink: 104 bytes leftover after parsing attributes in process `syz.3.14182'. [ 1239.292184][T25374] pim6reg527: entered allmulticast mode [ 1239.314423][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14181'. [ 1239.398236][T25373] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1239.405230][T25373] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1239.488956][ T77] ipvlan0 speed is unknown, defaulting to 1000 [ 1239.498851][T29786] ipvlan0 speed is unknown, defaulting to 1000 [ 1239.537422][T25387] netlink: 'syz.2.14185': attribute type 1 has an invalid length. [ 1239.665378][T25391] ip6_vti0 speed is unknown, defaulting to 1000 [ 1240.049840][T25417] ip6t_REJECT: ECHOREPLY is not supported [ 1240.229901][T25391] ipvlan0 speed is unknown, defaulting to 1000 [ 1240.714019][T25445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14207'. [ 1240.745888][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14206'. [ 1240.894792][T25457] netlink: 'syz.2.14210': attribute type 10 has an invalid length. [ 1240.925700][T25464] netlink: 'syz.4.14212': attribute type 3 has an invalid length. [ 1240.989622][T25457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1241.013477][T25457] bond0: (slave team0): Enslaving as an active interface with an up link [ 1241.025310][T25472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14213'. [ 1241.086877][T25468] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1241.103051][T25468] team0: Device macvlan0 is already an upper device of the team interface [ 1241.140987][T25475] netem: incorrect ge model size [ 1241.147131][T25475] netem: change failed [ 1241.346165][T25484] netlink: 'syz.1.14219': attribute type 2 has an invalid length. [ 1241.359291][T25484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.378755][T25480] ip6_vti0 speed is unknown, defaulting to 1000 [ 1241.443430][T25488] netlink: 'syz.1.14220': attribute type 13 has an invalid length. [ 1241.660628][T25491] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1241.697687][T25480] ipvlan0 speed is unknown, defaulting to 1000 [ 1241.829735][T25504] tipc: Started in network mode [ 1241.837021][T25504] tipc: Node identity 6ed6a14b3cbc, cluster identity 4711 [ 1241.879584][T25504] tipc: Enabled bearer , priority 0 [ 1241.932697][T25507] tipc: Disabling bearer [ 1242.108666][T25517] netlink: 'syz.3.14228': attribute type 4 has an invalid length. [ 1242.212814][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14229'. [ 1242.235519][T25520] netlink: 'syz.3.14229': attribute type 10 has an invalid length. [ 1242.642128][T25539] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.14235'. [ 1242.946350][T25556] netlink: 'syz.1.14239': attribute type 4 has an invalid length. [ 1242.992964][T25559] netlink: 'syz.4.14240': attribute type 15 has an invalid length. [ 1243.482976][T25572] syzkaller0: entered promiscuous mode [ 1243.512023][T25572] syzkaller0: entered allmulticast mode [ 1243.686153][T25598] __nla_validate_parse: 7 callbacks suppressed [ 1243.686173][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14250'. [ 1243.809772][T25603] xt_policy: too many policy elements [ 1243.815990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 1243.816021][ C0] lec:lec_tx_timeout: lec0 [ 1243.849892][T25598] bond5: option coupled_control: invalid value (48) [ 1243.861141][T25598] bond5 (unregistering): Released all slaves [ 1244.193840][T25616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14256'. [ 1244.226827][T25616] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14256'. [ 1244.280456][T25623] netlink: zone id is out of range [ 1244.290689][T25623] netlink: zone id is out of range [ 1244.298552][T25623] netlink: zone id is out of range [ 1244.303981][T25623] netlink: zone id is out of range [ 1244.312330][T25623] netlink: zone id is out of range [ 1244.319787][T25626] validate_nla: 6 callbacks suppressed [ 1244.319805][T25626] netlink: 'syz.2.14255': attribute type 1 has an invalid length. [ 1244.402442][T25635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14261'. [ 1244.407274][T25623] netlink: zone id is out of range [ 1244.412085][T25635] netlink: 13 bytes leftover after parsing attributes in process `syz.3.14261'. [ 1244.435860][T25636] openvswitch: netlink: Missing valid actions attribute. [ 1244.444757][T25635] veth3: entered promiscuous mode [ 1244.450984][T25623] netlink: zone id is out of range [ 1244.474297][T25636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.858732][T25662] netlink: 'syz.2.14267': attribute type 1 has an invalid length. [ 1244.864921][T25661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14266'. [ 1244.922702][T25662] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1244.967896][T25666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1244.985039][T25666] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1245.002971][T25666] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1245.059528][T25677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14270'. [ 1245.108303][T25662] veth3: entered promiscuous mode [ 1245.125240][T25662] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1245.260309][T25689] netlink: 211 bytes leftover after parsing attributes in process `syz.4.14274'. [ 1245.315022][T25689] netlink: 211 bytes leftover after parsing attributes in process `syz.4.14274'. [ 1245.345032][T25689] netlink: 211 bytes leftover after parsing attributes in process `syz.4.14274'. [ 1245.703460][T25721] netlink: 'syz.4.14282': attribute type 1 has an invalid length. [ 1245.744975][T25721] netlink: 'syz.4.14282': attribute type 2 has an invalid length. [ 1245.871320][T25721] syzkaller0: entered promiscuous mode [ 1245.877088][T25721] syzkaller0: entered allmulticast mode [ 1247.908618][T25737] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1247.920437][T25751] syz_tun: entered allmulticast mode [ 1247.935010][T25751] syz_tun: left allmulticast mode [ 1247.948503][T25757] ip6gre2: entered promiscuous mode [ 1248.048446][T25768] netlink: 'syz.2.14294': attribute type 10 has an invalid length. [ 1248.083669][T25768] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1248.477729][T25796] netlink: 'syz.0.14303': attribute type 4 has an invalid length. [ 1248.534956][T25805] netlink: 'syz.2.14305': attribute type 13 has an invalid length. [ 1248.552804][T25805] gretap0: refused to change device tx_queue_len [ 1248.574374][T25805] net_ratelimit: 47 callbacks suppressed [ 1248.574394][T25805] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1248.603502][T25808] netlink: 'syz.0.14307': attribute type 1 has an invalid length. [ 1248.627111][T25810] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 1248.636074][T25810] bond5: option packets_per_slave: allowed values 0 - 65535 [ 1248.646703][T25810] bond5 (unregistering): Released all slaves [ 1248.786894][T25808] bond6: entered promiscuous mode [ 1248.801412][T25808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1248.921333][T25831] nbd: must specify a device to reconfigure [ 1249.302589][T25859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.341580][T25864] __nla_validate_parse: 63 callbacks suppressed [ 1249.341603][T25864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14322'. [ 1249.385560][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14322'. [ 1249.500505][ T7348] tipc: Subscription rejected, illegal request [ 1249.738631][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14331'. [ 1249.765132][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14334'. [ 1249.784734][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14334'. [ 1249.790665][T25894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14333'. [ 1249.807578][T25896] tipc: Enabling not permitted [ 1249.813176][T25896] tipc: Enabling of bearer rejected, failed to enable media [ 1249.893134][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14334'. [ 1249.910014][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14334'. [ 1250.022582][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14339'. [ 1250.063385][T25904] syzkaller1: entered promiscuous mode [ 1250.101311][T25904] syzkaller1: entered allmulticast mode [ 1250.156889][T25891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14334'. [ 1250.426969][T25938] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1250.451996][T25938] bond7 (unregistering): Released all slaves [ 1251.083219][T25988] netlink: 'syz.1.14360': attribute type 4 has an invalid length. [ 1251.248270][T26005] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1251.278708][T26005] bond10 (unregistering): Released all slaves [ 1251.533007][T26017] ip6t_REJECT: ECHOREPLY is not supported [ 1251.633778][T26027] netlink: 'syz.0.14373': attribute type 2 has an invalid length. [ 1251.782228][T26034] nbd: must specify at least one socket [ 1252.057875][T26061] team0: mtu less than device minimum [ 1252.139566][T26068] bond0: entered allmulticast mode [ 1252.152245][T26068] bond_slave_0: entered allmulticast mode [ 1252.188587][T26068] bond_slave_1: entered allmulticast mode [ 1252.207504][T26068] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1252.226285][T26068] team0: entered allmulticast mode [ 1252.231576][T26068] team_slave_0: entered allmulticast mode [ 1252.258005][T26068] team_slave_1: entered allmulticast mode [ 1252.266517][T26068] bridge0: entered allmulticast mode [ 1252.277745][T26076] mac80211_hwsim hwsim120 : renamed from wlan1 [ 1252.278672][T26078] sock: sock_set_timeout: `syz.0.14392' (pid 26078) tries to set negative timeout [ 1252.310052][T26078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.813869][T26128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1252.894694][T26130] vlan3: entered promiscuous mode [ 1252.909918][T26130] bridge0: entered promiscuous mode [ 1252.934345][T26135] tipc: MTU too low for tipc bearer [ 1253.457601][T26180] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1253.624607][T26198] "syz.1.14428" (26198) uses obsolete ecb(arc4) skcipher [ 1254.630764][T26238] __nla_validate_parse: 11 callbacks suppressed [ 1254.630781][T26238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14435'. [ 1256.177071][T26219] syzkaller0: entered promiscuous mode [ 1256.182807][T26219] syzkaller0: entered allmulticast mode [ 1256.303774][T26245] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1256.475850][T26263] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1256.523111][T26274] tipc: Enabling of bearer rejected, failed to enable media [ 1256.531304][T26277] netlink: 21 bytes leftover after parsing attributes in process `syz.1.14445'. [ 1256.653363][T26284] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.14449'. [ 1256.731406][T26286] tipc: Enabled bearer , priority 0 [ 1256.760475][T26286] tipc: Resetting bearer [ 1256.817064][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14454'. [ 1256.876047][T26302] team_slave_1: entered promiscuous mode [ 1256.904631][T26302] erspan0: entered promiscuous mode [ 1256.912433][T26302] debugfs: 'hsr1' already exists in 'hsr' [ 1256.918551][T26302] Cannot create hsr debugfs directory [ 1256.949311][T26291] tipc: Disabling bearer [ 1256.963770][T26306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14451'. [ 1257.121342][T26311] syzkaller1: entered promiscuous mode [ 1257.127116][T26311] syzkaller1: entered allmulticast mode [ 1257.608085][T26352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14468'. [ 1257.615479][T26349] netlink: 'syz.3.14467': attribute type 11 has an invalid length. [ 1257.637184][T26349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14467'. [ 1257.679123][T26349] netlink: 'syz.3.14467': attribute type 1 has an invalid length. [ 1257.687892][T26355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14469'. [ 1257.718094][T26362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.738939][T26349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1257.836253][T26367] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14472'. [ 1257.845954][T26367] openvswitch: netlink: Flow key attr not present in new flow. [ 1257.852395][T26369] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.14473'. [ 1257.883454][T26369] netlink: Conntrack attr has 3 unknown bytes [ 1257.933059][T26371] netlink: 'syz.4.14474': attribute type 1 has an invalid length. [ 1258.059064][T26381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1258.182423][T26387] xt_policy: output policy not valid in PREROUTING and INPUT [ 1258.487879][T26414] ip_vti0: entered promiscuous mode [ 1259.044729][T26432] !: renamed from dummy0 [ 1259.047942][T26406] lec:lec_atm_close: lec0: Shut down! [ 1259.336055][T26440] xt_CT: No such helper "syz1" [ 1259.725634][T26467] __nla_validate_parse: 9 callbacks suppressed [ 1259.725654][T26467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14505'. [ 1259.843027][T26473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1259.849536][T26473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1259.879020][T26473] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1259.885535][T26473] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1259.921878][T26484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14511'. [ 1259.980651][ T5888] ipvlan0 speed is unknown, defaulting to 1000 [ 1260.016058][T26479] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1260.022580][T26479] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1260.109055][ T5888] ipvlan0 speed is unknown, defaulting to 1000 [ 1260.169602][T26497] syzkaller0: entered promiscuous mode [ 1260.200019][T26497] syzkaller0: entered allmulticast mode [ 1260.215421][T26496] tipc: Enabled bearer , priority 0 [ 1260.258375][T26505] netlink: 'syz.0.14517': attribute type 1 has an invalid length. [ 1260.271582][T26506] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14514'. [ 1260.365817][T26497] tipc: Resetting bearer [ 1260.427475][T26497] tipc: Disabling bearer [ 1260.468848][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14518'. [ 1260.507919][T26516] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14518'. [ 1260.624592][T26521] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1260.676395][T26530] netlink: 'syz.2.14521': attribute type 1 has an invalid length. [ 1260.695663][T26530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14521'. [ 1260.705824][T26530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14521'. [ 1260.873826][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14526'. [ 1260.905797][T26540] netlink: 'syz.1.14528': attribute type 8 has an invalid length. [ 1260.908051][T26538] netlink: 'syz.4.14526': attribute type 30 has an invalid length. [ 1260.928574][T26542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14529'. [ 1260.946285][T26538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14526'. [ 1261.006827][T26542] ip6gretap0 (unregistering): left promiscuous mode [ 1261.098884][ T2345] block nbd5: Possible stuck request ffff888026f00000: control (read@0,1024B). Runtime 90 seconds [ 1261.113009][ T2345] block nbd5: Possible stuck request ffff888026f00200: control (read@1024,1024B). Runtime 90 seconds [ 1261.126206][ T2345] block nbd5: Possible stuck request ffff888026f00400: control (read@2048,1024B). Runtime 90 seconds [ 1261.137603][ T2345] block nbd5: Possible stuck request ffff888026f00600: control (read@3072,1024B). Runtime 90 seconds [ 1261.326157][T26565] syzkaller0: entered promiscuous mode [ 1261.331787][T26565] syzkaller0: entered allmulticast mode [ 1261.362044][T26569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.732293][T26593] netlink: 'syz.0.14543': attribute type 1 has an invalid length. [ 1261.832594][T26575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1261.994261][T26599] ipvlan0: entered allmulticast mode [ 1261.999663][T26599] batadv_slave_1: entered allmulticast mode [ 1262.011488][T26599] batman_adv: batadv0: Adding interface: ipvlan0 [ 1262.018256][T26599] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1262.043976][T26599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.055151][T26599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.065832][T26599] batman_adv: batadv0: Interface activated: ipvlan0 [ 1262.074039][T26607] netlink: 'syz.3.14547': attribute type 11 has an invalid length. [ 1262.160368][T26611] sctp: [Deprecated]: syz.4.14549 (pid 26611) Use of int in maxseg socket option. [ 1262.160368][T26611] Use struct sctp_assoc_value instead [ 1262.505583][T26636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.713888][T26643] syzkaller1: entered promiscuous mode [ 1262.719996][T26643] syzkaller1: entered allmulticast mode [ 1262.923276][T26656] netlink: 'syz.2.14565': attribute type 12 has an invalid length. [ 1263.035567][T26661] netlink: 'syz.2.14566': attribute type 1 has an invalid length. [ 1263.275279][T26677] syzkaller0: entered promiscuous mode [ 1263.280763][T26677] syzkaller0: entered allmulticast mode [ 1263.669717][T26707] chnl_net:caif_netlink_parms(): no params data found [ 1263.975743][T26735] netlink: 'syz.3.14591': attribute type 1 has an invalid length. [ 1263.983700][T26735] netlink: 'syz.3.14591': attribute type 1 has an invalid length. [ 1264.007018][T26735] netlink: 'syz.3.14591': attribute type 8 has an invalid length. [ 1264.262991][T26755] tipc: Enabling of bearer rejected, failed to enable media [ 1264.404479][T26765] syz_tun: left allmulticast mode [ 1264.410069][T26765] syz_tun: left promiscuous mode [ 1264.418711][T26765] bridge0: port 3(syz_tun) entered disabled state [ 1264.436590][T26765] bridge_slave_1: left allmulticast mode [ 1264.442452][T26765] bridge_slave_1: left promiscuous mode [ 1264.452706][T26765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.480290][T26765] bridge_slave_0: left allmulticast mode [ 1264.505260][T26771] netlink: 'syz.0.14601': attribute type 12 has an invalid length. [ 1264.513414][T26765] bridge_slave_0: left promiscuous mode [ 1264.546046][T26765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.631904][T26776] bond0: entered promiscuous mode [ 1264.648179][T26776] bond_slave_0: entered promiscuous mode [ 1264.668616][T26776] bond_slave_1: entered promiscuous mode [ 1264.763954][T26773] __nla_validate_parse: 34 callbacks suppressed [ 1264.763974][T26773] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14602'. [ 1264.854108][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5810 ms [ 1264.862259][ C0] lec:lec_tx_timeout: lec0 [ 1265.125075][T26801] netlink: 'syz.1.14607': attribute type 11 has an invalid length. [ 1265.143409][T26801] netlink: 'syz.1.14607': attribute type 11 has an invalid length. [ 1265.169590][T26801] netlink: 200 bytes leftover after parsing attributes in process `syz.1.14607'. [ 1265.262119][T26804] syzkaller0: entered promiscuous mode [ 1265.284342][T26804] syzkaller0: entered allmulticast mode [ 1265.364656][T26811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14609'. [ 1265.404290][T26811] bond0 (unregistering): left promiscuous mode [ 1265.421157][T26811] bond_slave_0: left promiscuous mode [ 1265.433797][T26816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14610'. [ 1265.448055][T26804] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.14609'. [ 1265.463608][T26811] bond_slave_1: left promiscuous mode [ 1265.476583][T26811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1265.487757][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14612'. [ 1265.510057][T26804] net_ratelimit: 4 callbacks suppressed [ 1265.510076][T26804] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1265.546706][T26811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.585366][T26811] bond0 (unregistering): Released all slaves [ 1265.607852][T26806] bond1: option mode: unable to set because the bond device has slaves [ 1265.651626][T26814] syzkaller1: entered promiscuous mode [ 1265.697922][T26814] syzkaller1: entered allmulticast mode [ 1265.871606][T26794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1265.900702][T26794] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1265.965668][T26830] netlink: 'syz.0.14617': attribute type 1 has an invalid length. [ 1266.002053][T26834] Cannot find del_set index 4 as target [ 1266.044421][T26834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14618'. [ 1266.155055][T26842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14620'. [ 1266.189841][T26841] bond0: (slave gretap2): making interface the new active one [ 1266.189973][T26844] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14621'. [ 1266.220184][T26841] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 1266.445651][T26864] xt_l2tp: invalid flags combination: 0 [ 1266.652398][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14630'. [ 1266.688200][T26877] netlink: 'syz.2.14630': attribute type 1 has an invalid length. [ 1266.723265][T26877] team0: Caught tx_queue_len zero misconfig [ 1268.586773][T26966] syzkaller0: entered promiscuous mode [ 1268.613719][T26966] syzkaller0: entered allmulticast mode [ 1268.702036][T26977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1268.898790][T26993] sctp: [Deprecated]: syz.0.14659 (pid 26993) Use of int in max_burst socket option. [ 1268.898790][T26993] Use struct sctp_assoc_value instead [ 1268.944364][T26991] syzkaller0: entered promiscuous mode [ 1268.962243][T26991] syzkaller0: entered allmulticast mode [ 1269.059683][T26998] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1269.305087][T27012] sctp: [Deprecated]: syz.2.14666 (pid 27012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1269.305087][T27012] Use struct sctp_sack_info instead [ 1269.305974][T27013] netlink: 'syz.3.14667': attribute type 23 has an invalid length. [ 1269.354685][T27012] netlink: 'syz.2.14666': attribute type 11 has an invalid length. [ 1269.768816][T27039] __nla_validate_parse: 15 callbacks suppressed [ 1269.768833][T27039] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14676'. [ 1269.787247][T27040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14676'. [ 1269.895828][T27042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14677'. [ 1269.907707][T27042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14677'. [ 1269.932846][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14678'. [ 1270.190783][T27065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14683'. [ 1270.385055][T27081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14686'. [ 1270.822111][T27094] netlink: 'syz.0.14687': attribute type 1 has an invalid length. [ 1270.862668][T27094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14687'. [ 1270.875965][T27099] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14696'. [ 1270.922839][T27099] syzkaller0: entered promiscuous mode [ 1270.936175][T27099] syzkaller0: entered allmulticast mode [ 1270.999660][T27099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14696'. [ 1271.346714][T27119] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1271.473976][T27132] vcan2: entered promiscuous mode [ 1271.480931][T27132] vcan2: entered allmulticast mode [ 1272.112297][T27175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1274.163510][T27207] netlink: 'syz.1.14727': attribute type 3 has an invalid length. [ 1274.548746][T27227] netlink: 'syz.1.14734': attribute type 1 has an invalid length. [ 1274.571714][T27233] Unsupported ieee802154 address type: 0 [ 1274.659741][T27227] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1274.708360][T27236] bond5: (slave geneve2): making interface the new active one [ 1274.719281][T27236] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1274.870043][T27248] netlink: 'syz.3.14740': attribute type 1 has an invalid length. [ 1274.881152][T27248] netlink: 'syz.3.14740': attribute type 1 has an invalid length. [ 1274.972372][T27256] __nla_validate_parse: 6 callbacks suppressed [ 1274.972390][T27256] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14743'. [ 1275.046165][T27259] netlink: 84 bytes leftover after parsing attributes in process `syz.1.14743'. [ 1275.132824][T27265] netlink: 'syz.4.14745': attribute type 3 has an invalid length. [ 1275.181576][T27263] syzkaller0: entered promiscuous mode [ 1275.204426][T27263] syzkaller0: entered allmulticast mode [ 1275.285970][T27270] netlink: 'syz.2.14746': attribute type 16 has an invalid length. [ 1275.294475][T27270] netlink: 'syz.2.14746': attribute type 17 has an invalid length. [ 1275.441853][T27270] bond0: left allmulticast mode [ 1275.455664][T27270] bond_slave_0: left allmulticast mode [ 1275.466081][T27270] bond_slave_1: left allmulticast mode [ 1275.477489][T27270] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1275.490661][T27281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14749'. [ 1275.493551][T27270] team0: left allmulticast mode [ 1275.508074][T27270] team_slave_0: left allmulticast mode [ 1275.515842][T27270] team_slave_1: left allmulticast mode [ 1275.521421][T27270] bridge0: left allmulticast mode [ 1275.532504][T27270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.548659][T27270] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.558712][T27270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1275.701648][T27288] tipc: Enabled bearer , priority 0 [ 1275.771045][T27288] syzkaller0: entered promiscuous mode [ 1275.776976][T27288] syzkaller0: entered allmulticast mode [ 1275.828504][T27282] tipc: Resetting bearer [ 1276.044761][T27315] IPv6: NLM_F_CREATE should be specified when creating new route [ 1277.873190][T27282] tipc: Disabling bearer [ 1277.889493][T25368] tipc: Node number set to 1382719819 [ 1277.958206][T27331] netlink: 304 bytes leftover after parsing attributes in process `syz.3.14766'. [ 1278.229959][T27358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14773'. [ 1278.342793][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14778'. [ 1278.350972][T27369] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14777'. [ 1278.373635][T27369] netlink: 'syz.1.14777': attribute type 3 has an invalid length. [ 1278.375734][T27368] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1278.387481][T27369] netlink: 'syz.1.14777': attribute type 3 has an invalid length. [ 1278.446825][T27374] veth0: entered promiscuous mode [ 1278.470353][T27368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14778'. [ 1278.476367][T27378] siw: device registration error -23 [ 1278.483520][T27368] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1278.514191][T27374] veth0: left promiscuous mode [ 1278.553558][T27383] netlink: 'syz.2.14781': attribute type 1 has an invalid length. [ 1278.609141][T27383] bond6: entered promiscuous mode [ 1278.615409][T27383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1278.653569][T27383] bond6: (slave bridge6): making interface the new active one [ 1278.661437][T27383] bridge6: entered promiscuous mode [ 1278.668514][T27383] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1278.806764][T27395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14782'. [ 1279.373843][T27426] mac80211_hwsim hwsim119 wlan0: entered promiscuous mode [ 1279.391926][T27428] xt_hashlimit: size too large, truncated to 1048576 [ 1279.466408][T27435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14793'. [ 1279.760262][T27451] pim6reg: entered allmulticast mode [ 1279.792646][T27453] team0: Device gtp2 is up. Set it down before adding it as a team port [ 1279.823600][T27451] pim6reg: left allmulticast mode [ 1279.841623][T27458] netlink: 'syz.2.14801': attribute type 3 has an invalid length. [ 1279.985716][T27465] __nla_validate_parse: 3 callbacks suppressed [ 1279.985736][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14803'. [ 1280.014494][T27465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14803'. [ 1280.062959][T27465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14803'. [ 1280.107478][T27465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14803'. [ 1280.137703][T27478] x_tables: duplicate underflow at hook 1 [ 1280.218502][T27465] tc_dump_action: action bad kind [ 1280.323764][T27492] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14809'. [ 1280.331199][T27493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14811'. [ 1280.507199][T27506] netlink: 'syz.1.14813': attribute type 10 has an invalid length. [ 1280.568525][T27506] bridge0: port 3(team0) entered blocking state [ 1280.594570][T27506] bridge0: port 3(team0) entered disabled state [ 1280.601171][T27506] team0: entered allmulticast mode [ 1280.613314][T27506] team_slave_0: entered allmulticast mode [ 1280.621080][T27506] team_slave_1: entered allmulticast mode [ 1280.629884][T27506] team0: entered promiscuous mode [ 1280.639197][T27506] team_slave_0: entered promiscuous mode [ 1280.646465][T27506] team_slave_1: entered promiscuous mode [ 1280.669411][T27516] xt_ecn: cannot match TCP bits for non-tcp packets [ 1280.690351][T27516] pim6reg1: entered promiscuous mode [ 1280.696478][T27516] pim6reg1: entered allmulticast mode [ 1280.786080][T16407] IPVS: starting estimator thread 0... [ 1280.889530][T27526] IPVS: using max 32 ests per chain, 76800 per kthread [ 1281.032227][T27539] netlink: 'syz.2.14825': attribute type 2 has an invalid length. [ 1281.116172][T27546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1281.128465][T27546] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1281.137122][T27546] gretap1: entered promiscuous mode [ 1281.142362][T27546] gretap1: entered allmulticast mode [ 1281.151629][T27551] x_tables: duplicate underflow at hook 1 [ 1281.237489][T27556] gtp0: entered promiscuous mode [ 1281.242498][T27556] gtp0: entered allmulticast mode [ 1281.281478][T27553] syzkaller0: entered promiscuous mode [ 1281.288815][T27553] syzkaller0: entered allmulticast mode [ 1281.490497][T27566] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1281.551793][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14837'. [ 1281.628983][T27583] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1281.694578][T27589] netlink: 80 bytes leftover after parsing attributes in process `syz.0.14842'. [ 1281.746641][T27592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14843'. [ 1281.982123][T27602] mac80211_hwsim hwsim129 wlan0: entered promiscuous mode [ 1282.201167][T27614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14851'. [ 1282.379026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cc81800: rx timeout, send abort [ 1282.388061][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cc81800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1282.429083][T27624] openvswitch: netlink: IP tunnel dst address not specified [ 1282.990493][T27660] IPv6: NLM_F_CREATE should be specified when creating new route [ 1283.358245][T27690] netlink: 'syz.0.14875': attribute type 1 has an invalid length. [ 1283.513227][T27697] tipc: Invalid UDP bearer configuration [ 1283.513281][T27697] tipc: Enabling of bearer rejected, failed to enable media [ 1283.529167][T27703] lo: Caught tx_queue_len zero misconfig [ 1283.713025][T27715] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1283.984939][T27742] syzkaller0: entered promiscuous mode [ 1283.990475][T27742] syzkaller0: entered allmulticast mode [ 1284.052249][T27745] bond0: entered promiscuous mode [ 1284.058222][T27745] bond0: entered allmulticast mode [ 1284.105617][T27738] tipc: Enabled bearer , priority 0 [ 1284.120869][T27737] tipc: Resetting bearer [ 1284.159779][T27737] tipc: Disabling bearer [ 1284.462269][T27779] wg1: entered promiscuous mode [ 1284.488755][T27779] wg1: entered allmulticast mode [ 1284.691978][T27792] netlink: 'syz.0.14909': attribute type 10 has an invalid length. [ 1285.088673][T27814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1285.301940][T27828] netlink: 'syz.3.14922': attribute type 1 has an invalid length. [ 1285.337523][T27828] __nla_validate_parse: 14 callbacks suppressed [ 1285.337541][T27828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.14922'. [ 1285.376334][T27829] block nbd4: NBD_DISCONNECT [ 1285.381537][T27829] block nbd4: Send disconnect failed -32 [ 1285.387914][T27829] block nbd4: shutting down sockets [ 1285.443558][T27836] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.14923'. [ 1285.603595][T27838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14924'. [ 1285.615118][T27840] xt_bpf: check failed: parse error [ 1285.633894][T27842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14924'. [ 1285.676965][T27843] xt_bpf: check failed: parse error [ 1285.805470][T27855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14929'. [ 1286.001234][T27870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14934'. [ 1286.303403][T27892] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14942'. [ 1286.330161][T27892] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.14942'. [ 1286.336737][T27890] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1286.350727][T27894] netlink: 'syz.1.14943': attribute type 1 has an invalid length. [ 1286.365858][T27890] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1286.383935][T27890] gretap4: entered promiscuous mode [ 1286.393173][T27890] gretap4: entered allmulticast mode [ 1286.519700][T27894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1286.535663][T27910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14946'. [ 1286.574604][T27910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14946'. [ 1286.644435][T27921] netlink: 'syz.1.14951': attribute type 1 has an invalid length. [ 1287.061676][T27345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.076960][T27345] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.086030][T27345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.097707][T27345] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.115964][T27345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.238803][T16363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.264762][T16363] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.275781][T16363] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.283633][T16363] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.293947][T16363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1287.361989][T27946] ip6_vti0 speed is unknown, defaulting to 1000 [ 1287.415909][T27964] netlink: 'syz.2.14964': attribute type 1 has an invalid length. [ 1287.558001][T27966] macvlan2: entered promiscuous mode [ 1287.563467][T27966] macvlan2: entered allmulticast mode [ 1287.573294][T27966] bond7: entered promiscuous mode [ 1287.579747][T27966] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1287.597332][T27966] bond7: left promiscuous mode [ 1287.706264][T27946] ipvlan0 speed is unknown, defaulting to 1000 [ 1287.948265][T21413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.961318][T21413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1287.974049][T21413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1288.285491][T21413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.312207][T21413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1288.329727][T21413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1288.480947][T21413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.491878][T21413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1288.503961][T21413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1288.642493][T21413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.653461][T21413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1288.663884][T21413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1288.685198][T28034] netlink: 'syz.0.14979': attribute type 30 has an invalid length. [ 1288.706505][T28037] netlink: 'syz.1.14980': attribute type 10 has an invalid length. [ 1288.984397][T21415] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.053983][T21421] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.101280][T27946] chnl_net:caif_netlink_parms(): no params data found [ 1289.209774][T21415] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.290890][T21415] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.334424][T16363] Bluetooth: hci3: command tx timeout [ 1289.361868][T28073] netlink: 'syz.1.14991': attribute type 21 has an invalid length. [ 1289.492309][ T7348] smc: removing ib device  [ 1289.531368][T21413] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 1289.651753][T21413] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1289.682288][T21413] bond9 (unregistering): (slave geneve3): Releasing active interface [ 1289.908260][T21413] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 1289.923141][T21413] bond0 (unregistering): Released all slaves [ 1289.933567][T21413] bond1 (unregistering): Released all slaves [ 1289.954006][T21413] bond2 (unregistering): Released all slaves [ 1289.968933][T21413] bond3 (unregistering): Released all slaves [ 1289.981924][T21413] bond4 (unregistering): Released all slaves [ 1289.999689][T21413] bond5 (unregistering): Released all slaves [ 1290.014993][T21413] bond6 (unregistering): Released all slaves [ 1290.028880][T21413] bond7 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1290.039768][T21413] bond7 (unregistering): (slave bond8): Releasing active interface [ 1290.049133][T21413] bond7 (unregistering): Released all slaves [ 1290.066108][T21413] bond8 (unregistering): Released all slaves [ 1290.078622][T21413] bond9 (unregistering): Released all slaves [ 1290.091787][T21413] bond10 (unregistering): Released all slaves [ 1290.154532][T28073] netlink: 'syz.1.14991': attribute type 21 has an invalid length. [ 1290.160995][T28077] dvmrp6: entered allmulticast mode [ 1290.176676][ T5888] ================================================================== [ 1290.176840][T28073] netlink: 'syz.1.14991': attribute type 21 has an invalid length. [ 1290.184757][ T5888] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 1290.184787][ T5888] Read of size 8 at addr ffff888031e382f0 by task kworker/1:5/5888 [ 1290.184801][ T5888] [ 1290.184811][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 1290.184827][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1290.184838][ T5888] Workqueue: infiniband ib_cache_event_task [ 1290.184862][ T5888] Call Trace: [ 1290.184869][ T5888] [ 1290.184878][ T5888] dump_stack_lvl+0xe8/0x150 [ 1290.184900][ T5888] print_report+0xba/0x230 [ 1290.184918][ T5888] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1290.184935][ T5888] kasan_report+0x117/0x150 [ 1290.184960][ T5888] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1290.184982][ T5888] __ethtool_get_link_ksettings+0x5e/0x170 [ 1290.185003][ T5888] ib_get_eth_speed+0x180/0x7f0 [ 1290.185019][ T5888] ? rxe_query_port+0x7e/0x3d0 [ 1290.185041][ T5888] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1290.185062][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 1290.185084][ T5888] ? rxe_query_port+0x6b/0x3d0 [ 1290.185108][ T5888] rxe_query_port+0x93/0x3d0 [ 1290.185132][ T5888] ib_query_port+0x170/0x830 [ 1290.185153][ T5888] ib_cache_update+0x1ba/0xc70 [ 1290.185176][ T5888] ? finish_task_switch+0x161/0x920 [ 1290.185194][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 1290.185214][ T5888] ? __pfx_ib_cache_update+0x10/0x10 [ 1290.185236][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1290.185258][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1290.185277][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1290.185297][ T5888] ib_cache_event_task+0xd8/0x1c0 [ 1290.185326][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1290.185344][ T5888] process_scheduled_works+0xaec/0x17a0 [ 1290.185374][ T5888] ? __pfx_process_scheduled_works+0x10/0x10 [ 1290.185395][ T5888] ? assign_work+0x3d5/0x5e0 [ 1290.185414][ T5888] worker_thread+0xa50/0xfc0 [ 1290.185444][ T5888] kthread+0x388/0x470 [ 1290.185464][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 1290.185480][ T5888] ? __pfx_kthread+0x10/0x10 [ 1290.185501][ T5888] ret_from_fork+0x51e/0xb90 [ 1290.185521][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 1290.185537][ T5888] ? __switch_to+0xc7d/0x1400 [ 1290.185555][ T5888] ? __pfx_kthread+0x10/0x10 [ 1290.185575][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1290.185603][ T5888] [ 1290.185610][ T5888] [ 1290.420179][ T5888] Allocated by task 17129: [ 1290.424578][ T5888] kasan_save_track+0x3e/0x80 [ 1290.429250][ T5888] __kasan_kmalloc+0x93/0xb0 [ 1290.433825][ T5888] __kvmalloc_node_noprof+0x528/0x8a0 [ 1290.439182][ T5888] alloc_netdev_mqs+0xa6/0x11b0 [ 1290.444020][ T5888] rtnl_create_link+0x31f/0xd70 [ 1290.448863][ T5888] rtnl_newlink_create+0x277/0xb70 [ 1290.453962][ T5888] rtnl_newlink+0x1666/0x1be0 [ 1290.458634][ T5888] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1290.463553][ T5888] netlink_rcv_skb+0x232/0x4b0 [ 1290.468297][ T5888] netlink_unicast+0x80f/0x9b0 [ 1290.473049][ T5888] netlink_sendmsg+0x813/0xb40 [ 1290.477792][ T5888] __sys_sendto+0x709/0x7a0 [ 1290.482277][ T5888] __x64_sys_sendto+0xde/0x100 [ 1290.487024][ T5888] do_syscall_64+0x14d/0xf80 [ 1290.491599][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.497472][ T5888] [ 1290.499782][ T5888] Freed by task 21413: [ 1290.503830][ T5888] kasan_save_track+0x3e/0x80 [ 1290.508491][ T5888] kasan_save_free_info+0x46/0x50 [ 1290.513497][ T5888] __kasan_slab_free+0x5c/0x80 [ 1290.518248][ T5888] kfree+0x1c1/0x610 [ 1290.522125][ T5888] device_release+0x9e/0x1d0 [ 1290.526697][ T5888] kobject_put+0x228/0x560 [ 1290.531101][ T5888] netdev_run_todo+0xc75/0xde0 [ 1290.535851][ T5888] ops_undo_list+0x3d8/0x940 [ 1290.540428][ T5888] cleanup_net+0x56b/0x800 [ 1290.544828][ T5888] process_scheduled_works+0xaec/0x17a0 [ 1290.550442][ T5888] worker_thread+0xa50/0xfc0 [ 1290.555051][ T5888] kthread+0x388/0x470 [ 1290.559107][ T5888] ret_from_fork+0x51e/0xb90 [ 1290.563676][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1290.568520][ T5888] [ 1290.570837][ T5888] The buggy address belongs to the object at ffff888031e38000 [ 1290.570837][ T5888] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1290.585227][ T5888] The buggy address is located 752 bytes inside of [ 1290.585227][ T5888] freed 4096-byte region [ffff888031e38000, ffff888031e39000) [ 1290.599101][ T5888] [ 1290.601415][ T5888] The buggy address belongs to the physical page: [ 1290.607819][ T5888] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31e38 [ 1290.616560][ T5888] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1290.625054][ T5888] memcg:ffff888031e39011 [ 1290.629286][ T5888] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1290.637018][ T5888] page_type: f5(slab) [ 1290.641091][ T5888] raw: 00fff00000000040 ffff88813feb7500 dead000000000100 dead000000000122 [ 1290.650180][ T5888] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888031e39011 [ 1290.658791][ T5888] head: 00fff00000000040 ffff88813feb7500 dead000000000100 dead000000000122 [ 1290.667532][ T5888] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888031e39011 [ 1290.676187][ T5888] head: 00fff00000000003 ffffea0000c78e01 00000000ffffffff 00000000ffffffff [ 1290.684837][ T5888] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1290.693486][ T5888] page dumped because: kasan: bad access detected [ 1290.699997][ T5888] page_owner tracks the page as allocated [ 1290.705715][ T5888] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5188, tgid 5188 (udevd), ts 150382232886, free_ts 150362338762 [ 1290.726623][ T5888] post_alloc_hook+0x228/0x280 [ 1290.731379][ T5888] get_page_from_freelist+0x24dc/0x2580 [ 1290.736913][ T5888] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1290.742705][ T5888] allocate_slab+0x77/0x660 [ 1290.747189][ T5888] refill_objects+0x331/0x3c0 [ 1290.751846][ T5888] __pcs_replace_empty_main+0x2b9/0x620 [ 1290.757440][ T5888] __kvmalloc_node_noprof+0x657/0x8a0 [ 1290.762807][ T5888] seq_read_iter+0x202/0xe10 [ 1290.767423][ T5888] vfs_read+0x582/0xa70 [ 1290.771562][ T5888] ksys_read+0x150/0x270 [ 1290.775792][ T5888] do_syscall_64+0x14d/0xf80 [ 1290.780375][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.786251][ T5888] page last free pid 5801 tgid 5801 stack trace: [ 1290.792559][ T5888] __free_frozen_pages+0xbf8/0xd70 [ 1290.797653][ T5888] __folio_put+0x414/0x4f0 [ 1290.802057][ T5888] skb_release_data+0x4cb/0x940 [ 1290.806898][ T5888] skb_attempt_defer_free+0x552/0x760 [ 1290.812256][ T5888] tcp_recvmsg_locked+0x23b9/0x3600 [ 1290.817448][ T5888] tcp_recvmsg+0x213/0x7f0 [ 1290.821867][ T5888] inet_recvmsg+0x157/0x270 [ 1290.826372][ T5888] sock_recvmsg+0x1a8/0x270 [ 1290.830915][ T5888] sock_read_iter+0x251/0x320 [ 1290.835773][ T5888] vfs_read+0x582/0xa70 [ 1290.840003][ T5888] ksys_read+0x150/0x270 [ 1290.844227][ T5888] do_syscall_64+0x14d/0xf80 [ 1290.848805][ T5888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.854683][ T5888] [ 1290.856990][ T5888] Memory state around the buggy address: [ 1290.862601][ T5888] ffff888031e38180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1290.870643][ T5888] ffff888031e38200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1290.878695][ T5888] >ffff888031e38280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1290.886733][ T5888] ^ [ 1290.894474][ T5888] ffff888031e38300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1290.902519][ T5888] ffff888031e38380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1290.910555][ T5888] ================================================================== [ 1290.958948][ T5888] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1290.966184][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 1290.975643][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1290.985794][ T5888] Workqueue: infiniband ib_cache_event_task [ 1290.991714][ T5888] Call Trace: [ 1290.995083][ T5888] [ 1290.998016][ T5888] vpanic+0x1e0/0x670 [ 1291.002012][ T5888] panic+0xc5/0xd0 [ 1291.005730][ T5888] ? __pfx_panic+0x10/0x10 [ 1291.010222][ T5888] ? preempt_schedule_thunk+0x16/0x30 [ 1291.015582][ T5888] ? preempt_schedule_thunk+0x16/0x30 [ 1291.020947][ T5888] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1291.026921][ T5888] check_panic_on_warn+0x89/0xb0 [ 1291.031850][ T5888] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1291.037814][ T5888] end_report+0x6f/0x140 [ 1291.042051][ T5888] kasan_report+0x128/0x150 [ 1291.046549][ T5888] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1291.052608][ T5888] __ethtool_get_link_ksettings+0x5e/0x170 [ 1291.058401][ T5888] ib_get_eth_speed+0x180/0x7f0 [ 1291.063234][ T5888] ? rxe_query_port+0x7e/0x3d0 [ 1291.068006][ T5888] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1291.073372][ T5888] ? do_raw_spin_unlock+0xf5/0x210 [ 1291.078474][ T5888] ? rxe_query_port+0x6b/0x3d0 [ 1291.083231][ T5888] rxe_query_port+0x93/0x3d0 [ 1291.087811][ T5888] ib_query_port+0x170/0x830 [ 1291.092407][ T5888] ib_cache_update+0x1ba/0xc70 [ 1291.097160][ T5888] ? finish_task_switch+0x161/0x920 [ 1291.102343][ T5888] ? do_raw_spin_lock+0x12b/0x2f0 [ 1291.107354][ T5888] ? __pfx_ib_cache_update+0x10/0x10 [ 1291.112626][ T5888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1291.118005][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1291.123733][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1291.129464][ T5888] ib_cache_event_task+0xd8/0x1c0 [ 1291.134499][ T5888] ? process_scheduled_works+0xa0f/0x17a0 [ 1291.140345][ T5888] process_scheduled_works+0xaec/0x17a0 [ 1291.145906][ T5888] ? __pfx_process_scheduled_works+0x10/0x10 [ 1291.152066][ T5888] ? assign_work+0x3d5/0x5e0 [ 1291.156675][ T5888] worker_thread+0xa50/0xfc0 [ 1291.161264][ T5888] kthread+0x388/0x470 [ 1291.165324][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 1291.170417][ T5888] ? __pfx_kthread+0x10/0x10 [ 1291.174999][ T5888] ret_from_fork+0x51e/0xb90 [ 1291.179756][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 1291.184852][ T5888] ? __switch_to+0xc7d/0x1400 [ 1291.189514][ T5888] ? __pfx_kthread+0x10/0x10 [ 1291.194095][ T5888] ret_from_fork_asm+0x1a/0x30 [ 1291.198860][ T5888] [ 1291.202303][ T5888] Kernel Offset: disabled [ 1291.206617][ T5888] Rebooting in 86400 seconds..