last executing test programs: 13m46.644107202s ago: executing program 3 (id=1723): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x5c01f7190f432346) (async) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$cgroup_devices(r4, 0x0, 0x6) (async) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080)) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="185039ff4bd133f4a524e54a55a4008018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x9}, {0xd, 0x5}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x1ff, 0x1, 0x0, 0x0, 0x4, 0x6}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 13m46.24130081s ago: executing program 3 (id=1727): r0 = socket$kcm(0x2, 0xa, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$unix(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x30, 0x800}, 0x64004084) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'veth0_virt_wifi\x00', @random="020000c6fa00"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf255c00000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x40004) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r5, &(0x7f0000000040)='nl80211\x00', 0x107480, &(0x7f0000000080)={@_ha_fsid={[0x7f, 0x81]}, {0x3, 0x81, 0x100, 0x1}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x1}) bind$bt_l2cap(r9, &(0x7f0000000300)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7}, 0xe) 13m45.296532205s ago: executing program 3 (id=1736): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 13m42.670470882s ago: executing program 3 (id=1753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000a00000000000000100000026b1104000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) close(0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xf44, 0x0, 0x5}) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b005d010000080001007063690011000200303030303a30303a31302e300000000008000b00080000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00400f0000080001007063690011000200303030303a30303a31302e300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000000008000b0000000100080001007063690011000200303030303a30303a31302e300000000008000b0004000000080001007063690011000200303030303a30303a31302e300000000008000b00060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0001000000"], 0x164}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 13m42.461470612s ago: executing program 3 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000040000000001a0a0000000600010011"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000080)) 13m41.00198671s ago: executing program 3 (id=1759): unshare(0x4a000200) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r1, 0xe3036000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x2, 0x0, 0x3fc, 0x0, 0x32, 0x3}, 0x9c) 13m25.832630219s ago: executing program 32 (id=1759): unshare(0x4a000200) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x13, r1, 0xe3036000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x2, 0x0, 0x3fc, 0x0, 0x32, 0x3}, 0x9c) 6.812229526s ago: executing program 2 (id=6273): socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'bond0\x00', @local}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000340004800500030001000000050003000100000005000300050000000500030002000000050003000500050000000300020000000800020002"], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/11, 0xb}, {&(0x7f0000000280)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f308", 0x1b}], 0x3) (async) r10 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r11 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0xfffffffd, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0x5, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x3ff, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x800000, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x103, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0x8, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0x200a89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x5, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x1, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x9cd97d8320141b74}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x17}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x4000880) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB="1888000000d882a86a2ed6e265546750080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222, 0x1e00, 0xc}, 0x94) 6.091442522s ago: executing program 2 (id=6282): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000000b05000000000000000000030000050800024000000005090001006d61726b00000000080003"], 0x7c}}, 0x80) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000c49851b7864433aa00fbdbdf2500000000", @ANYRES16=r2, @ANYRESHEX], 0x40}}, 0x0) (rerun: 32) sendto$packet(r0, &(0x7f0000000400)="05d936207c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad67dea9c2a0214925e7b53bcc6e1bf8e5b8da6d974aff23fcdcde5c110b2ef9240eac067b4a0904d66844f844c8647ca4a986c1839fe7e7baed36443f4aff002e730273e0669c5c43b7d89d040000002c60abb7331d83657f9f0a244c3a9964c69e51cb6146473c094eb819cccb3c039a350f056054ddde0d23c11936eef4bb00aedf8f3feac1141562", 0xa5, 0x44, &(0x7f00000003c0)={0x11, 0x7, r3, 0x1, 0x0, 0x6, @random="c80b477717b5"}, 0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000280)='\x00\xe3\xfdj\x96H\x9c\xa1\vo\xb1\xb2\x1a\x1eN\x87B\xea\xfb\xb4\x915W\xc4FC`\xa4\xd2\x0e\x8a\x9c\x00\xbd\x99\xeb\xf3\xf5P\x16>\xc1\xd7\x98\rw\xae\a\xc8\x00\x00\x00\x00z\x86RN\xcf\xa3\xd7\xa0\x82\xdd\xdb\x15]\x19oi\xc1M?\xb6L\x04_\xfd9\xc37\xa8\xa7\x85*\xbfL0u\xee66\x91)3\xad\xeb\xa4\x1a\n\x02\x04)\x91ET\x8f\xd1Ai#b(d\xc2\xe7\xfeI\xe9z\xb3\xaf\xf0\xfauk\xb2\xf4n\x00\x0e\r\xfdD8\xa5C\x9aL\xe3\x8c\x04>\x17\xe3z\x86)\xd9#~5\xa5\xd9P\x88i\xe8(\x8a\x8a\x187}\x81\xe1[U\xc5\xf9\x19\x8b\xb5\x8c\n\x14\xe2x\xfdk#\xe9\x99\xb2\xccw*\x8a\xa9\x89\x02\xf3\xa0\xef\x90p\xca\x90\v[\xda\x15\x0f/\x1d\x9d\x7f/\tp\xd4\x8d\x80S@\f\xb9\xf4\xbb\xcd\xf4\x80\x92\xfb\xf3gJ\x9b\xe4r]q\xbdJ*I\x8f\xa2\xac\xb7\xee\x97\v\xdeH3\x9d\x04\xedg/\xd0\x85\xa1Z\x1e\x92\xacb\tT!Bm\x84\'\x8cSe\x9d%Spb\xe0\x1d\x84\xcf\xf4\x1d\xfc\xbb3\x1a<$\r\x12\xa3\xbc\xa8KU\x92*\x89\x95\xa6\xf4\x861S\xe9\v\xeal\xa7\x9b', 0x624240, &(0x7f0000000040)={@_ha_fsid={[0x9, 0x8]}, {0x7, 0x3, 0xd85a, 0x6c}}, 0xffff, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0x8}) (rerun: 64) 5.069121087s ago: executing program 2 (id=6291): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000000)=@default_ap_ssid, 0x6, 0x2) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', 0x0, 0x0, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x14, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) writev(r4, &(0x7f0000001480)=[{&(0x7f0000000080)="18bbbf2f1bfe6a165b0b206c16582ceae143020d398880dfbfd5fd521c124f8bd58c94fb784cd3a69b32ee36bd7d7ed50ca7585bd0521517e24bffe7a2974548bd998fb8312d5ea41810edb810dc200c57a7e12100d9f648cb0068c9d2deb70b7414ef6ebb1aefe3474e70fb4aa8fa696a92f15895049bf87b276de624b4d72a9dd45b5cfddba17b32a7caf5600e97373612c15d20d30a", 0x97}, {&(0x7f0000000140)="7f745bbbc9814e557d18f53c70d80eeab94703d24c7729696758", 0x1a}, {&(0x7f0000000180)="c0f9e663dbdb3cb40543948a71750a116d541dabeb40811b35aae64bec3a77cef730c47e9566d0905afe6ce94f6a2e4ba9e89986c8d3bc3b6b292fd51e6209c306b0a541dc269e1d9ba3156bd6b5876b114db58173aeae5706695b137c9dbd0e6e", 0x61}, {&(0x7f0000000240)="2587baa4af93fa2cd9a07556147c3d21648ba5993d9e93ccce7b6671f29652ce052a5e6e88efbad2", 0x28}, {&(0x7f0000000280)="bafbbf43b2b1d3d042dcfc1ab7553cc85a7d9b87816524a7cb472a7f1bb5ef9cc2f2884ff1d8be6cf09949489b8554036535e33cbaeaa46a4beafed5c54f5e946677e1dfa59c2b9fd86c4523579c78e3bb6dfeab89767d95315057edd993d45d085a12e3046dd2d1cb79fbfef12e8ea20c0faeec400251a61bde6fb69463214e431d9cbe9563202f96cb6982cc95a33d2518dd13a7ec1a030e11767a9a9f7e21401cc5f0eee9b5ca116173e779d7c0", 0xaf}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="dc66bec9f8f3abd6b50ce4739bdf4275330eb1c554c383aa10acbed76bc79125d79327730885375ab4942bc99455337f32c9c7c168f4d3ad", 0x38}, {&(0x7f0000001380)="30c0b0580d12e906d174311cecb71a9078efc503a128b5bda8e73562ef1476c91a77da5db29d34c62a69294559dd4d80da015058b26c1f2e5be59ed5d67b0f98b9616f99aab71a28c7edd01368f921ef21", 0x51}, {&(0x7f0000001400)="b9ddba98bd176a4a3ea21aae7c409adc574355f4f8dccf7198ff9f2ccc1b61ca52d97070b167c02f88038dc71cf687532cca5276733a9fd25da53a2b78636aa041910e86368a95ec", 0x48}], 0x9) 4.866487428s ago: executing program 2 (id=6293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910", @ANYRESHEX=0x0], 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r3, 0xb, 0x22, "01a637a7622526750575ae8fcdbc1aae419c353be9e5efe2a63403c669a6ef9bc72d"}, 0x2a) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r4, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002340)="98e1c6", 0x3}], 0x1}}], 0x1, 0x4840) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0000000000000000000400", 0x0, 0x1008, 0x0, 0x0, 0x23, 0x0, 0x0, 0x2, 0x9}, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) close(r1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910", @ANYRESHEX=0x0], 0x0) (async) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r3], 0x20, 0x6044}, 0x6) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r3, 0xb, 0x22, "01a637a7622526750575ae8fcdbc1aae419c353be9e5efe2a63403c669a6ef9bc72d"}, 0x2a) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002340)="98e1c6", 0x3}], 0x1}}], 0x1, 0x4840) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad0000000000000000000400", 0x0, 0x1008, 0x0, 0x0, 0x23, 0x0, 0x0, 0x2, 0x9}, 0x50) (async) 4.575127503s ago: executing program 1 (id=6296): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) close(0x3) r5 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) select(0x40, &(0x7f0000000000)={0xc, 0x0, 0x4, 0xffffffffffffff7f, 0xca}, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0xf03a0005) 4.488118849s ago: executing program 2 (id=6297): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x19}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x20040800) unshare(0x2a060400) listen(0xffffffffffffffff, 0x3) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200020002000000bd00000000001000330002030000003fff00000000000200000000000000000000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.259965141s ago: executing program 4 (id=6300): r0 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x21}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) (async) shutdown(r1, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) mmap(&(0x7f0000bd1000/0x3000)=nil, 0x3000, 0x3f749adea3d0f8c0, 0x2010, r4, 0x94997000) (async) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000240)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x108, 0xa, 0x6, 0x3, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9471}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_batadv\x00'}}, {0x14, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xd, 0x1a, '-[^\'%%%v\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv0\x00'}}]}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6ad9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x108}, 0x1, 0x0, 0x0, 0x4800}, 0x40894) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x100010, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 4.229081832s ago: executing program 2 (id=6301): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xf, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x10000000}, 0xc) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYRESHEX=r1, @ANYBLOB="0fa5febd17dcd8cf4d586cafb5b35ecf02466540d51f318fd8ec3ca5f2179a5580530a", @ANYBLOB="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", @ANYBLOB="08b6757e43e97ad1976a05e263ba4dee29887c6fd7bb1f0c705087fa7f44b1ff067eb21131535395510109a0985329d692049271a9fc8b64be9c96109a38812499ef7709bb7db22e7004049c8da66af56ce8b59d08a832ea395c90495d92fbfa4f2aaa4d3fe29bfbc0e5c58cfc5f7ad1a5d38e92dd4e903d9efc37648308c377824c75a0977886910b24937d03a3580f8e6fab24a1c9b80b8bcd9b5e7d58318315f223e87f85b23767be02f7d759eb2a215ca03b378089"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000044) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="141100002f00010000000000fcdbdf250211f2800c0003000aac0f0000000000140001"], 0x1114}], 0x1, 0x0, 0x0, 0x1}, 0x20000000) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto(r4, 0x0, 0x0, 0x801, 0x0, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x38, r8, 0x7, 0x70bd26, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x0) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d000000dffe02006e657464657673696d3000000800030003000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc008}, 0x4008010) (async) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x184, r9, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0xf}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff9}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x28}, {0x11}}, {0x8, 0xb, 0xb2b9}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x4}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6}, {0x8, 0x13, 0x791ff789}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000003}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x8}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x2400081c}, 0x20000084) r10 = socket$qrtr(0x2a, 0x2, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x1b}}}}}, 0x36) (async) connect$qrtr(r10, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r10, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x810, r10, 0x35681000) (async) sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=[@pktinfo={{0x24, 0x29, 0x3e, {@private0}}}], 0x28}, 0x4004000) splice(r0, &(0x7f0000000040)=0xfffffffffffffffe, r3, 0x0, 0xb, 0xc) 4.104295216s ago: executing program 4 (id=6302): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010027bd7000000000000a0000"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 3.961615841s ago: executing program 4 (id=6305): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102"], 0x2dc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0xffff5257, 0x22e2e, 0x100, 0x5, 0x3, 0x0, 0x0, 0xffff}}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000040000580"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) read$rfkill(r3, 0x0, 0x3a) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000007c0)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1, &(0x7f00000001c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfda, &(0x7f0000001e00)=""/4058}, 0x94) bind$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18) sendmmsg(r5, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040891) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg\x00', 0x800}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000480)={@val={0x0, 0x8847}, @void, @eth={@multicast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x15, 0x28, 0x64, 0x0, 0xc2, 0x6, 0x0, @private=0xa010100, @broadcast}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0xf, 0x1, 0x200, 0x0, 0x4}, {"083137a03a1ae6bc37f16783ecd269aece5ee4284cb423f6cb8ac0e2d14d3bc7cfc7e58aa5832dd3bad02f759f3ad458e8e2fccc1650f5c44f4bcc0650eadff5b52626fd9454fdf22f3f92bede85ebff41cf985dda07084f67b0887366a14f37691032703efc0b2ccbebf499945ca786618146cc79d1de9b7fec55af649fd0d90e56bdf62528bc17c725a6b2d5f0a0433415e2112d95b3e335f95b9f440ee6e780c4"}}}}}}}, 0x54) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3ff}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x340, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x3}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00', {}, {}, 0x1d}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d0) 3.837101823s ago: executing program 1 (id=6306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000880)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8b6}, @initial, @device_a, @device_a, {0x4, 0x2}, "", @value={0x5, 0x0, 0x2, 0x0, 0x45}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xcd, "f41a0bb11e5bdd252a9d46c7627c454eab36147e6be140cdb943c2479afe69791eeb4389cf621868610a17376824c0f55c51fcf0e4e7dd332abffa88b68976856e0c4629a9db6c7705da372d79514434bee13d0e03d80c9486784eb962bbafae900588cba2c7d1c12396d6c7b5ce160160ae51f7270cd4a8fc4bd7b03aa45382ae3e978e7766f0abfbecc2466f5d0ef2ed1c264fd68f2d09856f738698ea0423320c90791526204fd2f689703203ea4124211c8293f9bb8bf6ec4634e6b54244cbde2bb9ce55106e8988a6c023"}, {@device_a, @device_a, 0x80, "cda5bc73cfbf64deddb931c7e3f8cfdfca144ac0db8f4f0ce1382d61ced419ea9860f72978e1854a2b459cf7cf97c4b25fd237cd2c4073baeadb341e829ec6d2c1e86ca9cff4f0af1d5ec2083d611a785af2ff17b30ee584b52ccb90f37501d0459b0063f74b74bf11389cd25a269bbffd5169582c0b67553a32510222abc004"}, {@broadcast, @device_b, 0xcc, "4b5ec6021e57e0033b82af4ecd762e94ea138ee32c96683400bd94677dbdbf6076d9c921b31d6d4eb35bffb8c7fb93c1e0807330886b4f45273589c8d62573fc01134e79dbb080f28bc8379b422e00c15e29758c89ece271e4647bd4395b42c0b8995e6b1147f58320d95bdff842fbd9c4c2f4ed06650702fda8e1abc7121078ab09c1321b3581e117f41c3a9b3c65fbc298e70aa3f5a639c90b406cd47aa1327c6074349f7b79de31eb7bd29c527398acaa7234fa07d75dc270d4280b27c9b3cdbbcbe7848be708c920427a"}, {@device_b, @broadcast, 0xfb, "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"}, {@broadcast, @broadcast, 0x57, "4372a8a7cfc55149eee83720dddb02d949e79825bb1e9d857b2870a532974b2fc75e02bbe5ff5b5bd27c865efd02ba2c1f7242eb98cd51429303c8001a20bf5ac94da3fe629152c361c37c2730db83a0925acfd1bd343f"}, {@device_a, @device_b, 0x1000, "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"}]}, 0x13ea) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd2a, 0x70bd2a, 0x70bd28, 0x6, [0x6]}}, @XFRMA_SET_MARK={0x8}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x160}}, 0x0) 3.660618579s ago: executing program 0 (id=6308): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0xfffffffc, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0xff}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061190400000000009d00000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0xf, r1}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.432910243s ago: executing program 0 (id=6309): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x8004}, 0x8000000}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={@null, 0xc, 'lo\x00'}) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x44) 3.42461671s ago: executing program 4 (id=6310): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006200)=[{{&(0x7f0000000b40)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180100000000000029000000320000003200000000000000"], 0x18}}], 0x1, 0x20000040) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) r4 = epoll_create1(0x0) shutdown(r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x30000009}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b00)={0x0, 0x130c}, 0x1, 0x0, 0x0, 0x4040014}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000fcb000), 0x4) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x48}, 0x840) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x2, 0x0, 0x200, 0x9}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e24, 0x3, @local, 0x3}}}, &(0x7f0000000480)=0x84) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000040)=0x4) 3.084764168s ago: executing program 0 (id=6311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6(0xa, 0x3, 0x9) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x400}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c508000000000000080002"], 0x160}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x1a}]}}}]}, 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000280)="206b2e603980bdf6d281932d2f8fcab5f380952c8518454cdc8eb5991cd793b27a6b6affdb60289ffb17db50fbd9d86e1b277176e9c5b705598fe67d0489f88823ae1001bb654ee8bd211614abb4cedb1ef75edc2583f97fed18af4be729cd6d5c7a84c22298c40537b3e3b7da15c4ce0d318c9d1da88e9b1cd5884aef18eef9f5fbb8c9e6f451dc64c5c1f934044da17d53c269bff38a65bbcc390998aef102f74855e422733f8193c13b4169c2a86fbad37ca4a30146e6a364fa2d0f958c739dd3c41ea5e4f58e6fceaff13a768fff97159a464bc90c565f15df740120fa0e04d481", &(0x7f0000000380)=""/7, &(0x7f00000003c0)="8be611da51104c7f54a8d784f31cd880e8aa613b98ca9852c8fbdb7ce5a0a7b79cfe4a9981082e2e6ca11948370d0dc4b0c74114cc44f2e743b946d38d94c0e36fbbd97179a95db75b52c9162289b428d9a11c5dea84b741acd0a524d0c8b506a413120d4796d5e55863758966146f2929c5737a8fd2fb21c902f435dd0bf25d0999cfb5f52ae8f2bfe6f46aaab06b71c7f5bbbb92", &(0x7f0000000480)="aff866174e86b4d60e532b43d3d66e81c9fcf4a092c9e9de4755b031fef80a2dc8908a33a9b217836460aee376ae096f90f416588f", 0xffff8000, r7}, 0x38) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x426}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008090}, 0x4008841) 2.964235163s ago: executing program 0 (id=6313): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300e000000100000000fe9a90780200000000000000ade49ef6aa34fe98b30d791cca255c416b720787310f429ab6636c74eb5d71011b4b628a75b4481d244f3addfd7f1b5343ac7fcf5a09a6b7769acfffbd55ff9cba9a51d00dbbdff6eaf5bdb742018c59a07f"], 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040), 0x10) (async) r7 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r10 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000000)={0xa0000001}) (async) epoll_wait(r10, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x341000, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000200)={'team0\x00'}) 2.940972682s ago: executing program 1 (id=6314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x700, 0x1, 0xffff, 0x7ff, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0xc, 0x9d, 0x0, 0x1, [0x4, 0xffff6ffa]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000180), &(0x7f0000000280)=@udp, 0x2}, 0x20) 2.730576667s ago: executing program 1 (id=6315): r0 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x34, r3, 0x8de13c6b70ae92c3, 0x41004, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x40040) close(r1) (async, rerun: 64) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"077c8d09b0cbbcde475ce2d1d05cf533", 0x0, 0x0, {0x10, 0x2}, {0x8001, 0x8001}, 0x1, [0x80000000, 0x4, 0x700000, 0xffffffff00000001, 0x6, 0x0, 0xff, 0x60000, 0x3, 0x3, 0x100000000, 0x1, 0x43, 0x0, 0x2, 0x1]}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r6) 2.71894871s ago: executing program 0 (id=6316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x20400) socket$nl_rdma(0x10, 0x3, 0x14) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0xed, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r3, 0x0) (async) listen(r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.455884031s ago: executing program 1 (id=6318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.411538919s ago: executing program 0 (id=6319): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240000c4, &(0x7f0000000100)={0xa, 0x2, 0xfffd, @empty, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000001140)=0x40) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000fc0)={'nat\x00', 0x0, 0x0, 0x0, [0x8000000000000000, 0xa, 0x7, 0x7f2a, 0x1ff, 0x1]}, &(0x7f0000000000)=0x78) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000000)="dd", 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) 2.311574341s ago: executing program 4 (id=6321): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r2, 0x0, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (rerun: 64) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x7, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@gettaction={0x12c, 0x32, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x48000}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x12c}}, 0x4000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.260569661s ago: executing program 1 (id=6322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000010400000000feffffff0000000020716cb9efeae6c9fd352bbc1521d90a868e6278d92fd1605411aec684e52f8027dafab6e9b4c59923e102b346dff206f66761cbc738869deb4e7e1f63c3c9e74eb33967e154da5067f1fe76d868a63503d036ee044a94eeb7200ddea46bdb65404808000000d8f39c1eaedcc672866765812c45d246857cef12e9a15bb8384370bbf6b9014fc2d2b865fe9385b052568a802facb67027e4dcc8b136d443583c5ad7d22acf71855cc33d0ccee4f0dcd82433aeda3361e390d92690b6170f493c85f39a654be8bccdf7baa681225414d8fe97c739ba71ecb95b6af1ed4d256975afdaf7035aadf84c77490f19e2be2c1cd119051843db2667b3ca01acc9daeaf2007c55eef2db8c9a829beb06fb5f2bd684bdffaa7ccd7230065e4116fdce0e7ae69655e41600"/329, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001c000000000014000300626f6e643000"/56], 0x50}}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0xfffe, 0x2}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x80c4}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x10000, 0xfbffffff, 0xf}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x600000c0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, 'u]['}, @NFC_ATTR_FIRMWARE_NAME={0x17, 0x14, 'cgroup.controllers\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '].-\xe6['}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '-'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c0}, 0x40041) 2.159474235s ago: executing program 5 (id=6323): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}}, 0x90) 1.971497362s ago: executing program 4 (id=6324): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x2, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x20008002}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r4, 0x401, 0x70bd2d, 0x25dfdbfd, {{}, {0x0, 0x800b}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40012}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="581400002d00010000000000ffdbdf25037c000008000180040004803c140280361402800c"], 0x1458}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$rds(0x15, 0x5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) socket$kcm(0x10, 0x2, 0x4) close(r6) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000400)=0x2, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3221}, 0x1c) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1d, 0x0, 0x71) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES16=r3, @ANYRES16=0x0, @ANYRES64=r6, @ANYRES32, @ANYBLOB="000000990000000000000000000000127113a1935a9a0b0000000040"], 0x48) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000000), 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0xd, &(0x7f0000000200)=ANY=[@ANYRESDEC=r9, @ANYRESDEC=r7, @ANYRES16=0x0, @ANYRESOCT=r10, @ANYRES16=0x0], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.876652299s ago: executing program 5 (id=6325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000feffffff000000000000000018010000646c6c2500000000002020207b1af8ff00000001000006ff0a00b802000008000000b7ff850000009b000000950000000000000182fbbef2e4c4ef1231941bc08343bd033e4f265f1c47b50266428a43a0afee4978b51f49d37cdbeca83aa1e1fee18e93fdad3c6e0de95224468edf93e4a20c1ae6a0ed4eaa000000000000000044212572068f60d76c3868296fffe6e2668da3117335e25079b92479021b72157c59159af80e2178570f"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.764225158s ago: executing program 5 (id=6326): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000cdbc8ce6b77b000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 1.626685164s ago: executing program 5 (id=6327): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001c00000000d5d99e03fc24000010d58361670000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0xd}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) write(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x80) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000030701010000000000000000000000070c000640000000000000000ff4ff0440000000af666fb90073797a300000000008000540000000013c000780080002400000000003fd01400000000d0800014000000002080001400000000908000240000007b408000140000007ff08000240000000040c0003400000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 343.308074ms ago: executing program 5 (id=6328): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x5}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x4000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20000400) getsockopt$inet_tcp_int(r3, 0x6, 0x10, 0x0, &(0x7f0000000280)=0xfded) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x18, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x60600) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x110e22fff6) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000000c0)) r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r12) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r13, 0x20, 0xfffffffe, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}}, 0x20088c4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000914f14040430aeea381de818bfde5063db7aa37c180c8d21b2266fbf85ba3b3afcd753a4b25065eed05bca8807b7dc537ee01a383bb410bace83aba1445b401a4ce2a407f04357e8435fa98fe97589dffe418791452d72bbc7cffff54b290800bb610775aacac926bfb8adea", @ANYRES32=r1, @ANYBLOB="ff0700"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0100000004000000000200"/28], 0x50) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r12, 0x40106e80, &(0x7f0000000140)={0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x34, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x1e, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @printk={@lld}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ldst={0x1, 0x1, 0x3, 0x0, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_idx={0x18, 0x7}]}, &(0x7f00000005c0)='GPL\x00', 0xe, 0xe1, &(0x7f0000000600)=""/225, 0x41000, 0x28, '\x00', r11, @fallback=0x2, r6, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x2, 0x8, 0x2}, 0x10, r15, r5, 0x5, &(0x7f0000000b40)=[r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x5, 0x5, 0xf, 0x4}, {0x0, 0x5, 0x7, 0xc}, {0x5, 0x5, 0x3, 0x1}, {0x1, 0x1, 0x3, 0x7}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0x80000001}, 0x94) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 0s ago: executing program 5 (id=6329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x14, 0x3, 0x3, 0x801}, 0x14}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x24044000}, 0x40) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e32, 0x68, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff00030004"], 0x28}, 0x4004004) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000005100)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x2c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48010) kernel console output (not intermixed with test programs): 719088][T26231] ? __pfx___sys_sendmmsg+0x10/0x10 [ 890.719119][T26231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 890.719161][T26231] ? ksys_write+0x242/0x270 [ 890.719220][T26231] ? __pfx_ksys_write+0x10/0x10 [ 890.719256][T26231] __x64_sys_sendmmsg+0xa0/0xc0 [ 890.719279][T26231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.719304][T26231] do_syscall_64+0x174/0x580 [ 890.719327][T26231] ? trace_irq_disable+0x3b/0x140 [ 890.719355][T26231] ? clear_bhb_loop+0x40/0x90 [ 890.719382][T26231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.719403][T26231] RIP: 0033:0x7f926e19de99 [ 890.719424][T26231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.719442][T26231] RSP: 002b:00007f926f0e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.719465][T26231] RAX: ffffffffffffffda RBX: 00007f926e425fa0 RCX: 00007f926e19de99 [ 890.719480][T26231] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 890.719494][T26231] RBP: 00007f926f0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 890.719507][T26231] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000001 [ 890.719520][T26231] R13: 00007f926e426038 R14: 00007f926e425fa0 R15: 00007ffcf3f9a678 [ 890.719553][T26231] [ 891.011909][T26233] rdma_op ffff88808905f9f0 conn xmit_rdma 0000000000000000 [ 891.069873][T26236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4954'. [ 891.080092][T26236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4954'. [ 891.091073][T26236] netlink: 500 bytes leftover after parsing attributes in process `syz.2.4954'. [ 892.620606][T26269] vlan2: entered promiscuous mode [ 892.625807][T26269] bridge0: entered promiscuous mode [ 893.169603][T26279] rdma_rxe: rxe_newlink: failed to add syz_tun [ 893.412512][T26269] 1ªX¹¦À: left allmulticast mode [ 893.835718][T26269] batman_adv: 61ªX¹¦À: Interface deactivated: batadv_slave_0 [ 893.878270][T26269] batman_adv: 61ªX¹¦À: Interface deactivated: batadv_slave_1 [ 894.117400][T26269] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 894.935522][T26269] vlan2: left promiscuous mode [ 894.942780][T26269] bridge0: left promiscuous mode [ 894.994589][ T7233] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.003515][ T7233] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.012450][ T7233] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.021332][ T7233] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.195366][ T7233] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.204390][ T7233] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.278306][ T7233] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 895.287244][ T7233] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.650775][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4974'. [ 895.766273][T26321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4975'. [ 895.784894][T26321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4975'. [ 896.309051][T26346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4981'. [ 896.452441][T26351] IPVS: Unknown mcast interface: macsec0 [ 896.459068][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4983'. [ 896.742011][T26360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4984'. [ 896.755536][T26359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4985'. [ 897.162204][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4990'. [ 897.462261][T26385] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4993'. [ 897.471974][T26385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4993'. [ 897.497390][T26385] openvswitch: netlink: Flow key attr not present in new flow. [ 897.732711][T26391] tipc: Started in network mode [ 897.777316][T26391] tipc: Node identity b68c8d967eef, cluster identity 4711 [ 897.784658][T26391] tipc: Enabled bearer , priority 0 [ 897.808080][T26390] tipc: Disabling bearer [ 898.033999][T26401] lo speed is unknown, defaulting to 1000 [ 898.041734][T26401] lo speed is unknown, defaulting to 1000 [ 898.665752][T26413] netlink: 'syz.4.5000': attribute type 11 has an invalid length. [ 899.750578][T26450] syzkaller0: entered promiscuous mode [ 899.756102][T26450] syzkaller0: entered allmulticast mode [ 900.049149][T26455] erspan0: entered promiscuous mode [ 900.070416][T26455] erspan0: entered allmulticast mode [ 900.739367][T26475] __nla_validate_parse: 5 callbacks suppressed [ 900.739426][T26475] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5019'. [ 900.798778][T26475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5019'. [ 901.183170][T26483] netlink: 'syz.0.5020': attribute type 8 has an invalid length. [ 901.425012][T26487] netlink: 'syz.0.5022': attribute type 9 has an invalid length. [ 901.500852][T26490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5022'. [ 901.809192][T26493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5024'. [ 902.378072][T26506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5027'. [ 902.623922][T26514] x_tables: duplicate underflow at hook 1 [ 902.638548][T26514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5030'. [ 902.848033][T26517] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5030'. [ 902.954232][T26529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5033'. [ 903.090470][T26529] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 903.527597][T26544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5039'. [ 903.572902][T26544] gretap0: entered promiscuous mode [ 903.602226][T26544] vlan4: entered promiscuous mode [ 903.884224][T26557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5042'. [ 903.897209][T26557] xt_TCPMSS: Only works on TCP SYN packets [ 903.964487][T26553] lo speed is unknown, defaulting to 1000 [ 903.972198][T26553] lo speed is unknown, defaulting to 1000 [ 904.870313][T26562] lo: entered allmulticast mode [ 905.013215][T26585] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 905.065007][T26586] nbd: must specify a size in bytes for the device [ 905.424634][T26595] xt_hashlimit: size too large, truncated to 1048576 [ 905.989779][T26605] netlink: 'syz.4.5051': attribute type 1 has an invalid length. [ 906.076902][T26605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 906.242727][T26605] __nla_validate_parse: 1 callbacks suppressed [ 906.242750][T26605] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5051'. [ 906.310888][T26605] bond6: entered promiscuous mode [ 906.315992][T26605] bond6: entered allmulticast mode [ 906.525141][T26617] tipc: Enabled bearer , priority 0 [ 906.570518][T26617] syzkaller0: entered promiscuous mode [ 906.576042][T26617] syzkaller0: entered allmulticast mode [ 906.594479][T26617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5055'. [ 906.632663][T26617] openvswitch: netlink: Flow actions attr not present in new flow. [ 907.432121][T26642] bridge6: entered promiscuous mode [ 907.437396][T26642] bridge6: entered allmulticast mode [ 907.445767][T26642] team0: Port device bridge6 added [ 907.652050][T26616] tipc: Resetting bearer [ 907.758479][T26616] tipc: Disabling bearer [ 907.962149][T26645] lo speed is unknown, defaulting to 1000 [ 908.235927][T26645] lo speed is unknown, defaulting to 1000 [ 908.824175][T26673] batman_adv: batadv0: Adding interface: dummy0 [ 908.830495][T26673] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.855797][T26673] batman_adv: batadv0: Interface activated: dummy0 [ 909.363245][T26690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.411072][T26688] tipc: Enabled bearer , priority 0 [ 909.470645][T26688] syzkaller0: entered promiscuous mode [ 909.476183][T26688] syzkaller0: entered allmulticast mode [ 909.497545][T26693] netlink: 'syz.5.5081': attribute type 1 has an invalid length. [ 909.534440][T26688] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 909.635607][T26688] tipc: Resetting bearer [ 909.733371][T26686] tipc: Resetting bearer [ 909.906123][T26686] tipc: Disabling bearer [ 910.733303][T26724] tc action pedit 'at' offset 20 out of bounds [ 911.113756][T26735] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 911.186898][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 911.195836][T26737] netlink: 'syz.2.5094': attribute type 29 has an invalid length. [ 911.203772][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 911.213147][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 911.222129][T26737] netlink: 'syz.2.5094': attribute type 29 has an invalid length. [ 911.230773][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5094'. [ 911.897975][T26754] bond7: entered promiscuous mode [ 911.953695][T26759] Unknown options in mask 6 [ 912.021998][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5103'. [ 912.195940][T26767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5106'. [ 912.296437][T26772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5108'. [ 912.323176][T26767] 8021q: adding VLAN 0 to HW filter on device bond7 [ 912.393273][T26774] netlink: 'syz.5.5109': attribute type 3 has an invalid length. [ 912.413851][T26772] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5108'. [ 912.516223][T26779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5106'. [ 913.205136][T26788] lo speed is unknown, defaulting to 1000 [ 913.212964][T26788] lo speed is unknown, defaulting to 1000 [ 914.756480][T26846] xt_TPROXY: Can be used only with -p tcp or -p udp [ 915.168405][T26866] lo speed is unknown, defaulting to 1000 [ 915.176065][T26866] lo speed is unknown, defaulting to 1000 [ 915.327569][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5128'. [ 915.345542][T26878] netlink: 'syz.0.5135': attribute type 2 has an invalid length. [ 915.989937][T26890] ip6t_rpfilter: unknown options [ 916.282545][T26878] lo speed is unknown, defaulting to 1000 [ 916.397742][T26878] lo speed is unknown, defaulting to 1000 [ 916.635749][T26899] netlink: 300 bytes leftover after parsing attributes in process `syz.1.5141'. [ 917.379686][T26911] netlink: 'syz.1.5142': attribute type 1 has an invalid length. [ 917.636883][T26910] veth3: entered allmulticast mode [ 917.649649][T26910] bond6: (slave veth3): Enslaving as an active interface with a down link [ 917.754467][T26911] bond6: (slave veth0_to_bond): making interface the new active one [ 917.790666][T26911] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 921.896893][T26956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.911884][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5159'. [ 921.940377][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5155'. [ 921.990070][T26958] openvswitch: netlink: Message has 12 unknown bytes. [ 921.996924][T26958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 922.086009][T26965] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 922.093800][T26965] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5160'. [ 922.102948][T26965] netlink: 33 bytes leftover after parsing attributes in process `syz.1.5160'. [ 922.138432][T26967] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 922.146704][T26967] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5160'. [ 922.208165][T26967] netlink: 33 bytes leftover after parsing attributes in process `syz.1.5160'. [ 922.541461][T26977] tap0: tun_chr_ioctl cmd 1074025692 [ 922.552299][T26977] xt_hashlimit: overflow, try lower: 6/0 [ 922.563955][T26977] IPVS: set_ctl: invalid protocol: 47 172.30.0.5:20001 [ 922.641390][T26977] netlink: 'syz.4.5163': attribute type 13 has an invalid length. [ 923.826187][T27021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5171'. [ 924.546569][T27031] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5184'. [ 925.166466][T27048] netlink: 'syz.4.5189': attribute type 5 has an invalid length. [ 925.920478][T27069] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5195'. [ 926.048250][T27068] bond11: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 926.059365][T27075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5193'. [ 926.079620][T27068] bond11 (unregistering): Released all slaves [ 926.290297][T27084] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 926.432951][T27089] netlink: 'syz.4.5203': attribute type 3 has an invalid length. [ 926.498967][T27089] netlink: 'syz.4.5203': attribute type 1 has an invalid length. [ 927.106416][T27120] __nla_validate_parse: 2 callbacks suppressed [ 927.106436][T27120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5209'. [ 927.146447][T27116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5209'. [ 927.257416][T27117] netlink: 'syz.0.5209': attribute type 11 has an invalid length. [ 927.265372][T27117] netlink: 'syz.0.5209': attribute type 11 has an invalid length. [ 927.273203][T27117] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5209'. [ 929.650254][T27185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5227'. [ 929.765512][T27173] vti0: left promiscuous mode [ 929.787970][T27173] geneve4: left promiscuous mode [ 929.792979][T27173] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 929.869218][T27192] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5226'. [ 929.895467][T27180] netlink: 'syz.0.5226': attribute type 1 has an invalid length. [ 930.064504][T27181] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5226'. [ 930.081031][T27180] 8021q: adding VLAN 0 to HW filter on device bond11 [ 930.285026][T27180] bond11: (slave geneve2): making interface the new active one [ 930.316164][T27180] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 930.337260][T26191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.362892][T26191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.758243][ T7234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.782640][ T7234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.819213][T27212] lo speed is unknown, defaulting to 1000 [ 930.826910][T27212] lo speed is unknown, defaulting to 1000 [ 930.945274][T27217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5234'. [ 931.758996][T27227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5237'. [ 931.991776][T27227] nbd: socks must be embedded in a SOCK_ITEM attr [ 932.000439][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5237'. [ 932.153904][T27230] batman_adv: batadv0: Interface deactivated: gretap1 [ 932.160953][T27230] batman_adv: batadv0: Removing interface: gretap1 [ 932.181070][T27230] team0: Port device batadv0 removed [ 932.261305][T27239] ipip2: entered promiscuous mode [ 932.523505][T27235] udevd[27235]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 932.709738][T27214] udevd[27214]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 932.791840][T27248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5241'. [ 933.423175][T27263] 8021q: VLANs not supported on syzkaller1 [ 934.362812][T27274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5246'. [ 934.608878][T27277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5248'. [ 935.476589][T27292] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 935.622477][T27292] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 935.704957][T27292] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 936.162460][T27320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5258'. [ 936.360480][T27330] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5262'. [ 936.547149][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5262'. [ 936.992975][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5262'. [ 937.026290][T27344] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 937.120297][T27340] syzkaller0: entered promiscuous mode [ 937.125905][T27340] syzkaller0: entered allmulticast mode [ 943.097343][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5269'. [ 943.582487][T27401] sctp: [Deprecated]: syz.4.5278 (pid 27401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 943.582487][T27401] Use struct sctp_sack_info instead [ 943.703893][T27401] netlink: 'syz.4.5278': attribute type 1 has an invalid length. [ 943.711721][T27401] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.183209][T27420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5282'. [ 944.212865][T27420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5282'. [ 944.246448][T27425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5284'. [ 944.489280][T27434] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 944.505981][T27434] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 944.723592][T27442] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5288'. [ 944.821910][T27448] ip6tnl2: entered promiscuous mode [ 944.846612][T27447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5286'. [ 945.287069][T27455] IPVS: set_ctl: invalid protocol: 0 100.1.3.2:20000 [ 945.412289][T27455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5291'. [ 945.478078][T27462] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5294'. [ 945.643892][T27471] netlink: 'syz.0.5297': attribute type 1 has an invalid length. [ 945.712862][T27476] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5298'. [ 945.725996][T27471] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 945.975887][T27486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 946.138045][T27493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5303'. [ 946.204777][T27495] netlink: 'syz.1.5304': attribute type 10 has an invalid length. [ 946.278328][T27493] netlink: 'syz.2.5303': attribute type 4 has an invalid length. [ 946.300859][T27495] bond6: (slave veth0_to_bond): Releasing active interface [ 946.320210][T27495] veth0_to_bond: entered promiscuous mode [ 946.402015][T27495] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 946.469438][T27493] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 946.858819][T27518] IPv6: NLM_F_CREATE should be specified when creating new route [ 946.868408][T27520] netlink: 'syz.0.5311': attribute type 4 has an invalid length. [ 946.878099][T27518] syzkaller0: entered promiscuous mode [ 946.883715][T27518] syzkaller0: entered allmulticast mode [ 947.055638][T27515] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 952.298935][T27553] __nla_validate_parse: 5 callbacks suppressed [ 952.298975][T27553] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5317'. [ 952.591209][T27525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.600243][T27525] batman_adv: batadv0: Interface deactivated: dummy0 [ 952.607687][T27525] batman_adv: batadv0: Removing interface: dummy0 [ 953.598254][T27590] ip6gretap0: entered promiscuous mode [ 953.803500][T27603] netlink: 'syz.0.5329': attribute type 1 has an invalid length. [ 953.904316][T27603] 8021q: adding VLAN 0 to HW filter on device bond12 [ 953.958333][T27610] bond12: (slave veth9): Enslaving as an active interface with a down link [ 953.999408][T27603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.006544][T27603] bond12: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 954.080074][ T30] audit: type=1800 audit(1784786581.944:19): pid=27609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5333" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2914 res=0 errno=0 [ 954.760412][T27635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5338'. [ 954.797605][T27635] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 954.846760][T27635] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 955.041530][T27650] tipc: Enabling of bearer rejected, failed to enable media [ 955.120351][T27648] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5344'. [ 955.129578][T27648] 1ªX¹¦À: renamed from 60ªX¹¦À (while UP) [ 955.173151][T27648] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 955.199221][T27650] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20003 [ 955.270379][T27650] tap0: tun_chr_ioctl cmd 1074025677 [ 955.279168][T27650] tap0: linktype set to 6 [ 955.589685][T27667] netlink: 'syz.0.5348': attribute type 1 has an invalid length. [ 955.602074][T27667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'. [ 955.619538][T27670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 955.713203][T27673] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5347'. [ 956.028704][T27685] netlink: 'syz.5.5352': attribute type 2 has an invalid length. [ 956.091878][T27685] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5352'. [ 956.311867][T27695] bond0: Device is already in use. [ 956.519976][T27699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.768984][T27719] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 956.776523][T27719] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 956.986261][T27727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5368'. [ 956.997650][T27728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5368'. [ 956.998407][T27724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5367'. [ 957.023209][T27727] xt_TCPMSS: Only works on TCP SYN packets [ 957.844929][T27747] netlink: 'syz.0.5375': attribute type 23 has an invalid length. [ 957.976239][T27751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5379'. [ 957.985713][T27751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5379'. [ 958.300208][T27770] netlink: 'syz.2.5380': attribute type 1 has an invalid length. [ 958.396488][T27770] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5380'. [ 959.542008][T27805] netlink: 'syz.4.5391': attribute type 1 has an invalid length. [ 959.564233][T26191] tipc: Subscription rejected, illegal request [ 959.909935][T27805] 8021q: adding VLAN 0 to HW filter on device bond8 [ 960.076496][T27820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5394'. [ 960.110974][T27811] bond8: (slave veth7): Enslaving as an active interface with a down link [ 960.219884][T27814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.230514][T27814] bond8: (slave batadv0): making interface the new active one [ 960.239727][T27814] batadv0: entered promiscuous mode [ 960.245519][T27814] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 960.303323][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5394'. [ 960.354766][T27805] bond8: (slave veth9): Enslaving as an active interface with a down link [ 960.412644][T27823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5394'. [ 960.475718][T27832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5398'. [ 960.531328][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5399'. [ 960.631382][T27841] netlink: 'syz.4.5401': attribute type 8 has an invalid length. [ 960.704969][T27843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5403'. [ 960.923528][T27855] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5405'. [ 961.053629][T27862] bridge_slave_0: default FDB implementation only supports local addresses [ 961.339154][T27871] netlink: 'syz.5.5410': attribute type 1 has an invalid length. [ 961.436821][T27871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 961.457100][T27875] macvlan2: entered promiscuous mode [ 961.464056][T27875] macvlan2: entered allmulticast mode [ 961.470713][T27875] bond3: entered promiscuous mode [ 961.479557][T27875] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 961.495326][T27875] bond3: left promiscuous mode [ 962.180194][T27901] lo speed is unknown, defaulting to 1000 [ 962.329213][T27901] lo speed is unknown, defaulting to 1000 [ 963.087575][T27925] netlink: 'syz.4.5423': attribute type 1 has an invalid length. [ 963.921152][T27942] __nla_validate_parse: 5 callbacks suppressed [ 963.921173][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5427'. [ 963.938090][T27940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5427'. [ 965.277066][T27974] bond0: (slave gre0): Error: Device type is different from other slaves [ 965.383679][T27981] netlink: 'syz.1.5434': attribute type 1 has an invalid length. [ 965.517783][T27987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5434'. [ 965.573848][T27987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5434'. [ 965.680120][T27981] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 966.799410][T27981] bond7 (unregistering): Released all slaves [ 966.986796][T27995] netlink: 'syz.2.5437': attribute type 3 has an invalid length. [ 967.700869][T28007] syzkaller0: entered promiscuous mode [ 967.733497][T28007] syzkaller0: entered allmulticast mode [ 968.480549][T28033] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5448'. [ 969.149932][T28061] netlink: 'syz.1.5457': attribute type 1 has an invalid length. [ 969.220600][T28061] bond7: entered promiscuous mode [ 969.238569][T28061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 969.305124][T28038] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5450'. [ 969.324972][T28070] netlink: 'syz.5.5458': attribute type 4 has an invalid length. [ 969.345173][T28071] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5460'. [ 969.360612][T28061] 8021q: adding VLAN 0 to HW filter on device bond7 [ 969.368617][T28061] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 969.378847][T28061] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 969.420798][T28061] bond7: (slave vti0): making interface the new active one [ 969.428159][T28061] vti0: entered promiscuous mode [ 969.434825][T28061] bond7: (slave vti0): Enslaving as an active interface with an up link [ 969.894642][T28090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5464'. [ 969.926107][T28095] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5466'. [ 970.296494][T28107] syzkaller1: entered promiscuous mode [ 970.315520][T28107] syzkaller1: entered allmulticast mode [ 970.351012][T28107] xt_hashlimit: invalid rate [ 970.649160][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 970.777593][T28100] Cannot find add_set index 2 as target [ 971.252367][T28132] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5474'. [ 971.748993][T28144] netlink: 'syz.4.5481': attribute type 4 has an invalid length. [ 971.863456][T28151] vlan3: entered promiscuous mode [ 971.907361][T28151] bridge0: entered promiscuous mode [ 972.008547][T28151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5483'. [ 972.018231][ T7234] batadv0: left promiscuous mode [ 972.068666][T23621] IPVS: starting estimator thread 0... [ 972.235621][T28165] IPVS: using max 25 ests per chain, 60000 per kthread [ 972.462014][T28174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.947199][T28199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5494'. [ 972.969977][T28201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5496'. [ 972.993707][T28197] netlink: 'syz.5.5497': attribute type 3 has an invalid length. [ 973.023685][T28200] netlink: 'syz.0.5495': attribute type 11 has an invalid length. [ 973.068515][T28200] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5495'. [ 973.265648][T28201] bond9: entered promiscuous mode [ 973.312646][T28201] 8021q: adding VLAN 0 to HW filter on device bond9 [ 973.405925][T28206] 8021q: adding VLAN 0 to HW filter on device bond10 [ 973.414360][T28206] bond10: entered promiscuous mode [ 973.421075][T28206] bond9: (slave bond10): Enslaving as an active interface with an up link [ 973.430412][T28211] tipc: Enabling of bearer rejected, failed to enable media [ 973.488427][T28201] bridge9: entered promiscuous mode [ 973.494557][T28201] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 974.556734][T28257] netlink: 'syz.2.5510': attribute type 25 has an invalid length. [ 974.631594][T28257] __nla_validate_parse: 4 callbacks suppressed [ 974.631615][T28257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5510'. [ 974.883481][T28254] xt_hashlimit: size too large, truncated to 1048576 [ 974.983927][T28266] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5512'. [ 974.992954][T28266] 0ªX¹¦À: renamed from 61ªX¹¦À (while UP) [ 975.095763][T28266] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 975.509940][T28281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5515'. [ 975.913226][T28293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5519'. [ 976.963555][T28314] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5527'. [ 977.109040][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 977.125826][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 977.134663][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 977.145260][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 977.155204][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 977.166808][T28326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5528'. [ 977.376657][T28333] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5531'. [ 977.387098][T28333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5531'. [ 977.713697][T28334] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 978.160662][ T1349] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.180870][ T1349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 978.190862][ T1349] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 978.741895][ T1349] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.751696][ T1349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 978.761555][ T1349] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 978.991783][T28322] lo speed is unknown, defaulting to 1000 [ 979.042199][T28322] lo speed is unknown, defaulting to 1000 [ 979.051324][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5537'. [ 979.202777][T28386] netlink: 'syz.2.5539': attribute type 15 has an invalid length. [ 979.233247][T28386] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5539'. [ 979.259630][ T4938] Bluetooth: hci3: command tx timeout [ 979.269668][ T1349] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.280061][ T1349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 979.290015][ T1349] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 979.750799][T28401] __nla_validate_parse: 2 callbacks suppressed [ 979.750821][T28401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5544'. [ 979.957834][T28398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.974099][T28403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5544'. [ 979.988860][T28399] netlink: zone id is out of range [ 979.994329][T28399] netlink: zone id is out of range [ 979.999602][T28399] netlink: zone id is out of range [ 980.005340][T28399] netlink: zone id is out of range [ 980.010480][T28399] netlink: zone id is out of range [ 980.016114][T28399] netlink: zone id is out of range [ 980.021353][T28399] netlink: zone id is out of range [ 980.118388][T28398] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.129223][T28398] 8021q: adding VLAN 0 to HW filter on device 61ªX¹¦À [ 980.138126][T28399] netlink: zone id is out of range [ 980.162851][T28399] netlink: zone id is out of range [ 980.168012][T28399] netlink: zone id is out of range [ 980.173483][T28399] netlink: zone id is out of range [ 980.178716][T28399] netlink: zone id is out of range [ 980.183933][T28399] netlink: zone id is out of range [ 980.189223][T28399] netlink: zone id is out of range [ 980.194438][T28399] netlink: zone id is out of range [ 980.199574][T28399] netlink: zone id is out of range [ 980.204718][T28399] netlink: zone id is out of range [ 980.209945][T28399] netlink: zone id is out of range [ 980.343655][ T1349] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 980.353468][ T1349] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 980.363494][ T1349] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 980.461066][T28413] : renamed from bridge_slave_0 [ 980.580533][T28412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5547'. [ 981.348775][ T1349] dvmrp0: left allmulticast mode [ 981.432360][ T4938] Bluetooth: hci3: command tx timeout [ 982.473801][ T1349] bond1 (unregistering): (slave geneve2): Releasing active interface [ 982.611404][ T1349] bridge0 (unregistering): left promiscuous mode [ 982.671171][T28453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5557'. [ 982.790050][ T1349] bond4 (unregistering): (slave bridge7): Releasing backup interface [ 982.801117][ T1349] bridge7 (unregistering): left promiscuous mode [ 982.821105][ T1349] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 982.829644][ T1349] bridge9 (unregistering): left promiscuous mode [ 982.843366][ T1349] bond1 (unregistering): Released all slaves [ 982.884896][ T1349] bond0 (unregistering): Released all slaves [ 982.921883][ T1349] bond2 (unregistering): Released all slaves [ 982.941842][ T1349] bond3 (unregistering): Released all slaves [ 982.962053][ T1349] bond4 (unregistering): Released all slaves [ 982.982601][ T1349] bond5 (unregistering): Released all slaves [ 982.998563][ T1349] bond6 (unregistering): Released all slaves [ 983.038231][ T1349] bond7 (unregistering): Released all slaves [ 983.059658][ T1349] bond8 (unregistering): (slave veth7): Releasing active interface [ 983.067614][ T1349] batadv0: entered promiscuous mode [ 983.076568][ T1349] bond8 (unregistering): (slave batadv0): Releasing active interface [ 983.088413][ T1349] bond8 (unregistering): (slave veth9): Releasing active interface [ 983.098836][ T1349] bond8 (unregistering): Released all slaves [ 983.120091][ T1349] bond9 (unregistering): (slave bond10): Releasing backup interface [ 983.174891][ T1349] bond10 (unregistering): left promiscuous mode [ 983.182125][ T1349] bond9 (unregistering): Released all slaves [ 983.197827][ T1349] bond10 (unregistering): Released all slaves [ 983.498643][ T4938] Bluetooth: hci3: command tx timeout [ 983.656700][ T1349] ´: left promiscuous mode [ 983.816842][T28464] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5559'. [ 983.941592][T28458] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5559'. [ 983.958823][T28463] wlan0: renamed from sit0 (while UP) [ 983.971226][T28463] wlan0: entered promiscuous mode [ 983.979322][T28463] wlan0: entered allmulticast mode [ 983.986443][T28468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5560'. [ 984.014837][T28463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5559'. [ 984.313665][T28322] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.357165][T28322] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.364626][T28322] bridge_slave_0: entered allmulticast mode [ 984.372628][T28322] bridge_slave_0: entered promiscuous mode [ 984.443008][T28322] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.450215][T28322] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.457437][T28322] bridge_slave_1: entered allmulticast mode [ 984.527152][T28322] bridge_slave_1: entered promiscuous mode [ 984.667988][T28322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.755538][T28322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.898794][T28322] team0: Port device team_slave_0 added [ 984.908453][T28322] team0: Port device team_slave_1 added [ 984.996669][T28322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.003661][T28322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.029743][T28322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.042693][T28322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.049671][T28322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 985.262742][T28322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.504601][T28496] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5565'. [ 985.528065][ T1349] IPVS: stopping master sync thread 24333 ... [ 985.584948][ T4938] Bluetooth: hci3: command tx timeout [ 985.854818][T28322] hsr_slave_0: entered promiscuous mode [ 985.861590][T28322] hsr_slave_1: entered promiscuous mode [ 985.868105][T28322] debugfs: 'hsr0' already exists in 'hsr' [ 985.873872][T28322] Cannot create hsr debugfs directory [ 985.973822][T28514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5569'. [ 985.982823][T28514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5569'. [ 986.027892][T28514] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5569'. [ 986.388418][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 986.698212][T28527] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5573'. [ 987.290453][T28541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5577'. [ 987.937535][T28528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 988.956597][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 988.984000][T28580] 1ªX¹¦À: left allmulticast mode [ 989.106364][T28580] bond5: left promiscuous mode [ 989.229852][T28580] bridge3: left promiscuous mode [ 989.235236][T28580] bridge3: left allmulticast mode [ 989.391674][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5586'. [ 989.404173][T28580] veth7: left allmulticast mode [ 989.410641][T28580] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 989.417985][T28580] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 989.501926][T28580] bridge6: left promiscuous mode [ 989.536830][T28580] bridge6: left allmulticast mode [ 989.840849][T28583] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 989.988766][ T82] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.997790][ T82] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.100058][ T82] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.173921][ T82] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.303253][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5591'. [ 990.351071][T28611] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5591'. [ 990.555878][T28612] block nbd6: server does not support multiple connections per device. [ 990.591901][T28625] __nla_validate_parse: 1 callbacks suppressed [ 990.591932][T28625] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5594'. [ 990.652734][T28612] block nbd6: shutting down sockets [ 990.863146][T28618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 991.151409][T28634] vlan2: entered promiscuous mode [ 991.156509][T28634] gretap0: entered promiscuous mode [ 991.217601][T28626] syzkaller1: entered promiscuous mode [ 991.223283][T28626] syzkaller1: entered allmulticast mode [ 991.326148][ T1349] veth0_to_team: left promiscuous mode [ 991.340757][ T1349] hsr_slave_0: left promiscuous mode [ 991.347272][ T1349] hsr_slave_1: left promiscuous mode [ 991.353539][ T1349] batman_adv: 61ªX¹¦À: Interface deactivated: vlan2 [ 991.360325][ T1349] batman_adv: 61ªX¹¦À: Removing interface: vlan2 [ 991.373205][ T1349] veth1_macvtap: left promiscuous mode [ 991.378837][ T1349] veth0_macvtap: left promiscuous mode [ 991.384465][ T1349] veth1_vlan: left promiscuous mode [ 991.389765][ T1349] veth0_vlan: left promiscuous mode [ 992.282176][T28667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5600'. [ 993.021064][T28667] macvtap1: entered promiscuous mode [ 993.029440][T28667] bond0: entered promiscuous mode [ 993.039401][T28667] bond_slave_0: entered promiscuous mode [ 993.048711][T28667] bond_slave_1: entered promiscuous mode [ 993.062043][T28667] macvtap1: entered allmulticast mode [ 993.080534][T28667] bond0: entered allmulticast mode [ 993.094316][T28667] bond_slave_0: entered allmulticast mode [ 993.111259][T28667] bond_slave_1: entered allmulticast mode [ 993.132222][T28667] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 993.177652][T28670] bond0: left allmulticast mode [ 993.199106][T28670] bond_slave_0: left allmulticast mode [ 993.236929][T28670] bond_slave_1: left allmulticast mode [ 993.255696][T28670] bond0: left promiscuous mode [ 993.273312][T28670] bond_slave_0: left promiscuous mode [ 993.293152][T28670] bond_slave_1: left promiscuous mode [ 993.317829][T28670] macvtap1: left promiscuous mode [ 993.333296][T28670] macvtap1: left allmulticast mode [ 993.921936][T28322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 993.941686][T28322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.953765][T28322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 993.984188][T28322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.999543][T28680] lo speed is unknown, defaulting to 1000 [ 994.000047][T28322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 994.128515][T28322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 994.185894][T28322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 994.231311][T28322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.277650][T28680] lo speed is unknown, defaulting to 1000 [ 994.370224][T28713] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5607'. [ 994.437554][T28713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5607'. [ 994.770984][ T1349] IPVS: stop unused estimator thread 0... [ 995.230147][T28322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.268127][T28720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.387222][T28322] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.477337][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.484624][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.568726][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.576087][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.871797][T28748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5614'. [ 996.760064][T28764] netlink: 'syz.5.5616': attribute type 13 has an invalid length. [ 997.024195][T28775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5618'. [ 997.045532][T28777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5617'. [ 997.523553][ T7234] net_ratelimit: 22 callbacks suppressed [ 997.523577][ T7234] bond1: (slave bridge1): link status up again after 0 ms [ 997.550896][T28773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5617'. [ 997.623098][ T7233] bond1: (slave bridge1): link status up again after 0 ms [ 997.653674][ T82] bond1: (slave bridge1): link status up again after 0 ms [ 997.695259][ T12] bond1: (slave bridge1): link status up again after 0 ms [ 997.728252][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 998.034553][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 998.193294][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 998.343461][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 998.483847][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 998.551412][T28796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5620'. [ 998.568905][T28794] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5621'. [ 998.612165][T28794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5621'. [ 998.632985][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 999.847765][T28322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.570281][T28848] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5632'. [ 1000.637088][T28852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5632'. [ 1001.080155][T28862] netlink: 'syz.5.5635': attribute type 9 has an invalid length. [ 1001.367317][T28873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5636'. [ 1002.020038][T28885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5638'. [ 1002.161988][T28322] veth0_vlan: entered promiscuous mode [ 1002.344922][T28322] veth1_vlan: entered promiscuous mode [ 1002.418970][T28897] netlink: 'syz.1.5640': attribute type 210 has an invalid length. [ 1002.543072][ T82] net_ratelimit: 24 callbacks suppressed [ 1002.543095][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1002.725119][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1002.760502][T28322] veth0_macvtap: entered promiscuous mode [ 1002.857717][T28322] veth1_macvtap: entered promiscuous mode [ 1002.924000][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1002.980274][T28322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.083148][T28322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.195864][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1003.255356][ T7234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.335320][ T7234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.423980][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1003.457628][ T7229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.514690][ T7229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.543993][T28910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1003.615042][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1003.835049][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1003.879566][T28917] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5645'. [ 1003.950524][T28923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5645'. [ 1004.074222][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1004.591197][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.642933][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.833986][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1005.093613][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1005.161669][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.216100][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.217215][T28952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1006.227458][T28983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5657'. [ 1006.449117][T28972] lo speed is unknown, defaulting to 1000 [ 1006.506876][T28972] lo speed is unknown, defaulting to 1000 [ 1006.776817][T28993] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1006.817656][T28993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5659'. [ 1007.706353][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1007.727485][ T1349] net_ratelimit: 13 callbacks suppressed [ 1007.727557][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1007.915945][T29009] bridge8: entered promiscuous mode [ 1007.947737][T29009] bridge8: entered allmulticast mode [ 1008.004148][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1008.203513][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1008.288528][T29020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1008.354321][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1008.395023][T29020] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5664'. [ 1008.507578][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1008.573285][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1008.961597][T29026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.985541][T29026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.446799][T29026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1009.504614][T29026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1009.566322][T29026] veth1_virt_wifi: left promiscuous mode [ 1009.603791][T29026] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1009.653935][T29026] veth1_vlan: left promiscuous mode [ 1009.683432][T29026] veth0_vlan: left promiscuous mode [ 1009.729162][T29026] veth0_vlan: entered promiscuous mode [ 1009.799402][T29026] veth1_vlan: entered promiscuous mode [ 1009.886516][T29026] veth1_macvtap: left promiscuous mode [ 1009.909802][T29026] veth0_macvtap: left promiscuous mode [ 1009.941412][T29026] veth0_macvtap: entered promiscuous mode [ 1009.988043][T29026] veth1_macvtap: entered promiscuous mode [ 1010.050097][T29026] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1010.096696][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.136402][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.168131][T29026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1010.189009][T29026] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 1010.220377][T29069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1010.281507][T29026] bond1: left promiscuous mode [ 1010.294693][T29026] bridge1: left promiscuous mode [ 1010.312940][T29026] bridge2: left promiscuous mode [ 1010.334210][ T6927] bond1: (slave bridge1): link status up again after 0 ms [ 1010.364587][T29026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1010.393063][ T7229] bond1: (slave bridge1): link status up again after 0 ms [ 1010.423601][ T7229] bond1: (slave bridge1): link status up again after 0 ms [ 1010.463076][ T7229] bond1: (slave bridge1): link status up again after 0 ms [ 1010.476602][T29026] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1010.514610][ T7234] bond1: (slave bridge1): link status up again after 0 ms [ 1010.644463][ T6619] bridge0: port 1(1) entered blocking state [ 1010.652182][ T6619] bridge0: port 1(1) entered forwarding state [ 1010.708220][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.716337][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.825649][T29075] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1010.860903][T29075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1011.048557][ T7233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.467743][ T7233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.479040][ T7233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.634316][ T7233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.955872][T29094] ipip1: entered promiscuous mode [ 1012.026959][T29094] ipip1: entered allmulticast mode [ 1012.794795][ T195] net_ratelimit: 31 callbacks suppressed [ 1012.794841][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1012.944662][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1013.189047][T29127] syzkaller0: entered promiscuous mode [ 1013.235145][T29127] syzkaller0: entered allmulticast mode [ 1013.355151][T29128] tipc: Enabled bearer , priority 0 [ 1013.439769][T29124] tipc: Resetting bearer [ 1013.558511][T29124] tipc: Disabling bearer [ 1013.754883][T29142] bond14: invalid NS target :: specified for addition [ 1013.766704][T29142] bond14: option ns_ip6_target: invalid value (18446744073709551615) [ 1013.794240][T29142] bond14 (unregistering): Released all slaves [ 1014.163662][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1014.358485][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1014.520221][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1014.550556][T29174] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5692'. [ 1014.650661][ T6567] IPVS: starting estimator thread 0... [ 1014.676439][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1014.793014][T29177] IPVS: using max 28 ests per chain, 67200 per kthread [ 1014.827608][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1015.005409][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1015.185242][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1015.237450][T29186] tipc: Started in network mode [ 1015.286624][T29186] tipc: Node identity da91fede9f59, cluster identity 4711 [ 1015.336372][T29186] tipc: Enabled bearer , priority 0 [ 1015.353443][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1015.383469][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1015.428346][T29199] syzkaller0: entered promiscuous mode [ 1015.469821][T29199] syzkaller0: entered allmulticast mode [ 1015.683534][T29207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5694'. [ 1015.810787][T29186] tipc: Disabling bearer [ 1016.018061][T29212] netlink: 'syz.5.5700': attribute type 24 has an invalid length. [ 1017.051077][T29240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1017.431438][T29251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5712'. [ 1017.497463][T29255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1017.565875][T29256] netlink: 'syz.0.5714': attribute type 2 has an invalid length. [ 1017.600721][T29257] netlink: 'syz.4.5715': attribute type 4 has an invalid length. [ 1017.619909][T29255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5713'. [ 1017.783753][T29257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1017.816275][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5716'. [ 1017.829825][T29257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.851565][T29256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5714'. [ 1017.980620][T29257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.270020][ T7233] net_ratelimit: 16 callbacks suppressed [ 1018.270043][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1018.347048][T29273] veth1_macvtap: left promiscuous mode [ 1018.366493][T29273] macsec0: entered promiscuous mode [ 1018.521719][T29274] macsec0: left promiscuous mode [ 1019.045117][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1019.090281][T29297] tipc: Enabled bearer , priority 0 [ 1019.141903][T29299] syzkaller0: entered promiscuous mode [ 1019.171352][T29299] syzkaller0: entered allmulticast mode [ 1019.226322][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1019.391869][T29291] tipc: Resetting bearer [ 1019.485218][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1019.538616][T29290] tipc: Resetting bearer [ 1019.731586][T29290] tipc: Disabling bearer [ 1019.867963][T29321] xt_hashlimit: size too large, truncated to 1048576 [ 1019.943906][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1020.075892][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1020.325431][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1020.482926][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1020.681235][T29336] __nla_validate_parse: 2 callbacks suppressed [ 1020.681256][T29336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1020.884914][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.044211][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1021.187903][T29343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5729'. [ 1021.477151][T29341] netlink: 'syz.1.5729': attribute type 16 has an invalid length. [ 1021.504151][T29341] netlink: 'syz.1.5729': attribute type 17 has an invalid length. [ 1021.580660][T29351] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5732'. [ 1021.906461][T29345] netlink: 'syz.4.5730': attribute type 25 has an invalid length. [ 1021.946179][T29345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1022.036964][T29341] erspan0: left promiscuous mode [ 1022.053796][T29341] erspan0: left allmulticast mode [ 1022.173707][T29341] sit0: left promiscuous mode [ 1022.383312][T29370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5734'. [ 1022.538603][T29341] 0ªX¹¦À: left allmulticast mode [ 1022.675742][T29341] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.683026][T29341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.769779][T29341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.777093][T29341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.089675][T29341] geneve1: left promiscuous mode [ 1023.145569][T29341] bridge0: port 3(vlan2) entered blocking state [ 1023.152093][T29341] bridge0: port 3(vlan2) entered forwarding state [ 1023.258070][T29341] vxlan0: left allmulticast mode [ 1023.285991][T29341] vxlan1: left allmulticast mode [ 1023.354683][T29341] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.425996][T29341] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1023.525673][T29341] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1023.596360][T29341] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1023.676584][T29341] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1023.696705][ C0] net_ratelimit: 1 callbacks suppressed [ 1023.696729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1023.774672][T29341] gretap2: left promiscuous mode [ 1023.839175][T29341] bond5: left promiscuous mode [ 1023.866699][T29341] bridge6: left promiscuous mode [ 1023.929378][T29341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1024.004551][T29341] veth3: left allmulticast mode [ 1024.047749][T29341] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 1024.085137][T29390] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20002 [ 1024.227148][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1024.429042][T29376] ip6_vti0: entered promiscuous mode [ 1024.496458][T29376] ip6_vti0: entered allmulticast mode [ 1024.679547][ T6927] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1024.786071][ T6927] bond6: (slave veth3): making interface the new active one [ 1024.856984][ T6927] bond6: active interface up! [ 1025.140829][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.303336][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.454223][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.626518][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.773826][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.913093][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1025.991870][T29426] netlink: 'syz.1.5747': attribute type 1 has an invalid length. [ 1026.354249][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1026.801143][T29443] lo speed is unknown, defaulting to 1000 [ 1026.857138][T29450] netlink: 'syz.4.5753': attribute type 2 has an invalid length. [ 1027.400854][T29447] bridge0: port 3(vlan2) entered disabled state [ 1027.407642][T29447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.415628][T29447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.521563][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1027.577187][T29465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5756'. [ 1027.798069][T29447] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 1027.864711][T29447] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 1028.610405][T29447] bond7: left promiscuous mode [ 1028.615984][T29447] vti0: left promiscuous mode [ 1028.627200][T29447] bridge8: left promiscuous mode [ 1028.633303][T29447] bridge8: left allmulticast mode [ 1028.642092][T29443] lo speed is unknown, defaulting to 1000 [ 1028.650888][ T6567] lo speed is unknown, defaulting to 1000 [ 1028.666551][ T6567] syz2: Port: 1 Link DOWN [ 1028.716547][ T6619] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.770860][ T6619] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.840666][ T6619] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.889932][ T6619] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.946610][ T6619] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1028.997780][ T6619] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.021061][T29478] netlink: 'syz.1.5759': attribute type 1 has an invalid length. [ 1029.060048][ T6619] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.089184][T29479] netlink: 'syz.1.5759': attribute type 1 has an invalid length. [ 1029.095986][ T6619] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.365504][T29478] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1029.652915][ T7233] net_ratelimit: 4 callbacks suppressed [ 1029.652937][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1030.150490][T29513] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5768'. [ 1030.213307][T29513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5768'. [ 1030.227709][T29510] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5767'. [ 1030.394247][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1030.545431][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1030.706203][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1030.899536][T29531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5773'. [ 1030.934432][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1031.016153][T29531] bond0: (slave veth0_to_bond): Releasing backup interface [ 1031.039879][T29531] veth0_to_bond: left promiscuous mode [ 1031.162551][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1031.300613][T29543] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1031.353708][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1031.628770][T29551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1032.533502][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1032.673218][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1034.009924][T29619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1034.088556][T29619] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1035.142100][T29606] bridge0: entered promiscuous mode [ 1035.169235][T29606] bridge0: entered allmulticast mode [ 1035.563711][ T7233] net_ratelimit: 9 callbacks suppressed [ 1035.563733][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1035.694388][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1035.863768][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1035.980696][T29657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5801'. [ 1036.004182][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1036.046063][T29664] netlink: ct family unspecified [ 1036.078000][T29664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.133888][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1036.259093][ T5630] Bluetooth: hci2: command 0x0405 tx timeout [ 1036.287611][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1036.390599][T29674] tipc: Enabling of bearer rejected, failed to enable media [ 1036.420026][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1036.593217][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1036.963067][T29690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1037.261444][T29704] netlink: 'syz.2.5814': attribute type 10 has an invalid length. [ 1038.177636][T29724] bond10: entered promiscuous mode [ 1038.184711][T29724] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1038.280342][T29734] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1038.298110][T29734] syzkaller1: linktype set to 1 [ 1038.929466][T29759] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5829'. [ 1038.979111][T29761] netlink: 'syz.1.5829': attribute type 11 has an invalid length. [ 1040.289634][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5836'. [ 1040.413482][T29789] netlink: 'syz.2.5837': attribute type 1 has an invalid length. [ 1040.446264][T29788] atomic_op ffff88802abb6998 conn xmit_atomic 0000000000000000 [ 1040.468345][T29789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1040.551355][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1040.615443][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1040.710350][ T82] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.720058][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1040.737315][ T6927] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.757118][T29789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5837'. [ 1040.772970][ T6927] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.829640][ T6927] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1040.862382][ T6927] net_ratelimit: 36 callbacks suppressed [ 1040.862406][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.022489][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.144143][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.263414][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.371672][T29823] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5848'. [ 1041.398796][T29821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5848'. [ 1041.402408][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.552773][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.577783][T29829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5850'. [ 1041.694028][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1041.853157][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1042.007254][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1042.144303][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1042.184644][T29840] netlink: 'syz.4.5853': attribute type 24 has an invalid length. [ 1042.205028][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5853'. [ 1042.252217][T29848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1042.294342][T29848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1042.305411][T29840] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1042.444764][T29848] IPv6: NLM_F_CREATE should be specified when creating new route [ 1042.700033][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5861'. [ 1043.082168][T29879] ip6t_rpfilter: unknown options [ 1043.126832][T29870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1043.711228][T29903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5874'. [ 1044.638946][ T7233] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1044.679475][ T7233] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1044.690015][T29948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5887'. [ 1044.717216][ T7233] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1044.747653][ T7233] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1045.118345][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5890'. [ 1045.160819][T29952] syzkaller0: entered promiscuous mode [ 1045.182989][T29952] syzkaller0: entered allmulticast mode [ 1051.058628][T29967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.074413][T29967] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.091127][T29967] 8021q: adding VLAN 0 to HW filter on device 61ªX¹¦À [ 1051.174626][T30002] __nla_validate_parse: 2 callbacks suppressed [ 1051.174651][T30002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5901'. [ 1051.178428][T29967] batman_adv: 61ªX¹¦À: Interface activated: batadv_slave_0 [ 1051.205959][T29967] batman_adv: 61ªX¹¦À: Interface activated: batadv_slave_1 [ 1051.240876][T29967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1051.255988][T29967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1051.271903][T29967] veth1_vlan: left promiscuous mode [ 1051.279691][T29967] veth0_vlan: left promiscuous mode [ 1051.288478][T29967] veth0_vlan: entered promiscuous mode [ 1051.299442][T29967] veth1_vlan: entered promiscuous mode [ 1051.326869][T29967] veth1_macvtap: left promiscuous mode [ 1051.334881][T29967] veth0_macvtap: left promiscuous mode [ 1051.343466][T29967] veth0_macvtap: entered promiscuous mode [ 1051.357847][T29967] veth1_macvtap: entered promiscuous mode [ 1051.378293][T29967] geneve0: entered promiscuous mode [ 1051.401110][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1051.416968][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1051.430045][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.445340][T29967] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.465838][T29967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1051.475045][T29967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1051.578583][T29967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1051.589746][T29967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1051.677814][T29967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1051.687301][T29967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1051.715106][T29967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1051.731522][T29967] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1051.912982][ T82] net_ratelimit: 22 callbacks suppressed [ 1051.913006][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1051.964577][ T1349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.013990][T30005] sctp: [Deprecated]: syz.2.5902 (pid 30005) Use of int in max_burst socket option. [ 1052.013990][T30005] Use struct sctp_assoc_value instead [ 1052.104720][ T1349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.150207][ T1349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.206987][ T1349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.494873][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.634370][ T6619] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.783734][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1052.928255][T30031] pimreg: entered allmulticast mode [ 1052.958632][T30031] pimreg: left allmulticast mode [ 1052.983646][T30029] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.009467][T30032] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.055113][T30029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.123120][T30029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.189290][T30032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.232664][T30032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1053.382398][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.512938][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.664385][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.793960][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1053.896320][T30045] lo speed is unknown, defaulting to 1000 [ 1053.941293][T30052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5915'. [ 1053.952948][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1054.042950][T30050] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1054.071472][T30050] bond5 (unregistering): Released all slaves [ 1054.149997][T30045] lo speed is unknown, defaulting to 1000 [ 1054.163624][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1054.520504][T30066] netlink: 'syz.1.5917': attribute type 1 has an invalid length. [ 1055.449873][T30081] netlink: 'syz.4.5922': attribute type 5 has an invalid length. [ 1055.517607][T30083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5922'. [ 1055.707196][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5922'. [ 1056.997384][ T7234] net_ratelimit: 15 callbacks suppressed [ 1056.997409][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.107262][T30107] __nla_validate_parse: 3 callbacks suppressed [ 1057.107286][T30107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5928'. [ 1057.233150][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.374182][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.484660][ T12] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.626051][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.773662][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.874671][T30121] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5931'. [ 1057.903284][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1057.987776][T30131] tipc: Enabled bearer , priority 0 [ 1058.037658][T30131] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 1058.079865][T30131] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 1058.136337][T30136] netlink: 'syz.1.5935': attribute type 13 has an invalid length. [ 1058.180695][T30131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5933'. [ 1058.484642][T30131] tipc: Resetting bearer [ 1058.523190][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.654804][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.790126][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1058.851435][T30145] netlink: 'syz.4.5937': attribute type 4 has an invalid length. [ 1058.929180][T30146] netlink: 'syz.4.5937': attribute type 4 has an invalid length. [ 1059.088503][T23614] tipc: Node number set to 1239674393 [ 1059.644321][T30163] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5939'. [ 1059.691986][T30163] team0: Port device dummy0 removed [ 1059.858806][T30134] tipc: Enabled bearer , priority 0 [ 1059.903989][T30134] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1059.999944][T30134] syzkaller0: entered promiscuous mode [ 1060.026687][T30134] syzkaller0: entered allmulticast mode [ 1060.235980][T30175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1060.347093][T30133] tipc: Resetting bearer [ 1060.439583][T30187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5943'. [ 1060.556686][T30133] tipc: Disabling bearer [ 1060.678832][T30193] netlink: 'syz.4.5945': attribute type 1 has an invalid length. [ 1060.705983][T30193] netlink: 'syz.4.5945': attribute type 2 has an invalid length. [ 1061.259745][T30202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1061.503409][T30202] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1061.567111][T30212] nbd: socks must be embedded in a SOCK_ITEM attr [ 1061.590639][T30212] block nbd6: shutting down sockets [ 1061.600216][T30202] bond0: entered promiscuous mode [ 1061.619599][T30202] bond_slave_0: entered promiscuous mode [ 1061.648261][T30202] bond_slave_1: entered promiscuous mode [ 1061.662235][T30218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5954'. [ 1061.707180][T30202] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1061.784645][T30202] ipvlan1: entered promiscuous mode [ 1061.807670][T30202] ipvlan1: left promiscuous mode [ 1061.828162][T30202] bond0: left promiscuous mode [ 1061.845233][T30202] bond_slave_0: left promiscuous mode [ 1061.860584][T30202] bond_slave_1: left promiscuous mode [ 1061.875959][T30202] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1061.950355][T30208] bond0: entered promiscuous mode [ 1061.966415][T30208] bond_slave_0: entered promiscuous mode [ 1061.992181][T30208] bond_slave_1: entered promiscuous mode [ 1062.018621][T30208] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1062.035494][T30208] ipvlan1: entered promiscuous mode [ 1062.068674][T30208] ipvlan1: left promiscuous mode [ 1062.091575][T30208] bond0: left promiscuous mode [ 1062.103192][T30208] bond_slave_0: left promiscuous mode [ 1062.109778][T30208] bond_slave_1: left promiscuous mode [ 1062.119158][T30208] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1062.174739][ T6927] net_ratelimit: 13 callbacks suppressed [ 1062.174763][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1062.275608][T30208] bond0: entered promiscuous mode [ 1062.280725][T30208] bond_slave_0: entered promiscuous mode [ 1062.308750][T30208] bond_slave_1: entered promiscuous mode [ 1062.330915][T30208] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1062.381870][T30208] ipvlan1: entered promiscuous mode [ 1062.415315][T30208] ipvlan1: left promiscuous mode [ 1062.429067][T30232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1062.441258][T30208] bond0: left promiscuous mode [ 1062.463797][T30208] bond_slave_0: left promiscuous mode [ 1062.490440][T30208] bond_slave_1: left promiscuous mode [ 1062.508891][T30208] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1062.663063][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1062.825695][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1062.955022][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.114264][ T7229] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.173914][T30256] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1063.264252][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.410911][T30262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1063.423549][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.522010][T30266] syzkaller0: entered promiscuous mode [ 1063.556984][T30266] syzkaller0: entered allmulticast mode [ 1063.651608][T30280] tipc: Enabled bearer , priority 0 [ 1063.661817][T30268] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 1063.674075][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1063.779452][T30264] tipc: Resetting bearer [ 1063.927916][T30264] tipc: Disabling bearer [ 1063.993129][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1064.035498][T30317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5973'. [ 1064.114025][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1064.621868][T30347] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1064.713236][T30347] bond1 (unregistering): Released all slaves [ 1066.968140][T30439] netlink: 'syz.0.5980': attribute type 1 has an invalid length. [ 1066.989202][T30317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.322162][T30436] bond14: (slave veth15): Enslaving as an active interface with a down link [ 1067.395716][ T7234] net_ratelimit: 20 callbacks suppressed [ 1067.395739][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1067.558320][T30447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.617546][T30447] team0: Port device batadv0 added [ 1067.723912][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1067.871832][T30465] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1067.984017][T30461] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5984'. [ 1068.088291][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.155432][T30472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1068.258729][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.373572][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.514791][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.673341][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.804519][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.829262][T30490] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1068.880888][T30490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1068.929128][T30497] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1068.943588][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1068.988565][T30490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1069.011348][T30501] netlink: 'syz.4.5995': attribute type 3 has an invalid length. [ 1069.105063][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1069.450825][T30509] syzkaller0: entered promiscuous mode [ 1069.479329][T30509] syzkaller0: entered allmulticast mode [ 1069.651587][T30520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6001'. [ 1070.134756][T30511] netlink: 'syz.4.5999': attribute type 1 has an invalid length. [ 1070.155856][T30511] netlink: 'syz.4.5999': attribute type 2 has an invalid length. [ 1070.538236][T30527] syzkaller0: entered promiscuous mode [ 1070.557023][T30527] syzkaller0: entered allmulticast mode [ 1070.930329][T30547] netdevsim netdevsim5 €Â: renamed from netdevsim0 (while UP) [ 1071.204303][T30554] syzkaller0: entered promiscuous mode [ 1071.226669][T30554] syzkaller0: entered allmulticast mode [ 1071.310334][T30560] Bluetooth: MGMT ver 1.23 [ 1071.665087][T30568] netlink: 'syz.4.6012': attribute type 3 has an invalid length. [ 1071.711086][T30568] netlink: 'syz.4.6012': attribute type 3 has an invalid length. [ 1071.762904][T30568] IPVS: ip_vs_add_dest(): server weight less than zero [ 1072.462962][ T1349] net_ratelimit: 16 callbacks suppressed [ 1072.462999][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1072.528910][T30580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6017'. [ 1072.663170][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1072.743405][T30586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6018'. [ 1072.788553][T30586] syzkaller1: entered promiscuous mode [ 1072.833929][T30586] syzkaller1: entered allmulticast mode [ 1072.890000][ T7233] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.023171][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.284074][ T195] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.430048][T30600] netlink: 'syz.5.6023': attribute type 11 has an invalid length. [ 1073.460649][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1073.497293][T30600] netlink: 4320 bytes leftover after parsing attributes in process `syz.5.6023'. [ 1073.703582][T30604] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1073.838794][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1073.853398][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1073.864683][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1073.876853][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1073.888126][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1073.906992][ T82] bond1: (slave bridge1): failed to get link speed/duplex [ 1074.085761][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1074.574518][T30612] syzkaller0: entered promiscuous mode [ 1074.590425][T30612] syzkaller0: entered allmulticast mode [ 1075.815383][T30642] siw: device registration error -23 [ 1076.035766][ T4938] Bluetooth: hci5: command tx timeout [ 1078.099724][ T4938] Bluetooth: hci5: command tx timeout [ 1080.173201][ T4938] Bluetooth: hci5: command tx timeout [ 1082.264932][ T4938] Bluetooth: hci5: command tx timeout [ 1082.294878][ T6927] bond1: (slave bridge1): failed to get link speed/duplex [ 1082.357000][T30648] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1082.653622][T30660] netlink: 4540 bytes leftover after parsing attributes in process `syz.2.6036'. [ 1082.724455][T30660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1082.766323][T30666] netlink: 'syz.5.6038': attribute type 10 has an invalid length. [ 1082.974113][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1083.168611][T30676] FAULT_INJECTION: forcing a failure. [ 1083.168611][T30676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.203283][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1083.232042][T30676] CPU: 0 UID: 0 PID: 30676 Comm: syz.1.6041 Not tainted syzkaller #0 PREEMPT(full) [ 1083.232070][T30676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1083.232080][T30676] Call Trace: [ 1083.232088][T30676] [ 1083.232096][T30676] dump_stack_lvl+0xe8/0x150 [ 1083.232132][T30676] should_fail_ex+0x40c/0x560 [ 1083.232160][T30676] _copy_from_user+0x2d/0xb0 [ 1083.232187][T30676] ___sys_sendmsg+0x1c6/0x360 [ 1083.232209][T30676] ? __lock_acquire+0x683/0x2cf0 [ 1083.232243][T30676] ? __pfx____sys_sendmsg+0x10/0x10 [ 1083.232295][T30676] ? __fget_files+0x2a/0x420 [ 1083.232320][T30676] ? __fget_files+0x3a2/0x420 [ 1083.232350][T30676] __x64_sys_sendmsg+0x1b1/0x290 [ 1083.232370][T30676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1083.232416][T30676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.232436][T30676] do_syscall_64+0x174/0x580 [ 1083.232457][T30676] ? trace_irq_disable+0x3b/0x140 [ 1083.232478][T30676] ? clear_bhb_loop+0x40/0x90 [ 1083.232498][T30676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.232515][T30676] RIP: 0033:0x7f926e19de99 [ 1083.232532][T30676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1083.232547][T30676] RSP: 002b:00007f926f0e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1083.232567][T30676] RAX: ffffffffffffffda RBX: 00007f926e425fa0 RCX: 00007f926e19de99 [ 1083.232579][T30676] RDX: 0000000020040000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1083.232590][T30676] RBP: 00007f926f0e3090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.232601][T30676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.232611][T30676] R13: 00007f926e426038 R14: 00007f926e425fa0 R15: 00007ffcf3f9a678 [ 1083.232639][T30676] [ 1083.425678][ T1349] bond1: (slave bridge1): failed to get link speed/duplex [ 1083.508725][T30608] lo speed is unknown, defaulting to 1000 [ 1083.517996][T30608] lo speed is unknown, defaulting to 1000 [ 1083.554465][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1083.980789][T30684] : option downdelay: invalid value (18446744073709547007) [ 1084.047103][T30684] : option downdelay: allowed values 0 - 2147483647 [ 1084.117976][T30684]  (unregistering): Released all slaves [ 1084.275403][T30161] bond1: (slave bridge1): failed to get link speed/duplex [ 1084.794285][ T7234] bond1: (slave bridge1): failed to get link speed/duplex [ 1085.052205][T30718] netlink: 7116 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1085.216600][T30706] ip6_vti0: left promiscuous mode [ 1085.235559][T30706] ip6_vti0: left allmulticast mode [ 1085.278622][T30706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.286696][T30706] bridge0: port 1(1) entered disabled state [ 1085.587693][T30706] veth1_virt_wifi: left allmulticast mode [ 1085.678179][T30706] netdevsim netdevsim5 €Â: left allmulticast mode [ 1085.728666][T30706] bond1: left allmulticast mode [ 1085.735755][T30706] bridge1: left allmulticast mode [ 1085.740899][T30706] bridge2: left allmulticast mode [ 1086.331517][T30161] netdevsim netdevsim5 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.372755][T30161] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.422997][T30161] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.476112][T30161] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.659998][T30749] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6057'. [ 1087.045869][T30766] netlink: 'syz.4.6061': attribute type 1 has an invalid length. [ 1087.279627][T30766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1087.481938][T30770] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 1087.724385][ T82] lo: left allmulticast mode [ 1087.898897][T30800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1088.542082][ T82] bond11 (unregistering): (slave geneve2): Releasing active interface [ 1088.621579][ T82] team0: Port device bridge1 removed [ 1088.646092][T30834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6074'. [ 1088.676620][ T82] team0: Port device bridge3 removed [ 1088.699011][ T82] team0: Port device bridge6 removed [ 1088.770463][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1088.805994][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1088.824764][ T82] bond0 (unregistering): Released all slaves [ 1088.837644][ T82] bond1 (unregistering): Released all slaves [ 1088.854346][ T82] bond2 (unregistering): Released all slaves [ 1088.878421][ T82] bond3 (unregistering): Released all slaves [ 1088.911337][ T82] bond4 (unregistering): Released all slaves [ 1088.938529][ T82] bond5 (unregistering): Released all slaves [ 1088.959479][ T82] bond6 (unregistering): Released all slaves [ 1088.997701][ T82] bond7 (unregistering): (slave veth5): Releasing active interface [ 1089.006488][ T82] batadv1: entered promiscuous mode [ 1089.019110][ T82] bond7 (unregistering): (slave batadv1): Releasing active interface [ 1089.029061][ T82] bond7 (unregistering): Released all slaves [ 1089.051733][ T82] bond8 (unregistering): (slave veth7): Releasing active interface [ 1089.067126][ T82] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1089.078579][ T82] bond8 (unregistering): Released all slaves [ 1089.095078][ T82] bond9 (unregistering): Released all slaves [ 1089.117385][ T82] bond10 (unregistering): Released all slaves [ 1089.138125][ T82] bond11 (unregistering): Released all slaves [ 1089.155096][ T82] bond12 (unregistering): (slave veth9): Releasing active interface [ 1089.169250][ T82] bond12 (unregistering): Released all slaves [ 1089.185362][ T82] bond13 (unregistering): Released all slaves [ 1089.201670][ T82] bond14 (unregistering): (slave veth15): Releasing active interface [ 1089.211986][ T82] bond14 (unregistering): Released all slaves [ 1089.249751][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1089.257275][T30833] tipc: Enabled bearer , priority 25 [ 1089.337320][T30837] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6074'. [ 1089.646010][ T82] tipc: Disabling bearer [ 1089.707378][ T82] tipc: Left network mode [ 1089.801622][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6078'. [ 1089.827044][T30857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6078'. [ 1090.025324][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6081'. [ 1090.104853][T30855] syzkaller1: entered promiscuous mode [ 1090.117201][T30855] syzkaller1: entered allmulticast mode [ 1090.219481][T30608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.236675][T30608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.245307][T30608] bridge_slave_0: entered allmulticast mode [ 1090.276860][T30608] bridge_slave_0: entered promiscuous mode [ 1090.401714][ T6553] tipc: Node number set to 1170800350 [ 1090.419209][T30608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.438924][T30608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.454731][T30608] bridge_slave_1: entered allmulticast mode [ 1090.476949][T30608] bridge_slave_1: entered promiscuous mode [ 1090.610240][T30608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.749379][T30608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.083787][T30608] team0: Port device team_slave_0 added [ 1091.112167][T30608] team0: Port device team_slave_1 added [ 1091.139007][T30913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6086'. [ 1091.331525][ T30] audit: type=1800 audit(1784786719.224:20): pid=30918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6087" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=3089 res=0 errno=0 [ 1091.458170][T30608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.480291][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.530737][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6086'. [ 1091.542929][T30608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.397553][T30930] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1092.418382][T30608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.448274][T30608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.509105][T30608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.526774][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1092.746301][T30608] hsr_slave_0: entered promiscuous mode [ 1092.771866][T30608] hsr_slave_1: entered promiscuous mode [ 1092.807093][T30608] debugfs: 'hsr0' already exists in 'hsr' [ 1092.833583][T30608] Cannot create hsr debugfs directory [ 1092.918211][T30963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6096'. [ 1092.964983][T30957] lo speed is unknown, defaulting to 1000 [ 1093.027331][T30957] lo speed is unknown, defaulting to 1000 [ 1093.367668][ T82] hsr_slave_0: left promiscuous mode [ 1093.389771][ T82] hsr_slave_1: left promiscuous mode [ 1093.415895][ T82] batman_adv: 61ªX¹¦À: Removing interface: batadv_slave_1 [ 1093.600200][T30974] IPVS: set_ctl: invalid protocol: 247 172.20.20.187:20000 [ 1094.205974][ T82] team0 (unregistering): Port device team_slave_1 removed [ 1094.241614][ T82] team0 (unregistering): Port device team_slave_0 removed [ 1094.389413][ T7234] smc: removing ib device syz1 [ 1094.429917][ T7234] smbdirect: ib_dev[syz1] removed [ 1094.865069][T31002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6102'. [ 1095.779175][T31032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6109'. [ 1095.779608][T31035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6110'. [ 1098.920110][T31095] syzkaller0: entered promiscuous mode [ 1098.940755][T31095] syzkaller0: entered allmulticast mode [ 1099.031031][T31107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1099.054975][T31107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6119'. [ 1099.208083][T31107] batman_adv: batadv0: Adding interface: dummy0 [ 1099.231839][T31107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.266926][T31107] batman_adv: batadv0: Interface activated: dummy0 [ 1099.434687][T30608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1099.481431][T30608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1099.530317][T31117] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1099.572506][T30608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1099.625235][T30608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.635316][T30608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1099.654842][T31125] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6124'. [ 1099.666100][T30608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1099.710048][T31127] netlink: 'syz.4.6124': attribute type 4 has an invalid length. [ 1099.731859][T30608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1099.812115][T30608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.986626][T31134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1099.988790][T31122] lo speed is unknown, defaulting to 1000 [ 1100.441178][T31150] tipc: Failed to remove unknown binding: 66,1,1/1565201491:3468216628/3468216630 [ 1100.471306][T31150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1100.576338][T31150] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1100.674967][T31157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6128'. [ 1100.730833][ T82] IPVS: stop unused estimator thread 0... [ 1100.895967][T30608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.991532][T31165] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1101.042997][T31163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6129'. [ 1101.068598][T31169] netlink: 'syz.2.6130': attribute type 1 has an invalid length. [ 1101.367498][T31187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6135'. [ 1101.696981][T30608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.762660][T31169] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1101.798398][T31174] vlan3: entered allmulticast mode [ 1101.811760][T31174] bond9: entered allmulticast mode [ 1101.906134][T31179] bond9: (slave geneve2): making interface the new active one [ 1101.921387][T31179] geneve2: entered allmulticast mode [ 1101.931363][T31179] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 1102.004791][T30161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.012075][T30161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.646596][T30161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.653860][T30161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.179865][T31250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1104.426530][T31301] __nla_validate_parse: 3 callbacks suppressed [ 1104.426552][T31301] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6155'. [ 1104.547916][T30608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.751283][T30608] veth0_vlan: entered promiscuous mode [ 1104.809840][T30608] veth1_vlan: entered promiscuous mode [ 1105.010315][T30608] veth0_macvtap: entered promiscuous mode [ 1105.069941][T30608] veth1_macvtap: entered promiscuous mode [ 1105.317964][T30608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.375552][T30608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.437330][ T7233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.464774][ T7233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.487998][ T7233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.541617][ T7233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.839855][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.869224][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.095248][ T1349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.116698][ T1349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.348624][T31375] tipc: Enabled bearer , priority 0 [ 1106.374929][T31375] syzkaller0: entered promiscuous mode [ 1106.395559][T31375] syzkaller0: entered allmulticast mode [ 1106.442905][T31379] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1106.479522][T31379] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1106.523824][T31375] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1106.669534][T31383] tipc: Resetting bearer [ 1106.729550][T31385] netlink: 'syz.4.6171': attribute type 4 has an invalid length. [ 1106.774874][T31373] tipc: Resetting bearer [ 1106.781087][T31387] netlink: 'syz.4.6171': attribute type 4 has an invalid length. [ 1106.860710][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1106.884731][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1106.920258][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1106.944355][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1106.959193][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1106.998463][T31373] tipc: Disabling bearer [ 1107.130546][T31385] netlink: 'syz.4.6171': attribute type 4 has an invalid length. [ 1107.422037][T31416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1107.556908][T18463] bond4: (slave syz_tun): Releasing active interface [ 1107.846752][T31429] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6179'. [ 1107.961647][T31391] lo speed is unknown, defaulting to 1000 [ 1108.001959][T31433] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1108.019347][T31433] syzkaller1: linktype set to 768 [ 1108.096572][T31441] netlink: 'syz.4.6183': attribute type 9 has an invalid length. [ 1108.686648][T31478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6192'. [ 1108.837044][T31464] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1108.923096][T31464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1109.053770][ T4938] Bluetooth: hci4: command tx timeout [ 1110.974113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1111.144198][ T4938] Bluetooth: hci4: command tx timeout [ 1111.199025][T31502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1111.312070][T31507] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20004 [ 1111.327885][T31391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.338626][T31391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.344480][T31507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6198'. [ 1111.347313][T31391] bridge_slave_0: entered allmulticast mode [ 1111.366134][T31391] bridge_slave_0: entered promiscuous mode [ 1111.376042][T31391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.384549][T31391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.397948][T31391] bridge_slave_1: entered allmulticast mode [ 1111.415430][T31391] bridge_slave_1: entered promiscuous mode [ 1111.575762][T31391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.635493][T31391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.720666][T31391] team0: Port device team_slave_0 added [ 1111.743384][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1111.753034][T31391] team0: Port device team_slave_1 added [ 1111.771609][T31526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6203'. [ 1111.819102][T31526] netlink: 'syz.5.6203': attribute type 12 has an invalid length. [ 1111.843322][T31391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.868070][T31391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.900361][T31533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6205'. [ 1111.913323][T31391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.940847][T31391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.964535][T31391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.007364][T31391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.020712][ T6927] netdevsim netdevsim5 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.031430][ T6927] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.140547][ T6927] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.168090][ T6927] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1112.286489][T31557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6210'. [ 1112.412192][T31391] hsr_slave_0: entered promiscuous mode [ 1112.433530][T31561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1112.444179][T31391] hsr_slave_1: entered promiscuous mode [ 1112.673867][T31566] bond1: Unable to set up delay as MII monitoring is disabled [ 1112.688230][T31566] bond1 (unregistering): Released all slaves [ 1113.220046][ T4938] Bluetooth: hci4: command tx timeout [ 1113.337225][T31580] netlink: 'syz.0.6217': attribute type 1 has an invalid length. [ 1113.433633][T31580] macvlan2: entered promiscuous mode [ 1113.450253][T31580] macvlan2: entered allmulticast mode [ 1113.982714][T31605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6224'. [ 1114.015984][T31601] lo speed is unknown, defaulting to 1000 [ 1114.651255][T31627] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6226'. [ 1114.848831][T31619] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1114.866754][T31619] bond1 (unregistering): Released all slaves [ 1115.164591][T31391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1115.183864][T31636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1115.189362][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1115.217851][T31391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1115.447716][ T4938] Bluetooth: hci4: command tx timeout [ 1115.467632][T31638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6230'. [ 1115.490996][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.599426][T31391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1115.639285][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.821557][T31391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1115.858035][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.923329][T31639] lo speed is unknown, defaulting to 1000 [ 1116.279461][T31670] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1116.292378][T31670] syzkaller1: Linktype set failed because interface is up [ 1116.303071][ T6553] syzkaller1: tun_net_xmit 90 [ 1116.630161][T31391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.647052][T31682] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 1116.656399][T31682] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 1116.668298][ T6927] syzkaller1: tun_net_xmit 86 [ 1116.693516][T31682] macsec1: entered promiscuous mode [ 1116.726238][T31391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.761945][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.769258][ T7233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1116.793197][ T6553] syzkaller1: tun_net_xmit 90 [ 1116.850017][ T6927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.857443][ T6927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.961570][T31698] tipc: Enabled bearer , priority 0 [ 1116.994704][T31695] tipc: Resetting bearer [ 1117.064060][T31695] sctp: [Deprecated]: syz.2.6244 (pid 31695) Use of int in maxseg socket option. [ 1117.064060][T31695] Use struct sctp_assoc_value instead [ 1117.219355][T31702] bridge2: entered promiscuous mode [ 1117.234714][T31705] __nla_validate_parse: 2 callbacks suppressed [ 1117.234736][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6246'. [ 1117.255045][T31702] bridge2: entered allmulticast mode [ 1117.298176][T31702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1117.315944][T31708] bridge0: port 3(vlan3) entered blocking state [ 1117.325031][T31708] bridge0: port 3(vlan3) entered disabled state [ 1117.352088][T31708] vlan3: entered allmulticast mode [ 1117.357814][T31708] geneve0: entered allmulticast mode [ 1117.366952][T31709] netlink: 'syz.5.6247': attribute type 1 has an invalid length. [ 1117.371129][T31711] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6248'. [ 1117.381079][T31708] vlan3: entered promiscuous mode [ 1117.408607][T31708] geneve0: entered promiscuous mode [ 1117.409190][T31715] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6247'. [ 1117.467154][T31702] bond0: (slave bond_slave_1): Releasing backup interface [ 1117.507308][T31718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6249'. [ 1117.983345][ T6562] tipc: Node number set to 4118343918 [ 1118.139303][T31740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6250'. [ 1118.440953][T31391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.851391][T31391] veth0_vlan: entered promiscuous mode [ 1118.886031][T31758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6255'. [ 1118.927383][T31391] veth1_vlan: entered promiscuous mode [ 1118.928579][T31756] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6254'. [ 1119.125252][T31391] veth0_macvtap: entered promiscuous mode [ 1119.170410][T31391] veth1_macvtap: entered promiscuous mode [ 1119.246694][T31391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1119.257809][T31771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6259'. [ 1119.309880][T31770] : left allmulticast mode [ 1119.326269][T31770] : left promiscuous mode [ 1119.343927][T31770] bridge0: port 1(1) entered disabled state [ 1119.368977][T31770] bridge_slave_1: left allmulticast mode [ 1119.409857][T31770] bridge_slave_1: left promiscuous mode [ 1119.434545][T31770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.485061][T31770] bond0: (slave bond_slave_0): Releasing backup interface [ 1119.515522][T31770] bond0: (slave bond_slave_1): Releasing backup interface [ 1119.530680][T31770] team0: Port device team_slave_0 removed [ 1119.556904][T31770] team0: Port device team_slave_1 removed [ 1119.570044][T31770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1119.608034][T31391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.619637][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1119.660491][T31784] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 1119.687864][ T82] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.718172][ T82] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.745428][ T82] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.776200][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.654531][T31788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1122.815418][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.859548][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.943901][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.969563][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.987214][T31817] vlan2: entered promiscuous mode [ 1122.993701][T31817] bridge0: entered promiscuous mode [ 1123.085493][T31820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6269'. [ 1123.108657][T31823] tipc: Enabling of bearer rejected, already enabled [ 1123.467555][T31843] mac80211_hwsim hwsim40 syzkaller0: left promiscuous mode [ 1123.494137][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6273'. [ 1123.520459][T31843] mac80211_hwsim hwsim40 syzkaller0: left allmulticast mode [ 1123.538806][T31845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1123.563554][T31848] FAULT_INJECTION: forcing a failure. [ 1123.563554][T31848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.573070][T31845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 1123.579456][T31848] CPU: 1 UID: 0 PID: 31848 Comm: syz.4.6276 Not tainted syzkaller #0 PREEMPT(full) [ 1123.579483][T31848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1123.579494][T31848] Call Trace: [ 1123.579502][T31848] [ 1123.579510][T31848] dump_stack_lvl+0xe8/0x150 [ 1123.579543][T31848] should_fail_ex+0x40c/0x560 [ 1123.579571][T31848] _copy_from_user+0x2d/0xb0 [ 1123.579598][T31848] ___sys_sendmsg+0x1c6/0x360 [ 1123.579618][T31848] ? __lock_acquire+0x683/0x2cf0 [ 1123.579646][T31848] ? __pfx____sys_sendmsg+0x10/0x10 [ 1123.579700][T31848] ? __fget_files+0x2a/0x420 [ 1123.579727][T31848] ? __fget_files+0x3a2/0x420 [ 1123.579760][T31848] __x64_sys_sendmsg+0x1b1/0x290 [ 1123.579782][T31848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1123.579819][T31848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.579840][T31848] do_syscall_64+0x174/0x580 [ 1123.579859][T31848] ? trace_irq_disable+0x3b/0x140 [ 1123.579882][T31848] ? clear_bhb_loop+0x40/0x90 [ 1123.579905][T31848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.579923][T31848] RIP: 0033:0x7fbec199de99 [ 1123.579941][T31848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1123.579957][T31848] RSP: 002b:00007fbec2869028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.579978][T31848] RAX: ffffffffffffffda RBX: 00007fbec1c25fa0 RCX: 00007fbec199de99 [ 1123.579991][T31848] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 1123.580011][T31848] RBP: 00007fbec2869090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.580022][T31848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.580033][T31848] R13: 00007fbec1c26038 R14: 00007fbec1c25fa0 R15: 00007ffd2880a268 [ 1123.580063][T31848] [ 1123.666295][T31857] netlink: 'syz.0.6278': attribute type 29 has an invalid length. [ 1123.817753][T31857] netlink: 'syz.0.6278': attribute type 1 has an invalid length. [ 1123.891827][T31865] netlink: 'syz.5.6281': attribute type 1 has an invalid length. [ 1124.043185][T31877] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6282'. [ 1124.069412][T31874] veth9: entered allmulticast mode [ 1124.080481][T31874] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1124.131950][T31865] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1124.177386][T31885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6284'. [ 1124.275159][T31865] bond5: (slave veth0_to_bond): Releasing active interface [ 1124.403140][T31881] lo speed is unknown, defaulting to 1000 [ 1124.555087][T31895] sctp: [Deprecated]: syz.5.6287 (pid 31895) Use of int in max_burst socket option deprecated. [ 1124.555087][T31895] Use struct sctp_assoc_value instead [ 1124.853531][T31881] dvmrp0: entered allmulticast mode [ 1124.949551][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.967172][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.979563][ T1349] dvmrp0: left allmulticast mode [ 1124.989017][T31907] netlink: 'syz.2.6291': attribute type 1 has an invalid length. [ 1124.999742][T31907] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1125.033917][T31907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1125.290754][T31909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6290'. [ 1125.810765][T31940] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1125.881668][T31949] netlink: 'syz.2.6301': attribute type 11 has an invalid length. [ 1125.904808][T31949] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.6301'. [ 1126.229430][T31963] syzkaller1: entered promiscuous mode [ 1126.239572][T31963] syzkaller1: entered allmulticast mode [ 1126.300387][T31958] lo speed is unknown, defaulting to 1000 [ 1126.723046][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1126.739899][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1126.756114][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1126.766033][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1126.778648][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1127.951338][T32025] block nbd1: reconnected socket [ 1127.998099][ T7233] bridge_slave_1: left allmulticast mode [ 1128.014274][ T7233] bridge_slave_1: left promiscuous mode [ 1128.023641][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.050755][ T7233] bridge_slave_0: left allmulticast mode [ 1128.095930][ T7233] bridge_slave_0: left promiscuous mode [ 1128.127053][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.640010][T32049] __nla_validate_parse: 9 callbacks suppressed [ 1128.640031][T32049] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6327'. [ 1128.710335][T32050] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6327'. [ 1128.733519][ T7233] pimreg: left allmulticast mode [ 1128.905085][ T5630] Bluetooth: hci1: command tx timeout [ 1129.178585][ T7233] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1129.279639][ T7233] bond1 (unregistering): Released all slaves [ 1129.297666][ T7233] bond2 (unregistering): Released all slaves [ 1129.323128][ T7233] bond3 (unregistering): Released all slaves [ 1129.339526][ T7233] bond4 (unregistering): Released all slaves [ 1129.360310][ T7233] bond5 (unregistering): Released all slaves [ 1129.378825][ T7233] bond6 (unregistering): Released all slaves [ 1129.396260][ T7233] bond0 (unregistering): Released all slaves [ 1129.418796][ T7233] bond7 (unregistering): Released all slaves [ 1129.436147][ T7233] bond8 (unregistering): Released all slaves [ 1129.451175][T32046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6327'. [ 1129.491303][T31978] lo speed is unknown, defaulting to 1000 [ 1129.780176][ T7233] : left promiscuous mode [ 1130.046093][ T7233] tipc: Disabling bearer [ 1130.070381][ T7233] tipc: Left network mode [ 1130.239555][T31978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.248937][T31978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.257366][T31978] bridge_slave_0: entered allmulticast mode [ 1130.264751][T31978] bridge_slave_0: entered promiscuous mode [ 1130.285013][T31978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.293323][T31978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.301304][T31978] bridge_slave_1: entered allmulticast mode [ 1130.311014][T31978] bridge_slave_1: entered promiscuous mode [ 1130.374135][T31978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.429964][T31978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.467513][T31978] team0: Port device team_slave_0 added [ 1130.495764][T31978] team0: Port device team_slave_1 added [ 1130.577748][ T7233] [ 1130.580110][ T7233] ====================================================== [ 1130.587274][ T7233] WARNING: possible circular locking dependency detected [ 1130.594360][ T7233] syzkaller #0 Not tainted [ 1130.598782][ T7233] ------------------------------------------------------ [ 1130.605841][ T7233] kworker/u8:26/7233 is trying to acquire lock: [ 1130.612180][ T7233] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x170 [ 1130.625882][ T7233] [ 1130.625882][ T7233] but task is already holding lock: [ 1130.633778][ T7233] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1130.644049][ T7233] [ 1130.644049][ T7233] which lock already depends on the new lock. [ 1130.644049][ T7233] [ 1130.655507][ T7233] [ 1130.655507][ T7233] the existing dependency chain (in reverse order) is: [ 1130.664720][ T7233] [ 1130.664720][ T7233] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1130.673010][ T7233] down_write+0x96/0x200 [ 1130.677988][ T7233] kernfs_add_one+0x41/0x5e0 [ 1130.683197][ T7233] kernfs_create_dir_ns+0x1a1/0x230 [ 1130.689099][ T7233] internal_create_group+0x440/0x1180 [ 1130.695005][ T7233] cpuhp_invoke_callback+0x434/0x810 [ 1130.700859][ T7233] cpuhp_issue_call+0x3f0/0x750 [ 1130.706253][ T7233] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1130.713032][ T7233] __cpuhp_setup_state+0x3f/0x60 [ 1130.719078][ T7233] do_one_initcall+0x250/0x870 [ 1130.724570][ T7233] do_initcall_level+0x10a/0x1a0 [ 1130.730389][ T7233] do_initcalls+0x59/0xa0 [ 1130.735246][ T7233] kernel_init_freeable+0x29d/0x3e0 [ 1130.740967][ T7233] kernel_init+0x1d/0x1d0 [ 1130.746048][ T7233] ret_from_fork+0x514/0xb70 [ 1130.751292][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1130.756613][ T7233] [ 1130.756613][ T7233] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1130.764484][ T7233] [ 1130.764484][ T7233] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1130.772212][ T7233] cpus_read_lock+0x42/0x160 [ 1130.777455][ T7233] static_key_slow_inc+0x12/0x30 [ 1130.782973][ T7233] nbd_genl_reconfigure+0x1301/0x1e80 [ 1130.788963][ T7233] genl_family_rcv_msg_doit+0x233/0x340 [ 1130.795036][ T7233] genl_rcv_msg+0x614/0x7a0 [ 1130.800235][ T7233] netlink_rcv_skb+0x226/0x4a0 [ 1130.805511][ T7233] genl_rcv+0x28/0x40 [ 1130.810008][ T7233] netlink_unicast+0x7bb/0x940 [ 1130.815292][ T7233] netlink_sendmsg+0x813/0xb40 [ 1130.820660][ T7233] sock_sendmsg_nosec+0x13a/0x180 [ 1130.826237][ T7233] ____sys_sendmsg+0x54e/0x850 [ 1130.831560][ T7233] ___sys_sendmsg+0x2a5/0x360 [ 1130.836871][ T7233] __x64_sys_sendmsg+0x1b1/0x290 [ 1130.842430][ T7233] do_syscall_64+0x174/0x580 [ 1130.847592][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.854033][ T7233] [ 1130.854033][ T7233] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1130.861802][ T7233] __mutex_lock+0x19d/0x1550 [ 1130.866917][ T7233] nbd_queue_rq+0x373/0x1150 [ 1130.872161][ T7233] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1130.878974][ T7233] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1130.885871][ T7233] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1130.892379][ T7233] blk_mq_run_work_fn+0x16c/0x300 [ 1130.897962][ T7233] process_scheduled_works+0xa8e/0x14e0 [ 1130.904051][ T7233] worker_thread+0xa47/0xfb0 [ 1130.909184][ T7233] kthread+0x388/0x470 [ 1130.913785][ T7233] ret_from_fork+0x514/0xb70 [ 1130.918905][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1130.924194][ T7233] [ 1130.924194][ T7233] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1130.931415][ T7233] __mutex_lock+0x19d/0x1550 [ 1130.936532][ T7233] nbd_queue_rq+0xc1/0x1150 [ 1130.941564][ T7233] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1130.947665][ T7233] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1130.954524][ T7233] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1130.961121][ T7233] blk_mq_run_work_fn+0x16c/0x300 [ 1130.966678][ T7233] process_scheduled_works+0xa8e/0x14e0 [ 1130.972750][ T7233] worker_thread+0xa47/0xfb0 [ 1130.977873][ T7233] kthread+0x388/0x470 [ 1130.982473][ T7233] ret_from_fork+0x514/0xb70 [ 1130.987600][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1130.992945][ T7233] [ 1130.992945][ T7233] -> #4 (set->srcu){.+.+}-{0:0}: [ 1131.000160][ T7233] __synchronize_srcu+0xc9/0x2f0 [ 1131.005714][ T7233] elevator_switch+0x1e8/0x7b0 [ 1131.011162][ T7233] elevator_change+0x2fa/0x480 [ 1131.016625][ T7233] elevator_set_default+0x375/0x440 [ 1131.022527][ T7233] blk_register_queue+0x3f3/0x4e0 [ 1131.028130][ T7233] __add_disk+0x6cb/0xe30 [ 1131.033186][ T7233] add_disk_fwnode+0x100/0x3a0 [ 1131.038655][ T7233] nbd_dev_add+0x733/0xb60 [ 1131.043687][ T7233] nbd_init+0x15f/0x1e0 [ 1131.048446][ T7233] do_one_initcall+0x250/0x870 [ 1131.053738][ T7233] do_initcall_level+0x10a/0x1a0 [ 1131.059202][ T7233] do_initcalls+0x59/0xa0 [ 1131.064059][ T7233] kernel_init_freeable+0x29d/0x3e0 [ 1131.069872][ T7233] kernel_init+0x1d/0x1d0 [ 1131.074727][ T7233] ret_from_fork+0x514/0xb70 [ 1131.079943][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1131.085229][ T7233] [ 1131.085229][ T7233] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1131.093920][ T7233] __mutex_lock+0x19d/0x1550 [ 1131.099042][ T7233] elevator_change+0x1af/0x480 [ 1131.104330][ T7233] elevator_set_none+0xb5/0x140 [ 1131.109859][ T7233] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1131.116227][ T7233] nbd_start_device+0x189/0xb30 [ 1131.121710][ T7233] nbd_genl_connect+0x1597/0x1c10 [ 1131.127273][ T7233] genl_family_rcv_msg_doit+0x233/0x340 [ 1131.133446][ T7233] genl_rcv_msg+0x614/0x7a0 [ 1131.138477][ T7233] netlink_rcv_skb+0x226/0x4a0 [ 1131.143852][ T7233] genl_rcv+0x28/0x40 [ 1131.148357][ T7233] netlink_unicast+0x7bb/0x940 [ 1131.153647][ T7233] netlink_sendmsg+0x813/0xb40 [ 1131.158932][ T7233] sock_sendmsg_nosec+0x13a/0x180 [ 1131.164666][ T7233] ____sys_sendmsg+0x54e/0x850 [ 1131.169961][ T7233] ___sys_sendmsg+0x2a5/0x360 [ 1131.175188][ T7233] __x64_sys_sendmsg+0x1b1/0x290 [ 1131.180680][ T7233] do_syscall_64+0x174/0x580 [ 1131.185812][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.192321][ T7233] [ 1131.192321][ T7233] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1131.200965][ T7233] blk_alloc_queue+0x544/0x690 [ 1131.206261][ T7233] __blk_mq_alloc_disk+0x194/0x390 [ 1131.211900][ T7233] nbd_dev_add+0x494/0xb60 [ 1131.216850][ T7233] nbd_init+0x15f/0x1e0 [ 1131.221539][ T7233] do_one_initcall+0x250/0x870 [ 1131.226830][ T7233] do_initcall_level+0x10a/0x1a0 [ 1131.232298][ T7233] do_initcalls+0x59/0xa0 [ 1131.237256][ T7233] kernel_init_freeable+0x29d/0x3e0 [ 1131.243091][ T7233] kernel_init+0x1d/0x1d0 [ 1131.247952][ T7233] ret_from_fork+0x514/0xb70 [ 1131.253068][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1131.258350][ T7233] [ 1131.258350][ T7233] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1131.265564][ T7233] fs_reclaim_acquire+0x71/0x100 [ 1131.271144][ T7233] kmem_cache_alloc_noprof+0x64/0x5f0 [ 1131.277046][ T7233] __kernfs_iattrs+0xdd/0x380 [ 1131.282341][ T7233] kernfs_iop_setattr+0xe6/0x3f0 [ 1131.287813][ T7233] notify_change+0xbba/0xea0 [ 1131.292955][ T7233] do_truncate+0x1c2/0x250 [ 1131.297902][ T7233] path_openat+0x2fed/0x3830 [ 1131.303034][ T7233] do_file_open+0x23e/0x4a0 [ 1131.308102][ T7233] do_sys_openat2+0x115/0x200 [ 1131.313324][ T7233] __x64_sys_openat+0x138/0x170 [ 1131.318718][ T7233] do_syscall_64+0x174/0x580 [ 1131.323835][ T7233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.330517][ T7233] [ 1131.330517][ T7233] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1131.339126][ T7233] __lock_acquire+0x1520/0x2cf0 [ 1131.344594][ T7233] lock_acquire+0x106/0x350 [ 1131.349626][ T7233] down_write+0x96/0x200 [ 1131.354400][ T7233] kernfs_unlink_sibling+0x6d/0x170 [ 1131.360126][ T7233] kernfs_rename_ns+0x48e/0x800 [ 1131.365515][ T7233] sysfs_rename_link_ns+0x16e/0x1b0 [ 1131.371345][ T7233] device_rename+0x110/0x210 [ 1131.376558][ T7233] __dev_change_net_namespace+0x1392/0x1de0 [ 1131.383132][ T7233] cfg802154_switch_netns+0xbd/0x410 [ 1131.389172][ T7233] cfg802154_pernet_exit+0x75/0xc0 [ 1131.394820][ T7233] ops_undo_list+0x43d/0x8d0 [ 1131.399940][ T7233] cleanup_net+0x572/0x810 [ 1131.404975][ T7233] process_scheduled_works+0xa8e/0x14e0 [ 1131.411575][ T7233] worker_thread+0xa47/0xfb0 [ 1131.418117][ T7233] kthread+0x388/0x470 [ 1131.422743][ T7233] ret_from_fork+0x514/0xb70 [ 1131.427874][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1131.433164][ T7233] [ 1131.433164][ T7233] other info that might help us debug this: [ 1131.433164][ T7233] [ 1131.443478][ T7233] Chain exists of: [ 1131.443478][ T7233] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1131.443478][ T7233] [ 1131.457957][ T7233] Possible unsafe locking scenario: [ 1131.457957][ T7233] [ 1131.465482][ T7233] CPU0 CPU1 [ 1131.470988][ T7233] ---- ---- [ 1131.476446][ T7233] lock(&root->kernfs_rwsem); [ 1131.481221][ T7233] lock(cpuhp_state_mutex); [ 1131.488359][ T7233] lock(&root->kernfs_rwsem); [ 1131.495657][ T7233] lock(&root->kernfs_iattr_rwsem); [ 1131.500971][ T7233] [ 1131.500971][ T7233] *** DEADLOCK *** [ 1131.500971][ T7233] [ 1131.509137][ T7233] 5 locks held by kworker/u8:26/7233: [ 1131.514525][ T7233] #0: ffff88801c296140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1131.525504][ T7233] #1: ffffc9000364fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1131.536330][ T7233] #2: ffffffff9001e548 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1131.546194][ T7233] #3: ffffffff9002d100 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0 [ 1131.556584][ T7233] #4: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x800 [ 1131.566866][ T7233] [ 1131.566866][ T7233] stack backtrace: [ 1131.572770][ T7233] CPU: 1 UID: 0 PID: 7233 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 1131.572793][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1131.572808][ T7233] Workqueue: netns cleanup_net [ 1131.572840][ T7233] Call Trace: [ 1131.572851][ T7233] [ 1131.572861][ T7233] dump_stack_lvl+0xe8/0x150 [ 1131.572889][ T7233] print_circular_bug+0x2e1/0x300 [ 1131.572908][ T7233] check_noncircular+0x12e/0x150 [ 1131.572938][ T7233] __lock_acquire+0x1520/0x2cf0 [ 1131.572965][ T7233] ? __lock_acquire+0x683/0x2cf0 [ 1131.572989][ T7233] ? __lock_acquire+0x683/0x2cf0 [ 1131.573017][ T7233] ? kernfs_unlink_sibling+0x6d/0x170 [ 1131.573045][ T7233] lock_acquire+0x106/0x350 [ 1131.573069][ T7233] ? kernfs_unlink_sibling+0x6d/0x170 [ 1131.573105][ T7233] down_write+0x96/0x200 [ 1131.573127][ T7233] ? kernfs_unlink_sibling+0x6d/0x170 [ 1131.573156][ T7233] ? __pfx_down_write+0x10/0x10 [ 1131.573177][ T7233] ? kernfs_root+0x1c/0x230 [ 1131.573201][ T7233] ? kernfs_root+0x1c/0x230 [ 1131.573224][ T7233] ? kernfs_root+0x1c/0x230 [ 1131.573248][ T7233] ? kernfs_root+0x1ea/0x230 [ 1131.573273][ T7233] kernfs_unlink_sibling+0x6d/0x170 [ 1131.573302][ T7233] kernfs_rename_ns+0x48e/0x800 [ 1131.573342][ T7233] sysfs_rename_link_ns+0x16e/0x1b0 [ 1131.573370][ T7233] device_rename+0x110/0x210 [ 1131.573392][ T7233] __dev_change_net_namespace+0x1392/0x1de0 [ 1131.573426][ T7233] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1131.573451][ T7233] ? lockdep_hardirqs_on+0x7a/0x110 [ 1131.573472][ T7233] ? irqentry_exit+0x218/0x8f0 [ 1131.573486][ T7233] ? trace_irq_disable+0x3b/0x140 [ 1131.573508][ T7233] ? do_raw_spin_lock+0x12b/0x2f0 [ 1131.573530][ T7233] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1131.573552][ T7233] ? lockdep_hardirqs_on+0x7a/0x110 [ 1131.573568][ T7233] ? __mutex_lock+0x1092/0x1550 [ 1131.573586][ T7233] ? __mutex_lock+0x5d4/0x1550 [ 1131.573603][ T7233] ? cfg802154_pernet_exit+0x18/0xc0 [ 1131.573625][ T7233] ? __pfx___mutex_lock+0x10/0x10 [ 1131.573645][ T7233] cfg802154_switch_netns+0xbd/0x410 [ 1131.573668][ T7233] cfg802154_pernet_exit+0x75/0xc0 [ 1131.573690][ T7233] ops_undo_list+0x43d/0x8d0 [ 1131.573714][ T7233] ? __pfx_ops_undo_list+0x10/0x10 [ 1131.573736][ T7233] ? idr_destroy+0x227/0x290 [ 1131.573812][ T7233] cleanup_net+0x572/0x810 [ 1131.573835][ T7233] ? __pfx_cleanup_net+0x10/0x10 [ 1131.573858][ T7233] ? rcu_is_watching+0x15/0xb0 [ 1131.573882][ T7233] ? process_scheduled_works+0xa20/0x14e0 [ 1131.573899][ T7233] process_scheduled_works+0xa8e/0x14e0 [ 1131.573924][ T7233] ? __pfx_process_scheduled_works+0x10/0x10 [ 1131.573943][ T7233] ? assign_work+0x3cf/0x5d0 [ 1131.573961][ T7233] worker_thread+0xa47/0xfb0 [ 1131.573987][ T7233] kthread+0x388/0x470 [ 1131.574008][ T7233] ? __pfx_worker_thread+0x10/0x10 [ 1131.574025][ T7233] ? __pfx_kthread+0x10/0x10 [ 1131.574045][ T7233] ret_from_fork+0x514/0xb70 [ 1131.574068][ T7233] ? __pfx_ret_from_fork+0x10/0x10 [ 1131.574089][ T7233] ? __switch_to+0xc89/0x1420 [ 1131.574107][ T7233] ? __pfx_kthread+0x10/0x10 [ 1131.574128][ T7233] ret_from_fork_asm+0x1a/0x30 [ 1131.574147][ T7233] [ 1131.899837][ T5630] Bluetooth: hci1: command tx timeout [ 1131.899904][T32025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1131.917819][T32041] netlink: 'syz.4.6324': attribute type 2 has an invalid length. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1132.037981][ T4938] block nbd1: Receive control failed (result -32) [ 1132.358773][ T7233] hsr_slave_0: left promiscuous mode [ 1132.377438][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.415191][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.725611][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 1132.751775][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 1132.809622][T31978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.817614][T31978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.844756][T31978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.909773][T28322] bond1: (slave syz_tun): Removing an active aggregator [ 1132.924674][T28322] bond1: (slave syz_tun): Releasing backup interface [ 1133.227515][ T7233] IPVS: stop unused estimator thread 0... [ 1133.278028][ T7233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.337637][ T7233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.367927][ T7233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.449573][ T7233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.531654][ T7233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.543228][ T7233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1133.578492][ T7233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.590355][ T7233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1133.641771][ T7233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.652796][ T7233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1133.701346][ T7233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.713644][ T7233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1133.800347][ T7233] bridge_slave_1: left allmulticast mode [ 1133.809948][ T7233] bridge_slave_1: left promiscuous mode [ 1133.816271][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.825654][ T7233] bridge_slave_0: left allmulticast mode [ 1133.831391][ T7233] bridge_slave_0: left promiscuous mode [ 1133.838005][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.847802][ T7233] bridge_slave_1: left allmulticast mode [ 1133.854464][ T7233] bridge_slave_1: left promiscuous mode [ 1133.860237][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.870293][ T7233] bridge_slave_0: left allmulticast mode [ 1133.876717][ T7233] bridge_slave_0: left promiscuous mode [ 1133.883211][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.899300][ T7233] bridge_slave_1: left allmulticast mode [ 1133.906074][ T7233] bridge_slave_1: left promiscuous mode [ 1133.911902][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.926239][ T7233] bridge_slave_0: left allmulticast mode [ 1133.934376][ T7233] bridge_slave_0: left promiscuous mode [ 1133.940095][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.951155][ T7233] tipc: Resetting bearer [ 1134.010515][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.021769][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.033927][ T7233] bond0 (unregistering): Released all slaves [ 1134.078164][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.087807][ T7233] bond0 (unregistering): Released all slaves [ 1134.111168][ T7233] tipc: Disabling bearer [ 1134.139757][ T7233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.150147][ T7233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1134.160078][ T7233] bond0 (unregistering): Released all slaves [ 1134.175158][ T7233] bond1 (unregistering): Released all slaves [ 1134.187299][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1134.296316][ T7233] tipc: Left network mode [ 1134.511374][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1134.789926][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.805234][ T7233] hsr_slave_0: left promiscuous mode [ 1134.810996][ T7233] hsr_slave_1: left promiscuous mode [ 1134.817941][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.826105][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.836159][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.843926][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.854647][ T7233] hsr_slave_0: left promiscuous mode [ 1134.860301][ T7233] hsr_slave_1: left promiscuous mode [ 1134.866581][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.874404][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.882023][ T7233] batman_adv: batadv0: Interface deactivated: dummy0 [ 1134.890127][ T7233] batman_adv: batadv0: Removing interface: dummy0 [ 1134.901344][ T7233] veth1_macvtap: left promiscuous mode [ 1134.908056][ T7233] veth0_macvtap: left promiscuous mode [ 1134.914539][ T7233] veth1_vlan: left promiscuous mode [ 1134.920383][ T7233] veth0_vlan: left promiscuous mode [ 1134.926911][ T7233] veth1_macvtap: left promiscuous mode [ 1134.933166][ T7233] veth0_macvtap: left promiscuous mode [ 1134.938684][ T7233] veth1_vlan: left promiscuous mode [ 1134.944378][ T7233] veth0_vlan: left promiscuous mode [ 1135.030380][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 1135.041813][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 1135.159667][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 1135.170366][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 1135.263790][ T7233] team0 (unregistering): Port device team_slave_1 removed [ 1135.276885][ T7233] team0 (unregistering): Port device team_slave_0 removed [ 1135.341165][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1135.711529][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1136.077847][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1136.111947][ T7233] IPVS: stop unused estimator thread 0... [ 1136.335909][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1136.568788][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1136.829099][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8