last executing test programs: 17.040974189s ago: executing program 2 (id=6193): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x34, r5, 0x1, 0x0, 0x0, {{}, {}, {0x6, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}}, 0x34}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x68, r5, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008011}, 0x81) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x5, 0x7, 0x4, 0xe, 0x6, 0xe, 0xc, 0x1, 0x2, 0xa, 0x9, 0xc, 0x2, 0xb, 0x9, 0xc], 0x1, [0xfff8, 0x1, 0x980e, 0xfff7, 0x1ff, 0x2, 0x7, 0x9, 0x3, 0x6, 0x5, 0x1, 0x6, 0x9, 0x6, 0x500], [0xffff, 0xc, 0x1f32, 0x81, 0x1, 0xff1b, 0x7, 0x4, 0x2, 0x3, 0x3, 0xfff, 0x7, 0x80, 0xd, 0xef7]}}}}]}, 0x88}}, 0x0) 16.851418905s ago: executing program 2 (id=6194): r0 = socket$netlink(0x10, 0x3, 0x27) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0xffffffff, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000090}, 0x41) 3.163696707s ago: executing program 1 (id=6311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x7, 0xfd}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40810) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r2, 0x3, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x10) 2.932949785s ago: executing program 1 (id=6316): bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x2a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00010028bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="0200260b0a000200aaaaaaaaaabb000008000f00fb"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r6 = socket(0x25, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r11, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r13 = openat$cgroup_devices(r12, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r10, 0x0, r13, 0x0, 0x1000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa, 0x1}, {}, {0x1c, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_LABEL={0x8}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x4, 0x7, {{0x11, 0x4, 0x0, 0x18, 0x44, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @empty, {[@timestamp={0x44, 0xc, 0x33, 0x0, 0x0, [0x3, 0x7]}, @timestamp_prespec={0x44, 0xc, 0x59, 0x3, 0x2, [{@rand_addr=0x64010101, 0x9}]}, @lsrr={0x83, 0xb, 0x6a, [@dev={0xac, 0x14, 0x14, 0x13}, @remote]}, @generic={0x89, 0xd, "f1798bb08c162879704ea0"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xeb07a33edd9ecc25}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x134, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x48010}, 0x20008000) r16 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r16, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) 2.630985351s ago: executing program 4 (id=6319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="050300000000000000000700000008000380", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044080) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="02003cbd7000fcdbdf251200fcff07000100", @ANYRES32=r7, @ANYBLOB="080015000000000008000100", @ANYRES32=r8, @ANYBLOB="080015000100000008000100", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'pimreg1\x00'}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="3900000013000318680d07070000000f1801ff3f04000000170a001700000000040037000d00400001312564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2.478668798s ago: executing program 1 (id=6320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000000)=0x2, 0x4) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x2, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001f37c000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=@gettaction={0xf8, 0x32, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x600}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20}, 0x8014) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80), r4) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r5, @ANYBLOB="01ad00000000fbdbdf25170000000c00058004000280040002805400068004000300080006002000000008000600020000003c00040067636d28616573290000000000000000000000000000000000000000000000001400000050e858cb"], 0xcc}, 0x1, 0x0, 0x0, 0x20000040}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6, 0x0, 0x200000000000000}, 0x38) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 2.211017845s ago: executing program 1 (id=6324): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000100000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r3, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.075485524s ago: executing program 4 (id=6326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 1.909348603s ago: executing program 1 (id=6329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffeed, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 1.76402671s ago: executing program 1 (id=6330): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000001c1000010700000000000000000a0000000c0002006e6c3830323131004194ce07bd40e9663c4dcc2cf38d41d10ddd248dc4e0713022bb73876e959db275d0ece1595b05334b0000000000b6c45b0d2837032303f89fba3c13730855696118921ad59ce1fbc68ee973d2cefae15ec350236c050523978bef6f9237ec6b63a249e29b68f9b61cd76b79a85beeed0100188f4fc565d0f2bfdfe4a2759f8acba4e073c6d17dee2ccfbf2dc168f3a86f20f9933758f7c5964d5938731e6622bf846536516c8e09aad15c0f612e4ed85fda4af2593bf732da"], 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000100)=""/227}], 0x100001f5, 0x0, 0x6}, 0xfffffffe}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x5b}}], 0x3, 0x0, 0x0) 1.707654952s ago: executing program 4 (id=6331): r0 = socket(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000003e00090b000000000008000003"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r3, 0x1) write$cgroup_devices(r1, &(0x7f00000003c0)=ANY=[], 0x8) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.707127625s ago: executing program 0 (id=6332): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="009b4bc4d86b842aaaa284eafecfc153bed3806a89b8d6b0317382469079062c7e6d113c30e75593213f1bc8e9dc001be63e7ee96d12f951d79dd903d9b10c50588af1bb9b4d3de93c742c6a93c24fbdd46e445136b026ca14f86ef0422554865923255de1571ed02a4aa54f66dc5932b100f212b054ef7af7945082247753b91ca2dfcdf5021ada6964110002d7c53acac056fcdcc0b33329df2f051f726a76c40ded5d6cd3760097dbdfafd4c8f47bc375c943f019cc0410e97196dd5a648f9b403dcda64e2b81769c", 0xca}, {&(0x7f00000000c0)="068fe07a71ca3a083e45ec03faf969c343717300c730a0eb53dba5541115e8d926fcac064ea266b60d8945ac793dd276c701b04538b4fc68d4528776f96c09256496b1ce8b94c68dde53785963f0e2726ec8537a36b4176a4f98455e0e2ba9cfb6aed958410d3fc81bf6da950ba94b81f6cfb577e9125c2625a2a6eb9647f6791022bb3dd6c1389002fd4ff5bce8a0386efa466d9438", 0x96}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="205600000000000084000000080e000000ff0102000000001000000000000000011800000000000080840000000000000308000000000000"], 0x38}], 0x1, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3ffffffffffffe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="009b4bc4d86b842aaaa284eafecfc153bed3806a89b8d6b0317382469079062c7e6d113c30e75593213f1bc8e9dc001be63e7ee96d12f951d79dd903d9b10c50588af1bb9b4d3de93c742c6a93c24fbdd46e445136b026ca14f86ef0422554865923255de1571ed02a4aa54f66dc5932b100f212b054ef7af7945082247753b91ca2dfcdf5021ada6964110002d7c53acac056fcdcc0b33329df2f051f726a76c40ded5d6cd3760097dbdfafd4c8f47bc375c943f019cc0410e97196dd5a648f9b403dcda64e2b81769c", 0xca}, {&(0x7f00000000c0)="068fe07a71ca3a083e45ec03faf969c343717300c730a0eb53dba5541115e8d926fcac064ea266b60d8945ac793dd276c701b04538b4fc68d4528776f96c09256496b1ce8b94c68dde53785963f0e2726ec8537a36b4176a4f98455e0e2ba9cfb6aed958410d3fc81bf6da950ba94b81f6cfb577e9125c2625a2a6eb9647f6791022bb3dd6c1389002fd4ff5bce8a0386efa466d9438", 0x96}], 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="205600000000000084000000080e000000ff0102000000001000000000000000011800000000000080840000000000000308000000000000"], 0x38}], 0x1, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) sendfile(r2, r2, 0x0, 0x3ffffffffffffe) (async) 1.539736457s ago: executing program 0 (id=6334): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000040)='E', 0x1}], 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r5, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xa, 0x6, 0xc, @mcast2, @private1, 0x7, 0x1, 0x10001, 0x8}}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x64, 0x2e, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x5, 0x5}, {0x8, 0x3}, {0x0, 0x9}}, [{0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000800) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) (rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r10, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) (async, rerun: 64) close(r10) (async, rerun: 64) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 1.468932792s ago: executing program 3 (id=6335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/171, 0xab}], 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4014011) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0xfffffffd, 0x4) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000340)=0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x200, 0x9377b5336e15b955}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x50}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYRESOCT=r11, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) 1.199111034s ago: executing program 3 (id=6336): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x2f, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 1.198292472s ago: executing program 0 (id=6337): syz_emit_ethernet(0x68, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60000000000000000000000000ff0200000000000000000000000000010400907800000000600000000000000000000000000001fe8000000000000000000000000000bb6be20000000000000000000000947404e9fedf8652ecd604d5c11eb73210a65c45ad74d97b635681eacef74aa68d419ae1c3a956e831005f43178aa7c51d388c69d90b1030ef3d0055a7a4ae1c7583ee9758512fd51e223deb11564c54849cbe96b9b211af5f36aecc5ea4e8fab7697bd8666b697030e05f56a2069298f6983b325b69fac6b0be05917622f2facb733da4eaf716a7c6bf80b45d175f45c79c200a4b2587"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000007000073113200000000008510000002000000b700000000000000186e00000800000000000000060000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) 1.026634551s ago: executing program 0 (id=6338): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x6, 0x1c, 0x2, 0xfffffff7}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @default, @rose={'rose', 0x0}, 0x5, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0x20000000, 0x8000002}}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x3, 0x7}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00|b^', @ANYRES8=r1, @ANYRES32, @ANYRES64=r7], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r9}, 0x38) 1.009018336s ago: executing program 3 (id=6339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x38, 0x20, 0x800, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x80, 0x4, 0x0, 0x0, 0x3}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x400009}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000880}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 895.130028ms ago: executing program 3 (id=6340): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x8}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 894.52418ms ago: executing program 2 (id=6199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltaction={0x44, 0x31, 0x0, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) 754.293839ms ago: executing program 3 (id=6342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r0}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x7ff, [{0xf, 0x1, 0x10001}, {0x4, 0x0, 0xb44}, {0x3, 0x4, 0x6}, {0x7, 0x1, 0x1}, {0xf, 0x2, 0xfffffffe}, {0x8, 0x1, 0x5f6}, {0xe, 0x4, 0x90a9}, {0x10, 0x4, 0x7f}]}, @var={0x2, 0x0, 0x0, 0xe, 0x4}, @float={0xf, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30]}}, &(0x7f0000000400)=""/218, 0xa3, 0xda, 0x1, 0x1, 0x10000, @value=r2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x3, 0x3, 0xc, 0x4100, r2, 0xfffff2f8, '\x00', r1, r2, 0x3, 0x0, 0x4}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 603.635691ms ago: executing program 2 (id=6343): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) socket$inet(0x2, 0xa, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xfffffffffffffef1, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x4, &(0x7f0000002440)=@gcm_128={{0x303}, "dd280da8e6f1bd16", "5f30af85076308d11df37b00d53ab595", "d0a9d503", "d206576855a4cc7c"}, 0x28) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) 430.935324ms ago: executing program 4 (id=6344): r0 = socket(0x2, 0x5, 0x347) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000e1", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x8}) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000280)=0x8000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010017"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090603000000000080000000050000400900020073797a31000000002c000780060004404e22000005000700ff0000000c000180caff0140ac1414390c00148008000140ffffffff05005e7a147100000000020079797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 374.508352ms ago: executing program 2 (id=6345): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000340)={0x4}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0xc00000, @default, 0xb081, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xb, 0xac, 0xd}}, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x23f}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7}]}, 0x5c}}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r10 = accept4(r6, 0x0, 0x0, 0x800) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40010001) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r10) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 358.094038ms ago: executing program 0 (id=6346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000000)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8}, {"080ebb9ac1b502258b249e61e81934ef0f172d47b3b15a7302e85234b259781590aac748ed50150bf5cf05e1f4386e446e75bd51191814152c2b96231074020b2e1b9a3f578a44f76e03eb22fcef4d4cf169410aab3950e17d6f28e96c1e4ac029a1e848"}}}}}}, 0x0) 218.644167ms ago: executing program 3 (id=6347): r0 = socket(0x28, 0x2, 0xffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="c0622048cd31878af7b36e901474bfbcdab211ba81f14d80e9017d0afc1a16c08c5a683dfa0d316d14", @ANYRES32=r1, @ANYBLOB="00042dbd7000fbdbdf250100000008000600", @ANYRES32=r12, @ANYBLOB="08000600", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYRES64=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x41) 175.016886ms ago: executing program 0 (id=6348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r3 = socket(0x10, 0x803, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000880)) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2, @ANYBLOB="00000200000000ffae00"], 0x34}}, 0x20000815) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket(0x400000000010, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000cc0)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x0, 0x5, 0xff, 0x8}, {0x7, 0x9e, 0x0, 0x7ae}, {0x1, 0x6, 0x7, 0x8000}, {0x5, 0x7, 0xc9, 0x3}, {0x4, 0xff, 0x8, 0x6}]}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r7, r8, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = accept4(r3, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000006c0)=0x80, 0x80000) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, 0x0, 0x10) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000020a01080000000000000000010000020c000440000000000000000214000000030a010800000000000000001100010000000000000000000100000a"], 0x5c}, 0x1, 0x0, 0x0, 0xd}, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r13, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x53}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x82cf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000094) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x278, 0x24, 0x800, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x248, 0x2, {{0x5, [0x2, 0xd, 0xb, 0x1, 0xe, 0x9, 0xc, 0xe, 0x6, 0xb, 0x3, 0xa, 0x8, 0xf, 0xb, 0xf], 0x1, [0xe1, 0xd1, 0x4, 0x8000, 0x7, 0x75, 0x2, 0xf1, 0x8, 0x400, 0x8, 0xfffb, 0x200, 0x1, 0x8001, 0x7], [0x3, 0x4, 0x1, 0x7161, 0x6, 0x2, 0x2, 0x7, 0x2, 0x7, 0xd, 0x45de, 0x8, 0x400, 0x7, 0x3]}, [@TCA_MQPRIO_SHAPER={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0x94, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x4ad1}, {0xc, 0x3, 0xffffffffffffff81}, {0xc, 0x3, 0xa80}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x7fffffffffffffff}, {0xc, 0x3, 0x5}, {0xc, 0x3, 0x7fffffffffffffff}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x2b8f}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x4}]}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x6}, {0xc, 0x3, 0xe0}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x1b77}, {0xc, 0x3, 0x7fff}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x1000}, {0xc, 0x3, 0x400}, {0xc, 0x3, 0xff}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0xf}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x101}]}, @TCA_MQPRIO_MIN_RATE64={0x34, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xbb2}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0x2d}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x81}, {0xc, 0x4, 0x1800000000}, {0xc, 0x4, 0x1}, {0xc, 0x4, 0x2}, {0xc, 0x4, 0x3}, {0xc, 0x4, 0x9}, {0xc, 0x4, 0xfffffffffffffbff}]}]}}}]}, 0x278}}, 0x4000) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x800}]}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x4, &(0x7f0000001500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000001600)='syzkaller\x00'}, 0x90) 126.602662ms ago: executing program 4 (id=6349): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7f22}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0x2b5}, 0x8) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0xffffff8c, 0x2e, 0x0, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0xffffffff, 0x25dfd9ff, {0x0, 0x0, 0x0, r6, {0x10, 0xffe0}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xf7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203fe020d000000000000000000000003000600000200000200000000778d0000000000000000000200010000000000000009007ffffffefb0005000000000002000000ac1414aa00000000000000000200081f14a3447f786a5e118200080000003400c835ffee0000"], 0x68}, 0x1, 0x7}, 0x0) 38.275213ms ago: executing program 2 (id=6350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) r4 = socket(0x5, 0x2, 0xc) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x22}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) (async) socket(0x5, 0x2, 0xc) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, 0x0, 0x0) (async) 0s ago: executing program 4 (id=6351): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000dcffffff7b8af8ff00000000bca2000000000000a6020000f8ffb7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000001200010000000000a73f264c4e1b"], 0x28}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0xffffff15) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', r3, 0x2b, 0xa7, 0x9, 0xdb, 0x8, @mcast1, @local, 0x7800, 0x7800, 0x6, 0x6}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000a40), &(0x7f0000000a80)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) kernel console output (not intermixed with test programs): link: 224 bytes leftover after parsing attributes in process `syz.2.4848'. [ 496.435824][T23586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4848'. [ 496.462297][T23588] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4847'. [ 496.548702][T23588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4847'. [ 496.602162][T23596] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4847'. [ 496.602302][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'. [ 496.657858][T23604] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.698315][T23604] bond2: (slave lo): Enslaving as a backup interface with an up link [ 496.710952][T23604] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 496.744566][T10719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.747681][T23604] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4853'. [ 496.763743][T10719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.796408][T10719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.839000][T23604] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 497.203832][T23646] tipc: Resetting bearer [ 497.251950][T23646] tipc: Enabling not permitted [ 497.260579][T23646] tipc: Enabling of bearer rejected, failed to enable media [ 497.287179][T23646] tipc: New replicast peer: 255.255.255.255 [ 497.293840][T23646] tipc: Enabled bearer , priority 10 [ 497.534474][T23663] xt_ecn: cannot match TCP bits for non-tcp packets [ 497.634574][T23669] netlink: 'syz.1.4871': attribute type 1 has an invalid length. [ 498.333824][T23723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.341128][T23723] IPv6: NLM_F_CREATE should be set when creating new route [ 498.344172][T23720] netlink: 'syz.4.4886': attribute type 11 has an invalid length. [ 498.355776][T23724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.366418][T23724] lo: entered allmulticast mode [ 498.377900][T23724] tunl0: entered allmulticast mode [ 498.386413][T23724] gre0: entered allmulticast mode [ 498.399782][T23724] gretap0: entered allmulticast mode [ 498.420592][T23724] erspan0: entered allmulticast mode [ 498.431862][T23724] ip_vti0: entered allmulticast mode [ 498.440295][T23724] ip6_vti0: entered allmulticast mode [ 498.449503][T23724] sit0: entered allmulticast mode [ 498.462069][T23724] ip6tnl0: entered allmulticast mode [ 498.472150][T23724] ip6gre0: entered allmulticast mode [ 498.485555][T23724] bridge0: port 3(syz_tun) entered disabled state [ 498.495217][T23724] ip6gretap0: entered allmulticast mode [ 498.504786][T23724] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.512463][T23724] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.522028][T23724] bridge0: entered allmulticast mode [ 498.532782][T23724] vcan0: entered allmulticast mode [ 498.552267][T23724] team_slave_0: left promiscuous mode [ 498.558428][T23724] team_slave_1: left promiscuous mode [ 498.563910][T23724] team0: entered allmulticast mode [ 498.569889][T23724] team_slave_0: entered allmulticast mode [ 498.575630][T23724] team_slave_1: entered allmulticast mode [ 498.586977][T23724] nlmon0: entered allmulticast mode [ 498.594176][T23724] caif0: entered allmulticast mode [ 498.600575][T23724] batadv0: entered allmulticast mode [ 498.611371][T23724] vxcan0: entered allmulticast mode [ 498.619590][T23724] vxcan1: entered allmulticast mode [ 498.627219][T23724] veth0: entered allmulticast mode [ 498.638375][T23724] veth1: entered allmulticast mode [ 498.643862][T23741] netlink: 'syz.4.4891': attribute type 10 has an invalid length. [ 498.653054][T23724] wg0: entered allmulticast mode [ 498.663596][T23724] wg1: entered allmulticast mode [ 498.671095][T23724] wg2: entered allmulticast mode [ 498.678400][T23724] veth0_to_bridge: entered allmulticast mode [ 498.690942][T23724] veth1_to_bridge: entered allmulticast mode [ 498.701867][T23724] veth0_to_bond: entered allmulticast mode [ 498.711660][T23724] veth1_to_bond: entered allmulticast mode [ 498.720769][T23724] veth0_to_team: entered allmulticast mode [ 498.731661][T23724] veth1_to_team: entered allmulticast mode [ 498.742537][T23724] veth1_to_batadv: entered allmulticast mode [ 498.750940][T23724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.759600][T23724] batadv_slave_1: entered allmulticast mode [ 498.769022][T23724] xfrm0: entered allmulticast mode [ 498.777355][T23724] veth0_to_hsr: entered allmulticast mode [ 498.785018][T23724] hsr_slave_0: entered allmulticast mode [ 498.794514][T23724] veth1_to_hsr: entered allmulticast mode [ 498.802547][T23724] hsr_slave_1: entered allmulticast mode [ 498.814173][T23724] hsr0: entered allmulticast mode [ 498.822157][T23724] veth1_virt_wifi: entered allmulticast mode [ 498.831355][T23724] veth0_virt_wifi: entered allmulticast mode [ 498.839815][T23724] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 498.848290][T23724] veth1_macvtap: entered allmulticast mode [ 498.856669][T23724] macvtap0: entered allmulticast mode [ 498.864186][T23724] macsec0: entered allmulticast mode [ 498.873090][T23724] geneve0: entered allmulticast mode [ 498.881499][T23724] geneve1: entered allmulticast mode [ 498.890050][T23724] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 498.899773][T23724] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 498.910605][T23724] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 498.920110][T23724] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 498.935250][T23724] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 498.950272][T23724] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 498.961965][T23724] ipvlan2: entered allmulticast mode [ 498.969850][T23724] mac80211_hwsim hwsim46 wlan2: entered allmulticast mode [ 498.977970][T23724] bond1: entered allmulticast mode [ 498.985165][T23724] bond2: entered allmulticast mode [ 498.991442][T23724] team1: left promiscuous mode [ 498.996832][T23724] veth2: entered allmulticast mode [ 499.002033][T23724] veth3: entered allmulticast mode [ 499.008511][T23724] macsec1: entered allmulticast mode [ 499.013903][T23724] mac80211_hwsim hwsim51 wlan3: entered allmulticast mode [ 499.021917][T23724] ipip0: entered allmulticast mode [ 499.028708][T23724] ip6tnl1: entered allmulticast mode [ 499.034154][T23724] syztnl1: entered allmulticast mode [ 499.039984][T23724] xfrm1: left promiscuous mode [ 499.044846][T23724] macvlan0: entered allmulticast mode [ 499.051373][T23724] macvlan1: entered allmulticast mode [ 499.058893][T23724] geneve2: entered allmulticast mode [ 499.064353][T23724] geneve3: entered allmulticast mode [ 499.070043][T23724] bridge1: entered allmulticast mode [ 499.076639][T23724] @: entered allmulticast mode [ 499.083008][T23724] mac80211_hwsim hwsim55 wlan4: entered allmulticast mode [ 499.090882][T23724] bond3: entered allmulticast mode [ 499.097063][T23724] bond4: left promiscuous mode [ 499.102603][T23724] bond5: entered allmulticast mode [ 499.109005][T23724] vlan0: entered allmulticast mode [ 499.114229][T23724] ip6tnl2: entered allmulticast mode [ 499.136998][T23739] __nla_validate_parse: 7 callbacks suppressed [ 499.137018][T23739] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4890'. [ 499.158051][T23739] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4890'. [ 499.169090][T23739] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4890'. [ 499.233027][T23741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 499.243019][T15094] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 499.263134][T15094] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.278651][T23746] nbd: illegal input index 2958377 [ 499.285436][T15094] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 499.295533][T15094] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.327513][T15094] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 499.346181][T15094] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.385595][T15094] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 499.404905][T15094] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.614265][T23777] netlink: 'syz.4.4901': attribute type 1 has an invalid length. [ 499.633189][T23777] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4901'. [ 499.741250][T23791] netlink: 'syz.0.4905': attribute type 9 has an invalid length. [ 499.812601][T23795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4906'. [ 499.825644][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4906'. [ 499.906434][T23801] IPVS: set_ctl: invalid protocol: 153 100.1.1.1:20004 [ 499.929275][T23800] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 499.947192][T23800] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 500.006458][T15088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.037365][T15088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.038907][T23802] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4907'. [ 500.237341][T23819] netlink: 'syz.4.4912': attribute type 1 has an invalid length. [ 500.293989][T23819] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 500.341476][T23826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4913'. [ 500.601930][T23852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4922'. [ 500.927149][T23881] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4931'. [ 500.991665][T23881] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 500.999765][T23881] syzkaller1: Refused to change device type [ 501.050453][T23886] netlink: 'syz.4.4933': attribute type 1 has an invalid length. [ 501.146964][T23886] bond6: option all_slaves_active: invalid value (136) [ 501.170073][T23886] bond6 (unregistering): Released all slaves [ 501.237366][T23901] netlink: 'syz.2.4937': attribute type 9 has an invalid length. [ 501.245143][T23901] netlink: 'syz.2.4937': attribute type 11 has an invalid length. [ 501.263193][T23901] netlink: 'syz.2.4937': attribute type 12 has an invalid length. [ 501.344071][T23906] bond7: option miimon: invalid value (18446744073709551585) [ 501.357977][T23906] bond7: option miimon: allowed values 0 - 2147483647 [ 501.391486][T23906] bond7 (unregistering): Released all slaves [ 501.457726][T23918] netlink: 'syz.3.4942': attribute type 13 has an invalid length. [ 501.518147][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 501.676947][T23929] syzkaller1: entered promiscuous mode [ 501.702875][T23929] syzkaller1: entered allmulticast mode [ 501.793944][T23941] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 501.818103][T23942] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3975939958/3975939959 [ 501.835835][T23942] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3975939958/3975939959 [ 502.076548][T10719] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 502.151340][T23955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.341796][T23977] 8021q: VLANs not supported on ip_vti0 [ 502.592189][T23985] bond3: (slave lo): Releasing backup interface [ 502.601755][T23985] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 502.705927][T23985] bond0: (slave team0): Releasing backup interface [ 502.713463][T23985] bond0: (slave team0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 502.897047][T23985] bond0: (slave bridge_slave_1): Releasing backup interface [ 503.033126][T23985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 503.092116][T24006] !: renamed from bond_slave_0 (while UP) [ 503.399186][T24035] validate_nla: 2 callbacks suppressed [ 503.399204][T24035] netlink: 'syz.1.4975': attribute type 21 has an invalid length. [ 503.473449][T24041] netlink: 'syz.0.4977': attribute type 5 has an invalid length. [ 503.482814][T24041] netlink: 'syz.0.4977': attribute type 6 has an invalid length. [ 503.548008][T24052] xt_policy: output policy not valid in PREROUTING and INPUT [ 503.557368][T24052] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 503.857745][T24074] sctp: [Deprecated]: syz.2.4985 (pid 24074) Use of int in max_burst socket option. [ 503.857745][T24074] Use struct sctp_assoc_value instead [ 503.894023][T24075] sctp: [Deprecated]: syz.2.4985 (pid 24075) Use of int in max_burst socket option. [ 503.894023][T24075] Use struct sctp_assoc_value instead [ 503.908808][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 503.929728][T24078] netlink: 'syz.3.4986': attribute type 39 has an invalid length. [ 504.215490][T24098] netlink: 'syz.1.4992': attribute type 28 has an invalid length. [ 504.325914][T24104] __nla_validate_parse: 20 callbacks suppressed [ 504.333150][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4993'. [ 504.343222][T24104] macvlan0: left allmulticast mode [ 504.360080][T24104] netlink: 'syz.1.4993': attribute type 1 has an invalid length. [ 504.378936][T24104] netlink: 'syz.1.4993': attribute type 2 has an invalid length. [ 504.381521][T24108] netlink: 'syz.4.4994': attribute type 1 has an invalid length. [ 504.397110][T24109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4993'. [ 504.418791][T24109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4993'. [ 504.430018][T24108] netlink: 'syz.4.4994': attribute type 2 has an invalid length. [ 504.430319][T24109] netlink: 'syz.1.4993': attribute type 5 has an invalid length. [ 504.446419][T24109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4993'. [ 504.469729][T24108] xt_ecn: cannot match TCP bits for non-tcp packets [ 504.480435][T24108] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4994'. [ 504.563469][T24116] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4995'. [ 504.756877][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4998'. [ 504.898430][T24128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4999'. [ 504.966872][T24135] sock: sock_set_timeout: `syz.2.5001' (pid 24135) tries to set negative timeout [ 505.057289][T24145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5002'. [ 505.167116][T24152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5006'. [ 505.312948][T24159] rdma_rxe: rxe_newlink: failed to add lo [ 505.397875][T24164] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 506.370261][T24227] netlink: 'syz.3.5029': attribute type 11 has an invalid length. [ 506.482915][T24230] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 506.585547][T24236] xt_l2tp: missing protocol rule (udp|l2tpip) [ 506.820342][T24252] openvswitch: netlink: Flow actions attr not present in new flow. [ 506.866008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.874056][ C1] lec:lec_tx_timeout: lec0 [ 507.169701][T24271] bond6: entered promiscuous mode [ 507.178799][T24271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 507.187702][T24272] bond6: entered allmulticast mode [ 507.208899][T24274] SET target dimension over the limit! [ 507.440529][T24289] tipc: MTU too low for tipc bearer [ 507.532203][T24293] vlan0: left allmulticast mode [ 507.546368][T24293] veth0_vlan: left allmulticast mode [ 507.564691][T24293] bridge5: left allmulticast mode [ 507.571855][T24293] ipvlan2: left allmulticast mode [ 507.583405][T24293] batadv_slave_1: left allmulticast mode [ 507.590960][T24293] macvtap1: left allmulticast mode [ 507.596590][T24293] bridge0: left allmulticast mode [ 507.602543][T24293] veth5: left allmulticast mode [ 507.608734][T24293] veth7: left allmulticast mode [ 508.032346][T24327] Cannot find del_set index 4 as target [ 508.312920][T24339] macsec2: entered promiscuous mode [ 508.318890][T24339] macsec2: entered allmulticast mode [ 508.326824][T24339] bridge0: port 1(macsec2) entered blocking state [ 508.333659][T24339] bridge0: port 1(macsec2) entered disabled state [ 508.530806][T24355] xt_cgroup: xt_cgroup: no path or classid specified [ 508.867727][T15084] wlan1: Trigger new scan to find an IBSS to join [ 508.990086][T24388] validate_nla: 10 callbacks suppressed [ 508.990101][T24388] netlink: 'syz.3.5078': attribute type 12 has an invalid length. [ 509.022459][T24382] netlink: 'syz.1.5079': attribute type 5 has an invalid length. [ 509.033022][T24392] netlink: 'syz.2.5080': attribute type 12 has an invalid length. [ 509.311355][T24414] openvswitch: netlink: IP tunnel dst address not specified [ 509.385519][T24419] netlink: 'syz.4.5088': attribute type 2 has an invalid length. [ 509.393988][T24419] __nla_validate_parse: 20 callbacks suppressed [ 509.394006][T24419] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5088'. [ 509.837476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.387957][T24470] netlink: 'syz.3.5104': attribute type 1 has an invalid length. [ 510.497807][T24482] netlink: 'syz.2.5108': attribute type 4 has an invalid length. [ 510.809057][T24487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5110'. [ 510.988419][T24494] tipc: Enabled bearer , priority 11 [ 511.070842][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'. [ 511.083666][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5114'. [ 511.168883][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'. [ 511.217526][T24505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5113'. [ 511.240840][T24508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5117'. [ 511.392234][T24515] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5122'. [ 511.429264][T24519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5120'. [ 511.493027][T24520] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5119'. [ 511.691769][T24538] netlink: 'syz.3.5126': attribute type 10 has an invalid length. [ 511.704500][T24538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.170404][T24555] syzkaller1: entered promiscuous mode [ 512.206268][T24555] syzkaller1: entered allmulticast mode [ 512.402015][T24579] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 512.531771][T24586] tipc: Enabled bearer , priority 0 [ 512.591072][T24586] syzkaller0: entered promiscuous mode [ 512.606184][T24586] syzkaller0: entered allmulticast mode [ 512.629955][T24586] tipc: Resetting bearer [ 512.678127][T24585] tipc: Resetting bearer [ 514.475397][T24585] tipc: Disabling bearer [ 514.490184][T10614] tipc: Node number set to 2449417995 [ 514.655181][T24624] netlink: 'syz.3.5150': attribute type 1 has an invalid length. [ 514.688942][T24624] __nla_validate_parse: 6 callbacks suppressed [ 514.688959][T24624] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5150'. [ 514.706877][T24625] netlink: 'syz.3.5150': attribute type 2 has an invalid length. [ 514.732139][T24625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5150'. [ 514.880703][T24642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5156'. [ 514.945844][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5158'. [ 515.044598][T24645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.061422][T24645] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.070597][T24659] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5160'. [ 515.083239][T24645] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.236752][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.377617][T24677] tipc: Enabling of bearer rejected, failed to enable media [ 515.436813][T24685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 515.636206][T15088] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 515.661278][T24698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 515.695473][T24692] can: request_module (can-proto-5) failed. [ 515.823477][T24706] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5172'. [ 515.823487][T24705] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5172'. [ 516.067180][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.317176][T24745] syzkaller1: entered promiscuous mode [ 516.322691][T24745] syzkaller1: entered allmulticast mode [ 516.435471][T24760] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5189'. [ 516.445539][T24760] SET target dimension over the limit! [ 516.707440][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.716775][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 516.861062][T24790] sctp: [Deprecated]: syz.0.5197 (pid 24790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.861062][T24790] Use struct sctp_sack_info instead [ 517.056687][T24795] bridge: RTM_NEWNEIGH with invalid ether address [ 517.403722][T24803] pim6reg: entered allmulticast mode [ 517.428467][T24803] pim6reg: left allmulticast mode [ 517.521430][T24815] netlink: 'syz.0.5201': attribute type 10 has an invalid length. [ 517.590882][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.603677][T24815] team0: Device veth0_macvtap failed to register rx_handler [ 518.014147][T24843] ip6gre1: entered promiscuous mode [ 519.018595][T24927] openvswitch: netlink: IP tunnel dst address not specified [ 519.639850][T24918] netlink: 'syz.2.5235': attribute type 1 has an invalid length. [ 519.783640][T24934] ip6erspan0: entered promiscuous mode [ 520.168821][T24966] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 520.197194][T24959] __nla_validate_parse: 9 callbacks suppressed [ 520.197208][T24959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5248'. [ 520.216253][T24940] tipc: Resetting bearer [ 520.226908][T24959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5248'. [ 520.646692][T24940] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.655457][T24940] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 520.757903][T24998] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 520.814710][T24940] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.835585][T24940] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 520.843864][T24998] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 520.866229][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 521.000636][T24940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 521.055982][T24940] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 521.218680][T24940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 521.224623][T24940] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 521.246748][T25007] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5261'. [ 521.411539][T24940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 521.428012][T24940] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 521.447605][T25011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5261'. [ 521.472150][T25013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5263'. [ 521.740075][T25031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5268'. [ 521.863978][T25042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5271'. [ 521.904147][T25042] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5271'. [ 522.062594][T25052] --map-set only usable from mangle table [ 522.130863][T25055] netlink: 'syz.1.5276': attribute type 1 has an invalid length. [ 522.292377][T25068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5281'. [ 522.328478][T25070] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 522.360851][T25071] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 522.373778][T25074] netlink: 'syz.1.5284': attribute type 2 has an invalid length. [ 522.422463][T25074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5284'. [ 522.465153][T25083] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 522.488750][T25081] netlink: 'syz.1.5284': attribute type 2 has an invalid length. [ 522.861017][T25119] netlink: 'syz.3.5296': attribute type 1 has an invalid length. [ 522.955149][T25125] tipc: Enabling of bearer rejected, failed to enable media [ 523.419956][T25154] tunl0: left promiscuous mode [ 523.438745][T25154] tipc: Resetting bearer [ 523.472177][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.574918][T25154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.591303][T25154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.642562][T25154] vlan0: left promiscuous mode [ 523.654206][T25154] tipc: Resetting bearer [ 523.690825][T25154] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 523.723814][T25154] bridge5: left promiscuous mode [ 523.734292][T25154] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 523.750866][T25154] macvtap1: left promiscuous mode [ 523.763769][T25154] veth5: left promiscuous mode [ 523.780656][ T1002] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.826535][T15097] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.839907][T15097] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.216558][T25207] ipt_rpfilter: unknown options [ 524.441665][T25224] openvswitch: netlink: Flow actions attr not present in new flow. [ 524.510835][T25228] xt_hashlimit: size too large, truncated to 1048576 [ 524.632608][T25234] nbd: must specify at least one socket [ 524.882169][T25248] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 525.214771][T25266] netlink: 'syz.4.5338': attribute type 13 has an invalid length. [ 525.356622][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 525.383062][T25279] __nla_validate_parse: 8 callbacks suppressed [ 525.383076][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5342'. [ 525.717958][T25283] tipc: Enabling not permitted [ 525.730022][T25283] tipc: Enabling of bearer rejected, failed to enable media [ 525.803203][T25295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5346'. [ 525.927808][T25297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 525.998296][T25297] bond0: entered promiscuous mode [ 526.018517][T25297] bond_slave_0: entered promiscuous mode [ 526.032575][T25297] bond_slave_1: entered promiscuous mode [ 526.039000][T25297] bridge_slave_1: entered promiscuous mode [ 526.045458][T25297] batadv0: entered promiscuous mode [ 526.055024][T25297] bond0: left promiscuous mode [ 526.063126][T25297] bond_slave_0: left promiscuous mode [ 526.071790][T25297] bond_slave_1: left promiscuous mode [ 526.078015][T25297] bridge_slave_1: left promiscuous mode [ 526.088691][T25297] batadv0: left promiscuous mode [ 526.109550][T25284] lo speed is unknown, defaulting to 1000 [ 526.222402][T25321] xt_TPROXY: Can be used only with -p tcp or -p udp [ 526.239996][T25321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.387788][ T5991] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 526.461974][T25333] netlink: 'syz.4.5355': attribute type 8 has an invalid length. [ 526.607008][T25341] netlink: 52232 bytes leftover after parsing attributes in process `syz.3.5356'. [ 527.391458][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.415674][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.425901][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.437901][T25381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.452599][T25382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.452599][T25381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5372'. [ 527.497056][T25381] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 527.908280][T25415] vlan3: entered promiscuous mode [ 527.913413][T25415] vlan1: entered promiscuous mode [ 527.955256][T25407] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 527.982599][T25407] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 527.993225][T25407] netlink: 'syz.0.5378': attribute type 2 has an invalid length. [ 528.322897][T25449] xt_NFQUEUE: number of total queues is 0 [ 528.344247][T25448] syzkaller0: entered promiscuous mode [ 528.353067][T25448] syzkaller0: entered allmulticast mode [ 528.379484][T25453] netlink: 'syz.0.5389': attribute type 1 has an invalid length. [ 528.475825][T25453] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.545408][T25458] bond8: (slave geneve2): making interface the new active one [ 528.555717][T25458] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 528.674939][T25468] xt_TCPMSS: Only works on TCP SYN packets [ 528.728735][T25470] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 528.840721][T25477] openvswitch: netlink: Flow actions attr not present in new flow. [ 528.881253][T25478] netlink: 'syz.0.5397': attribute type 3 has an invalid length. [ 529.093064][T25500] syz.3.5404: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 529.112189][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.3.5404 Not tainted syzkaller #0 PREEMPT(full) [ 529.112216][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 529.112236][T25500] Call Trace: [ 529.112245][T25500] [ 529.112254][T25500] dump_stack_lvl+0xe8/0x150 [ 529.112283][T25500] warn_alloc+0x214/0x310 [ 529.112307][T25500] ? stack_trace_save+0x9c/0xe0 [ 529.112338][T25500] ? __pfx_warn_alloc+0x10/0x10 [ 529.112366][T25500] ? kasan_save_track+0x4f/0x80 [ 529.112385][T25500] ? kasan_save_track+0x3e/0x80 [ 529.112402][T25500] ? __kasan_kmalloc+0x93/0xb0 [ 529.112421][T25500] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 529.112438][T25500] ? xskq_create+0x56/0x170 [ 529.112464][T25500] ? xsk_setsockopt+0x4dc/0x8d0 [ 529.112487][T25500] ? do_sock_setsockopt+0x17c/0x1b0 [ 529.112507][T25500] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 529.112534][T25500] ? do_syscall_64+0xec/0xf80 [ 529.112556][T25500] __vmalloc_node_range_noprof+0x134/0x16a0 [ 529.112605][T25500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.112633][T25500] ? __kasan_kmalloc+0x93/0xb0 [ 529.112662][T25500] vmalloc_user_noprof+0xad/0xf0 [ 529.112683][T25500] ? xskq_create+0xbf/0x170 [ 529.112713][T25500] xskq_create+0xbf/0x170 [ 529.112745][T25500] xsk_init_queue+0xb0/0x110 [ 529.112777][T25500] xsk_setsockopt+0x4dc/0x8d0 [ 529.112808][T25500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.112836][T25500] ? __pfx_aa_sk_perm+0x10/0x10 [ 529.112864][T25500] ? aa_sock_opt_perm+0xff/0x1a0 [ 529.112893][T25500] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 529.112913][T25500] ? __pfx_xsk_setsockopt+0x10/0x10 [ 529.112942][T25500] do_sock_setsockopt+0x17c/0x1b0 [ 529.112970][T25500] __x64_sys_setsockopt+0x13f/0x1b0 [ 529.112999][T25500] do_syscall_64+0xec/0xf80 [ 529.113019][T25500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.113038][T25500] ? trace_irq_disable+0x37/0x100 [ 529.113065][T25500] ? clear_bhb_loop+0x60/0xb0 [ 529.113090][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.113116][T25500] RIP: 0033:0x7f956f58f749 [ 529.113135][T25500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.113154][T25500] RSP: 002b:00007f95704df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 529.113176][T25500] RAX: ffffffffffffffda RBX: 00007f956f7e5fa0 RCX: 00007f956f58f749 [ 529.113193][T25500] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 529.113206][T25500] RBP: 00007f956f613f91 R08: 0000000000000004 R09: 0000000000000000 [ 529.113219][T25500] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.113233][T25500] R13: 00007f956f7e6038 R14: 00007f956f7e5fa0 R15: 00007ffe0f6febe8 [ 529.113266][T25500] [ 529.113365][T25500] Mem-Info: [ 529.428482][T25500] active_anon:4805 inactive_anon:0 isolated_anon:0 [ 529.428482][T25500] active_file:2052 inactive_file:40332 isolated_file:0 [ 529.428482][T25500] unevictable:768 dirty:31 writeback:0 [ 529.428482][T25500] slab_reclaimable:13072 slab_unreclaimable:324099 [ 529.428482][T25500] mapped:29977 shmem:1375 pagetables:1117 [ 529.428482][T25500] sec_pagetables:0 bounce:0 [ 529.428482][T25500] kernel_misc_reclaimable:0 [ 529.428482][T25500] free:1095088 free_pcp:13817 free_cma:0 [ 529.485874][T25500] Node 0 active_anon:19020kB inactive_anon:0kB active_file:8208kB inactive_file:161124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120008kB dirty:124kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15060kB pagetables:4324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.523882][T25515] netlink: 'syz.0.5408': attribute type 1 has an invalid length. [ 529.537069][T25515] NCSI netlink: No device for ifindex 0 [ 529.546785][T25513] netlink: 'syz.2.5407': attribute type 11 has an invalid length. [ 529.549612][T25500] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 529.564843][T25513] sctp: [Deprecated]: syz.2.5407 (pid 25513) Use of int in maxseg socket option. [ 529.564843][T25513] Use struct sctp_assoc_value instead [ 529.616242][T25500] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.656818][T25500] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 529.665042][T25500] Node 0 DMA32 free:799636kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19120kB inactive_anon:0kB active_file:8208kB inactive_file:161124kB unevictable:1536kB writepending:124kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:40244kB local_pcp:20524kB free_cma:0kB [ 529.666142][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 529.702356][T25500] lowmem_reserve[]: 0 0 1 1 1 [ 529.741736][T25500] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 529.793880][T25500] lowmem_reserve[]: 0 0 0 0 0 [ 529.806083][T25500] Node 1 Normal free:3569452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15284kB local_pcp:8428kB free_cma:0kB [ 529.843709][T25500] lowmem_reserve[]: 0 0 0 0 0 [ 529.851842][T25500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 529.865041][T25500] Node 0 DMA32: 8014*4kB (UME) 5127*8kB (UM) 2765*16kB (UME) 389*32kB (UME) 44*64kB (UME) 57*128kB (UM) 389*256kB (UM) 264*512kB (UME) 197*1024kB (UM) 109*2048kB (UM) 0*4096kB = 799584kB [ 529.885079][T25500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.907725][T25500] Node 1 Normal: 191*4kB (UME) 46*8kB (UME) 42*16kB (UME) 145*32kB (UME) 48*64kB (UME) 8*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 867*4096kB (M) = 3569452kB [ 529.973618][T25500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.986966][T25500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 530.036766][T25500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 530.056400][T25500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 530.071786][T25500] 43756 total pagecache pages [ 530.091197][T25500] 0 pages in swap cache [ 530.098472][T25540] netlink: 'syz.4.5416': attribute type 4 has an invalid length. [ 530.099627][T25500] Free swap = 124996kB [ 530.116715][T25500] Total swap = 124996kB [ 530.121125][T25500] 2097051 pages RAM [ 530.124998][T25500] 0 pages HighMem/MovableOnly [ 530.129529][T25537] syzkaller0: entered promiscuous mode [ 530.130669][T25500] 425082 pages reserved [ 530.140455][T25540] netlink: 'syz.4.5416': attribute type 4 has an invalid length. [ 530.146440][T25537] syzkaller0: entered allmulticast mode [ 530.153801][T25500] 0 pages cma reserved [ 530.186852][T25541] netlink: 'syz.2.5417': attribute type 83 has an invalid length. [ 530.390168][T15097] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.402668][T15097] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.417010][T15097] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.434631][T15097] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.464043][T25561] vlan1: entered allmulticast mode [ 530.587132][T25571] __nla_validate_parse: 32 callbacks suppressed [ 530.587151][T25571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'. [ 530.973643][T25602] bond7: entered promiscuous mode [ 530.979055][T25602] bond7: entered allmulticast mode [ 530.984764][T25602] 8021q: adding VLAN 0 to HW filter on device bond7 [ 531.032116][T25613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5438'. [ 531.079887][T25617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5440'. [ 531.381726][T25641] syzkaller0: entered promiscuous mode [ 531.387881][T25641] syzkaller0: entered allmulticast mode [ 531.539142][T25649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5452'. [ 531.549164][T25649] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.612045][T25655] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 531.932800][T25680] ip6gretap0: entered promiscuous mode [ 531.942374][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5461'. [ 532.490482][T25709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.802939][T25739] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5472'. [ 532.869272][T25742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5478'. [ 533.079255][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5484'. [ 533.206397][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5487'. [ 533.217038][T25770] validate_nla: 4 callbacks suppressed [ 533.217056][T25770] netlink: 'syz.1.5487': attribute type 7 has an invalid length. [ 533.230929][T25770] netlink: 'syz.1.5487': attribute type 8 has an invalid length. [ 533.240824][T25770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5487'. [ 533.275189][T25774] netlink: 'syz.2.5483': attribute type 4 has an invalid length. [ 533.333553][T25776] netlink: 'syz.2.5483': attribute type 4 has an invalid length. [ 533.377233][T25767] veth1_vlan: left allmulticast mode [ 533.455619][T25768] bond6: entered promiscuous mode [ 533.461684][T25768] bond6: entered allmulticast mode [ 533.467719][T25768] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.519539][ T5948] syz0: Port: 1 Link DOWN [ 533.523293][T10719] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.555292][T10719] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.568675][T10719] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.581121][T10719] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.599976][T10719] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.611695][T10719] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.968667][T25806] block nbd1: Unsupported socket: should be TCP or UNIX. [ 534.122027][T25822] openvswitch: netlink: Missing key (keys=40, expected=100) [ 534.130304][T25823] tipc: New replicast peer: 0.0.0.0 [ 534.167408][T25823] tipc: Enabled bearer , priority 10 [ 534.206756][T25823] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 534.217180][T25823] tipc: Enabling of bearer rejected, already enabled [ 534.339694][T25834] 8021q: VLANs not supported on syzkaller1 [ 534.402917][ T5991] IPVS: starting estimator thread 0... [ 534.495584][T25843] netlink: 'syz.3.5505': attribute type 2 has an invalid length. [ 534.513759][T25840] IPVS: using max 29 ests per chain, 69600 per kthread [ 534.679546][T25851] siw: device registration error -23 [ 535.042121][T25865] netlink: 'syz.4.5511': attribute type 12 has an invalid length. [ 535.354731][T25877] netlink: 'syz.4.5516': attribute type 12 has an invalid length. [ 535.398039][T25877] bond8: option primary_reselect: invalid value (255) [ 535.414710][T25877] bond8 (unregistering): Released all slaves [ 535.649026][T25887] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 535.812817][T25908] __nla_validate_parse: 9 callbacks suppressed [ 535.812835][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5521'. [ 536.014019][T25916] netem: incorrect gi model size [ 536.023249][T25916] netem: change failed [ 536.280990][T25907] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 536.372967][T25935] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5533'. [ 536.432715][T25940] netlink: 'syz.0.5535': attribute type 10 has an invalid length. [ 536.441527][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.452032][T25940] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5535'. [ 536.458726][T25939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5534'. [ 536.476360][T25940] team_slave_0: entered promiscuous mode [ 536.482506][T25940] team_slave_1: entered promiscuous mode [ 536.488593][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.502116][T25940] team0: entered promiscuous mode [ 536.512671][T25941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5535'. [ 536.528547][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.549376][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.564964][T25940] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.582234][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.592471][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.624266][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.639426][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.648385][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.657003][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.664571][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.673610][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.681726][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.692122][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.700316][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.713841][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.727697][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.753162][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.769247][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.779662][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.789477][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.799030][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.818565][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.835260][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.843258][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.851059][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.868986][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.886175][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.912836][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.954301][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 536.997911][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.028507][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.059462][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.093046][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.106587][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.129100][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5548'. [ 537.138738][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.146814][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.147053][T25971] veth5: entered allmulticast mode [ 537.158640][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.170709][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.186788][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.206298][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.218390][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.231265][T25976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5549'. [ 537.231937][T25938] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20001 [ 537.626449][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5560'. [ 537.776547][T26015] openvswitch: netlink: EtherType 50a is less than min 600 [ 538.242075][T26029] batman_adv: batadv0: Adding interface: veth7 [ 538.291661][T26029] batman_adv: batadv0: The MTU of interface veth7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.426164][T26029] batman_adv: batadv0: Interface activated: veth7 [ 538.443659][T26036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5569'. [ 538.620190][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5572'. [ 538.738352][T26064] sock: sock_timestamping_bind_phc: sock not bind to device [ 539.334867][T26108] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 539.651763][T26124] can: request_module (can-proto-0) failed. [ 539.918814][T26143] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 540.171654][T26165] syzkaller1: entered promiscuous mode [ 540.191882][T26165] syzkaller1: entered allmulticast mode [ 540.404889][T26191] openvswitch: netlink: Message has 1 unknown bytes. [ 540.424682][T26191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.665705][T26204] IPVS: Error connecting to the multicast addr [ 540.673293][T26210] openvswitch: netlink: Missing key (keys=40, expected=100) [ 540.797509][T26221] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.839646][T26217] netlink: 'syz.2.5617': attribute type 1 has an invalid length. [ 540.853301][T26222] syzkaller0: entered promiscuous mode [ 540.859162][T26222] syzkaller0: entered allmulticast mode [ 540.877531][T26227] __nla_validate_parse: 16 callbacks suppressed [ 540.877558][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5621'. [ 541.039694][T26238] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5624'. [ 541.237005][T26246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5627'. [ 541.252478][T26256] netlink: 'syz.3.5630': attribute type 5 has an invalid length. [ 541.622007][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5633'. [ 541.631141][T26279] nbd: must specify a size in bytes for the device [ 542.221463][T26309] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5642'. [ 542.765496][T26344] netlink: 'syz.3.5653': attribute type 1 has an invalid length. [ 542.958205][T26355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5654'. [ 542.981449][T26356] netlink: 'syz.2.5655': attribute type 1 has an invalid length. [ 543.022192][T26356] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5655'. [ 543.230176][T26366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 543.476661][T26378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5663'. [ 543.554070][T26380] : entered promiscuous mode [ 543.660654][T26387] xt_l2tp: missing protocol rule (udp|l2tpip) [ 543.702736][T26390] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 543.720744][T26390] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5669'. [ 543.863748][T26403] tipc: Enabling of bearer rejected, already enabled [ 543.948450][T26406] ip6t_srh: unknown srh invflags 4000 [ 544.351846][T26442] netlink: 'syz.2.5683': attribute type 1 has an invalid length. [ 544.553421][T26451] xt_policy: output policy not valid in PREROUTING and INPUT [ 544.954583][T26479] syzkaller1: entered promiscuous mode [ 544.955743][T26485] netlink: 'syz.3.5698': attribute type 1 has an invalid length. [ 544.960633][T26479] syzkaller1: entered allmulticast mode [ 545.082805][T26488] 8021q: adding VLAN 0 to HW filter on device bond9 [ 545.091727][T26488] bond8: (slave bond9): making interface the new active one [ 545.100337][T26488] bond8: (slave bond9): Enslaving as an active interface with an up link [ 545.171443][T26505] netlink: 'syz.1.5702': attribute type 13 has an invalid length. [ 545.251548][T26505] macvtap0: refused to change device tx_queue_len [ 545.409608][T26519] bridge0: entered allmulticast mode [ 545.441479][T26526] x_tables: unsorted underflow at hook 1 [ 545.549521][T26532] netlink: 'syz.0.5710': attribute type 83 has an invalid length. [ 545.560796][T26528] ipt_REJECT: TCP_RESET invalid for non-tcp [ 545.602827][T26535] tipc: Resetting bearer [ 545.628899][T26535] netlink: 'syz.1.5709': attribute type 1 has an invalid length. [ 546.176717][T26570] netlink: 'syz.2.5718': attribute type 29 has an invalid length. [ 546.210144][T26570] __nla_validate_parse: 15 callbacks suppressed [ 546.210165][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5718'. [ 546.634197][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5727'. [ 546.782196][T26554] lo speed is unknown, defaulting to 1000 [ 547.261693][T26628] lo: entered allmulticast mode [ 547.289196][T26628] tunl0: entered allmulticast mode [ 547.307296][T26628] gre0: entered allmulticast mode [ 547.316251][T26628] gretap0: entered allmulticast mode [ 547.332911][T26628] erspan0: entered allmulticast mode [ 547.344736][T26628] ip_vti0: entered allmulticast mode [ 547.352299][T26628] ip6_vti0: entered allmulticast mode [ 547.358420][T26628] sit0: entered allmulticast mode [ 547.363852][T26628] ip6tnl0: entered allmulticast mode [ 547.370152][T26628] ip6gre0: entered allmulticast mode [ 547.378724][T26628] ip6gretap0: left promiscuous mode [ 547.384101][T26628] ip6gretap0: entered allmulticast mode [ 547.390483][T26628] bridge0: entered allmulticast mode [ 547.397524][T26628] bond0: entered allmulticast mode [ 547.402943][T26628] bond_slave_0: entered allmulticast mode [ 547.409740][T26628] bond_slave_1: entered allmulticast mode [ 547.415703][T26628] bridge_slave_1: entered allmulticast mode [ 547.422262][T26628] batadv0: entered allmulticast mode [ 547.430627][T26628] nlmon0: entered allmulticast mode [ 547.436542][T26628] caif0: entered allmulticast mode [ 547.442212][T26628] veth0: entered allmulticast mode [ 547.448274][T26628] veth1: entered allmulticast mode [ 547.453853][T26628] wg1: entered allmulticast mode [ 547.460809][T26628] wg2: entered allmulticast mode [ 547.467790][T26628] veth0_to_bridge: entered allmulticast mode [ 547.474234][T26628] veth1_to_bridge: entered allmulticast mode [ 547.481786][T26628] veth0_to_bond: entered allmulticast mode [ 547.488927][T26628] veth1_to_bond: entered allmulticast mode [ 547.495261][T26628] veth0_to_team: entered allmulticast mode [ 547.523093][T26628] team_slave_0: entered allmulticast mode [ 547.541669][T26628] veth1_to_team: entered allmulticast mode [ 547.558900][T26628] team_slave_1: entered allmulticast mode [ 547.568752][T26628] veth0_to_batadv: entered allmulticast mode [ 547.578146][T26628] batadv_slave_0: entered allmulticast mode [ 547.584332][T26628] veth1_to_batadv: entered allmulticast mode [ 547.590607][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.603855][T26628] batadv_slave_1: entered allmulticast mode [ 547.611320][T26628] xfrm0: entered allmulticast mode [ 547.617959][T26628] veth0_to_hsr: entered allmulticast mode [ 547.623921][T26628] hsr_slave_0: entered allmulticast mode [ 547.630407][T26628] veth1_to_hsr: entered allmulticast mode [ 547.639309][T26628] hsr_slave_1: entered allmulticast mode [ 547.645303][T26628] hsr0: entered allmulticast mode [ 547.650985][T26628] veth1_virt_wifi: entered allmulticast mode [ 547.657651][T26628] veth0_virt_wifi: entered allmulticast mode [ 547.663874][T26628] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 547.672546][T26628] veth1_vlan: entered allmulticast mode [ 547.678751][T26628] veth0_vlan: entered allmulticast mode [ 547.684633][T26628] vlan0: entered allmulticast mode [ 547.690644][T26628] vlan1: entered allmulticast mode [ 547.693574][T26638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5741'. [ 547.696623][T26628] macvlan0: entered allmulticast mode [ 547.710862][T26628] macvlan1: entered allmulticast mode [ 547.717036][T26628] ipvlan0: entered allmulticast mode [ 547.722664][T26628] ipvlan1: entered allmulticast mode [ 547.728583][T26628] veth1_macvtap: entered allmulticast mode [ 547.734767][T26628] veth0_macvtap: entered allmulticast mode [ 547.767733][T26628] macvtap0: entered allmulticast mode [ 547.778858][T26628] macsec0: entered allmulticast mode [ 547.790095][T26628] geneve0: entered allmulticast mode [ 547.800119][T26641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5741'. [ 547.801247][T26628] geneve1: entered allmulticast mode [ 547.830289][T26628] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 547.848271][T26628] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 547.857431][T26628] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 547.865172][T26628] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 547.883370][T26628] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 547.897620][T26628] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 547.909810][T26628] bridge1: entered allmulticast mode [ 547.921986][T26628] geneve2: entered allmulticast mode [ 547.928212][T26628] erspan1: entered allmulticast mode [ 547.933858][T26628] veth2: entered allmulticast mode [ 547.939944][T26628] veth3: entered allmulticast mode [ 547.945350][T26628] bond1: entered allmulticast mode [ 547.951340][T26628] bridge2: entered allmulticast mode [ 547.971354][T26628] bridge3: entered allmulticast mode [ 547.982533][T26628] bridge4: entered allmulticast mode [ 547.994857][T26628] bridge5: entered allmulticast mode [ 548.008494][T26628] bridge6: entered allmulticast mode [ 548.018569][T26628] ipvlan2: entered allmulticast mode [ 548.029620][T26628] bridge7: entered allmulticast mode [ 548.042910][T26628] macvtap1: entered allmulticast mode [ 548.059084][T26628] macvlan2: entered allmulticast mode [ 548.074973][T26628] bridge8: entered allmulticast mode [ 548.080804][T26628] veth4: entered allmulticast mode [ 548.095150][T26628] veth5: entered allmulticast mode [ 548.100938][T26628] mac80211_hwsim hwsim49 wlan2: entered allmulticast mode [ 548.108518][T26628] ipip0: entered allmulticast mode [ 548.114138][T26628] bond2: entered allmulticast mode [ 548.119722][T26628] mac80211_hwsim hwsim38 t: entered allmulticast mode [ 548.127109][T26628] bond3: entered allmulticast mode [ 548.132395][T26628] bond4: entered allmulticast mode [ 548.138039][T26628] veth6: entered allmulticast mode [ 548.143317][T26628] veth7: entered allmulticast mode [ 548.153899][T26628] batadv0.5: entered allmulticast mode [ 548.159847][T26628] vlan2: entered allmulticast mode [ 548.165349][T26628] gre1: entered allmulticast mode [ 548.170839][T26628] mac80211_hwsim hwsim56 wlan3: entered allmulticast mode [ 548.178717][T26628] bridge9: entered allmulticast mode [ 548.184167][T26628] veth8: entered allmulticast mode [ 548.189830][T26628] veth9: entered allmulticast mode [ 548.195068][T26628] bond5: entered allmulticast mode [ 548.201239][T26628] bond6: left promiscuous mode [ 548.210884][T26628] : entered allmulticast mode [ 548.215763][T26628] bridge10: entered allmulticast mode [ 548.221616][T26628] syztnl0: entered allmulticast mode [ 548.227532][T26628] bond7: entered allmulticast mode [ 548.232861][T26628] macvlan3: entered allmulticast mode [ 548.238705][T26628] bond8: entered allmulticast mode [ 548.243869][T26628] bond9: entered allmulticast mode [ 548.255060][T26628] gre2: entered allmulticast mode [ 548.270031][T26627] lo: left allmulticast mode [ 548.275141][T26627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.317873][T26645] netlink: 'syz.3.5742': attribute type 32 has an invalid length. [ 548.370280][T26642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5741'. [ 548.388815][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5743'. [ 548.477033][T26650] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5744'. [ 548.506775][T26650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5744'. [ 548.532562][T26650] netlink: 'syz.1.5744': attribute type 10 has an invalid length. [ 548.551582][ T30] audit: type=1804 audit(1767320324.554:8): pid=26650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5744" name="/newroot/470/cgroup.controllers" dev="tmpfs" ino=2415 res=1 errno=0 [ 548.626534][ T30] audit: type=1800 audit(1767320324.584:9): pid=26650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5744" name="cgroup.controllers" dev="tmpfs" ino=2415 res=0 errno=0 [ 548.769180][T26661] syzkaller0: entered promiscuous mode [ 548.774694][T26661] syzkaller0: entered allmulticast mode [ 548.856644][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5751'. [ 549.077967][T26680] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 549.088934][T26680] syzkaller0: entered promiscuous mode [ 549.094430][T26680] syzkaller0: entered allmulticast mode [ 549.167705][T26687] netlink: 'syz.1.5758': attribute type 1 has an invalid length. [ 549.394246][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5759'. [ 549.501280][T26707] netlink: 'syz.3.5765': attribute type 1 has an invalid length. [ 549.550340][T26709] bond10 (unregistering): Released all slaves [ 549.581654][T26707] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 549.680910][T26721] netlink: 'syz.4.5768': attribute type 1 has an invalid length. [ 550.273119][T26750] syzkaller1: entered promiscuous mode [ 550.290471][T26754] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 550.348033][T26750] syzkaller1: entered allmulticast mode [ 550.461334][T26762] netlink: 'syz.0.5779': attribute type 1 has an invalid length. [ 550.587524][T26765] bond9: (slave ip6gretap1): making interface the new active one [ 550.641640][T26765] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 550.661775][T26765] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 550.682470][T26765] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 551.516430][T26827] netlink: 'syz.2.5793': attribute type 2 has an invalid length. [ 551.534459][T26827] netlink: 'syz.2.5793': attribute type 8 has an invalid length. [ 551.544578][T26827] __nla_validate_parse: 13 callbacks suppressed [ 551.544597][T26827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5793'. [ 551.993663][T26841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5798'. [ 552.053019][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.066956][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.075679][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.088372][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.097945][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.133047][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 552.140766][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 552.148721][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 552.157349][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 552.165112][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 552.589964][T26859] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 552.661960][T26855] lo speed is unknown, defaulting to 1000 [ 552.769395][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5809'. [ 552.806187][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5809'. [ 553.160104][T26907] x_tables: duplicate underflow at hook 1 [ 553.290881][T26855] chnl_net:caif_netlink_parms(): no params data found [ 553.437209][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5815'. [ 553.495034][T26929] netlink: 'syz.3.5817': attribute type 1 has an invalid length. [ 553.553510][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5817'. [ 553.623277][T26922] team0 (unregistering): Port device team_slave_0 removed [ 553.632302][T26922] team0 (unregistering): Port device team_slave_1 removed [ 553.654370][T26927] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5818'. [ 553.666223][T26917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.687331][T26929] 8021q: adding VLAN 0 to HW filter on device bond12 [ 553.694564][T26931] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5818'. [ 553.844784][T26855] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.856147][T26855] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.866363][T26855] bridge_slave_0: entered allmulticast mode [ 553.874342][T26855] bridge_slave_0: entered promiscuous mode [ 553.882258][T26947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5823'. [ 553.891990][T26943] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 553.901859][T26855] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.910035][T26855] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.918147][T26855] bridge_slave_1: entered allmulticast mode [ 553.926295][T26855] bridge_slave_1: entered promiscuous mode [ 554.035459][T26855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.072508][T26855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.136752][T26855] team0: Port device team_slave_0 added [ 554.150015][T26855] team0: Port device team_slave_1 added [ 554.219658][T26962] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5828'. [ 554.220873][T26855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.242093][ T5846] Bluetooth: hci0: command tx timeout [ 554.249681][T26855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.276951][T26855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.290331][T26855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.297943][T26855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.324456][T26855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.342384][T26962] 0{X: renamed from gretap0 [ 554.350230][T26962] tipc: Disabling bearer [ 554.370930][T26962] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 554.420937][T26974] netlink: 'syz.4.5831': attribute type 1 has an invalid length. [ 554.524214][T26855] hsr_slave_0: entered promiscuous mode [ 554.540115][T26855] hsr_slave_1: entered promiscuous mode [ 554.555842][T26855] debugfs: 'hsr0' already exists in 'hsr' [ 554.566940][T26855] Cannot create hsr debugfs directory [ 554.658136][T26985] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 555.201196][T26855] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.232429][T26855] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.330533][T26855] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.351132][T26855] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.374705][T27031] syz.3.5848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 555.392401][T27031] CPU: 1 UID: 0 PID: 27031 Comm: syz.3.5848 Not tainted syzkaller #0 PREEMPT(full) [ 555.392428][T27031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.392440][T27031] Call Trace: [ 555.392449][T27031] [ 555.392457][T27031] dump_stack_lvl+0xe8/0x150 [ 555.392490][T27031] warn_alloc+0x214/0x310 [ 555.392514][T27031] ? stack_trace_save+0x9c/0xe0 [ 555.392547][T27031] ? __pfx_warn_alloc+0x10/0x10 [ 555.392576][T27031] ? kasan_save_track+0x4f/0x80 [ 555.392594][T27031] ? kasan_save_track+0x3e/0x80 [ 555.392613][T27031] ? __kasan_kmalloc+0x93/0xb0 [ 555.392633][T27031] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 555.392652][T27031] ? xskq_create+0x56/0x170 [ 555.392681][T27031] ? xsk_setsockopt+0x4dc/0x8d0 [ 555.392705][T27031] ? do_sock_setsockopt+0x17c/0x1b0 [ 555.392726][T27031] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 555.392748][T27031] ? do_syscall_64+0xec/0xf80 [ 555.392772][T27031] __vmalloc_node_range_noprof+0x134/0x16a0 [ 555.392826][T27031] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 555.392855][T27031] ? __kasan_kmalloc+0x93/0xb0 [ 555.392882][T27031] vmalloc_user_noprof+0xad/0xf0 [ 555.392903][T27031] ? xskq_create+0xbf/0x170 [ 555.392932][T27031] xskq_create+0xbf/0x170 [ 555.392962][T27031] xsk_init_queue+0xb0/0x110 [ 555.392989][T27031] xsk_setsockopt+0x4dc/0x8d0 [ 555.393014][T27031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 555.393037][T27031] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.393065][T27031] ? aa_sock_opt_perm+0xff/0x1a0 [ 555.393095][T27031] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 555.393113][T27031] ? __pfx_xsk_setsockopt+0x10/0x10 [ 555.393147][T27031] do_sock_setsockopt+0x17c/0x1b0 [ 555.393175][T27031] __x64_sys_setsockopt+0x13f/0x1b0 [ 555.393200][T27031] do_syscall_64+0xec/0xf80 [ 555.393218][T27031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.393235][T27031] ? trace_irq_disable+0x37/0x100 [ 555.393259][T27031] ? clear_bhb_loop+0x60/0xb0 [ 555.393280][T27031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.393298][T27031] RIP: 0033:0x7f956f58f749 [ 555.393315][T27031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.393332][T27031] RSP: 002b:00007f95704df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 555.393353][T27031] RAX: ffffffffffffffda RBX: 00007f956f7e5fa0 RCX: 00007f956f58f749 [ 555.393367][T27031] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 555.393379][T27031] RBP: 00007f956f613f91 R08: 0000000000000004 R09: 0000000000000000 [ 555.393390][T27031] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.393403][T27031] R13: 00007f956f7e6038 R14: 00007f956f7e5fa0 R15: 00007ffe0f6febe8 [ 555.393435][T27031] [ 555.393443][T27031] Mem-Info: [ 555.489396][T27035] netlink: 'syz.1.5849': attribute type 10 has an invalid length. [ 555.490242][T27031] active_anon:4825 inactive_anon:0 isolated_anon:0 [ 555.490242][T27031] active_file:2052 inactive_file:40343 isolated_file:0 [ 555.490242][T27031] unevictable:768 dirty:61 writeback:0 [ 555.490242][T27031] slab_reclaimable:12998 slab_unreclaimable:329170 [ 555.490242][T27031] mapped:28941 shmem:1378 pagetables:1093 [ 555.490242][T27031] sec_pagetables:0 bounce:0 [ 555.490242][T27031] kernel_misc_reclaimable:0 [ 555.490242][T27031] free:1088473 free_pcp:15519 free_cma:0 [ 555.731871][T27034] IPv6: sit2: Disabled Multicast RS [ 555.739282][T27034] sit2: entered allmulticast mode [ 555.756437][T27031] Node 0 active_anon:18100kB inactive_anon:0kB active_file:8208kB inactive_file:161168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99384kB dirty:244kB writeback:0kB shmem:3976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15512kB pagetables:4228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 555.822461][T27031] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 555.861171][T27031] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.891941][T27031] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 555.899400][T27031] Node 0 DMA32 free:811804kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18100kB inactive_anon:0kB active_file:8208kB inactive_file:161168kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2559516kB mlocked:0kB bounce:0kB free_pcp:50188kB local_pcp:32776kB free_cma:0kB [ 555.943894][T27031] lowmem_reserve[]: 0 0 1 1 1 [ 555.949146][T27031] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 555.980025][T27031] lowmem_reserve[]: 0 0 0 0 0 [ 555.984785][T27031] Node 1 Normal free:3529320kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14504kB local_pcp:6016kB free_cma:0kB [ 556.019982][T27031] lowmem_reserve[]: 0 0 0 0 0 [ 556.024794][T27031] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 556.028587][T26855] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.038096][T27031] Node 0 DMA32: 5517*4kB (UME) 5624*8kB (UM) 2815*16kB (UME) 113*32kB (UM) 84*64kB (UME) 81*128kB (UME) 407*256kB (UM) 270*512kB (UE) 203*1024kB (UME) 112*2048kB (UM) 1*4096kB (U) = 815236kB [ 556.048500][T26855] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.067334][T27031] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 556.067453][T27031] Node 1 Normal: 190*4kB (UME) 46*8kB (UME) 42*16kB (UME) 163*32kB (UME) 52*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 857*4096kB (M) = 3529448kB [ 556.067644][T27031] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.067662][T27031] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.067678][T27031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.067694][T27031] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.067709][T27031] 43771 total pagecache pages [ 556.067719][T27031] 0 pages in swap cache [ 556.067726][T27031] Free swap = 124996kB [ 556.067735][T27031] Total swap = 124996kB [ 556.067745][T27031] 2097051 pages RAM [ 556.067753][T27031] 0 pages HighMem/MovableOnly [ 556.067761][T27031] 425082 pages reserved [ 556.067770][T27031] 0 pages cma reserved [ 556.259436][T26855] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.289617][T26855] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.306749][ T5846] Bluetooth: hci0: command tx timeout [ 556.432274][T27061] netlink: 'syz.3.5855': attribute type 29 has an invalid length. [ 556.457286][T27061] netlink: 'syz.3.5855': attribute type 29 has an invalid length. [ 556.657593][T27075] __nla_validate_parse: 3 callbacks suppressed [ 556.657680][T27075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5861'. [ 556.688724][T26855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 556.702842][T26855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 556.710491][T27075] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5861'. [ 556.747012][T26855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 556.769744][T26855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 556.999733][T26855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.025903][T26855] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.060968][T15097] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.068239][T15097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.094972][T15087] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.102198][T15087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.208677][T26855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 557.219748][T26855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.255099][T27110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5872'. [ 557.314835][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5873'. [ 557.363064][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5873'. [ 557.452091][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5876'. [ 557.607399][T27130] netlink: 'syz.3.5878': attribute type 1 has an invalid length. [ 557.663750][T27135] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5880'. [ 557.673356][T27130] 8021q: adding VLAN 0 to HW filter on device bond13 [ 557.741581][T27130] tipc: Enabling of bearer rejected, already enabled [ 557.780232][T27130] bond13: entered allmulticast mode [ 557.832683][T27148] Can't find ip_set type [ 557.886640][T26855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.001758][T26855] veth0_vlan: entered promiscuous mode [ 558.068373][T27169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5885'. [ 558.084280][T26855] veth1_vlan: entered promiscuous mode [ 558.194544][T26855] veth0_macvtap: entered promiscuous mode [ 558.228765][T26855] veth1_macvtap: entered promiscuous mode [ 558.268385][T27178] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5890'. [ 558.333995][T26855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.343224][T27185] netlink: 'syz.2.5891': attribute type 1 has an invalid length. [ 558.377452][T26855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.386481][ T5846] Bluetooth: hci0: command tx timeout [ 558.434564][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.450262][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.459675][T27190] xt_ecn: cannot match TCP bits for non-tcp packets [ 558.462722][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.480481][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.639688][T10719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.657099][T10719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.686123][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5896'. [ 558.716199][T10700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.727620][T10700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.975626][T27206] bond8: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 559.052444][T27206] bond8: entered promiscuous mode [ 559.052836][T27226] sctp: [Deprecated]: syz.1.5902 (pid 27226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 559.052836][T27226] Use struct sctp_sack_info instead [ 559.058633][T27223] netlink: 'syz.0.5903': attribute type 1 has an invalid length. [ 559.083970][T27206] bond8: entered allmulticast mode [ 559.091509][T27206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 559.518761][T27243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.559051][T27251] netlink: 'syz.2.5913': attribute type 1 has an invalid length. [ 559.597142][T27251] netlink: 'syz.2.5913': attribute type 1 has an invalid length. [ 559.613722][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.623530][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.642227][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.652315][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.662749][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 559.742428][T27243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.118986][T15087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.147089][T15087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.351337][T15087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.368985][T27294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 560.396352][T15087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.439881][T27253] lo speed is unknown, defaulting to 1000 [ 560.466308][ T5846] Bluetooth: hci0: command tx timeout [ 560.539788][T15087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.566211][T15087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.686762][T27308] delete_channel: no stack [ 560.736849][T15087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.760339][T15087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.921580][T27253] chnl_net:caif_netlink_parms(): no params data found [ 561.747615][ T5846] Bluetooth: hci4: command tx timeout [ 562.089340][T15087] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 562.098888][T15087] bond0 (unregistering): Released all slaves [ 562.111679][T15087] bond1 (unregistering): Released all slaves [ 562.225074][T15087] bond2 (unregistering): Released all slaves [ 562.238082][T15087] bond3 (unregistering): Released all slaves [ 562.250439][T15087] bond4 (unregistering): Released all slaves [ 562.262510][T15087] bond5 (unregistering): Released all slaves [ 562.375063][T15087] bond6 (unregistering): Released all slaves [ 562.484385][T15087] bond7 (unregistering): Released all slaves [ 562.550077][ T5846] Bluetooth: hci0: command tx timeout [ 562.596629][T15087] bond8 (unregistering): Released all slaves [ 562.618883][T27337] syzkaller1: entered promiscuous mode [ 562.624703][T27337] syzkaller1: entered allmulticast mode [ 562.750793][T15087] tipc: Disabling bearer [ 562.757292][T27359] netlink: 'syz.2.5940': attribute type 1 has an invalid length. [ 562.760960][T15087] tipc: Left network mode [ 562.792947][T27253] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.810069][T27253] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.818000][T27253] bridge_slave_0: entered allmulticast mode [ 562.825777][T27253] bridge_slave_0: entered promiscuous mode [ 562.891120][T27253] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.898934][T27253] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.906552][T27253] bridge_slave_1: entered allmulticast mode [ 562.923294][T27253] bridge_slave_1: entered promiscuous mode [ 562.957910][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 563.051667][T27378] openvswitch: netlink: IP tunnel dst address not specified [ 563.064896][T27253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.085241][T27253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.200340][T27253] team0: Port device team_slave_0 added [ 563.204628][T27384] netlink: 'syz.1.5946': attribute type 83 has an invalid length. [ 563.232623][T27253] team0: Port device team_slave_1 added [ 563.424684][T27253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.432732][T27253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.464894][T27253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.482834][T27253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.490773][T27253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.517956][T27253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.826209][ T5846] Bluetooth: hci4: command tx timeout [ 563.935586][T27253] hsr_slave_0: entered promiscuous mode [ 563.964177][T27253] hsr_slave_1: entered promiscuous mode [ 564.003875][T27253] debugfs: 'hsr0' already exists in 'hsr' [ 564.076030][T27253] Cannot create hsr debugfs directory [ 564.318313][T15087] hsr_slave_0: left promiscuous mode [ 564.332781][T15087] hsr_slave_1: left promiscuous mode [ 564.377875][T15087] vlan0: left allmulticast mode [ 564.392795][T15087] veth0_vlan: left allmulticast mode [ 564.417011][T15087] vlan0: left promiscuous mode [ 564.422842][T15087] veth1_macvtap: left promiscuous mode [ 564.432010][T15087] veth0_macvtap: left promiscuous mode [ 564.439624][T15087] : left promiscuous mode [ 564.444404][T15087] veth0_vlan: left promiscuous mode [ 564.548374][T15087] team0 (unregistering): Port device batadv1 removed [ 565.257568][T27469] __nla_validate_parse: 10 callbacks suppressed [ 565.257588][T27469] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5962'. [ 565.908420][ T52] Bluetooth: hci4: command tx timeout [ 565.966732][T15087] lo (unregistering): left allmulticast mode [ 566.378815][T27491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5968'. [ 566.671685][T15087] IPVS: stop unused estimator thread 0... [ 567.009761][T27516] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5975'. [ 567.202442][T27253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 567.214369][T27253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 567.240313][T27253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 567.289626][T27253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 567.422577][T27253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.446343][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807755fc00: rx timeout, send abort [ 567.455056][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807755fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 567.460804][T27253] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.516588][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.523782][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.596863][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.604025][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.659807][T27545] netlink: 'syz.3.5984': attribute type 29 has an invalid length. [ 567.672937][T27545] netlink: 'syz.3.5984': attribute type 29 has an invalid length. [ 567.685029][T27545] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5984'. [ 567.723061][T27545] syzkaller0: entered promiscuous mode [ 567.729629][T27545] syzkaller0: entered allmulticast mode [ 567.767068][T27552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5986'. [ 567.870745][T27552] 8021q: adding VLAN 0 to HW filter on device bond11 [ 567.888397][T27552] bond10: (slave bond11): Enslaving as an active interface with an up link [ 567.965986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.974060][ C1] lec:lec_tx_timeout: lec0 [ 567.986096][ T52] Bluetooth: hci4: command 0x0419 tx timeout [ 568.134654][T27253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.324329][T27583] bond3: left allmulticast mode [ 568.349500][T27583] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 568.399302][T27583] bond3: (slave lo): Enslaving as a backup interface with an up link [ 568.436385][T27583] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 568.464094][ T5884] lo speed is unknown, defaulting to 1000 [ 568.473296][ T5948] lo speed is unknown, defaulting to 1000 [ 568.481222][ T5948] syz2: Port: 1 Link ACTIVE [ 568.694198][T27600] IPv6: sit1: Disabled Multicast RS [ 568.702560][T27604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6000'. [ 568.703718][T27600] sit1: entered allmulticast mode [ 568.842046][T27253] veth0_vlan: entered promiscuous mode [ 568.868929][T27619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6002'. [ 568.902723][T27253] veth1_vlan: entered promiscuous mode [ 569.000097][T27624] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 569.027461][T27253] veth0_macvtap: entered promiscuous mode [ 569.052978][T27253] veth1_macvtap: entered promiscuous mode [ 569.084307][T27628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6005'. [ 569.143151][T27253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.182599][T27253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.222564][T15097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.256136][T15097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.265001][T15097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.288631][T27634] netlink: 'syz.1.6007': attribute type 3 has an invalid length. [ 569.331458][T15097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.348504][T27640] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6008'. [ 569.352397][T27641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.376935][T27638] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 569.384213][T27638] macvtap1: left promiscuous mode [ 569.426848][T27638] ip6gre1: left promiscuous mode [ 569.434975][T27638] ip6erspan0: left promiscuous mode [ 569.465618][T27638] netlink: 'syz.2.6009': attribute type 4 has an invalid length. [ 569.625501][T27653] syzkaller0: entered promiscuous mode [ 569.632010][T27653] syzkaller0: entered allmulticast mode [ 569.668611][T27657] syzkaller0: entered promiscuous mode [ 569.674899][T27657] syzkaller0: entered allmulticast mode [ 569.683801][T15087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.696648][T15087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.809491][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.818754][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.921355][T27668] x_tables: duplicate underflow at hook 2 [ 570.051400][T27670] syzkaller0: entered promiscuous mode [ 570.059027][T27670] syzkaller0: entered allmulticast mode [ 570.065056][T27679] netlink: 'syz.1.6023': attribute type 12 has an invalid length. [ 570.073058][ T5846] Bluetooth: hci4: command 0x0419 tx timeout [ 571.623865][T27679] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 571.655285][T27684] team0: Device gtp0 is up. Set it down before adding it as a team port [ 571.854967][T27709] netlink: 'syz.1.6031': attribute type 2 has an invalid length. [ 571.873926][T27709] netlink: 'syz.1.6031': attribute type 8 has an invalid length. [ 571.883074][T27709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6031'. [ 571.928601][T27712] netlink: 'syz.0.6030': attribute type 21 has an invalid length. [ 571.947158][T27712] netlink: 'syz.0.6030': attribute type 6 has an invalid length. [ 571.979603][T27712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6030'. [ 572.014975][T27726] netlink: 'syz.1.6031': attribute type 2 has an invalid length. [ 572.034422][T27726] netlink: 'syz.1.6031': attribute type 8 has an invalid length. [ 572.088666][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6031'. [ 572.251337][T27726] nbd0: detected capacity change from 0 to 2540971371823114 [ 572.329507][T27730] bond12: option miimon: invalid value (18446744073709551585) [ 572.342620][T27726] block nbd0: reconnected socket [ 572.351357][T27730] bond12: option miimon: allowed values 0 - 2147483647 [ 572.376647][T27730] bond12 (unregistering): Released all slaves [ 572.463514][T27747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6036'. [ 572.474169][ T5846] block nbd0: Receive control failed (result -104) [ 572.687844][T27769] netlink: 'syz.1.6044': attribute type 1 has an invalid length. [ 572.789622][T27774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.832500][T27774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6046'. [ 572.850383][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6046'. [ 572.894321][T15077] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.904619][T15077] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.919411][T27788] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6051'. [ 572.930691][T27788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6051'. [ 572.934184][T27784] vlan2: entered promiscuous mode [ 572.966535][T27784] bridge0: entered promiscuous mode [ 572.975198][T15077] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.040790][T15077] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.106761][T27799] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6055'. [ 573.107889][T27800] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6055'. [ 573.207092][T27808] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 573.503881][T27829] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 573.686504][T27836] v: renamed from vlan0 (while UP) [ 573.830060][T27844] dvmrp0: entered allmulticast mode [ 574.190994][T27853] 8021q: adding VLAN 0 to HW filter on device bond14 [ 574.325555][T27857] bond14: (slave veth11): Enslaving as an active interface with a down link [ 574.378269][T27853] vlan3: entered allmulticast mode [ 574.393977][T27853] bond14: (slave vlan3): Opening slave failed [ 574.409333][T27871] validate_nla: 5 callbacks suppressed [ 574.409352][T27871] netlink: 'syz.4.6074': attribute type 2 has an invalid length. [ 575.031627][T27888] netlink: 'syz.3.6079': attribute type 12 has an invalid length. [ 575.039863][T27888] netlink: 'syz.3.6079': attribute type 29 has an invalid length. [ 575.051310][T27889] netlink: 'syz.3.6079': attribute type 12 has an invalid length. [ 575.060517][T27889] netlink: 'syz.3.6079': attribute type 29 has an invalid length. [ 575.313740][T27903] netlink: 'syz.2.6080': attribute type 10 has an invalid length. [ 575.358595][T27903] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 576.181572][T27962] syzkaller0: entered promiscuous mode [ 576.200893][T27962] syzkaller0: entered allmulticast mode [ 576.236449][T27965] netlink: 'syz.3.6096': attribute type 1 has an invalid length. [ 576.335442][T27975] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 576.369825][T27973] syzkaller0: entered promiscuous mode [ 576.375426][T27973] syzkaller0: entered allmulticast mode [ 576.646479][T27982] bond12: Unable to set up delay as MII monitoring is disabled [ 576.682616][T27982] bond12 (unregistering): Released all slaves [ 579.020201][T28031] __nla_validate_parse: 14 callbacks suppressed [ 579.020220][T28031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6114'. [ 579.023015][T28024] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 579.156992][T28041] tipc: New replicast peer: 255.255.255.255 [ 579.163546][T28041] tipc: Enabled bearer , priority 10 [ 579.187653][T28041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6114'. [ 579.299008][T28048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.468230][T28061] netlink: 'syz.0.6123': attribute type 2 has an invalid length. [ 579.478659][T28061] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6123'. [ 579.491718][T28061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.508352][T28061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6123'. [ 579.832538][T28077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6129'. [ 579.846989][T28080] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6130'. [ 579.882484][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 579.894749][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 579.903916][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.918554][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.926579][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 580.050486][T28084] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.058240][T28084] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.186964][T28084] bridge_slave_0: left allmulticast mode [ 580.192632][T28084] bridge_slave_0: left promiscuous mode [ 580.199238][T28084] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.217201][T28084] bridge_slave_1: left allmulticast mode [ 580.222974][T28084] bridge_slave_1: left promiscuous mode [ 580.229669][T28084] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.247096][T28084] bond0: (slave bond_slave_0): Releasing backup interface [ 580.259777][T28084] bond0: (slave bond_slave_1): Releasing backup interface [ 580.273591][T28084] team0: Port device team_slave_0 removed [ 580.285520][T28084] team0: Port device team_slave_1 removed [ 580.297525][T28084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.309953][T28084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.324533][T28084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.517131][T28102] netlink: 'syz.0.6135': attribute type 22 has an invalid length. [ 580.542894][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6135'. [ 580.563672][T28106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6134'. [ 580.609579][T28102] netlink: 'syz.0.6135': attribute type 22 has an invalid length. [ 580.620578][ T50] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.630536][T28102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6135'. [ 580.631726][ T50] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.671020][T28114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6137'. [ 580.680416][ T50] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.700036][ T50] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 580.945309][T28129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.953880][T28082] lo speed is unknown, defaulting to 1000 [ 581.218616][T28082] chnl_net:caif_netlink_parms(): no params data found [ 581.291769][T28082] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.299165][T28082] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.306616][T28082] bridge_slave_0: entered allmulticast mode [ 581.313821][T28082] bridge_slave_0: entered promiscuous mode [ 581.322081][T28082] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.329829][T28082] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.337244][T28082] bridge_slave_1: entered allmulticast mode [ 581.344423][T28082] bridge_slave_1: entered promiscuous mode [ 581.378941][T28082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.390794][T28082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.423008][T28082] team0: Port device team_slave_0 added [ 581.431954][T28082] team0: Port device team_slave_1 added [ 581.460603][T28082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.467761][T28082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.495203][T28082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.513971][T28082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.521089][T28082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.547320][T28082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.592400][T28082] hsr_slave_0: entered promiscuous mode [ 581.599128][T28082] hsr_slave_1: entered promiscuous mode [ 581.605379][T28082] debugfs: 'hsr0' already exists in 'hsr' [ 581.611391][T28082] Cannot create hsr debugfs directory [ 581.944543][T28160] IPVS: set_ctl: invalid protocol: 146 127.0.0.1:20003 [ 581.966645][T28165] tipc: Enabling of bearer rejected, failed to enable media [ 581.989465][ T52] Bluetooth: hci5: command tx timeout [ 581.998962][T28160] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20001 [ 582.019567][T28164] xt_TPROXY: Can be used only with -p tcp or -p udp [ 582.080779][T28172] wg1: entered promiscuous mode [ 582.086973][T28172] wg1: entered allmulticast mode [ 582.378997][T28082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 582.445331][T28082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 582.491764][T28082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 582.520347][T28082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 582.669105][T28082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.756119][T28082] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.778058][T15093] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.785285][T15093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.888655][T15093] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.895883][T15093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.120030][T28185] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.480905][T28243] netem: incorrect gi model size [ 583.500931][T28243] netem: change failed [ 583.507489][ T1002] team0: left allmulticast mode [ 583.516457][ T1002] team_slave_0: left allmulticast mode [ 583.556439][ T1002] team_slave_1: left allmulticast mode [ 583.565184][ T1002] geneve0: left allmulticast mode [ 583.575381][ T1002] team0: left promiscuous mode [ 583.585435][ T1002] team_slave_0: left promiscuous mode [ 583.601272][ T1002] team_slave_1: left promiscuous mode [ 583.607726][ T1002] geneve0: left promiscuous mode [ 583.613111][ T1002] bridge0: port 3(team0) entered disabled state [ 583.637104][ T1002] bridge_slave_1: left allmulticast mode [ 583.643925][ T1002] bridge_slave_1: left promiscuous mode [ 583.656382][ T1002] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.678130][ T1002] bridge_slave_0: left allmulticast mode [ 583.685742][ T1002] bridge_slave_0: left promiscuous mode [ 583.694773][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.027101][T28272] siw: device registration error -23 [ 584.072597][ T52] Bluetooth: hci5: command tx timeout [ 584.103797][ T1002] bond1 (unregistering): (slave gretap1): Releasing active interface [ 584.171401][ T1002] bond6 (unregistering): (slave geneve2): Releasing active interface [ 584.204972][ T1002] team0: Port device geneve0 removed [ 584.398363][ T1002] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 584.406780][ T1002] bridge4 (unregistering): left promiscuous mode [ 584.519955][ T1002] bond1 (unregistering): Released all slaves [ 584.631232][ T1002] bond2 (unregistering): Released all slaves [ 584.734293][ T1002] bond3 (unregistering): Released all slaves [ 584.839352][ T1002] bond4 (unregistering): (slave veth7): Releasing backup interface [ 584.848729][ T1002] bond4 (unregistering): Released all slaves [ 584.862040][ T1002] bond5 (unregistering): (slave lo): Releasing backup interface [ 584.871325][ T1002] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 584.882864][ T1002] bond5 (unregistering): Released all slaves [ 584.984776][ T1002] bond0 (unregistering): Released all slaves [ 584.996889][ T1002] bond6 (unregistering): Released all slaves [ 585.099639][ T1002] bond7 (unregistering): Released all slaves [ 585.111714][ T1002] bond8 (unregistering): Released all slaves [ 585.124350][ T1002] bond9 (unregistering): Released all slaves [ 585.250824][T28082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.511261][T28082] veth0_vlan: entered promiscuous mode [ 585.539843][T28082] veth1_vlan: entered promiscuous mode [ 585.633510][T28082] veth0_macvtap: entered promiscuous mode [ 585.703050][T28082] veth1_macvtap: entered promiscuous mode [ 585.752404][T28082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.784235][T28082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.822626][ T4537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.853393][ T4537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.888624][T28309] sctp: [Deprecated]: syz.2.6190 (pid 28309) Use of int in maxseg socket option. [ 585.888624][T28309] Use struct sctp_assoc_value instead [ 585.903543][ T4537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.925162][ T4537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.940481][T28309] __nla_validate_parse: 3 callbacks suppressed [ 585.940500][T28309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6190'. [ 585.987284][T28309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6190'. [ 586.098174][ T4537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.124931][ T4537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.149029][ T52] Bluetooth: hci5: command tx timeout [ 586.181831][ T4537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.190493][ T4537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.689114][T28344] : renamed from hsr0 (while UP) [ 586.811938][T28349] lo: entered promiscuous mode [ 586.841811][T28349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.906143][ T1002] tipc: Disabling bearer [ 586.918124][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 586.918124][T28353] Use struct sctp_assoc_value instead [ 586.958701][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 586.958701][T28353] Use struct sctp_assoc_value instead [ 586.958927][ T1002] tipc: Left network mode [ 586.979819][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 586.979819][T28353] Use struct sctp_assoc_value instead [ 587.016474][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.016474][T28353] Use struct sctp_assoc_value instead [ 587.034479][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.049325][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.049325][T28353] Use struct sctp_assoc_value instead [ 587.071734][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.071734][T28353] Use struct sctp_assoc_value instead [ 587.086833][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.097912][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.110508][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.118759][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.118759][T28353] Use struct sctp_assoc_value instead [ 587.133976][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.133976][T28353] Use struct sctp_assoc_value instead [ 587.139230][T28360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6203'. [ 587.150071][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.158246][ T1002] IPVS: stopping backup sync thread 15110 ... [ 587.165660][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.165660][T28353] Use struct sctp_assoc_value instead [ 587.188237][T28353] sctp: [Deprecated]: syz.1.6202 (pid 28353) Use of int in maxseg socket option. [ 587.188237][T28353] Use struct sctp_assoc_value instead [ 587.353433][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6208'. [ 587.379965][T28377] syzkaller0: entered promiscuous mode [ 587.385645][T28377] syzkaller0: entered allmulticast mode [ 587.527273][T28384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6209'. [ 587.550236][T28385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6211'. [ 587.566614][T28374] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 587.598038][T28387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6212'. [ 587.683854][T28390] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 587.789481][T28394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6213'. [ 587.942969][T28392] smc: net device team0 applied user defined pnetid SYZ2 [ 587.954007][T28392] sctp: [Deprecated]: syz.4.6214 (pid 28392) Use of int in max_burst socket option deprecated. [ 587.954007][T28392] Use struct sctp_assoc_value instead [ 588.084754][T28356] lo speed is unknown, defaulting to 1000 [ 588.089737][T28402] syzkaller0: entered promiscuous mode [ 588.097881][T28402] syzkaller0: entered allmulticast mode [ 588.116444][T28405] netlink: 'syz.3.6218': attribute type 10 has an invalid length. [ 588.124748][T28405] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6218'. [ 588.236758][ T5846] Bluetooth: hci5: command tx timeout [ 588.531774][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.543209][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.571953][ T1002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.589638][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.619598][ T1002] veth1_macvtap: left promiscuous mode [ 588.625161][ T1002] veth0_macvtap: left promiscuous mode [ 589.018330][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 589.054213][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 589.271684][ T5846] Bluetooth: hci1: command tx timeout [ 589.471354][T28433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6224'. [ 589.612341][T28356] chnl_net:caif_netlink_parms(): no params data found [ 589.729505][T28449] lo: left promiscuous mode [ 589.734595][T28449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.894732][T28460] netlink: 'syz.3.6231': attribute type 1 has an invalid length. [ 590.031950][T28356] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.076756][T28356] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.084059][T28356] bridge_slave_0: entered allmulticast mode [ 590.135219][T28356] bridge_slave_0: entered promiscuous mode [ 590.148649][T28356] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.156520][T28356] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.164000][T28356] bridge_slave_1: entered allmulticast mode [ 590.176714][T28356] bridge_slave_1: entered promiscuous mode [ 590.273845][T28356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.313426][T28356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.391104][T28482] v: renamed from dummy0 (while UP) [ 590.474498][T28491] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20000 [ 590.585118][T28356] team0: Port device team_slave_0 added [ 590.634825][T28356] team0: Port device team_slave_1 added [ 590.817846][T28504] bond12: option all_slaves_active: invalid value (222) [ 590.833057][T28504] bond12 (unregistering): Released all slaves [ 590.891429][T28356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.909032][T28356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.935831][T28356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.004314][T28356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.012692][T28356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.039783][T28356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.082961][T28512] __nla_validate_parse: 2 callbacks suppressed [ 591.082979][T28512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6245'. [ 591.140980][T28512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6245'. [ 591.210783][T28512] bond2 (unregistering): Released all slaves [ 591.346248][ T5846] Bluetooth: hci1: command tx timeout [ 591.351454][T28356] hsr_slave_0: entered promiscuous mode [ 591.367383][T28356] hsr_slave_1: entered promiscuous mode [ 591.375628][T28356] debugfs: 'hsr0' already exists in 'hsr' [ 591.391798][T28356] Cannot create hsr debugfs directory [ 591.399056][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6253'. [ 591.450437][T28545] vlan0: entered promiscuous mode [ 591.455632][T28545] geneve1: entered promiscuous mode [ 591.462983][T28545] vlan0: entered allmulticast mode [ 591.597459][ T1002] IPVS: stop unused estimator thread 0... [ 592.010199][T28575] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6256'. [ 592.101384][T28564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 592.152449][T28564] netlink: 'syz.0.6256': attribute type 10 has an invalid length. [ 592.211940][T28582] openvswitch: netlink: Invalid VLAN frame [ 592.237300][T28564] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 592.251102][T28584] netem: change failed [ 592.297036][T28591] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6263'. [ 592.637739][ T1002] batadv4: left allmulticast mode [ 592.651169][ T1002] batadv4: left promiscuous mode [ 592.676333][ T1002] bridge0: port 2(batadv4) entered disabled state [ 592.727959][ T1002] bridge_slave_0: left allmulticast mode [ 592.746036][ T1002] bridge_slave_0: left promiscuous mode [ 592.752746][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.797877][ T1002] bridge_slave_0: left allmulticast mode [ 592.809359][ T1002] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.062190][ T1002] bond0 (unregistering): (slave gretap1): Releasing active interface [ 593.241603][T28627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6272'. [ 593.436513][ T5846] Bluetooth: hci1: command tx timeout [ 593.632908][ T1002] bond0 (unregistering): Released all slaves [ 593.647336][ T1002] bond1 (unregistering): (slave bond2): Releasing backup interface [ 593.657658][ T1002] bond1 (unregistering): (slave bond3): Releasing backup interface [ 593.667048][ T1002] bond1 (unregistering): Released all slaves [ 593.778469][ T1002] bond2 (unregistering): Released all slaves [ 593.880691][ T1002] bond3 (unregistering): Released all slaves [ 593.892640][ T1002] bond4 (unregistering): Released all slaves [ 593.904813][ T1002] bond5 (unregistering): Released all slaves [ 593.917504][ T1002] bond6 (unregistering): Released all slaves [ 594.034849][ T1002] bond7 (unregistering): Released all slaves [ 594.047205][ T1002] bond8 (unregistering): Released all slaves [ 594.158016][ T1002] bond9 (unregistering): Released all slaves [ 594.170629][ T1002] bond10 (unregistering): Released all slaves [ 594.810390][ T1002] bond0 (unregistering): (slave 1!): Releasing backup interface [ 594.819839][ T1002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.830179][ T1002] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 594.839661][ T1002] bond0 (unregistering): Released all slaves [ 594.852554][ T1002] bond1 (unregistering): Released all slaves [ 594.866338][ T1002] bond2 (unregistering): Released all slaves [ 594.879142][ T1002] bond3 (unregistering): Released all slaves [ 594.893072][ T1002] bond4 (unregistering): Released all slaves [ 594.907824][ T1002] bond5 (unregistering): Released all slaves [ 594.921687][ T1002] bond6 (unregistering): Released all slaves [ 595.080867][T28615] : entered promiscuous mode [ 595.150911][ T1002] 9: left promiscuous mode [ 595.233782][T28643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6274'. [ 595.321029][ T1002] tipc: Disabling bearer [ 595.346274][ T1002] tipc: Left network mode [ 595.390041][T28649] netlink: 'syz.0.6277': attribute type 58 has an invalid length. [ 595.398857][T10614] IPVS: starting estimator thread 0... [ 595.421311][T28649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6277'. [ 595.506033][T28654] IPVS: using max 34 ests per chain, 81600 per kthread [ 595.506219][ T5846] Bluetooth: hci1: command tx timeout [ 595.874027][T28356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.947648][T28356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 595.965191][T28356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.974741][T28642] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 595.997978][T28356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 596.267761][T28682] syzkaller0: entered promiscuous mode [ 596.286424][T28682] syzkaller0: entered allmulticast mode [ 596.355677][T28682] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.424042][T28689] netlink: 'syz.3.6288': attribute type 8 has an invalid length. [ 596.504626][T28691] netlink: 'syz.0.6289': attribute type 33 has an invalid length. [ 596.616431][T28691] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 596.635293][T28691] bond1 (unregistering): Released all slaves [ 596.808653][T28356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.977144][T28711] netlink: 'syz.0.6295': attribute type 1 has an invalid length. [ 596.985187][T28711] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6295'. [ 597.286115][ T1002] hsr_slave_0: left promiscuous mode [ 597.299066][ T1002] hsr_slave_1: left promiscuous mode [ 597.315314][ T1002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.331215][T28730] sctp: [Deprecated]: syz.0.6298 (pid 28730) Use of int in max_burst socket option deprecated. [ 597.331215][T28730] Use struct sctp_assoc_value instead [ 597.375106][ T1002] team0 (unregistering): Port device batadv5 removed [ 597.382637][T28731] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 597.396793][T15087] batman_adv: batadv5: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 597.542013][ T1002] team0 (unregistering): Port device batadv3 removed [ 597.785432][ T1002] pimreg (unregistering): left allmulticast mode [ 597.822197][ T1002] team0 (unregistering): Port device batadv2 removed [ 597.848462][ T1002] team0 (unregistering): Port device batadv1 removed [ 598.253132][ T1002] team0 (unregistering): Port device team_slave_1 removed [ 598.295533][ T1002] team0 (unregistering): Port device team_slave_0 removed [ 598.811516][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6303'. [ 598.822748][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6303'. [ 598.934941][T15103] smc: removing ib device syz0 [ 599.462551][T28765] tipc: Enabling of bearer rejected, failed to enable media [ 599.511441][T28356] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.665046][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.672273][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.704174][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.711351][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.751305][T28776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6309'. [ 599.818368][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6309'. [ 600.346756][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6317'. [ 600.377446][T28802] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6315'. [ 600.388384][T28804] veth0_to_bond: entered allmulticast mode [ 600.463188][T28811] netlink: 'syz.0.6318': attribute type 1 has an invalid length. [ 600.480961][T28811] netlink: 'syz.0.6318': attribute type 2 has an invalid length. [ 600.485017][T28801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6316'. [ 600.523699][T28811] netlink: 'syz.0.6318': attribute type 1 has an invalid length. [ 600.560361][T28811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6318'. [ 600.622000][T28356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.677205][T28818] openvswitch: netlink: Multiple metadata blocks provided [ 600.688446][T28821] netlink: 'syz.4.6319': attribute type 64 has an invalid length. [ 600.711849][T28821] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6319'. [ 600.842880][T28356] veth0_vlan: entered promiscuous mode [ 600.918533][T28356] veth1_vlan: entered promiscuous mode [ 601.001832][T28356] veth0_macvtap: entered promiscuous mode [ 601.049602][T28356] veth1_macvtap: entered promiscuous mode [ 601.136873][T28356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.189517][T28835] netlink: 'syz.4.6326': attribute type 1 has an invalid length. [ 601.214776][T28356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.291265][T28838] netlink: 'syz.3.6328': attribute type 5 has an invalid length. [ 601.306765][T15093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.367835][T15093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.421190][T15093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.476931][T15093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.718854][T15093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.735601][T28860] x_tables: duplicate underflow at hook 2 [ 601.742673][T15093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.746318][T28847] netlink: 'syz.4.6331': attribute type 11 has an invalid length. [ 601.968645][T28864] netlink: 'syz.3.6336': attribute type 1 has an invalid length. [ 602.000386][T28866] tls_set_device_offload: netdev not found [ 602.010457][T15081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.029165][T15081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.305283][T28875] netlink: 'syz.2.6199': attribute type 1 has an invalid length. [ 602.358416][T28870] syzkaller0: entered promiscuous mode [ 602.364738][T28870] syzkaller0: entered allmulticast mode [ 602.686880][ T1002] IPVS: stop unused estimator thread 0... [ 602.703779][ T1002] IPVS: stop unused estimator thread 0... [ 602.757015][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 602.767523][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 602.780721][T28885] __nla_validate_parse: 3 callbacks suppressed [ 602.780741][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6344'. [ 602.817397][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 602.827090][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 602.835001][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 602.917811][T28883] lo speed is unknown, defaulting to 1000 [ 603.055664][T18023] syz_tun (unregistering): left promiscuous mode [ 603.067296][T18023] bridge0: port 3(syz_tun) entered disabled state [ 603.146030][ T1002] ------------[ cut here ]------------ [ 603.151574][ T1002] WARNING: fs/proc/proc_sysctl.c:1558 at retire_sysctl_set+0x48/0x60, CPU#0: kworker/u8:5/1002 [ 603.162324][ T1002] Modules linked in: [ 603.166796][ T1002] CPU: 0 UID: 0 PID: 1002 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 603.176361][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.187137][ T1002] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 603.191942][ T1002] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 603.197913][ T1002] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 e8 c4 ff 48 83 3b 00 75 0c e8 65 c8 5e ff 5b e9 7f 40 fa 08 cc e8 59 c8 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 603.217650][ T1002] RSP: 0018:ffffc90003e4f8d0 EFLAGS: 00010293 [ 603.223740][ T1002] RAX: ffffffff82622f67 RBX: ffff88807ac80388 RCX: ffff88802600db80 [ 603.232069][ T1002] RDX: 0000000000000000 RSI: ffffffff8d975f6e RDI: ffff88807ac80328 [ 603.240486][ T1002] RBP: ffffc90003e4f9b0 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 603.248899][ T1002] R10: dffffc0000000000 R11: ffffffff8b160770 R12: ffffffff8f621ac0 [ 603.257364][ T1002] R13: 1ffff920007c9f40 R14: ffffffff8f621aa0 R15: ffff88807ac800a8 [ 603.265709][ T1002] FS: 0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 603.275487][ T1002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.283535][ T1002] CR2: 00007f3651476a10 CR3: 0000000030abe000 CR4: 00000000003526f0 [ 603.292012][ T1002] Call Trace: [ 603.295371][ T1002] [ 603.298452][ T1002] ops_undo_list+0x49a/0x990 [ 603.303071][ T1002] ? __pfx_ops_undo_list+0x10/0x10 [ 603.308283][ T1002] ? do_raw_spin_unlock+0x122/0x240 [ 603.313518][ T1002] cleanup_net+0x4d8/0x7a0 [ 603.318037][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 603.323002][ T1002] ? process_scheduled_works+0x9ef/0x1770 [ 603.328822][ T1002] ? process_scheduled_works+0x9ef/0x1770 [ 603.334585][ T1002] process_scheduled_works+0xad1/0x1770 [ 603.340263][ T1002] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.346398][ T1002] ? do_raw_spin_lock+0x121/0x290 [ 603.351465][ T1002] worker_thread+0x8a0/0xda0 [ 603.356264][ T1002] ? __kthread_parkme+0x7b/0x200 [ 603.361229][ T1002] kthread+0x711/0x8a0 [ 603.365325][ T1002] ? __pfx_worker_thread+0x10/0x10 [ 603.370533][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.375157][ T1002] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.380498][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.385621][ T1002] ret_from_fork+0x510/0xa50 [ 603.390615][ T1002] ? __pfx_ret_from_fork+0x10/0x10 [ 603.395746][ T1002] ? __switch_to+0xc9e/0x1480 [ 603.400524][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.405144][ T1002] ret_from_fork_asm+0x1a/0x30 [ 603.410008][ T1002] [ 603.413043][ T1002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 603.420328][ T1002] CPU: 0 UID: 0 PID: 1002 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 603.429774][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.439834][ T1002] Workqueue: netns cleanup_net [ 603.444607][ T1002] Call Trace: [ 603.447894][ T1002] [ 603.450825][ T1002] vpanic+0x1e0/0x670 [ 603.454815][ T1002] panic+0xb9/0xc0 [ 603.458536][ T1002] ? __pfx_panic+0x10/0x10 [ 603.462958][ T1002] ? ret_from_fork_asm+0x1a/0x30 [ 603.467911][ T1002] __warn+0x317/0x4b0 [ 603.471902][ T1002] ? retire_sysctl_set+0x48/0x60 [ 603.476837][ T1002] ? retire_sysctl_set+0x48/0x60 [ 603.481771][ T1002] __report_bug+0x288/0x500 [ 603.486270][ T1002] ? ret_from_fork_asm+0x1a/0x30 [ 603.491205][ T1002] ? retire_sysctl_set+0x48/0x60 [ 603.496146][ T1002] ? __pfx___report_bug+0x10/0x10 [ 603.501195][ T1002] ? retire_sysctl_set+0x48/0x60 [ 603.506149][ T1002] report_bug+0x16a/0x220 [ 603.510489][ T1002] ? retire_sysctl_set+0x48/0x60 [ 603.515424][ T1002] ? retire_sysctl_set+0x4a/0x60 [ 603.520361][ T1002] handle_bug+0x98/0x200 [ 603.524606][ T1002] exc_invalid_op+0x1a/0x50 [ 603.529105][ T1002] asm_exc_invalid_op+0x1a/0x20 [ 603.533948][ T1002] RIP: 0010:retire_sysctl_set+0x48/0x60 [ 603.539489][ T1002] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 a0 e8 c4 ff 48 83 3b 00 75 0c e8 65 c8 5e ff 5b e9 7f 40 fa 08 cc e8 59 c8 5e ff 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 66 66 66 2e 0f 1f 84 00 00 00 [ 603.559087][ T1002] RSP: 0018:ffffc90003e4f8d0 EFLAGS: 00010293 [ 603.565149][ T1002] RAX: ffffffff82622f67 RBX: ffff88807ac80388 RCX: ffff88802600db80 [ 603.573118][ T1002] RDX: 0000000000000000 RSI: ffffffff8d975f6e RDI: ffff88807ac80328 [ 603.581081][ T1002] RBP: ffffc90003e4f9b0 R08: ffffffff8f822277 R09: 1ffffffff1f0444e [ 603.589047][ T1002] R10: dffffc0000000000 R11: ffffffff8b160770 R12: ffffffff8f621ac0 [ 603.597015][ T1002] R13: 1ffff920007c9f40 R14: ffffffff8f621aa0 R15: ffff88807ac800a8 [ 603.605002][ T1002] ? __pfx_sysctl_net_exit+0x10/0x10 [ 603.610300][ T1002] ? retire_sysctl_set+0x47/0x60 [ 603.615247][ T1002] ops_undo_list+0x49a/0x990 [ 603.619856][ T1002] ? __pfx_ops_undo_list+0x10/0x10 [ 603.624978][ T1002] ? do_raw_spin_unlock+0x122/0x240 [ 603.630181][ T1002] cleanup_net+0x4d8/0x7a0 [ 603.634602][ T1002] ? __pfx_cleanup_net+0x10/0x10 [ 603.639542][ T1002] ? process_scheduled_works+0x9ef/0x1770 [ 603.645257][ T1002] ? process_scheduled_works+0x9ef/0x1770 [ 603.650980][ T1002] process_scheduled_works+0xad1/0x1770 [ 603.656541][ T1002] ? __pfx_process_scheduled_works+0x10/0x10 [ 603.662604][ T1002] ? do_raw_spin_lock+0x121/0x290 [ 603.667649][ T1002] worker_thread+0x8a0/0xda0 [ 603.672273][ T1002] ? __kthread_parkme+0x7b/0x200 [ 603.677309][ T1002] kthread+0x711/0x8a0 [ 603.681383][ T1002] ? __pfx_worker_thread+0x10/0x10 [ 603.686488][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.691078][ T1002] ? _raw_spin_unlock_irq+0x23/0x50 [ 603.696287][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.700882][ T1002] ret_from_fork+0x510/0xa50 [ 603.705554][ T1002] ? __pfx_ret_from_fork+0x10/0x10 [ 603.710656][ T1002] ? __switch_to+0xc9e/0x1480 [ 603.715336][ T1002] ? __pfx_kthread+0x10/0x10 [ 603.719920][ T1002] ret_from_fork_asm+0x1a/0x30 [ 603.724708][ T1002] [ 603.727867][ T1002] Kernel Offset: disabled [ 603.732181][ T1002] Rebooting in 86400 seconds..