last executing test programs: 1.807184967s ago: executing program 3 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="28f9ffff130009c66a00000000000000020100fea53724438c", @ANYRES32=r1, @ANYBLOB="08000100e000000208000200ac141441"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="28f9ffff130009c66a00000000000000020100fea53724438c", @ANYRES32=r1, @ANYBLOB="08000100e000000208000200ac141441"], 0x28}}, 0x0) (async) 1.700896917s ago: executing program 3 (id=2642): r0 = socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000711073000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.554454759s ago: executing program 3 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x1a, 0x3, &(0x7f0000000f80)=@framed, &(0x7f0000000fc0)='syzkaller\x00', 0x8}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x7, 0x2}, {0x7, 0x9}, {0xb, 0xffff}}, ["", "", ""]}, 0x24}}, 0x20000000) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) close(r8) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, &(0x7f00000003c0)={{r1, &(0x7f0000000140), 0x4200, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x4]}, {0x406, 0x4, 0xa8, 0x6}}, 0x7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xc000}, {[0x4, 0x6, 0xfff, 0x90]}, 0x8, 0xa, &(0x7f0000000380)=""/10}) ioctl$SIOCAX25ADDFWD(r10, 0x89ea, &(0x7f0000000440)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1.205210864s ago: executing program 3 (id=2651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0xfffffffffffffe55) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x9}}, 0xe, 0x9, 0x2, 0x1, 0x0, 0x7, 0x40}, &(0x7f0000000240)=0x9c) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0xc2e7, 0x206, 0x3, 0x6c040000, r2}, 0x10) 1.031328175s ago: executing program 2 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x332, 0x0, 0x2, 0x9a, 0x6, 0x101, 0x834e, 0x6, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) close(r6) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b040000000000000000020000001c00048018000180080001006c6f67000c00028008000640000000210900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x20000080) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) sendto$packet(r3, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0x3) 1.030143581s ago: executing program 0 (id=2654): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FICLONE(r0, 0x40049409, r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getrule={0x14, 0x22, 0x10, 0x70bd2a, 0x8, {}, ["", "", "", ""]}, 0x14}}, 0x2c004841) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000001c0)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x7, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010100]}, 0x2c) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}}, 0x20}}, 0x40) (async) r3 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) bind$nfc_llcp(r3, &(0x7f0000000300)={0x27, r6, 0xffffffffffffffff, 0x4, 0x4, 0x1, "fbac719d331ba20da53168eb9360640fe4b5b59ecf550f5350e9d5cc4d495dec40ddc4e3a5ffc8440bdcffeec89003b2a70ee1096f074b96c40df623e6f45f", 0x1d}, 0x60) 839.369163ms ago: executing program 0 (id=2657): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r2, 0x10800, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, 0x0, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x25dfdc02, {0x0, 0x0, 0x74, r2, 0x10800, 0x45007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 838.894121ms ago: executing program 2 (id=2658): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000040)=0x80000001, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1000}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 821.669339ms ago: executing program 1 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0xc5, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, @isdn={0x22, 0xf9, 0x84, 0x7, 0x5}, @sco, @l2={0x1f, 0x9, @none, 0x0, 0x2}, 0xb, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x400000000005645, 0x60}) r7 = accept4$packet(r5, 0x0, &(0x7f0000000080), 0x80000) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000200)=@req3={0xd, 0x8, 0x82e5, 0xb1, 0x8, 0x9, 0x100}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0xc5, 0x4) (async) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={0x0, @isdn={0x22, 0xf9, 0x84, 0x7, 0x5}, @sco, @l2={0x1f, 0x9, @none, 0x0, 0x2}, 0xb, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x400000000005645, 0x60}) (async) accept4$packet(r5, 0x0, &(0x7f0000000080), 0x80000) (async) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000200)=@req3={0xd, 0x8, 0x82e5, 0xb1, 0x8, 0x9, 0x100}, 0x1c) (async) 720.109711ms ago: executing program 0 (id=2661): r0 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400add527323d472545b45602117f9affff81000000ff0000f03ac71002000000fffffffffefffbffffe7ee000000000000000002000000000000000000006587f7000000000000000000000000008000000000", 0x58}, {&(0x7f0000000380)="f4b7716a82c9e7ac1d617a2da76aa12fa925d4a5c0a19890f0ef4ffff604080daf011c148b10298774295c9f7cb8110658a28c997dc8023dab743435cd5fd5a15a6009db1f82eab6d83fae89f2f9d978587df703eb401abac1c5b8ab62e8f35ac69c7237a98a49578cb5b5d08e1787866161f676067ab441556774eb25068dbb5f8f0e97feed9faa87af4c6e4dac6321413520f0b55b40bbbe03ef424d82e6b76743025332bccddbf2e2b9e076fbf4671e267e12b7a6d05238ff0949131e4b79a2ddddddf8bbb21530b0321fd9c03fd79007e2fc1014e062fe93a020", 0xdc}, {&(0x7f0000000080)="93f3f5452a92c9d79f774d802c8ddc5f0819ff69e5e5abef5a56d236e280026b8119fbe87aaea20b91af663b44b28f0fbd3e82ff87da084982323d6298a11f175ba6612a7f732acdfcf30147e8ade68a6929bd21fb2a54b2ff33debb56a6ce7049230f6da091384ce9c4df7dd9912303a475b4c4a972f30c93c2fe4652faab22a0d1c4277ce13cf8e21d6166b3a3346b2d412931e11a89ac25ab764312f203b0edcf575d885db91c1104000000000000007a350beb0eb228fc377bfa056658ecdbabfe6c496711ba2a32eb422178d0c92547fc65fc5fd8cb39f357bb83c09282dd1038357178b0fe90e52bb8005c0400f6a99e", 0xf3}], 0x3) 719.618575ms ago: executing program 2 (id=2662): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x8918, 0x0) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r0, 0x1) close(0x4) 688.869493ms ago: executing program 1 (id=2663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 679.200977ms ago: executing program 0 (id=2664): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x800000000ff, 0x0) unshare(0x22020400) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 604.019708ms ago: executing program 4 (id=2665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x953}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}}, 0x0) 600.309765ms ago: executing program 2 (id=2666): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000940)={0x50, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x4) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, r7, 0x305, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r5}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123a00000200009500000000000059"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000170a010200"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000111401090000000000000000080005"], 0x18}}, 0x0) 536.357844ms ago: executing program 4 (id=2667): r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) 483.878349ms ago: executing program 1 (id=2668): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x28) openat$cgroup_ro(r2, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005526a7b000000000000000063012100000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$cgroup_int(r2, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300f8ffffffffffff0500000008000300", @ANYRES32=r7], 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r9, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6803e525}]}, 0x24}}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @private}, &(0x7f0000000380)=0xc) ioctl$int_out(r4, 0x5460, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 482.990437ms ago: executing program 0 (id=2669): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) close(r4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000400001304"], 0x0, 0x6c, 0x0, 0x1}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@bridge_delneigh={0x30, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x0, 0x2a, 0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xc00800}]}, 0x30}, 0x1, 0x0, 0x0, 0xcf925bd3255dfb95}, 0x4000844) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@bridge_delneigh={0x30, 0x1d, 0x200, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x0, 0x2a, 0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0xc00800}]}, 0x30}, 0x1, 0x0, 0x0, 0xcf925bd3255dfb95}, 0x4000844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 471.772069ms ago: executing program 4 (id=2670): r0 = socket$inet(0x2, 0x2000080001, 0x84) (async) r1 = socket$kcm(0x29, 0x0, 0x0) (async) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2717, 0x0, &(0x7f0000000280)) (async) sendmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000000)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)="ef10515819d494737609a344243a1f076cad4943b2eeb9f5f6f41bbe6b502a1e43cb5337d2397cec7738e991297fb4e425017c58159bc0ae3a1665370d25668688f880889d0b4f433f6b1d1b5b3ba3b93fb5594de3d6", 0x56}, {&(0x7f0000000300)="291724aabfa939c14c4c811688611e065ebbe46ce8db9f9ec37191f251c11c6704c723212fa530c186340e2dfbc0828957bc9ebb61670b4272e7bf572e021afb1e9860c7a8f2e7979fae2726abda082a5bb9131ab941bf00c884bb231a941017bb67030a274b969da29a87977d159169f065ff89013ae2b2c82654cc4bdd76141e20acb00012763862229232ce71c1ac30c2ffd2515c07921ad820272b20b0a0dc331f339a23d3c804e640e05746a040a79d769f155b24035bb3b98eb0aa6af31fd34d6abcbb128af34b2c47be3c8fa098474a0af24185", 0xd7}, {&(0x7f0000000400)="28d848512f50b2060ba8d9baa4330ccb2f31aa867909dfbe9856e9229b8866cd4e2b2231e8f02480ba5d533f73ac1d141efabeb6e8d86caa2f63d79e64352ff0181caf08e2cbd6843cdf2de519a731e05734bbd73f2e2f8ccbab24f3c1eb8a3045c6", 0x62}, {&(0x7f0000000480)="a25ff7972c95bd4ab981b0a05eb15ddc320aa33741cbc835e97d5be8302f5585e171e21f2896b9b4c15f3c00e5ac979104887cd1c881a66de3b2cb370c37fba53a84270dab0369e823abd7a8b3a6dfeab4dffff44999ef5d632ec30c6cab0d7163e7b6377d61fb89273b8896d1b780f84627f44e6b0fa327f012ee808b3479a9cd5d65adb50ae8fa5ae635a96dfa7c6c3f1ed923d54cb1d35b4842cdf2763511a4c4aa56ef09c08077b6e088063819368c0cfca45eac8e10890028faa82b301f0c5c228e0d1e4011acdabee722c095a7f19369a4f47d5bab20f560c70cb4b3acddf42a16808ef5e22f8866c352999c801ab567adbb93110a1a", 0xf9}], 0x4, &(0x7f00000005c0)=[{0x90, 0x110, 0x0, "ba6c12ce51154b2065c07b52d2d04efd0013ce9476280334054a2f4df7ea058a8235ff7271914e5ce49c564f080336577733f02f52a6c8fe95cbab9d006db168f417c0f833cdb984fdf722e36e120fab5a0a6b2fd7b5c1da094d3fc69d3c8086fc1155e9b747b337cc1cfad0f0be21fc51acf6abb166c797b3ae2a"}, {0x18, 0x2, 0x7, "f5"}], 0xa8}, 0x4000814) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) listen(r0, 0x4) writev(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) 378.110312ms ago: executing program 4 (id=2671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e22, 0xb88f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x380000}], 0x2c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) 275.122877ms ago: executing program 1 (id=2672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r2, 0x6d, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x8) (async) socketpair(0x27, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$ax25(r6, &(0x7f0000000180)={{0x3, @null}, [@rose, @remote, @null, @rose, @rose, @netrom, @default, @netrom]}, &(0x7f0000000200)=0x48, 0x80000) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x40fa1f24de734a8f, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x4844) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) (async) getsockopt$SO_J1939_SEND_PRIO(r8, 0x6b, 0x3, &(0x7f0000000480), &(0x7f0000000540)=0x4) 271.791236ms ago: executing program 3 (id=2673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e0, 0x29, 0x8, 0x70bd2b, 0x63, {0x20}, [@generic="cf0e260f6a0dd93740285eb849a7ce2a7397c5122b3eb3dcfe989653ce410d199232c60ada014a2d8b7baf3baf08cf0f6f727ef5bfebb5eb89eb251888748cda893840bb82767f5181b70483fee623fb3698aa3e7c834a6d96af35789f99646aa6ae5b18c9b6167a5bac5675f3688befe427826d4ac842431b8b3e395e1dece19342a286586300d1a87f31eb06d44e6919fe9d7c24f4c5fa981d80b4814d84db119a3d69319cdd0b1e71fc98baf24a3839c115ef0c92bdf87680e9461569842644cfadb54a4eee898104082be4ae", @nested={0x5f, 0x127, 0x0, 0x1, [@nested={0x4, 0x9c}, @generic="7bb6fe7fda9b1bc4aae41398f8978a465ab0e3bce3aa1b18c82d27d9206a6bcb488bb4bc9f5cf07c1d988c97153f8e7a6e63d25a7fb0e0f8f8990606bc99dc7f915576fc1ef51a887f399f7bb60ec3d47f81351dfe7d57"]}, @generic="065325c135b1fc", @generic="3bc6e44a8d97db42e4f413921d7f730fc6727eb952f14a3aae7dedfcd33ab005d1ca9185499df1f8a0bf24cfac486c59b40d7b38d1684c83fb374b59cb37b84fb9f4457fa9481bb2ca893366a03c1bdf3a03f63597bd9329c1e7137abd47a31e3eaa61789717b92098e49f3bbd3183c21a88c7ac38f8e3032829c78b9371f49882f970fbd2184247e1e2c7eb6ad2f620868458cd"]}, 0x1e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000800)) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4000, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x5, 0x100}}}}}}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0xa}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @multicast, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffc, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x86dd, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x5, 0x100, @val=0x80}}}}}}}}, 0x3e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'veth1_to_team\x00'}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000780)="263abd3d3598ff4dc870bd6688a8640888a85ea7d1c80f1a4de3c5890f4cdabca1d9d1d247589f0c9e9fdbd0b7027ac06ffc37c31b9563154b4841dbcb79ba2201455523de674269d25932815b6e4cffb3b822f41f6239ea1a31", 0x0, 0x1200, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000700)="f39ef94d7d16891bd6550183fe1b034e65f413c30250ecb0ebdbffff15df5faa3dc17f729340c4ba7677cf80020000b4"}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@multicast2, @loopback, 0xffffffff, 0xffffffff, 0x7, 0x9, {@mac=@random="3b4c52fb5365", {[0xff, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x50, 0x1, 0xe, 0x9cd4, 0x0, 0xffff, 'veth0_to_team\x00', 'ip_vti0\x00', {}, {0xff}, 0x0, 0x202}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @empty, @local, @multicast2, 0x8}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x20, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, {}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 'veth0_to_batadv\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3f}, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 260.545131ms ago: executing program 2 (id=2674): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x2) (rerun: 64) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000001100)=""/251, &(0x7f0000001200)=0xfb) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 199.375669ms ago: executing program 4 (id=2675): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000240)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0xe000000}]}]}}, 0x0, 0x42}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x100, 0x6, {{0xf, 0x4, 0x3, 0x5, 0x3c, 0x67, 0x0, 0x6, 0x29, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0x27, 0xa6, [@broadcast, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote]}]}}}}}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xd, &(0x7f0000000400)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x5, 0xb, 0x2}, {0x0, 0x3, 0x5, 0x8}, {0x2, 0x4, 0x7, 0x4}, {0x4, 0x1, 0x6, 0x1}], 0x10, 0x81}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0xb, &(0x7f0000000180)=""/11, 0x41100, 0x20, '\x00', r2, 0x18, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x3, 0xa}, 0x10, 0x1a628, r3, 0x8, &(0x7f0000000640)=[r4], &(0x7f0000000680)=[{0x5, 0x1, 0xa}, {0x5, 0x5, 0x64, 0x2}, {0x0, 0x5, 0x0, 0x9}, {0x0, 0x1, 0xd, 0x4}, {0x1, 0x4, 0x7, 0x5}, {0x0, 0x1, 0x7, 0x4}, {0x2, 0x5, 0xc, 0x2}, {0x1, 0x2, 0xb, 0x1}], 0x10, 0x2df}, 0x94) mmap(&(0x7f00005d3000/0x3000)=nil, 0x3000, 0x0, 0x4010, r4, 0x818d0000) 143.378587ms ago: executing program 1 (id=2676): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000480)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x8}, 0x2) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000f80)=@broute={'broute\x00', 0x20, 0x6, 0x90, [0x2000000000, 0x100000000000000, 0x200000010000, 0x2, 0x0, 0x2000000005c0], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000080000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000ffffffff00"/131]}, 0xfb) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x3, 0x352, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x8, 0xdada, 'ipvlan0\x00', 'syzkaller0\x00', 'veth1_to_bond\x00', 'geneve1\x00', @random="c551c85c5c06", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8e}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{0x11, 0x17, 0x889f, 'netdevsim0\x00', 'veth1\x00', 'ip_vti0\x00', 'vlan1\x00', @multicast, [0xff, 0xff, 0xff, 0x4bff6b843611968e, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff], 0xae, 0xae, 0xde, [@devgroup={{'devgroup\x00', 0x0, 0x18}, {{0x1, 0x8000, 0x61cf, 0x524, 0x7}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x5, 0x22, 0x805, 'ip_vti0\x00', 'gre0\x00', 'nr0\x00', 'batadv_slave_0\x00', @random="96b0a74097f8", [0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xe6, 0x116, [], [@common=@nflog={'nflog\x00', 0x50, {{0xf, 0x1, 0x0, 0x0, 0x0, "2ef9cd15dd7f76d9fb10f4c684370de63aad06f131346fa9778c84caa1200ff6e665d5a7e760e1aade9459d8daab72bc35da720f226796947c7c4e263a97ba68"}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x3ca) 104.547984ms ago: executing program 4 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000006895a0192e1d37e0010003704ffffff710000000400000000", @ANYRES32=r5, @ANYBLOB="c3040500000000004c0012800b00010067726574617000003c0002800400120005001700d900000008000500060000003efe0600ac141427060018000500000005000900b5000000080014000400000004001200"], 0x6c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="54fdff00", @ANYRES16=r4, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010004000000fbdbdf2501000000080001000300000014000480050003000100000005000300060000000800020002000000e0b82d712c6fa41781967402eae62c814c9e3e4754c2b97e1da681759220c42fdaef2908c288aa033418eb9b16194351bc9ee748e8db2b97acf285075ef36a94a7139a1af12a3123b3adc86105530fb8dd992f1033a9ac577e"], 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) (async) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 84.623701ms ago: executing program 3 (id=2678): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket(0x2b, 0x809, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x49}, @TCA_IFE_METALST={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000400)={r1, r1, 0x6, 0x0, 0x0, 0x9, 0xfd, 0xc48, 0x1012, 0xc3, 0x1, 0x7, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="000000000439010467656e657665010004000e000000000000000000"], 0x40}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff81000e00000406f8dd0a47d1246991e31e00df6118e999b2d28ccd0163c8c44d5ddd10d4b908032a5be76c34ad97397632af3095f689fa5e8707475c3ef4b6230cfe52fbee880f08526bc779a96a3b43e37bd8247f2665d64d72911e8a1554cc110d7642a2fbd15e3e0cc96f"], &(0x7f0000000180)={0x1, 0x2, [0x9ba, 0x7ad, 0xf8f, 0x131]}) 39.943512ms ago: executing program 2 (id=2679): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d00104c250002000f00000017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x4c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x4, 0x1, 0x8, 0x7, 0x1, 0x9, 0x5, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) (async) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040), 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040), 0x1, 0x40800) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1}, 0x10020) 35.003832ms ago: executing program 0 (id=2680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, 0xac6a3b6d1feaaf8b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x38}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 0s ago: executing program 1 (id=2681): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) getsockname$packet(r1, 0x0, &(0x7f0000000480)) (async) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4ea0, @broadcast}, 0x10) (async) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000004c0)=0x3, 0x4) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000e4e0e47ca47c2080045000024006800e000000100004e2000109078223d00"/50], 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x1, {0xa, 0x4e21, 0x80000001, @loopback, 0xffffffff}}}, 0x32) (async) close(r2) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device macvlan2 [ 113.666387][ T7233] team0: Device macvlan2 is already an upper device of the team interface [ 113.718607][ T7241] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.738407][ T7241] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 113.802310][ T7241] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 113.826620][ T7241] bond2: (slave vcan0): making interface the new active one [ 113.916068][ T7241] vcan0: entered promiscuous mode [ 113.925217][ T7241] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 114.020972][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 114.061632][ T7256] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.341'. [ 114.160877][ T7261] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 114.329995][ T7272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.337545][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 114.344855][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 114.352226][ T7272] IPv6: NLM_F_CREATE should be set when creating new route [ 114.567425][ T7275] syzkaller0: entered promiscuous mode [ 114.573041][ T7275] syzkaller0: entered allmulticast mode [ 116.108162][ T7325] netlink: 'syz.4.357': attribute type 4 has an invalid length. [ 116.184133][ T7322] vlan1: entered allmulticast mode [ 116.189835][ T7322] bond0: entered allmulticast mode [ 116.209543][ T7322] bond_slave_0: entered allmulticast mode [ 116.217721][ T7322] bond_slave_1: entered allmulticast mode [ 116.228331][ T7322] batadv0: entered allmulticast mode [ 116.293317][ T7331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.308128][ T7331] bond_slave_0: left allmulticast mode [ 116.322121][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.335156][ T7331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.344476][ T7331] bond_slave_1: left allmulticast mode [ 116.361277][ T7331] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 116.371214][ T7331] batadv0: left allmulticast mode [ 116.392520][ T7331] bond0 (unregistering): Released all slaves [ 116.429742][ T7336] tipc: Enabling of bearer rejected, failed to enable media [ 116.734907][ T7358] h: entered promiscuous mode [ 116.793977][ T7361] __nla_validate_parse: 5 callbacks suppressed [ 116.793996][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.367'. [ 116.811477][ T7363] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 116.821972][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 116.905196][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 117.194661][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'. [ 117.349450][ T7391] netlink: zone id is out of range [ 117.355407][ T7391] netlink: zone id is out of range [ 117.368156][ T7391] netlink: zone id is out of range [ 117.374217][ T7385] tipc: Enabled bearer , priority 0 [ 117.383411][ T7391] netlink: zone id is out of range [ 117.389234][ T7385] syzkaller0: entered promiscuous mode [ 117.395785][ T7391] netlink: zone id is out of range [ 117.401275][ T7385] syzkaller0: entered allmulticast mode [ 117.407662][ T7385] tipc: Resetting bearer [ 117.416078][ T7391] netlink: zone id is out of range [ 117.421500][ T7391] netlink: zone id is out of range [ 117.427883][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.373'. [ 117.437125][ T7391] netlink: set zone limit has 4 unknown bytes [ 117.610551][ T7384] tipc: Resetting bearer [ 117.639413][ T7403] atomic_op ffff888021358198 conn xmit_atomic 0000000000000000 [ 117.662000][ T7384] tipc: Disabling bearer [ 117.688640][ T7391] netlink: 68 bytes leftover after parsing attributes in process `syz.0.376'. [ 117.977490][ T7414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.380'. [ 118.289549][ T7423] netlink: 'syz.1.383': attribute type 8 has an invalid length. [ 118.367762][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 118.419949][ T7406] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 118.569167][ T7439] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 118.660121][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 118.675482][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 119.496302][ T7487] netlink: 'syz.1.396': attribute type 10 has an invalid length. [ 119.537909][ T7487] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 120.087566][ T7507] syzkaller0: entered promiscuous mode [ 120.478886][ T7526] netlink: 'syz.4.405': attribute type 10 has an invalid length. [ 121.712794][ T7575] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 121.827228][ T7570] netlink: 'syz.1.410': attribute type 4 has an invalid length. [ 121.917944][ T7570] __nla_validate_parse: 10 callbacks suppressed [ 121.917963][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 122.012682][ T7602] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.418'. [ 122.124484][ T7570] bond0: (slave bond_slave_1): Releasing backup interface [ 122.510983][ T7620] netlink: 'syz.4.422': attribute type 10 has an invalid length. [ 122.645717][ T7630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 122.661819][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 122.836295][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 123.135966][ T7620] veth0_vlan: left promiscuous mode [ 123.159298][ T7620] veth0_vlan: entered promiscuous mode [ 123.178006][ T7620] team0: Device veth0_vlan failed to register rx_handler [ 123.437637][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 123.485987][ T7665] net_ratelimit: 1 callbacks suppressed [ 123.486008][ T7665] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 123.579794][ T7672] bond3: option min_links: invalid value (18446744073709551613) [ 123.595476][ T7672] bond3: option min_links: allowed values 0 - 2147483647 [ 123.841450][ T7672] bond3 (unregistering): Released all slaves [ 124.058745][ T7676] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 124.084842][ T7664] syzkaller1: entered promiscuous mode [ 124.103984][ T7664] syzkaller1: entered allmulticast mode [ 124.309800][ T7710] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.317587][ T7712] xt_socket: unknown flags 0x50 [ 124.350618][ T7712] xt_socket: unknown flags 0x50 [ 124.355721][ T7712] xt_socket: unknown flags 0x50 [ 124.370896][ T7717] IPVS: length: 33 != 24 [ 124.385609][ T7712] xt_socket: unknown flags 0x50 [ 124.431165][ T7712] xt_socket: unknown flags 0x50 [ 124.436338][ T7712] xt_socket: unknown flags 0x50 [ 124.448707][ T7712] xt_socket: unknown flags 0x50 [ 124.468211][ T7712] xt_socket: unknown flags 0x50 [ 124.489728][ T7712] xt_socket: unknown flags 0x50 [ 124.498478][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 124.508034][ T7712] xt_socket: unknown flags 0x50 [ 124.618847][ T7725] netlink: 'syz.2.442': attribute type 178 has an invalid length. [ 124.679437][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 124.716304][ T7726] veth0: entered promiscuous mode [ 124.784763][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.441'. [ 124.812582][ T7722] veth0: left promiscuous mode [ 125.236180][ T7753] netlink: 'syz.4.452': attribute type 12 has an invalid length. [ 125.403213][ T7753] bond2: option primary_reselect: invalid value (255) [ 125.447642][ T7753] bond2 (unregistering): Released all slaves [ 125.869885][ T7795] netlink: 220 bytes leftover after parsing attributes in process `syz.2.461'. [ 126.153448][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.161282][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.250583][ T7816] netlink: 'syz.1.463': attribute type 29 has an invalid length. [ 126.397438][ T7795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.575855][ T7819] tipc: Enabling of bearer rejected, failed to enable media [ 126.602276][ T49] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.624204][ T49] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.635158][ T49] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.645063][ T49] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.727825][ T7836] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 126.753332][ T7836] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 127.127439][ T7855] ip6tnl1: entered promiscuous mode [ 127.181139][ T7861] netlink: 'syz.3.475': attribute type 21 has an invalid length. [ 127.199719][ T7861] IPv6: NLM_F_CREATE should be specified when creating new route [ 127.248240][ T7861] netlink: 'syz.3.475': attribute type 1 has an invalid length. [ 127.304549][ T7865] sctp: [Deprecated]: syz.0.477 (pid 7865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.304549][ T7865] Use struct sctp_sack_info instead [ 127.386503][ T7870] __nla_validate_parse: 6 callbacks suppressed [ 127.386521][ T7870] netlink: 40 bytes leftover after parsing attributes in process `syz.2.478'. [ 127.431388][ T7870] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 127.553228][ T7879] netlink: 'syz.3.480': attribute type 1 has an invalid length. [ 127.660995][ T7881] syzkaller0: entered promiscuous mode [ 127.666540][ T7881] syzkaller0: entered allmulticast mode [ 128.186619][ T7916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 128.230864][ T7916] netlink: 48 bytes leftover after parsing attributes in process `syz.0.489'. [ 128.256617][ T7920] openvswitch: netlink: IPv4 tun info is not correct [ 128.278871][ T7920] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 128.551071][ T7936] tipc: Failed to remove unknown binding: 66,0,0/0:3996295432/3996295433 [ 128.574674][ T7936] tipc: Failed to remove unknown binding: 66,0,0/0:3996295432/3996295433 [ 128.597971][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 128.686957][ T7939] bond2: entered promiscuous mode [ 128.692508][ T7939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.949279][ T7962] nftables ruleset with unbound set [ 129.190113][ T7976] syzkaller0: entered promiscuous mode [ 129.196889][ T7976] syzkaller0: entered allmulticast mode [ 129.297747][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 129.456363][ T7986] pim6reg: entered allmulticast mode [ 129.492330][ T7979] xt_hashlimit: size too large, truncated to 1048576 [ 129.520843][ T7987] pim6reg: left allmulticast mode [ 129.558796][ T7989] netlink: 76 bytes leftover after parsing attributes in process `syz.4.513'. [ 129.602920][ T7989] nbd: illegal input index -8454144 [ 129.778067][ T7997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.808226][ T7997] netlink: 72 bytes leftover after parsing attributes in process `syz.4.515'. [ 130.073580][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 130.083838][ T8009] netlink: 'syz.3.518': attribute type 23 has an invalid length. [ 130.155256][ T8014] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.195072][ T8008] delete_channel: no stack [ 130.568403][ T8026] netlink: 10 bytes leftover after parsing attributes in process `syz.0.524'. [ 130.857436][ T8042] netlink: 36 bytes leftover after parsing attributes in process `syz.3.529'. [ 131.143594][ T8057] netlink: 'syz.3.533': attribute type 21 has an invalid length. [ 131.202871][ T8047] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 131.398170][ T8060] netdevsim netdevsim3: Direct firmware load for r1 failed with error -2 [ 131.410556][ T8060] netdevsim netdevsim3: Falling back to sysfs fallback for: r1 [ 132.008982][ T8089] bridge_slave_1: default FDB implementation only supports local addresses [ 132.148982][ T8101] netlink: 'syz.2.545': attribute type 1 has an invalid length. [ 132.327588][ T8101] bond4: (slave bridge4): Enslaving as a backup interface with an up link [ 132.449830][ T8107] bond4: (slave bridge5): Enslaving as a backup interface with a down link [ 132.646606][ T8128] __nla_validate_parse: 9 callbacks suppressed [ 132.646627][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 132.804912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812406][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.199053][ T8164] netlink: 'syz.0.561': attribute type 1 has an invalid length. [ 133.318130][ T8171] raw_sendmsg: syz.4.563 forgot to set AF_INET. Fix it! [ 133.341992][ T8171] xt_cgroup: xt_cgroup: no path or classid specified [ 134.208550][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.576'. [ 134.290824][ T8229] netlink: 64 bytes leftover after parsing attributes in process `syz.3.581'. [ 134.390209][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 134.427613][ T8232] macvlan0: entered allmulticast mode [ 134.452205][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.474181][ T8236] netlink: 'syz.2.583': attribute type 9 has an invalid length. [ 134.518386][ T8236] netlink: 'syz.2.583': attribute type 11 has an invalid length. [ 134.531811][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.581199][ T8236] netlink: 'syz.2.583': attribute type 12 has an invalid length. [ 134.589018][ T8236] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.600668][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.652799][ T8241] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 134.664612][ T8248] netlink: 324 bytes leftover after parsing attributes in process `syz.1.587'. [ 134.675972][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.689075][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.709146][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.744076][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.784560][ T8245] syz.3.588 (8245) used greatest stack depth: 17472 bytes left [ 134.792830][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.168364][ T8262] syzkaller0: entered promiscuous mode [ 135.174031][ T8262] syzkaller0: entered allmulticast mode [ 135.555035][ T8283] netlink: 'syz.0.596': attribute type 2 has an invalid length. [ 137.348007][ T8342] netlink: 'syz.4.613': attribute type 1 has an invalid length. [ 137.400461][ T8342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.756650][ T29] audit: type=1107 audit(1775740686.628:2): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Ub9CK#vi]ԓևMYkBR,@, priority 11 [ 147.130747][ T8759] netlink: 44 bytes leftover after parsing attributes in process `syz.2.723'. [ 147.178246][ T8759] netlink: 'syz.2.723': attribute type 30 has an invalid length. [ 147.561255][ T8776] netlink: 'syz.2.729': attribute type 4 has an invalid length. [ 147.596098][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 147.625590][ T8781] syzkaller1: entered promiscuous mode [ 147.631619][ T8781] syzkaller1: entered allmulticast mode [ 147.988172][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 148.306074][ T8815] ip6t_srh: unknown srh match flags 4000 [ 148.370771][ T8820] x_tables: duplicate entry at hook 3 [ 148.801651][ T8835] Unsupported ieee802154 address type: 0 [ 148.901190][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 149.234647][ T8857] x_tables: duplicate underflow at hook 2 [ 149.254453][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 149.674495][ T8870] syzkaller0: entered promiscuous mode [ 149.680137][ T8870] syzkaller0: entered allmulticast mode [ 149.711938][ T8885] netlink: 'syz.3.754': attribute type 1 has an invalid length. [ 149.719681][ T8885] netlink: 'syz.3.754': attribute type 11 has an invalid length. [ 150.034351][ T8901] xt_policy: too many policy elements [ 151.259783][ T8925] __nla_validate_parse: 3 callbacks suppressed [ 151.259802][ T8925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'. [ 151.378491][ T8925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.765'. [ 151.393350][ T8938] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 151.715989][ T8954] syzkaller0: entered promiscuous mode [ 151.745965][ T8954] 0: reclassify loop, rule prio 0, protocol 800 [ 151.873823][ T8962] syzkaller1: entered promiscuous mode [ 151.879430][ T8962] syzkaller1: entered allmulticast mode [ 152.223077][ T8978] ip6t_REJECT: ECHOREPLY is not supported [ 152.260202][ T8978] nbd: must specify an index to disconnect [ 152.688425][ T9010] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 152.711838][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.2.789'. [ 152.821335][ T9018] netlink: 'syz.1.792': attribute type 9 has an invalid length. [ 152.829673][ T9018] netlink: 'syz.1.792': attribute type 11 has an invalid length. [ 152.838540][ T9018] netlink: 'syz.1.792': attribute type 12 has an invalid length. [ 152.847227][ T9018] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.792'. [ 152.857519][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 153.099813][ T9031] bond0: entered promiscuous mode [ 153.106381][ T9031] bond_slave_0: entered promiscuous mode [ 153.119361][ T9031] bond_slave_1: entered promiscuous mode [ 153.130175][ T9031] batadv0: entered promiscuous mode [ 153.136783][ T9031] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 153.168327][ T9031] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 153.193900][ T9031] hsr1: entered promiscuous mode [ 153.198973][ T9031] hsr1: entered allmulticast mode [ 153.206889][ T9031] bond0: entered allmulticast mode [ 153.212271][ T9031] bond_slave_0: entered allmulticast mode [ 153.218165][ T9031] bond_slave_1: entered allmulticast mode [ 153.224296][ T9031] batadv0: entered allmulticast mode [ 153.230568][ T9031] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.257638][ T9031] bond0: left promiscuous mode [ 153.280906][ T9031] bond_slave_0: left promiscuous mode [ 153.287042][ T9031] bond_slave_1: left promiscuous mode [ 153.317069][ T9031] batadv0: left promiscuous mode [ 153.484461][ T9046] Cannot find add_set index 2 as target [ 153.717012][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 153.753870][ T9059] netlink: 112 bytes leftover after parsing attributes in process `syz.1.804'. [ 153.788909][ T9062] netlink: 52 bytes leftover after parsing attributes in process `syz.2.805'. [ 154.030104][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.810'. [ 154.064606][ T9078] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 154.139169][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.810'. [ 154.202148][ T9078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.241863][ T9078] bond3: (slave veth5): Enslaving as an active interface with a down link [ 154.272143][ T9078] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.279434][ T9078] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 154.454095][ T9097] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 154.646493][ T9109] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 154.752423][ T9117] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 154.779593][ T9117] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.863032][ T9119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.573294][ T9104] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.725222][ T9142] __nla_validate_parse: 3 callbacks suppressed [ 157.725241][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 157.860906][ T9155] tipc: New replicast peer: 255.255.255.255 [ 157.878636][ T9155] tipc: Enabled bearer , priority 10 [ 157.945405][ T9155] tipc: Enabling of bearer rejected, already enabled [ 157.954493][ T9157] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.831'. [ 158.092287][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.833'. [ 158.183094][ T9169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.834'. [ 158.222552][ T9172] netem: incorrect gi model size [ 158.235046][ T9172] netem: change failed [ 158.367685][ T9180] sctp: [Deprecated]: syz.2.837 (pid 9180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.367685][ T9180] Use struct sctp_sack_info instead [ 158.519939][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 158.586112][ T9196] Bluetooth: MGMT ver 1.23 [ 159.403261][ T9221] "syz.0.851" (9221) uses obsolete ecb(arc4) skcipher [ 159.566848][ T9253] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 159.663012][ T9256] netlink: 32 bytes leftover after parsing attributes in process `syz.2.860'. [ 159.691307][ T9253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.819153][ T9253] bond1: (slave bridge2): making interface the new active one [ 159.872133][ T9253] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 159.928246][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 159.962422][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 159.992060][ T9279] pim6reg527: entered allmulticast mode [ 160.001269][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.862'. [ 160.131083][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 160.171982][ T9286] netlink: 'syz.3.867': attribute type 11 has an invalid length. [ 160.180059][ T9286] netlink: 132 bytes leftover after parsing attributes in process `syz.3.867'. [ 160.213562][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 160.291289][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 160.405295][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 160.472508][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 160.635605][ T9274] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 160.642051][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 160.649523][ T5835] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 161.704375][ T9363] netlink: 'syz.4.884': attribute type 2 has an invalid length. [ 161.734171][ T9363] netlink: 'syz.4.884': attribute type 2 has an invalid length. [ 162.377391][ T9408] openvswitch: netlink: Missing key (keys=40, expected=100) [ 162.399035][ T9397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.431341][ T9405] macvlan0: entered promiscuous mode [ 162.436947][ T9405] macvlan0: entered allmulticast mode [ 162.446408][ T9405] bond2: (slave macvlan0): Opening slave failed [ 162.700745][ T9425] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 162.861436][ T9427] veth0_to_team: entered allmulticast mode [ 163.518067][ T9459] __nla_validate_parse: 20 callbacks suppressed [ 163.518084][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 163.631638][ T9476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.913'. [ 163.749496][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 163.759088][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 164.571998][ T9472] vlan3: entered allmulticast mode [ 164.578288][ T9472] bridge6: entered allmulticast mode [ 165.018562][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 165.182587][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.928'. [ 165.242780][ T9522] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.814336][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 166.077613][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 166.106998][ T9576] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 167.418697][ T9597] Cannot find add_set index 0 as target [ 167.458435][ T9604] x_tables: duplicate entry at hook 1 [ 167.477052][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 167.522234][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.946'. [ 167.852484][ T9631] validate_nla: 2 callbacks suppressed [ 167.852502][ T9631] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 167.981326][ T9637] bridge_slave_0 (unregistering): left allmulticast mode [ 167.989253][ T9637] bridge_slave_0 (unregistering): left promiscuous mode [ 167.999912][ T9637] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.027206][ T9638] macvlan2: entered promiscuous mode [ 168.032846][ T9638] macvlan2: entered allmulticast mode [ 168.039300][ T9638] bond4: entered promiscuous mode [ 168.046893][ T9638] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.076136][ T9638] bond4: left promiscuous mode [ 168.408232][ T9657] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 168.440998][ T9660] dvmrp0: entered allmulticast mode [ 168.538773][ T9662] __nla_validate_parse: 5 callbacks suppressed [ 168.538792][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 168.651738][ T9662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.969'. [ 168.674667][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 168.993502][ T9684] x_tables: duplicate underflow at hook 3 [ 169.023697][ T9687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.976'. [ 169.069641][ T9687] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 169.261002][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'. [ 169.308783][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 169.322866][ T9703] sctp: [Deprecated]: syz.4.983 (pid 9703) Use of int in maxseg socket option. [ 169.322866][ T9703] Use struct sctp_assoc_value instead [ 169.354359][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.984'. [ 169.369815][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 169.382290][ T9701] netlink: 13 bytes leftover after parsing attributes in process `syz.2.984'. [ 169.394871][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 169.406176][ T9703] netlink: 'syz.4.983': attribute type 15 has an invalid length. [ 169.415104][ T9705] netlink: 'syz.3.985': attribute type 2 has an invalid length. [ 169.452915][ T9704] veth3: entered promiscuous mode [ 169.488053][ T9701] veth5: entered promiscuous mode [ 169.502431][ T9703] netlink: 'syz.4.983': attribute type 15 has an invalid length. [ 169.777588][ T9718] syzkaller0: entered promiscuous mode [ 169.784898][ T9718] syzkaller0: entered allmulticast mode [ 169.900061][ T9735] xt_hashlimit: size too large, truncated to 1048576 [ 170.950871][ T9733] tunl0: entered promiscuous mode [ 170.957550][ T9733] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 170.973206][ T9739] bridge_slave_0 (unregistering): left allmulticast mode [ 170.986015][ T9739] bridge_slave_0 (unregistering): left promiscuous mode [ 171.005814][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.096499][ T9740] bridge0: entered promiscuous mode [ 171.109260][ T9740] ip6gretap0: entered promiscuous mode [ 171.120111][ T9740] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 171.134306][ T9740] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 171.394596][ T9761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.660883][ T9782] F: renamed from ip6gre0 [ 171.676055][ T9782] F: entered allmulticast mode [ 172.418551][ T9841] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 172.426581][ T9841] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 172.550084][ T9852] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 173.097701][ T9855] veth0_virt_wifi: mtu less than device minimum [ 175.293772][ T9831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.544451][ T9875] __nla_validate_parse: 18 callbacks suppressed [ 175.544469][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.563967][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.576008][ T9874] tipc: Enabling of bearer rejected, failed to enable media [ 175.599116][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.609350][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.650690][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.725805][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 175.758250][ T9880] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1034'. [ 175.953503][ T9896] netlink: 'syz.1.1039': attribute type 13 has an invalid length. [ 175.974116][ T9896] netlink: 'syz.1.1039': attribute type 58 has an invalid length. [ 175.991176][ T9896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1039'. [ 176.175078][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 176.232854][ T9914] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1044'. [ 176.564986][ T9928] netlink: 'syz.0.1049': attribute type 83 has an invalid length. [ 176.827864][ T9938] syzkaller0: entered promiscuous mode [ 176.847641][ T9938] syzkaller0: entered allmulticast mode [ 176.891651][ T9938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.917099][ T9938] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 177.184108][ T9964] openvswitch: netlink: Flow actions attr not present in new flow. [ 177.220862][ T9966] openvswitch: netlink: IPv4 tun info is not correct [ 177.544486][ T9984] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 177.646018][ T9987] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 178.327131][T10004] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20003 [ 178.424131][T10007] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:0 [ 180.634835][T10014] __nla_validate_parse: 5 callbacks suppressed [ 180.634855][T10014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1072'. [ 180.657943][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1073'. [ 180.701508][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'. [ 180.841278][T10025] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.860062][T10028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.901119][T10025] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 180.929677][T10025] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1076'. [ 180.958431][T10025] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1076'. [ 180.987788][T10025] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 181.033785][T10025] netlink: 'syz.4.1076': attribute type 8 has an invalid length. [ 181.058340][T10025] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1076'. [ 181.689017][T10075] veth0_to_team: entered allmulticast mode [ 181.711295][T10080] netlink: 'syz.3.1091': attribute type 5 has an invalid length. [ 182.026696][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 182.052202][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'. [ 182.115095][T10104] C: renamed from lo [ 182.120834][T10104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 182.302103][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1103'. [ 182.342208][T10113] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1103'. [ 182.422642][T10113] veth3: entered promiscuous mode [ 182.498691][T10130] syzkaller0: entered promiscuous mode [ 182.558781][T10130] syzkaller0: entered allmulticast mode [ 182.587470][T10132] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 182.624498][T10132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.672135][T10132] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 182.791396][T10132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 182.803544][T10132] bond5: (slave bond6): Enslaving as an active interface with a down link [ 184.263860][T10175] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 184.289134][T10172] netlink: 'syz.0.1118': attribute type 83 has an invalid length. [ 184.404653][T10184] "syz.3.1123" (10184) uses obsolete ecb(arc4) skcipher [ 184.856484][T10209] netlink: 'syz.0.1128': attribute type 1 has an invalid length. [ 185.012160][T10214] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.069541][T10220] netlink: 'syz.4.1131': attribute type 4 has an invalid length. [ 185.122429][T10220] .`: renamed from bond0 (while UP) [ 185.576609][T10254] netlink: 'syz.1.1143': attribute type 3 has an invalid length. [ 185.648654][T10255] __nla_validate_parse: 11 callbacks suppressed [ 185.648671][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 185.691989][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 185.708711][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1144'. [ 185.775658][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 185.855095][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 185.878720][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 185.945765][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 185.989188][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 186.038629][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 186.069744][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 186.376252][T10279] erspan0: entered promiscuous mode [ 186.404016][T10279] macvtap1: entered promiscuous mode [ 186.411762][T10279] macvtap1: entered allmulticast mode [ 186.418697][T10279] erspan0: entered allmulticast mode [ 186.704118][T10306] netlink: 'syz.1.1161': attribute type 2 has an invalid length. [ 186.785548][T10310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.945359][T10321] netlink: 'syz.1.1167': attribute type 51 has an invalid length. [ 186.972941][T10323] netlink: 'syz.3.1168': attribute type 3 has an invalid length. [ 187.065865][T10325] netlink: 'syz.2.1165': attribute type 5 has an invalid length. [ 187.179621][T10338] ipt_ECN: cannot use operation on non-tcp rule [ 187.383443][ T24] IPVS: starting estimator thread 0... [ 187.389599][T10349] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 187.481044][T10351] IPVS: using max 29 ests per chain, 69600 per kthread [ 187.611383][T10358] xt_hashlimit: size too large, truncated to 1048576 [ 187.676972][T10360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.744992][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.962493][T10367] netlink: 'syz.2.1179': attribute type 3 has an invalid length. [ 188.113830][T10374] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 188.133953][T10374] veth0_vlan: left promiscuous mode [ 188.152844][T10374] veth0_vlan: entered promiscuous mode [ 188.171332][T10374] team0: Device veth0_vlan failed to register rx_handler [ 188.676607][T10399] x_tables: duplicate entry at hook 3 [ 188.908640][T10408] netlink: set zone limit has 4 unknown bytes [ 189.070857][T10419] netlink: 'syz.3.1196': attribute type 13 has an invalid length. [ 189.105172][T10419] veth0_macvtap: left promiscuous mode [ 189.141387][T10419] macvtap0: entered allmulticast mode [ 189.190110][T10419] macvtap0: refused to change device tx_queue_len [ 189.607829][T10441] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 189.782550][T10451] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 189.808418][T10451] netlink: 'syz.2.1206': attribute type 2 has an invalid length. [ 189.908211][T10456] veth0: entered promiscuous mode [ 189.916505][T10454] veth0: left promiscuous mode [ 189.985301][ T24] IPVS: starting estimator thread 0... [ 190.083062][T10462] IPVS: using max 30 ests per chain, 72000 per kthread [ 190.306897][T10473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.333397][T10474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.402483][T10476] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 190.411662][T10476] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 190.801613][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 191.078905][T10514] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.110638][T10515] __nla_validate_parse: 61 callbacks suppressed [ 191.110656][T10515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1226'. [ 191.155647][T10514] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 191.167745][T10514] bond8 (unregistering): Released all slaves [ 191.378412][T10529] tipc: Enabling of bearer rejected, failed to enable media [ 191.389054][T10527] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1229'. [ 191.425912][T10527] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1229'. [ 191.715887][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'. [ 191.805775][T10553] vlan0: entered allmulticast mode [ 191.815986][T10553] bridge4: entered allmulticast mode [ 191.825302][T10559] validate_nla: 5 callbacks suppressed [ 191.825317][T10559] netlink: 'syz.1.1237': attribute type 15 has an invalid length. [ 191.913998][T10562] s5: renamed from vlan1 (while UP) [ 191.924680][T10564] bridge4: port 1(erspan0) entered blocking state [ 191.931432][T10564] bridge4: port 1(erspan0) entered disabled state [ 192.104168][T10574] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1240'. [ 192.122715][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 192.138134][T10576] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 192.141673][T10578] netlink: 'syz.4.1242': attribute type 18 has an invalid length. [ 192.170354][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 192.172259][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1241'. [ 192.202181][ T12] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 192.242487][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.256045][T10576] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1241'. [ 192.280180][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.310000][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 192.320953][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.469300][T10598] : entered promiscuous mode [ 192.885962][T10624] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 192.913428][T10616] netlink: 'syz.4.1253': attribute type 4 has an invalid length. [ 193.262050][T10645] sctp: [Deprecated]: syz.1.1262 (pid 10645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.262050][T10645] Use struct sctp_sack_info instead [ 193.283488][T10645] GUP no longer grows the stack in syz.1.1262 (10645): 200000003000-20000000a000 (200000001000) [ 193.296761][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.1.1262 Not tainted syzkaller #0 PREEMPT(full) [ 193.296792][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.296811][T10645] Call Trace: [ 193.296820][T10645] [ 193.296828][T10645] dump_stack_lvl+0xe8/0x150 [ 193.296865][T10645] __get_user_pages+0x2453/0x29d0 [ 193.296897][T10645] ? __lock_acquire+0x6b5/0x2cf0 [ 193.296943][T10645] ? __gup_longterm_locked+0xc4e/0x1630 [ 193.296974][T10645] ? down_read_killable+0x1bb/0x340 [ 193.297010][T10645] __gup_longterm_locked+0xdcf/0x1630 [ 193.297068][T10645] gup_fast_fallback+0x1d82/0x22e0 [ 193.297133][T10645] ? __pfx_gup_fast_fallback+0x10/0x10 [ 193.297161][T10645] ? futex_unqueue+0x22/0x240 [ 193.297185][T10645] ? futex_unqueue+0x22/0x240 [ 193.297207][T10645] ? is_valid_gup_args+0x11f/0x200 [ 193.297241][T10645] ? get_user_pages_fast+0x4d/0xb0 [ 193.297274][T10645] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 193.297306][T10645] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 193.297332][T10645] iov_iter_get_pages2+0x5e/0xa0 [ 193.297359][T10645] __se_sys_vmsplice+0x7b3/0x1490 [ 193.297401][T10645] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 193.297421][T10645] ? __pfx_futex_wait+0x10/0x10 [ 193.297483][T10645] ? sctp_getsockopt+0xb16/0xb90 [ 193.297507][T10645] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 193.297565][T10645] do_syscall_64+0x14d/0xf80 [ 193.297601][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.297622][T10645] ? clear_bhb_loop+0x40/0x90 [ 193.297648][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.297668][T10645] RIP: 0033:0x7f797d19c819 [ 193.297697][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.297715][T10645] RSP: 002b:00007f797e068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 193.297744][T10645] RAX: ffffffffffffffda RBX: 00007f797d415fa0 RCX: 00007f797d19c819 [ 193.297759][T10645] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 193.297771][T10645] RBP: 00007f797d232c91 R08: 0000000000000000 R09: 0000000000000000 [ 193.297783][T10645] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 193.297795][T10645] R13: 00007f797d416038 R14: 00007f797d415fa0 R15: 00007ffecf9316b8 [ 193.297828][T10645] [ 193.784580][T10660] syzkaller0: entered promiscuous mode [ 193.790241][T10660] syzkaller0: entered allmulticast mode [ 194.009972][T10668] xt_connbytes: Forcing CT accounting to be enabled [ 194.212054][T10678] bond0: entered promiscuous mode [ 194.218946][T10678] batadv0: entered promiscuous mode [ 194.233086][T10678] debugfs: 'hsr1' already exists in 'hsr' [ 194.238846][T10678] Cannot create hsr debugfs directory [ 194.259051][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.265755][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.299733][T10678] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 194.349602][T10678] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 194.363345][T10678] hsr1: entered promiscuous mode [ 194.368726][T10678] hsr1: entered allmulticast mode [ 194.377275][T10678] bond0: entered allmulticast mode [ 194.383824][T10678] batadv0: entered allmulticast mode [ 194.390982][T10678] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 194.400003][T10678] bond0: left promiscuous mode [ 194.405884][T10678] batadv0: left promiscuous mode [ 194.651688][T10686] syzkaller0: entered promiscuous mode [ 194.657580][T10686] syzkaller0: entered allmulticast mode [ 194.996083][T10728] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 195.427430][T10757] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 195.771217][T10779] gtp0: entered promiscuous mode [ 195.776439][T10779] gtp0: entered allmulticast mode [ 196.011460][T10788] sctp: [Deprecated]: syz.2.1306 (pid 10788) Use of int in max_burst socket option deprecated. [ 196.011460][T10788] Use struct sctp_assoc_value instead [ 196.497035][T10772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.508774][T10783] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 196.903883][T10813] veth5: entered allmulticast mode [ 197.095573][T10827] syzkaller0: entered promiscuous mode [ 197.101916][T10827] syzkaller0: entered allmulticast mode [ 197.113427][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.120478][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.127302][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.134131][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.140951][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.147743][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.154554][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.161371][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.168178][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.174986][T10827] tc action pedit offset must be on 32 bit boundaries [ 197.181823][T10827] TC_ACT_REPEAT abuse ? [ 197.401102][T10846] x_tables: duplicate underflow at hook 1 [ 197.408228][T10846] sctp: [Deprecated]: syz.0.1323 (pid 10846) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.408228][T10846] Use struct sctp_sack_info instead [ 197.814517][T10879] __nla_validate_parse: 9 callbacks suppressed [ 197.814535][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 197.954794][T10885] bond7: entered promiscuous mode [ 197.968508][T10885] bond7: entered allmulticast mode [ 198.003733][T10898] tipc: Started in network mode [ 198.008662][T10898] tipc: Node identity e0000001, cluster identity 4711 [ 198.019956][T10898] tipc: Enabling of bearer rejected, failed to enable media [ 198.053344][T10897] vcan0: entered promiscuous mode [ 198.058420][T10897] vcan0: entered allmulticast mode [ 198.384233][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'. [ 198.423801][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 198.565730][T10935] netlink: 'syz.2.1348': attribute type 3 has an invalid length. [ 198.576341][T10935] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1348'. [ 198.653970][T10944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1351'. [ 198.682049][T10944] team_slave_0: entered promiscuous mode [ 198.688008][T10944] team_slave_1: entered promiscuous mode [ 198.731271][T10944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.753326][T10944] team0: Device macvlan2 is already an upper device of the team interface [ 198.763078][T10944] team_slave_0: left promiscuous mode [ 198.768528][T10944] team_slave_1: left promiscuous mode [ 198.826845][T10953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1355'. [ 199.076054][T10968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.184504][T10968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.227607][T10973] ip6tnl0: entered promiscuous mode [ 199.249243][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 199.272643][T10971] team0: No ports can be present during mode change [ 199.286105][T10974] team0: No ports can be present during mode change [ 199.426425][T10988] netlink: 'syz.2.1367': attribute type 24 has an invalid length. [ 199.472156][T10988] netlink: 'syz.2.1367': attribute type 21 has an invalid length. [ 199.480142][T10988] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.488539][T10988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.495805][T10988] IPv6: NLM_F_CREATE should be set when creating new route [ 199.503099][T10988] IPv6: NLM_F_CREATE should be set when creating new route [ 199.510390][T10988] IPv6: NLM_F_CREATE should be set when creating new route [ 199.533154][T10996] batadv_slave_1: entered promiscuous mode [ 199.539700][T10994] syzkaller0: entered promiscuous mode [ 199.545572][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 199.552810][T10994] syzkaller0: entered allmulticast mode [ 199.576943][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1366'. [ 199.587849][T10991] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 199.744342][T10995] batadv_slave_1: left promiscuous mode [ 199.891801][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1371'. [ 200.124910][T11035] erspan0: entered promiscuous mode [ 200.209078][T11038] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 200.508523][T11059] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.562829][T11061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 200.602119][T11052] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.647306][T11052] bond7: (slave lo): Enslaving as an active interface with an up link [ 200.672022][T11052] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 200.729823][T11067] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 200.787179][T11064] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 201.253914][T11104] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 201.438555][T11109] delete_channel: no stack [ 201.447850][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 201.447863][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 201.452446][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.457101][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 201.882850][T11142] sctp: [Deprecated]: syz.2.1408 (pid 11142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.882850][T11142] Use struct sctp_sack_info instead [ 202.214985][T11160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.320902][T11166] syzkaller0: entered promiscuous mode [ 202.326441][T11166] syzkaller0: entered allmulticast mode [ 202.361803][T11166] tipc: Enabled bearer , priority 0 [ 202.371441][T11173] netlink: 'syz.2.1419': attribute type 3 has an invalid length. [ 202.379684][T11173] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 202.528999][T11163] tipc: Resetting bearer [ 202.608746][T11177] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 202.797397][T11163] tipc: Disabling bearer [ 202.809413][T11183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.973057][T11197] __nla_validate_parse: 79 callbacks suppressed [ 202.973074][T11197] netlink: 183464 bytes leftover after parsing attributes in process `syz.2.1426'. [ 203.045789][T11209] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1431'. [ 203.114200][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 203.151320][T11217] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 203.172273][T11217] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 203.206573][T11217] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 203.324844][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 203.334427][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1436'. [ 203.346965][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 203.646009][T11248] netdevsim netdevsim2 : renamed from netdevsim0 [ 203.708757][T11250] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1440'. [ 203.744761][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 204.237425][T11280] bridge4: entered allmulticast mode [ 204.256309][T11280] team0: Port device bridge4 added [ 204.474064][T11295] tipc: Failed to remove unknown binding: 66,0,0/0:3954591167/3954591168 [ 204.487748][T11295] tipc: Failed to remove unknown binding: 66,0,0/0:3954591167/3954591168 [ 204.595846][T11306] netlink: 'syz.1.1455': attribute type 11 has an invalid length. [ 204.608265][T11306] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1455'. [ 204.832791][T11308] syzkaller0: entered promiscuous mode [ 204.838304][T11308] syzkaller0: entered allmulticast mode [ 204.857119][T11326] syzkaller0: entered promiscuous mode [ 204.867438][T11326] syzkaller0: entered allmulticast mode [ 205.425150][T11337] IPVS: set_ctl: invalid protocol: 108 172.30.0.2:20003 [ 206.345969][T11344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1471'. [ 206.544342][T11370] validate_nla: 2 callbacks suppressed [ 206.544359][T11370] netlink: 'syz.1.1475': attribute type 3 has an invalid length. [ 207.194576][T11412] netlink: 'syz.1.1486': attribute type 14 has an invalid length. [ 207.238602][T11415] netlink: 'syz.2.1487': attribute type 83 has an invalid length. [ 207.272697][T11415] syzkaller0: entered promiscuous mode [ 207.278225][T11415] syzkaller0: entered allmulticast mode [ 207.289253][T11415] openvswitch: netlink: Message has 592 unknown bytes. [ 207.297819][T11415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.332291][ T29] audit: type=1800 audit(1775740756.178:3): pid=11412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1486" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1541 res=0 errno=0 [ 207.378355][T11425] netlink: 'syz.3.1488': attribute type 1 has an invalid length. [ 207.472436][T11425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.542912][T11430] bond3: entered allmulticast mode [ 207.648976][T11425] bond3: (slave ip6gretap1): making interface the new active one [ 207.657540][T11425] ip6gretap1: entered allmulticast mode [ 207.674703][T11425] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 207.785544][T11432] syzkaller1: entered promiscuous mode [ 207.796671][T11432] syzkaller1: entered allmulticast mode [ 207.802715][ T5830] Bluetooth: hci4: link tx timeout [ 207.809272][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.976905][T11455] netlink: 'syz.1.1495': attribute type 1 has an invalid length. [ 208.083487][T11455] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 208.100546][T11455] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 208.113914][T11455] bond9: (slave ip6gre1): making interface the new active one [ 208.122889][T11455] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 208.453123][T11481] __nla_validate_parse: 8 callbacks suppressed [ 208.453141][T11481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 208.485762][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 208.502960][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1503'. [ 208.566185][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 208.646639][T11487] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 208.808527][T11487] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.822474][T11487] gretap2: entered promiscuous mode [ 208.827818][T11487] gretap2: entered allmulticast mode [ 209.018647][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1510'. [ 209.038977][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 209.056067][T11510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1510'. [ 209.082856][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1512'. [ 209.094306][T11510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1510'. [ 209.175001][T11510] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.206288][T11510] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.237745][T11510] .` (unregistering): Released all slaves [ 209.257803][T11516] tipc: Enabled bearer , priority 0 [ 209.331589][T11516] tipc: Disabling bearer [ 209.406728][T11521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.540664][T11543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 209.631606][T11539] team0: Port device team_slave_0 removed [ 209.776327][T11550] xt_hashlimit: size too large, truncated to 1048576 [ 209.822089][T11545] netlink: 'syz.0.1520': attribute type 1 has an invalid length. [ 209.841283][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 210.048627][T11545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.076717][T11548] bond2: (slave veth0_to_bond): making interface the new active one [ 210.113698][T11548] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 210.744813][T11599] pim6reg: entered allmulticast mode [ 210.985385][T11619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.296325][T11640] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 211.875723][T11681] Bluetooth: MGMT ver 1.23 [ 212.119846][T11686] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 212.197502][T11686] bond3 (unregistering): Released all slaves [ 212.305201][T11694] bond0: entered promiscuous mode [ 212.330221][T11694] bond_slave_0: entered promiscuous mode [ 212.336272][T11694] bond_slave_1: entered promiscuous mode [ 212.344798][T11694] batadv0: entered promiscuous mode [ 212.391295][T11694] debugfs: 'hsr1' already exists in 'hsr' [ 212.397148][T11694] Cannot create hsr debugfs directory [ 212.421780][T11694] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 212.436036][T11694] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 212.452985][T11694] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 212.461326][T11694] bond0: left promiscuous mode [ 212.466120][T11694] bond_slave_0: left promiscuous mode [ 212.501377][T11694] bond_slave_1: left promiscuous mode [ 212.511969][T11694] batadv0: left promiscuous mode [ 212.518124][T11689] infiniband sy1: set down [ 212.523397][T11689] infiniband sy1: added bond0 [ 212.534585][T11689] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 212.538094][T11689] infiniband sy1: Couldn't open port 1 [ 212.609168][T11689] RDS/IB: sy1: added [ 212.621518][T11689] smc: adding ib device sy1 with port count 1 [ 212.629559][T11689] smc: ib device sy1 port 1 has no pnetid [ 213.672831][T11777] __nla_validate_parse: 16 callbacks suppressed [ 213.672849][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 213.704755][T11775] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 214.075049][T11798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1582'. [ 214.105899][T11798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 214.125010][T11798] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 214.454987][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1587'. [ 214.473243][T11817] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 214.526840][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 214.572705][T11820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 214.836556][T11824] syzkaller0: entered promiscuous mode [ 214.845992][T11824] syzkaller0: entered allmulticast mode [ 215.011513][T11829] x_tables: duplicate underflow at hook 1 [ 215.385772][T11836] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1596'. [ 215.401735][T11832] netlink: set zone limit has 4 unknown bytes [ 215.676162][T11849] IPVS: set_ctl: invalid protocol: 42 10.1.1.2:0 [ 215.683739][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 215.883778][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.097930][T11876] netlink: 'syz.4.1609': attribute type 1 has an invalid length. [ 216.112053][T11878] ipt_REJECT: TCP_RESET invalid for non-tcp [ 216.249067][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1609'. [ 216.494690][T11881] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 216.653756][T11904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 216.745309][T11906] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 216.846365][T11920] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 217.002482][T11920] bond9: entered promiscuous mode [ 217.049786][T11920] 8021q: adding VLAN 0 to HW filter on device bond9 [ 217.151387][T11930] 8021q: adding VLAN 0 to HW filter on device bond9 [ 217.175472][T11930] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 217.188030][T11930] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 217.236857][T11930] bond9: (slave ip6gre2): making interface the new active one [ 217.244727][T11930] ip6gre2: entered promiscuous mode [ 217.252180][T11930] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 217.276183][T11932] syzkaller1: entered promiscuous mode [ 217.282615][T11932] syzkaller1: entered allmulticast mode [ 218.378285][T12015] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 218.696690][T12041] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3436812630/3436812632 [ 218.913472][T12049] __nla_validate_parse: 4 callbacks suppressed [ 218.913489][T12049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1645'. [ 219.135005][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1650'. [ 219.242432][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1652'. [ 219.408644][T12082] netlink: 'syz.3.1655': attribute type 21 has an invalid length. [ 219.671113][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 219.737103][T12102] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 219.758678][T12104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1662'. [ 219.859528][T12108] gtp1: entered promiscuous mode [ 219.873454][T12108] gtp1: entered allmulticast mode [ 219.921364][T12113] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1667'. [ 219.933692][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 219.970611][T12108] team0: Port device team_slave_0 removed [ 219.987185][T12116] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1667'. [ 220.292694][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1673'. [ 220.497189][T12143] delete_channel: no stack [ 220.521933][T12146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1678'. [ 221.205510][T12185] 8021q: VLANs not supported on sit0 [ 221.411831][T12201] SET target dimension over the limit! [ 221.911634][T12235] netlink: 'syz.1.1702': attribute type 4 has an invalid length. [ 222.645247][T12286] syz.1.1710: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 222.668052][T12279] netlink: 'syz.4.1709': attribute type 11 has an invalid length. [ 222.675213][T12286] CPU: 1 UID: 0 PID: 12286 Comm: syz.1.1710 Not tainted syzkaller #0 PREEMPT(full) [ 222.675276][T12286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.675314][T12286] Call Trace: [ 222.675336][T12286] [ 222.675357][T12286] dump_stack_lvl+0xe8/0x150 [ 222.675458][T12286] warn_alloc+0x249/0x340 [ 222.675524][T12286] ? stack_trace_save+0xa9/0x100 [ 222.675584][T12286] ? __pfx_warn_alloc+0x10/0x10 [ 222.675661][T12286] ? kasan_save_track+0x4f/0x80 [ 222.675710][T12286] ? kasan_save_track+0x3e/0x80 [ 222.675765][T12286] ? __kasan_kmalloc+0x93/0xb0 [ 222.675815][T12286] ? __kmalloc_cache_noprof+0x31c/0x660 [ 222.675882][T12286] ? xskq_create+0x56/0x170 [ 222.675924][T12286] ? xsk_setsockopt+0x54c/0x990 [ 222.675940][T12286] ? do_sock_setsockopt+0x17c/0x1b0 [ 222.675961][T12286] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 222.675982][T12286] ? do_syscall_64+0x14d/0xf80 [ 222.676013][T12286] __vmalloc_node_range_noprof+0x132/0x1730 [ 222.676081][T12286] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.676113][T12286] ? __kasan_kmalloc+0x93/0xb0 [ 222.676143][T12286] vmalloc_user_noprof+0xad/0xe0 [ 222.676167][T12286] ? xskq_create+0xbf/0x170 [ 222.676191][T12286] xskq_create+0xbf/0x170 [ 222.676218][T12286] xsk_init_queue+0x8a/0xe0 [ 222.676244][T12286] xsk_setsockopt+0x54c/0x990 [ 222.676269][T12286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.676291][T12286] ? __pfx_aa_sk_perm+0x10/0x10 [ 222.676326][T12286] ? aa_sock_opt_perm+0xff/0x1a0 [ 222.676362][T12286] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 222.676387][T12286] ? __pfx_xsk_setsockopt+0x10/0x10 [ 222.676411][T12286] do_sock_setsockopt+0x17c/0x1b0 [ 222.676441][T12286] __x64_sys_setsockopt+0x13d/0x1b0 [ 222.676473][T12286] do_syscall_64+0x14d/0xf80 [ 222.676498][T12286] ? trace_irq_disable+0x3b/0x150 [ 222.676515][T12286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.676536][T12286] ? clear_bhb_loop+0x40/0x90 [ 222.676562][T12286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.676583][T12286] RIP: 0033:0x7f797d19c819 [ 222.676601][T12286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.676618][T12286] RSP: 002b:00007f797e068028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.676639][T12286] RAX: ffffffffffffffda RBX: 00007f797d415fa0 RCX: 00007f797d19c819 [ 222.676654][T12286] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 222.676666][T12286] RBP: 00007f797d232c91 R08: 0000000000000004 R09: 0000000000000000 [ 222.676677][T12286] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.676689][T12286] R13: 00007f797d416038 R14: 00007f797d415fa0 R15: 00007ffecf9316b8 [ 222.676722][T12286] [ 222.676743][T12286] Mem-Info: [ 222.676786][T12286] active_anon:6086 inactive_anon:0 isolated_anon:0 [ 222.676786][T12286] active_file:2697 inactive_file:39986 isolated_file:0 [ 222.676786][T12286] unevictable:768 dirty:89 writeback:0 [ 222.676786][T12286] slab_reclaimable:11609 slab_unreclaimable:104583 [ 222.676786][T12286] mapped:29255 shmem:1410 pagetables:1209 [ 222.676786][T12286] sec_pagetables:0 bounce:0 [ 222.676786][T12286] kernel_misc_reclaimable:0 [ 222.676786][T12286] free:1317889 free_pcp:10625 free_cma:0 [ 222.676883][T12286] Node 0 active_anon:24344kB inactive_anon:0kB active_file:10788kB inactive_file:159744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:352kB writeback:0kB shmem:4104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13444kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.676940][T12286] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 222.676991][T12286] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 222.677053][T12286] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 222.677103][T12286] Node 0 DMA32 free:1308532kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24344kB inactive_anon:0kB active_file:10788kB inactive_file:159744kB unevictable:1536kB writepending:352kB zspages:0kB present:3129332kB managed:2552612kB mlocked:0kB bounce:0kB free_pcp:42240kB local_pcp:20356kB free_cma:0kB [ 222.677165][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 222.677224][T12286] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 222.677289][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 222.677328][T12286] Node 1 Normal free:3947664kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 222.677381][T12286] lowmem_reserve[]: 0 0 0 0 0 [ 222.677427][T12286] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 222.677555][T12286] Node 0 DMA32: 1651*4kB (UE) 2269*8kB (UME) 1324*16kB (UME) 488*32kB (UME) 124*64kB (UM) 48*128kB (UME) 26*256kB (UME) 19*512kB (UM) 10*1024kB (UME) 13*2048kB (UM) 288*4096kB (UM) = 1308532kB [ 223.271057][T12286] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 223.328779][T12286] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 5*32kB (UM) 10*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3947716kB [ 223.388132][T12286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.414242][T12286] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.432769][T12286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 223.446297][T12286] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 223.461133][T12286] 44040 total pagecache pages [ 223.479718][T12286] 0 pages in swap cache [ 223.496542][T12286] Free swap = 124996kB [ 223.505428][T12286] Total swap = 124996kB [ 223.519937][T12286] 2097051 pages RAM [ 223.540150][T12286] 0 pages HighMem/MovableOnly [ 223.554631][T12286] 427064 pages reserved [ 223.558849][T12286] 0 pages cma reserved [ 223.934455][T12343] __nla_validate_parse: 10 callbacks suppressed [ 223.934473][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1726'. [ 223.979224][T12346] openvswitch: netlink: Missing key (keys=40, expected=80) [ 223.988769][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1727'. [ 224.098967][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1728'. [ 224.190183][T12359] syzkaller0: entered promiscuous mode [ 224.195874][T12359] syzkaller0: entered allmulticast mode [ 224.352214][T12364] syzkaller0: entered promiscuous mode [ 224.359024][T12364] syzkaller0: entered allmulticast mode [ 224.985351][T12392] netlink: 'syz.4.1737': attribute type 4 has an invalid length. [ 225.055270][T12389] syzkaller0: entered promiscuous mode [ 225.062324][T12389] syzkaller0: entered allmulticast mode [ 226.327453][T12406] syzkaller1: entered promiscuous mode [ 226.339478][T12406] syzkaller1: entered allmulticast mode [ 226.584038][T12423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 226.606165][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1749'. [ 226.788660][T12443] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1751'. [ 226.822343][T12437] netlink: 'syz.4.1752': attribute type 10 has an invalid length. [ 226.872579][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.922638][T12437] bridge_slave_1: left allmulticast mode [ 226.925778][T12455] x_tables: duplicate underflow at hook 2 [ 226.933687][T12437] bridge_slave_1: left promiscuous mode [ 226.952660][T12437] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.011327][T12262] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.023301][T12262] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.060152][T12262] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.089121][T12262] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.234285][T12474] syzkaller0: entered promiscuous mode [ 227.239820][T12474] syzkaller0: entered allmulticast mode [ 227.334574][T12476] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 227.356360][T12476] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1761'. [ 227.366937][T12476] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 227.414407][T12476] netlink: 'syz.1.1761': attribute type 8 has an invalid length. [ 227.435886][T12476] netlink: 606 bytes leftover after parsing attributes in process `syz.1.1761'. [ 227.514802][T12476] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 227.536329][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 227.547677][T12476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 227.648401][T12494] netlink: 'syz.4.1767': attribute type 15 has an invalid length. [ 227.668196][T12492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.408191][T12534] sctp: [Deprecated]: syz.4.1779 (pid 12534) Use of int in max_burst socket option deprecated. [ 228.408191][T12534] Use struct sctp_assoc_value instead [ 228.497145][T12534] x_tables: duplicate underflow at hook 2 [ 228.662240][T12552] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 228.784716][T12560] IPVS: Unknown mcast interface: pim6reg1 [ 229.040944][T12571] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 229.240363][T12578] __nla_validate_parse: 6 callbacks suppressed [ 229.240383][T12578] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1793'. [ 229.296505][T12582] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1793'. [ 229.354762][T12586] netlink: 'syz.3.1795': attribute type 12 has an invalid length. [ 229.370425][T12586] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 229.388464][T12586] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1795'. [ 229.419714][T12586] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1795'. [ 229.541493][T12592] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1796'. [ 229.582619][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1797'. [ 229.647281][T12601] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 229.675995][T12596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.736567][T12608] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.794183][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1801'. [ 229.805752][T12608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1801'. [ 229.832909][T12611] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 229.842067][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 229.852834][T12611] netlink: 'syz.2.1802': attribute type 13 has an invalid length. [ 229.860804][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1802'. [ 230.192272][T12632] tipc: Enabling of bearer rejected, failed to enable media [ 230.311193][T12645] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 230.507196][T12649] veth9: entered allmulticast mode [ 230.952254][T12691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.382775][T12721] syzkaller1: entered promiscuous mode [ 231.388398][T12721] syzkaller1: entered allmulticast mode [ 231.422398][T12725] tipc: Started in network mode [ 231.433812][T12725] tipc: Node identity ac141441, cluster identity 5 [ 231.442639][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 231.457220][T12723] tipc: Enabling of bearer rejected, failed to enable media [ 231.607601][T12736] bond0: entered promiscuous mode [ 231.618165][T12736] gretap0: entered promiscuous mode [ 231.629528][T12736] bond0: left promiscuous mode [ 231.635317][T12739] openvswitch: netlink: Missing key (keys=40, expected=100) [ 231.643498][T12736] gretap0: left promiscuous mode [ 231.972076][T12757] Cannot find add_set index 65532 as target [ 232.293338][T12776] x_tables: duplicate underflow at hook 1 [ 232.348380][T12780] validate_nla: 6 callbacks suppressed [ 232.348399][T12780] netlink: 'syz.1.1858': attribute type 2 has an invalid length. [ 232.605444][T12794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.645007][T12795] netlink: 'syz.0.1863': attribute type 9 has an invalid length. [ 233.045789][T12827] syzkaller1: entered promiscuous mode [ 233.063388][T12827] syzkaller1: entered allmulticast mode [ 233.271700][T12840] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 233.305108][T12840] bond3: entered promiscuous mode [ 233.322377][T12840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 233.444256][T12840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.929691][T12879] veth11: entered allmulticast mode [ 234.115492][T12895] nbd: must specify at least one socket [ 234.409268][T12907] tipc: Enabling of bearer rejected, already enabled [ 234.424149][T12906] syzkaller0: entered promiscuous mode [ 234.429782][T12906] syzkaller0: entered allmulticast mode [ 234.564512][T12916] netlink: 'syz.1.1900': attribute type 16 has an invalid length. [ 234.572748][T12916] netlink: 'syz.1.1900': attribute type 17 has an invalid length. [ 234.693791][T12916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.713711][T12916] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.727417][T12923] __nla_validate_parse: 30 callbacks suppressed [ 234.727442][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1903'. [ 234.760475][T12916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.856274][T12916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.892591][T12916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.924493][T12916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.943071][T12916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.962616][T12916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 235.010899][T12940] netlink: 'syz.3.1905': attribute type 63 has an invalid length. [ 235.065300][T12934] netlink: 'syz.3.1905': attribute type 63 has an invalid length. [ 235.088412][T12944] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1908'. [ 235.098373][T12942] : renamed from team_slave_1 [ 235.122759][ T12] bond5: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 235.144324][T12934] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.161694][ T12] bond5: (slave veth0_to_bond): making interface the new active one [ 235.207818][ T12] bond5: active interface up! [ 235.255029][T12934] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.485540][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1913'. [ 235.532359][T12973] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 235.562586][T12966] veth0_macvtap: left promiscuous mode [ 235.648694][T12977] netlink: 'syz.3.1916': attribute type 3 has an invalid length. [ 235.680885][T12977] netlink: 'syz.3.1916': attribute type 3 has an invalid length. [ 235.775568][T12983] ipt_REJECT: TCP_RESET invalid for non-tcp [ 235.791813][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 236.011850][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 236.252090][T13010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 236.345646][T13022] 9: entered promiscuous mode [ 236.384307][T13010] bond8: (slave dummy0): making interface the new active one [ 236.404773][T13028] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.1932'. [ 236.413817][T13010] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 236.523313][T13010] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1928'. [ 236.601666][T13010] bond8: (slave dummy0): Releasing active interface [ 236.723542][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 236.744504][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1939'. [ 237.015233][T13068] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1942'. [ 237.253533][T13078] tipc: Enabling of bearer rejected, already enabled [ 237.309523][T13084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 238.215754][T13133] validate_nla: 3 callbacks suppressed [ 238.215775][T13133] netlink: 'syz.2.1958': attribute type 10 has an invalid length. [ 239.556075][T13151] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 239.566106][T13153] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.607593][T13155] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 239.719279][T13151] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.794067][T13169] __nla_validate_parse: 2 callbacks suppressed [ 239.794086][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 239.804919][T13165] bond9: (slave geneve2): making interface the new active one [ 239.818420][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 239.818808][T13165] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 239.837278][T13166] tipc: Enabled bearer , priority 0 [ 239.877424][ T1009] netdevsim netdevsim2 : set [1, 0] type 2 family 0 port 20004 - 0 [ 239.891963][T13159] tipc: Disabling bearer [ 239.927095][ T1009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.945349][ T1009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 239.956012][ T1009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 240.029308][T13184] batadv1: entered allmulticast mode [ 240.112952][T13187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1974'. [ 240.407754][T13201] netlink: 'syz.3.1977': attribute type 32 has an invalid length. [ 240.417099][T13201] netlink: 776 bytes leftover after parsing attributes in process `syz.3.1977'. [ 240.539980][T13209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1979'. [ 240.553137][T13209] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1979'. [ 240.563070][T13209] netlink: 'syz.3.1979': attribute type 6 has an invalid length. [ 240.570931][T13209] netlink: 'syz.3.1979': attribute type 5 has an invalid length. [ 240.579914][T13209] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1979'. [ 240.805038][T13213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1980'. [ 242.763428][T13169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.789437][T13198] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1976'. [ 242.822721][T13198] netlink: 'syz.4.1976': attribute type 2 has an invalid length. [ 243.701814][T13273] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 243.862966][T13278] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 243.870946][T13278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.883403][T13278] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 243.900322][T13284] tipc: Enabled bearer , priority 0 [ 243.964137][T13284] syzkaller0: entered promiscuous mode [ 243.974903][T13284] syzkaller0: entered allmulticast mode [ 243.981644][T13284] tipc: Resetting bearer [ 244.096706][T13283] tipc: Resetting bearer [ 245.282615][T13283] tipc: Disabling bearer [ 245.294064][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.309625][ T5913] tipc: Node number set to 1958125578 [ 245.407094][T13316] x_tables: duplicate underflow at hook 3 [ 245.438115][T13319] netlink: 'syz.0.2012': attribute type 2 has an invalid length. [ 245.495919][T13319] v: entered promiscuous mode [ 245.554174][T13329] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 245.571440][T13327] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2016'. [ 245.596278][T13327] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2016'. [ 245.619130][T13333] openvswitch: netlink: IP tunnel TTL not specified. [ 245.628479][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 245.651749][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 245.701032][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 245.861885][T13346] x_tables: duplicate underflow at hook 1 [ 245.952328][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 246.495039][T13371] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2028'. [ 246.594983][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2031'. [ 246.653577][T13390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2030'. [ 246.688409][T13392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2031'. [ 246.759212][T13395] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 247.190534][T13424] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 247.231179][T13426] tipc: Enabling of bearer rejected, failed to enable media [ 247.239615][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 247.249243][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 247.257974][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 247.266323][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 247.275021][T13427] tipc: Enabling of bearer rejected, failed to enable media [ 247.694647][T13469] netlink: 'syz.4.2057': attribute type 58 has an invalid length. [ 248.051800][T13503] netlink: 'syz.1.2066': attribute type 21 has an invalid length. [ 248.084992][T13505] netlink: 'syz.4.2068': attribute type 10 has an invalid length. [ 248.120085][T13500] syzkaller0: entered promiscuous mode [ 248.125951][T13500] syzkaller0: entered allmulticast mode [ 249.529025][T13524] bond12: entered promiscuous mode [ 249.559401][T13545] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 249.675637][T13551] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1138381080/1138381081 [ 249.685749][T13551] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1138381080/1138381081 [ 249.779649][T13556] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 249.787958][T13556] netlink: 'syz.2.2076': attribute type 2 has an invalid length. [ 249.819221][T13560] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 249.841046][T13556] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 249.905505][T13560] 8021q: adding VLAN 0 to HW filter on device bond13 [ 249.964941][T13565] 8021q: adding VLAN 0 to HW filter on device bond13 [ 249.973584][T13565] bond13: (slave vcan1): The slave device specified does not support setting the MAC address [ 249.985113][T13565] bond13: (slave vcan1): Error -95 calling set_mac_address [ 250.017811][T13569] netlink: 'syz.2.2081': attribute type 13 has an invalid length. [ 250.026421][T13570] syzkaller1: entered promiscuous mode [ 250.032113][T13570] syzkaller1: entered allmulticast mode [ 250.114854][T13576] IPv6: Can't replace route, no match found [ 250.121276][T13576] IPv6: Can't replace route, no match found [ 250.403700][T13595] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.555115][T13607] netlink: 'syz.0.2090': attribute type 11 has an invalid length. [ 250.569707][T13599] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 250.594554][T13607] netlink: 'syz.0.2090': attribute type 64 has an invalid length. [ 250.603414][T13607] __nla_validate_parse: 44 callbacks suppressed [ 250.603428][T13607] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2090'. [ 250.864937][T13630] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 250.885333][T13630] bond4: (slave lo): Enslaving as an active interface with an up link [ 250.896548][T13630] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 251.018011][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2100'. [ 251.063290][T13644] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2101'. [ 251.291463][T13654] netlink: 'syz.1.2103': attribute type 3 has an invalid length. [ 251.309603][T13654] netlink: 'syz.1.2103': attribute type 3 has an invalid length. [ 251.447647][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 251.465588][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 251.481962][T13668] bond5: entered promiscuous mode [ 251.487154][T13668] bond5: entered allmulticast mode [ 251.493241][T13669] netlink: 'syz.2.2108': attribute type 16 has an invalid length. [ 251.526856][T13669] netlink: 'syz.2.2108': attribute type 17 has an invalid length. [ 251.581640][T13669] tunl0: left promiscuous mode [ 251.627880][T13669] F: left allmulticast mode [ 251.667443][T13669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.687357][T13669] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.709716][T13669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.209492][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2126'. [ 252.430108][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2126'. [ 252.546656][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2131'. [ 252.579027][T13746] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 252.641905][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 252.756129][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2137'. [ 252.766682][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 252.831324][T13766] x_tables: duplicate underflow at hook 1 [ 252.919052][T13769] syzkaller0: entered promiscuous mode [ 252.936272][T13769] syzkaller0: entered allmulticast mode [ 253.031593][T13773] syzkaller1: entered promiscuous mode [ 253.037258][T13773] syzkaller1: entered allmulticast mode [ 253.141948][T13793] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.149836][T13793] IPv6: NLM_F_REPLACE set, but no existing node found! [ 253.161399][T13793] openvswitch: netlink: Missing valid actions attribute. [ 253.168591][T13793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.222233][T13789] team0: Cannot enslave team device to itself [ 253.943338][T13841] openvswitch: netlink: Flow key attr not present in new flow. [ 254.223965][T13856] bond4: (slave bridge0): Device is not bonding slave [ 254.232443][T13856] bond4: option active_slave: invalid value (bridge0) [ 254.258856][T13856] bond4 (unregistering): Released all slaves [ 254.500122][T13878] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.508356][T13878] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.545734][T13874] gretap0: entered promiscuous mode [ 254.577719][T13874] gretap0: left promiscuous mode [ 255.071950][T13909] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 255.206708][T13921] ip6erspan0: entered allmulticast mode [ 255.403183][T13941] openvswitch: netlink: VXLAN extension 1 has unexpected len 169 expected 4 [ 255.601059][T13950] netlink: 'syz.3.2191': attribute type 32 has an invalid length. [ 255.632404][T13953] __nla_validate_parse: 16 callbacks suppressed [ 255.632421][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 255.684433][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.690893][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.803299][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2197'. [ 255.977592][T13981] syzkaller1: entered promiscuous mode [ 256.000925][T13981] syzkaller1: entered allmulticast mode [ 256.036213][T13987] netlink: 'syz.1.2200': attribute type 4 has an invalid length. [ 256.131690][T13989] IPv6: sit1: Disabled Multicast RS [ 256.173004][T13992] netlink: 'syz.3.2203': attribute type 10 has an invalid length. [ 256.342248][T14008] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 256.413110][T14012] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 256.543621][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2207'. [ 256.915979][T14055] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 256.938299][T14056] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2221'. [ 256.941803][T14051] bond0: entered promiscuous mode [ 256.952661][T14051] bond_slave_0: entered promiscuous mode [ 256.959013][T14051] bond_slave_1: entered promiscuous mode [ 256.970199][T14051] batadv0: entered promiscuous mode [ 256.977786][T14051] debugfs: 'hsr1' already exists in 'hsr' [ 256.983844][T14051] Cannot create hsr debugfs directory [ 256.989475][T14051] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 257.007850][T14051] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 257.018940][T14051] hsr1: entered promiscuous mode [ 257.028015][T14051] hsr1: entered allmulticast mode [ 257.035326][T14051] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 257.044936][T14051] bond0: left promiscuous mode [ 257.049753][T14051] bond_slave_0: left promiscuous mode [ 257.056027][T14051] bond_slave_1: left promiscuous mode [ 257.062614][T14051] batadv0: left promiscuous mode [ 257.233278][T14073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2224'. [ 257.283688][T14073] syzkaller0: entered promiscuous mode [ 257.289222][T14073] syzkaller0: entered allmulticast mode [ 257.298288][T14073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2224'. [ 257.308119][T14073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2224'. [ 257.474037][T14090] tap0: tun_chr_ioctl cmd 1074025672 [ 257.479514][T14090] tap0: ignored: set checksum disabled [ 257.519644][T14090] bond4 (unregistering): Released all slaves [ 257.598699][T14102] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2233'. [ 257.636158][T14104] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2233'. [ 257.686216][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 257.943286][T14126] openvswitch: netlink: Flow key attr not present in new flow. [ 258.081693][T14132] bond0: entered promiscuous mode [ 258.086795][T14132] bond_slave_0: entered promiscuous mode [ 258.114285][T14132] bond_slave_1: entered promiscuous mode [ 258.180509][T14144] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 258.192087][T14147] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 258.203466][T14129] C: entered allmulticast mode [ 258.208861][T14144] netlink: 'syz.4.2247': attribute type 1 has an invalid length. [ 258.208946][T14129] C: left allmulticast mode [ 258.222474][T14144] netlink: 'syz.4.2247': attribute type 2 has an invalid length. [ 258.229882][T14147] netlink: 'syz.0.2245': attribute type 2 has an invalid length. [ 258.252226][T14147] netlink: 'syz.0.2245': attribute type 1 has an invalid length. [ 258.496965][T14160] syzkaller0: entered promiscuous mode [ 258.509366][T14160] syzkaller0: entered allmulticast mode [ 258.835445][T14178] C: entered allmulticast mode [ 258.841517][T14178] tunl0: entered allmulticast mode [ 258.863453][T14178] gre0: entered allmulticast mode [ 258.884024][T14178] gretap0: entered allmulticast mode [ 258.921556][T14178] erspan0: entered allmulticast mode [ 258.942332][T14178] ip_vti0: entered allmulticast mode [ 258.959007][T14178] ip6_vti0: entered allmulticast mode [ 258.996198][T14178] sit0: entered allmulticast mode [ 259.024575][T14178] ip6tnl0: entered allmulticast mode [ 259.100114][T14178] F: entered allmulticast mode [ 259.142381][T14178] syz_tun: entered allmulticast mode [ 259.185021][T14178] ip6gretap0: entered allmulticast mode [ 259.211382][T14178] bridge0: entered allmulticast mode [ 259.247032][T14178] bond0: left promiscuous mode [ 259.260322][T14178] bond_slave_0: left promiscuous mode [ 259.265990][T14178] bond_slave_1: left promiscuous mode [ 259.275742][T14178] team0: entered allmulticast mode [ 259.282475][T14178] : entered allmulticast mode [ 259.299483][T14178] nlmon0: entered allmulticast mode [ 259.314755][T14178] caif0: entered allmulticast mode [ 259.320830][T14178] vxcan0: entered allmulticast mode [ 259.326366][T14178] vxcan1: entered allmulticast mode [ 259.332783][T14178] veth0: entered allmulticast mode [ 259.338127][T14178] veth1: entered allmulticast mode [ 259.348035][T14178] wg0: entered allmulticast mode [ 259.353899][T14178] wg1: entered allmulticast mode [ 259.359157][T14178] wg2: entered allmulticast mode [ 259.364947][T14178] veth1_to_bridge: entered allmulticast mode [ 259.372394][T14178] veth0_to_bond: entered allmulticast mode [ 259.378421][T14178] veth1_to_bond: entered allmulticast mode [ 259.384530][T14178] veth1_to_team: entered allmulticast mode [ 259.391189][T14178] veth0_to_batadv: entered allmulticast mode [ 259.397273][T14178] batadv_slave_0: entered allmulticast mode [ 259.403997][T14178] xfrm0: entered allmulticast mode [ 259.409251][T14178] veth0_to_hsr: entered allmulticast mode [ 259.415337][T14178] hsr_slave_0: entered allmulticast mode [ 259.421778][T14178] veth1_to_hsr: entered allmulticast mode [ 259.427653][T14178] hsr_slave_1: entered allmulticast mode [ 259.433564][T14178] hsr0: entered allmulticast mode [ 259.438728][T14178] veth1_virt_wifi: entered allmulticast mode [ 259.444893][T14178] veth0_virt_wifi: entered allmulticast mode [ 259.452537][T14178] virt_wifi0: entered allmulticast mode [ 259.458261][T14178] veth1_vlan: entered allmulticast mode [ 259.464029][T14178] veth0_vlan: entered allmulticast mode [ 259.469779][T14178] vlan0: entered allmulticast mode [ 259.475133][T14178] vlan1: entered allmulticast mode [ 259.481135][T14178] macvlan0: entered allmulticast mode [ 259.486636][T14178] macvlan1: entered allmulticast mode [ 259.492210][T14178] ipvlan0: entered allmulticast mode [ 259.498127][T14178] ipvlan1: entered allmulticast mode [ 259.511148][T14178] veth1_macvtap: entered allmulticast mode [ 259.517178][T14178] veth0_macvtap: entered allmulticast mode [ 259.528607][T14178] macvtap0: entered allmulticast mode [ 259.534290][T14178] macsec0: entered allmulticast mode [ 259.539744][T14178] geneve0: entered allmulticast mode [ 259.545805][T14178] geneve1: entered allmulticast mode [ 259.551307][T14178] netdevsim netdevsim2 : entered allmulticast mode [ 259.558093][T14178] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 259.565857][T14178] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 259.574088][T14178] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 259.581812][T14178] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 259.588952][T14178] mac80211_hwsim hwsim12 wlan2: entered allmulticast mode [ 259.596243][T14178] bond1: entered allmulticast mode [ 259.602147][T14178] bridge1: entered allmulticast mode [ 259.607634][T14178] bond2: entered allmulticast mode [ 259.613034][T14178] bridge2: left promiscuous mode [ 259.618179][T14178] mac80211_hwsim hwsim13 wlan3: entered allmulticast mode [ 259.625531][T14178] vlan2: entered allmulticast mode [ 259.631548][T14178] bridge3: entered allmulticast mode [ 259.636978][T14178] bond3: entered allmulticast mode [ 259.642371][T14178] syztnl2: entered allmulticast mode [ 259.647802][T14178] bond4: entered allmulticast mode [ 259.652999][T14178] bridge4: entered allmulticast mode [ 259.658315][T14178] bridge5: entered allmulticast mode [ 259.673298][T14178] vxlan0: entered allmulticast mode [ 259.689744][T14178] mac80211_hwsim hwsim21 wlan4: entered allmulticast mode [ 259.700561][T14178] bond5: entered allmulticast mode [ 259.705900][T14178] ip6tnl2: entered allmulticast mode [ 259.727577][T14178] veth2: entered allmulticast mode [ 259.737239][T14178] veth3: left promiscuous mode [ 259.742731][T14178] veth3: entered allmulticast mode [ 259.748155][T14178] veth4: entered allmulticast mode [ 259.754112][T14178] veth5: left promiscuous mode [ 259.759046][T14178] veth5: entered allmulticast mode [ 259.765087][T14178] bond6: entered allmulticast mode [ 259.770627][T14178] veth6: entered allmulticast mode [ 259.775934][T14178] veth7: entered allmulticast mode [ 259.781832][T14178] bridge7: entered allmulticast mode [ 259.787370][T14178] bond7: entered allmulticast mode [ 259.792958][T14178] gtp0: entered allmulticast mode [ 259.798191][T14178] erspan1: entered allmulticast mode [ 259.804559][T14178] gretap1: entered allmulticast mode [ 259.816395][T14178] bridge8: entered allmulticast mode [ 259.831522][T14178] bond8: entered allmulticast mode [ 259.843137][T14178] bond0.0: entered allmulticast mode [ 259.852485][T14178] bond9: entered allmulticast mode [ 259.857793][T14178] geneve2: entered allmulticast mode [ 259.876661][T14178] bridge9: entered allmulticast mode [ 259.888081][T14178] bridge10: entered allmulticast mode [ 259.901582][T14178] syzkaller1: entered allmulticast mode [ 259.910583][T14178] macvlan2: entered allmulticast mode [ 259.943547][T14194] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 259.954588][T12260] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.990894][T12260] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.009632][T12260] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.025078][T12260] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.065948][T14209] ipt_REJECT: ECHOREPLY no longer supported. [ 260.074057][T12260] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.085401][T14209] netlink: Unknown conntrack attr (type=2304, max=9) [ 260.099362][T12260] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.128008][T12260] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.157858][T12260] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 260.493409][T14231] batadv_slave_0: entered promiscuous mode [ 260.574161][T14230] batadv_slave_0: left promiscuous mode [ 260.684954][T14235] __nla_validate_parse: 12 callbacks suppressed [ 260.684974][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 261.254581][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.265729][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.278427][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.287732][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.296895][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.306108][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.353533][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.367254][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.377262][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 261.686401][T14301] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 262.695190][T14373] Bluetooth: MGMT ver 1.23 [ 263.638314][T14442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.799775][T14449] validate_nla: 1 callbacks suppressed [ 263.799803][T14449] netlink: 'syz.2.2332': attribute type 3 has an invalid length. [ 264.141526][T14475] syzkaller0: entered promiscuous mode [ 264.153127][T14475] syzkaller0: entered allmulticast mode [ 264.164311][T14478] veth0_to_team: left allmulticast mode [ 264.317480][T14472] bond10 (unregistering): Released all slaves [ 264.706793][T14508] sctp: [Deprecated]: syz.3.2350 (pid 14508) Use of int in max_burst socket option. [ 264.706793][T14508] Use struct sctp_assoc_value instead [ 265.090379][T14536] veth1_to_bond: entered allmulticast mode [ 265.106182][T14532] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 265.305384][T14535] veth1_to_bond: left allmulticast mode [ 265.849769][T14581] __nla_validate_parse: 37 callbacks suppressed [ 265.849790][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2370'. [ 266.042853][T14581] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.064043][T14587] bond10: entered promiscuous mode [ 266.083831][T14587] bond10: entered allmulticast mode [ 266.099919][T14587] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.109185][T14587] team0: Port device bond10 added [ 266.179462][T14588] vxcan3: entered promiscuous mode [ 266.193327][T14588] bond10: (slave vxcan3): refused to change device type [ 266.468169][T14620] veth1_vlan: entered allmulticast mode [ 266.493950][T14620] macvlan0: entered promiscuous mode [ 266.509577][T14620] macvlan0: left allmulticast mode [ 266.515334][T14620] veth1_vlan: left allmulticast mode [ 267.051897][T14661] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2395'. [ 267.192820][T14673] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 267.202479][T14673] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 268.122912][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2403'. [ 268.131930][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'. [ 268.146698][T14688] macsec4: entered promiscuous mode [ 268.152872][T14688] macsec4: entered allmulticast mode [ 268.158402][T14688] bridge0: entered allmulticast mode [ 269.873737][T14647] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.285547][T14723] bond0: Caught tx_queue_len zero misconfig [ 270.302189][T14727] netlink: 'syz.1.2414': attribute type 29 has an invalid length. [ 270.311376][T14723] netlink: 'syz.2.2413': attribute type 10 has an invalid length. [ 270.316028][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 270.404593][T14723] team0 (unregistering): Port device 26 removed [ 270.428165][T14723] team0 (unregistering): Port device bond10 removed [ 270.461593][T14726] syzkaller0: entered promiscuous mode [ 270.467128][T14726] syzkaller0: entered allmulticast mode [ 270.495650][T14726] TC_ACT_REPEAT abuse ? [ 270.501352][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2415'. [ 270.731823][T14746] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2419'. [ 270.760493][T14751] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2419'. [ 271.196997][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2432'. [ 271.231770][T14787] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2433'. [ 271.359229][T14794] syzkaller0: entered promiscuous mode [ 271.618387][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 271.633682][T14809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.662505][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2440'. [ 271.698300][T14812] netlink: 'syz.4.2442': attribute type 58 has an invalid length. [ 271.720395][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2442'. [ 271.736650][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 271.830095][T14819] mac80211_hwsim hwsim9 : renamed from wlan1 [ 271.852085][T14819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 271.954847][T14830] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2449'. [ 272.216015][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2452'. [ 272.293181][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.318391][T14855] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 272.327541][T14852] bridge_slave_1 (unregistering): left allmulticast mode [ 272.346384][T14852] bridge_slave_1 (unregistering): left promiscuous mode [ 272.353699][T14852] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.496207][T14865] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2454'. [ 272.508270][T14855] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.576382][T14859] bond6: (slave dummy0): making interface the new active one [ 272.588979][T14859] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 272.615409][T14865] bond6: (slave dummy0): Releasing active interface [ 272.692193][T14869] netlink: 'syz.2.2457': attribute type 21 has an invalid length. [ 272.705603][T14869] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 272.821278][T14876] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 272.941666][T14884] bond10: entered promiscuous mode [ 272.947434][T14884] 8021q: adding VLAN 0 to HW filter on device bond10 [ 272.963352][T14884] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 [ 275.039250][T14837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.251233][T14889] syzkaller0: entered promiscuous mode [ 275.256767][T14889] syzkaller0: entered allmulticast mode [ 275.335417][T14900] netlink: 'syz.4.2462': attribute type 29 has an invalid length. [ 275.790727][T14928] bond11: entered allmulticast mode [ 275.865997][T14943] netlink: 'syz.0.2476': attribute type 30 has an invalid length. [ 276.003081][T14951] openvswitch: netlink: Flow key attr not present in new flow. [ 276.182570][T14964] netem: incorrect gi model size [ 276.187844][T14964] netem: change failed [ 276.489008][T14991] IPv6: addrconf: prefix option has invalid lifetime [ 276.516685][T14989] netlink: 'syz.0.2491': attribute type 1 has an invalid length. [ 276.661948][T15000] netlink: 'syz.0.2496': attribute type 2 has an invalid length. [ 276.683443][T15000] __nla_validate_parse: 5 callbacks suppressed [ 276.683468][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2496'. [ 277.157947][T15028] bond15: option lp_interval: invalid value (0) [ 277.182424][T15028] bond15: option lp_interval: allowed values 1 - 2147483647 [ 277.204127][T15028] bond15 (unregistering): Released all slaves [ 277.371282][T15047] tipc: New replicast peer: 255.255.255.255 [ 277.412331][T15047] tipc: Enabled bearer , priority 10 [ 277.658388][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 277.755172][T15064] nbd: must specify at least one socket [ 277.814811][T15073] 8021q: VLANs not supported on ip6tnl0 [ 277.876734][T15084] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 277.899312][T15085] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20000 [ 278.024127][T15093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2519'. [ 278.143878][T15096] bond4 (unregistering): Released all slaves [ 278.358561][T15112] syzkaller1: entered promiscuous mode [ 278.366382][T15112] syzkaller1: entered allmulticast mode [ 278.383329][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2520'. [ 278.532253][ T5943] tipc: Node number set to 2886997057 [ 278.722138][T15140] gre0: entered promiscuous mode [ 278.727780][T15140] gre0: entered allmulticast mode [ 278.735202][T15128] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2528'. [ 279.025721][T15156] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 279.122598][T15156] team0: Device macvlan3 is already an upper device of the team interface [ 279.174820][T15166] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 279.185036][T15166] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2539'. [ 279.193640][T15163] xt_hashlimit: size too large, truncated to 1048576 [ 279.201090][T15170] xt_hashlimit: size too large, truncated to 1048576 [ 279.378255][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.426395][T15173] bridge_slave_0 (unregistering): left allmulticast mode [ 279.435123][T15173] bridge_slave_0 (unregistering): left promiscuous mode [ 279.448645][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.693936][T15182] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2544'. [ 279.860522][T15194] x_tables: duplicate underflow at hook 1 [ 279.869311][T15194] xt_hashlimit: size too large, truncated to 1048576 [ 279.976589][T15184] syzkaller0: entered promiscuous mode [ 280.014415][T15184] syzkaller0: entered allmulticast mode [ 280.026457][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2543'. [ 280.103100][T15203] IPVS: length: 24 != 12312 [ 280.212345][T15211] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 281.473639][T15211] vxcan1: left allmulticast mode [ 281.571457][T15226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2554'. [ 281.588366][T15228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.623553][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 281.717283][T15237] xt_hashlimit: size too large, truncated to 1048576 [ 282.046682][T15249] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 282.088149][T15249] bond4 (unregistering): Released all slaves [ 282.381283][T15260] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 282.428915][T15268] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 282.565502][T15273] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 283.421189][T15313] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 283.685887][T15322] netlink: 'syz.0.2577': attribute type 1 has an invalid length. [ 283.693782][T15322] __nla_validate_parse: 1 callbacks suppressed [ 283.693798][T15322] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2577'. [ 283.964086][T15338] netlink: 'syz.0.2584': attribute type 21 has an invalid length. [ 283.973233][T15345] netlink: 'syz.1.2583': attribute type 8 has an invalid length. [ 284.008798][T15347] H: renamed from dummy0 (while UP) [ 284.062748][T15339] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 284.235891][T15365] netlink: 'syz.0.2588': attribute type 142 has an invalid length. [ 284.293837][T15370] netlink: 'syz.0.2588': attribute type 142 has an invalid length. [ 284.596604][T15392] netlink: 'syz.1.2596': attribute type 2 has an invalid length. [ 284.653381][T15392] netlink: 'syz.1.2596': attribute type 8 has an invalid length. [ 284.687213][T15392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2596'. [ 284.882631][T15402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 285.046916][T15409] Bluetooth: MGMT ver 1.23 [ 285.137116][T15409] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.2603'. [ 285.185220][T15409] openvswitch: netlink: Flow key attr not present in new flow. [ 285.206972][T15417] tipc: Enabling of bearer rejected, already enabled [ 285.217242][T15416] netlink: 'syz.0.2605': attribute type 24 has an invalid length. [ 285.252323][T15420] xt_hashlimit: size too large, truncated to 1048576 [ 285.270803][T15421] veth0_to_bond: entered allmulticast mode [ 285.294578][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 285.314119][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 285.347306][T15422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 285.468536][T15429] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 285.510882][T15431] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 285.530970][T15431] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.277879][T15472] xt_bpf: check failed: parse error [ 286.325338][T15473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2620'. [ 286.407452][T15478] netlink: 'syz.0.2622': attribute type 4 has an invalid length. [ 286.470638][T15483] netlink: 'syz.0.2622': attribute type 4 has an invalid length. [ 287.091256][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 287.334581][T15539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2639'. [ 287.601394][T15549] 8021q: adding VLAN 0 to HW filter on device bond15 [ 287.696869][T15552] bond15: (slave bridge12): making interface the new active one [ 287.705940][T15552] bond15: (slave bridge12): Enslaving as an active interface with an up link [ 288.449021][T15628] tipc: Enabling of bearer rejected, already enabled [ 288.486175][T15628] bond11: entered promiscuous mode [ 288.491905][T15628] bond11: entered allmulticast mode [ 288.497633][T15628] 8021q: adding VLAN 0 to HW filter on device bond11 [ 289.048798][T15674] sctp: [Deprecated]: syz.2.2679 (pid 15674) Use of int in maxseg socket option. [ 289.048798][T15674] Use struct sctp_assoc_value instead [ 289.097827][T15673] sctp: [Deprecated]: syz.2.2679 (pid 15673) Use of int in maxseg socket option. [ 289.097827][T15673] Use struct sctp_assoc_value instead [ 289.099066][T15681] __nla_validate_parse: 6 callbacks suppressed [ 289.099118][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'. [ 289.135854][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'. [ 289.145356][T15681] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2678'. [ 289.156356][T15689] ------------[ cut here ]------------ [ 289.162249][T15689] 1 [ 289.162277][T15689] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#1: syz.0.2680/15689 [ 289.173995][T15689] Modules linked in: [ 289.178174][T15689] CPU: 1 UID: 0 PID: 15689 Comm: syz.0.2680 Not tainted syzkaller #0 PREEMPT(full) [ 289.187621][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.197760][T15689] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 289.202787][T15689] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 ba 16 ba f7 66 90 e8 b3 16 ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 11 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 289.222485][T15689] RSP: 0018:ffffc9000c88f1e0 EFLAGS: 00010282 [ 289.228683][T15689] RAX: 80e0d91ce52a2900 RBX: ffff88804a6c28c0 RCX: 0000000080000401 [ 289.236738][T15689] RDX: 0000000000000002 RSI: ffffffff8defae5a RDI: ffffffff8c27d100 [ 289.244792][T15689] RBP: ffffc9000c88f4e0 R08: ffffffff9011d1b7 R09: 1ffffffff2023a36 [ 289.252952][T15689] R10: dffffc0000000000 R11: fffffbfff2023a37 R12: dffffc0000000000 [ 289.261005][T15689] R13: 0000000000000000 R14: ffff88804a6c28c0 R15: dffffc0000000000 [ 289.269033][T15689] FS: 00007f06c14da6c0(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 289.278032][T15689] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.284689][T15689] CR2: 00007f06c14d9ff8 CR3: 000000004c81a000 CR4: 00000000003526f0 [ 289.292743][T15689] Call Trace: [ 289.296074][T15689] [ 289.299044][T15689] ip_push_pending_frames+0x8b/0x110 [ 289.304424][T15689] __icmp_send+0x118d/0x1590 [ 289.309067][T15689] ? __icmp_send+0x22b/0x1590 [ 289.313836][T15689] ? __pfx___icmp_send+0x10/0x10 [ 289.318860][T15689] ? ip_route_input_noref+0xad/0x270 [ 289.324239][T15689] ? __pfx_ip_route_input_noref+0x10/0x10 [ 289.330019][T15689] ip_options_compile+0x80/0xb0 [ 289.334952][T15689] ip_rcv_finish_core+0xaa2/0x1c00 [ 289.340112][T15689] ip_rcv_finish+0x14c/0x2a0 [ 289.344780][T15689] NF_HOOK+0x336/0x3c0 [ 289.348904][T15689] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.354084][T15689] ? NF_HOOK+0x9e/0x3c0 [ 289.358281][T15689] ? __pfx_NF_HOOK+0x10/0x10 [ 289.362972][T15689] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.368163][T15689] ? netif_receive_skb+0x102/0xc50 [ 289.373373][T15689] ? __pfx_ip_rcv+0x10/0x10 [ 289.377935][T15689] netif_receive_skb+0x45b/0xc50 [ 289.382958][T15689] ? __pfx_netif_receive_skb+0x10/0x10 [ 289.388458][T15689] ? __lock_acquire+0x6b5/0x2cf0 [ 289.393471][T15689] ? tun_rx_batched+0x185/0x790 [ 289.398359][T15689] tun_rx_batched+0x1de/0x790 [ 289.403096][T15689] ? __build_skb+0x62/0x440 [ 289.407650][T15689] ? __pfx_tun_rx_batched+0x10/0x10 [ 289.412931][T15689] ? tun_get_user+0x2354/0x3dd0 [ 289.417841][T15689] ? __local_bh_enable_ip+0xd0/0x130 [ 289.423207][T15689] ? tun_get_user+0x2669/0x3dd0 [ 289.428102][T15689] tun_get_user+0x2a78/0x3dd0 [ 289.432888][T15689] ? aa_file_perm+0x50e/0x15e0 [ 289.437782][T15689] ? __pfx_tun_get_user+0x10/0x10 [ 289.442864][T15689] ? aa_file_perm+0x192/0x15e0 [ 289.447684][T15689] ? ref_tracker_alloc+0x35c/0x4c0 [ 289.452869][T15689] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 289.458368][T15689] ? tun_get+0x1c/0x2f0 [ 289.462588][T15689] ? tun_get+0x1c/0x2f0 [ 289.466797][T15689] ? tun_get+0x1c/0x2f0 [ 289.471025][T15689] tun_chr_write_iter+0x113/0x200 [ 289.476100][T15689] vfs_write+0x61d/0xb90 [ 289.480427][T15689] ? __pfx_vfs_write+0x10/0x10 [ 289.485262][T15689] ? __fget_files+0x2a/0x420 [ 289.489906][T15689] ksys_write+0x150/0x270 [ 289.494307][T15689] ? __pfx_ksys_write+0x10/0x10 [ 289.499199][T15689] do_syscall_64+0x14d/0xf80 [ 289.502970][T15681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 289.503856][T15689] ? trace_irq_disable+0x3b/0x150 [ 289.519388][T15689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.525532][T15689] ? clear_bhb_loop+0x40/0x90 [ 289.530289][T15689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.536231][T15689] RIP: 0033:0x7f06c055d04e [ 289.540720][T15689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.560399][T15689] RSP: 002b:00007f06c14d9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.568861][T15689] RAX: ffffffffffffffda RBX: 00007f06c14da6c0 RCX: 00007f06c055d04e [ 289.576902][T15689] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8 [ 289.585033][T15689] RBP: 00007f06c0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 289.593067][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.601107][T15689] R13: 00007f06c0816218 R14: 00007f06c0816180 R15: 00007ffcb48a73e8 [ 289.609138][T15689] [ 289.612256][T15689] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.619572][T15689] CPU: 1 UID: 0 PID: 15689 Comm: syz.0.2680 Not tainted syzkaller #0 PREEMPT(full) [ 289.628974][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 289.639063][T15689] Call Trace: [ 289.642371][T15689] [ 289.645339][T15689] vpanic+0x56c/0xa60 [ 289.649392][T15689] ? __pfx__printk+0x10/0x10 [ 289.654016][T15689] ? __pfx_vpanic+0x10/0x10 [ 289.658563][T15689] ? is_bpf_text_address+0x292/0x2b0 [ 289.663881][T15689] ? is_bpf_text_address+0x26/0x2b0 [ 289.669120][T15689] panic+0xc5/0xd0 [ 289.672894][T15689] ? __pfx_panic+0x10/0x10 [ 289.677388][T15689] __warn+0x315/0x4f0 [ 289.681433][T15689] ? ip_rt_bug+0x2d/0x140 [ 289.685804][T15689] ? ip_rt_bug+0x2d/0x140 [ 289.690175][T15689] __report_bug+0x29a/0x540 [ 289.694718][T15689] ? NF_HOOK+0x336/0x3c0 [ 289.699029][T15689] ? netif_receive_skb+0x45b/0xc50 [ 289.704182][T15689] ? tun_rx_batched+0x1de/0x790 [ 289.709076][T15689] ? ip_rt_bug+0x2d/0x140 [ 289.713454][T15689] ? __pfx___report_bug+0x10/0x10 [ 289.718551][T15689] ? ip_rt_bug+0x2d/0x140 [ 289.722930][T15689] report_bug+0x16a/0x220 [ 289.727309][T15689] ? ip_rt_bug+0x2d/0x140 [ 289.731685][T15689] ? ip_rt_bug+0x2f/0x140 [ 289.736060][T15689] handle_bug+0x9c/0x200 [ 289.740356][T15689] exc_invalid_op+0x1a/0x50 [ 289.744927][T15689] asm_exc_invalid_op+0x1a/0x20 [ 289.749822][T15689] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 289.754802][T15689] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 ba 16 ba f7 66 90 e8 b3 16 ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 11 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 289.774446][T15689] RSP: 0018:ffffc9000c88f1e0 EFLAGS: 00010282 [ 289.780553][T15689] RAX: 80e0d91ce52a2900 RBX: ffff88804a6c28c0 RCX: 0000000080000401 [ 289.788569][T15689] RDX: 0000000000000002 RSI: ffffffff8defae5a RDI: ffffffff8c27d100 [ 289.796598][T15689] RBP: ffffc9000c88f4e0 R08: ffffffff9011d1b7 R09: 1ffffffff2023a36 [ 289.804603][T15689] R10: dffffc0000000000 R11: fffffbfff2023a37 R12: dffffc0000000000 [ 289.812638][T15689] R13: 0000000000000000 R14: ffff88804a6c28c0 R15: dffffc0000000000 [ 289.820666][T15689] ip_push_pending_frames+0x8b/0x110 [ 289.825995][T15689] __icmp_send+0x118d/0x1590 [ 289.830769][T15689] ? __icmp_send+0x22b/0x1590 [ 289.835525][T15689] ? __pfx___icmp_send+0x10/0x10 [ 289.840546][T15689] ? ip_route_input_noref+0xad/0x270 [ 289.845890][T15689] ? __pfx_ip_route_input_noref+0x10/0x10 [ 289.851696][T15689] ip_options_compile+0x80/0xb0 [ 289.856615][T15689] ip_rcv_finish_core+0xaa2/0x1c00 [ 289.861791][T15689] ip_rcv_finish+0x14c/0x2a0 [ 289.866432][T15689] NF_HOOK+0x336/0x3c0 [ 289.870557][T15689] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.875718][T15689] ? NF_HOOK+0x9e/0x3c0 [ 289.879911][T15689] ? __pfx_NF_HOOK+0x10/0x10 [ 289.884555][T15689] ? __pfx_ip_rcv_finish+0x10/0x10 [ 289.889763][T15689] ? netif_receive_skb+0x102/0xc50 [ 289.894927][T15689] ? __pfx_ip_rcv+0x10/0x10 [ 289.899481][T15689] netif_receive_skb+0x45b/0xc50 [ 289.904495][T15689] ? __pfx_netif_receive_skb+0x10/0x10 [ 289.909994][T15689] ? __lock_acquire+0x6b5/0x2cf0 [ 289.914983][T15689] ? tun_rx_batched+0x185/0x790 [ 289.919891][T15689] tun_rx_batched+0x1de/0x790 [ 289.924617][T15689] ? __build_skb+0x62/0x440 [ 289.929253][T15689] ? __pfx_tun_rx_batched+0x10/0x10 [ 289.934511][T15689] ? tun_get_user+0x2354/0x3dd0 [ 289.939394][T15689] ? __local_bh_enable_ip+0xd0/0x130 [ 289.944739][T15689] ? tun_get_user+0x2669/0x3dd0 [ 289.949767][T15689] tun_get_user+0x2a78/0x3dd0 [ 289.954517][T15689] ? aa_file_perm+0x50e/0x15e0 [ 289.959318][T15689] ? __pfx_tun_get_user+0x10/0x10 [ 289.964383][T15689] ? aa_file_perm+0x192/0x15e0 [ 289.969224][T15689] ? ref_tracker_alloc+0x35c/0x4c0 [ 289.974381][T15689] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 289.979885][T15689] ? tun_get+0x1c/0x2f0 [ 289.984092][T15689] ? tun_get+0x1c/0x2f0 [ 289.988286][T15689] ? tun_get+0x1c/0x2f0 [ 289.992499][T15689] tun_chr_write_iter+0x113/0x200 [ 289.997569][T15689] vfs_write+0x61d/0xb90 [ 290.001867][T15689] ? __pfx_vfs_write+0x10/0x10 [ 290.006700][T15689] ? __fget_files+0x2a/0x420 [ 290.011339][T15689] ksys_write+0x150/0x270 [ 290.015715][T15689] ? __pfx_ksys_write+0x10/0x10 [ 290.020639][T15689] do_syscall_64+0x14d/0xf80 [ 290.025271][T15689] ? trace_irq_disable+0x3b/0x150 [ 290.030325][T15689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.036443][T15689] ? clear_bhb_loop+0x40/0x90 [ 290.041169][T15689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.047093][T15689] RIP: 0033:0x7f06c055d04e [ 290.051535][T15689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 290.071262][T15689] RSP: 002b:00007f06c14d9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 290.079745][T15689] RAX: ffffffffffffffda RBX: 00007f06c14da6c0 RCX: 00007f06c055d04e [ 290.087745][T15689] RDX: 0000000000000032 RSI: 0000200000000000 RDI: 00000000000000c8 [ 290.095752][T15689] RBP: 00007f06c0632c91 R08: 0000000000000000 R09: 0000000000000000 [ 290.103762][T15689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.111777][T15689] R13: 00007f06c0816218 R14: 00007f06c0816180 R15: 00007ffcb48a73e8 [ 290.119808][T15689] [ 290.123463][T15689] Kernel Offset: disabled [ 290.127799][T15689] Rebooting in 86400 seconds..