last executing test programs: 2.587874291s ago: executing program 3 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000000140)=0xdf6, 0x4) 2.359465417s ago: executing program 3 (id=4494): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r4, 0x29, 0xd0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r7}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x8) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a72ed35", 0x4}], 0x1}}], 0x1, 0x0) 2.18828555s ago: executing program 4 (id=4497): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x2, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x40, 0x1, 0xf, 0x7}}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=@newqdisc={0x12c, 0x24, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xffe8}, {0xb, 0x10}, {0x0, 0xe}}, [@TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xff, 0x4, 0x9, 0x2, 0xbd, 0x9, 0x3}}, {0xa, 0x2, [0x9, 0x1317, 0x9]}}, {{0x1c, 0x1, {0x6, 0xa, 0x8, 0x5, 0x0, 0x2902, 0x200, 0x7}}, {0x12, 0x2, [0xff, 0x8, 0x8, 0x3ff, 0x2, 0x1, 0x1000]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x5, 0x880, 0x1, 0x0, 0x2, 0x3, 0x4}}, {0xc, 0x2, [0x6ef, 0x9, 0x6, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff0000}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x17}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xfc, 0x7fff, 0x40, 0x1, 0x2, 0x100, 0x4}}, {0xc, 0x2, [0x5, 0xf974, 0xc, 0xc9]}}, {{0x1c, 0x1, {0xc, 0xd7, 0x4, 0x4, 0x3, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x100]}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=@deltaction={0xa8, 0x31, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80a}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x23, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xb, &(0x7f00000015c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/220, 0xdc}, {&(0x7f00000013c0)=""/159, 0x9f}, {&(0x7f0000001480)=""/8, 0x8}, {&(0x7f00000014c0)=""/80, 0x50}], 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r8, 0xc) connect$x25(r8, &(0x7f0000000a80), 0x12) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001580)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4008055) 2.100245071s ago: executing program 2 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8040480) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x4b) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b0000", @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x20000001}, 0x8050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x400c03, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000400)=0x100) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xac}}, 0x20008000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r6, 0xaa0f4000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x1000040, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0xf9, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000180)='9+', 0x2}], 0x1) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4040095}, 0x40010) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.898196483s ago: executing program 4 (id=4502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES8], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xcfdf2559537c737d, &(0x7f0000000000)={@multicast2, @private, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x4, 0x8, 0x6, 0x1, 0x2, @mcast1, @local, 0x21, 0x700, 0x9, 0x1}}) 1.781655469s ago: executing program 2 (id=4503): syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x9300, "66f588e80068a11a29d14680687560e658aa73a4675ca9948c5160ad1e85e88a3abd91f5be96498ad6eb41726fe47e88e2675f462572ab6bf7a4b3e8b4793dee9ea415df3842dc3131c02f3f13526e12cd19f0eb7e03e8"}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x0) syz_emit_ethernet(0x114, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x1, 0x3, [0x535, 0xeac, 0x7ec, 0xb2b]}) 1.618941759s ago: executing program 2 (id=4505): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x28000600) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000044) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000006c0)=0x40, 0x4) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e22, 0x200, @empty, 0x4c}}}, 0x32) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x50000003, '\x00', r5, r6, 0x1, 0xffffffff}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000200)="d6219dd1e9c97dcca1fdc8261b4ac8480b918142f1b4120136aec8e4cb5820f3590b6888ee06b0c0dfd791a41538dff8ee051a1ef13d5a4a03bba26b669f378aa6885d06a73929ab508eeeee8db1a063feb771eb7673c31b489d0dcfc93d34499600c3efbe56290f3ee616a54fcf4ff5f24b6948e2a8dcdb49a2e2664a5f665302e9faa2dd46fd4f816c2115c864009dea9467b8eb87df6cf36a954ac6890a6a54a9d3039a03d9", &(0x7f0000000340)=""/186, 0x0, &(0x7f00000004c0)="d6d499b2b0ab8d10bda2153d204021802f24923e81eeebf2aa", 0x1, r7, 0x4}, 0x38) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x1}, 0xfe}, 0x18) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f00000000c0)) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r4, &(0x7f0000000480), 0x0, 0xf5) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0xc6, 0x4) (rerun: 64) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="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", 0x10e}], 0x1}, 0x0) (async) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async, rerun: 64) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf257f0000000c00ccfc59a2f48c1d700000060048004f00000006004800260000000a00340002020202020280e18ccae216cebae4183a0000"], 0x3c}}, 0x4040000) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xdc}}, 0x0) 1.569221732s ago: executing program 1 (id=4506): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xfff3}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 32) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) unshare(0x20000400) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74) (async) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000140)=[{0xc9, 0x6, 0x8, 0x7}]}, 0x10) 1.568688303s ago: executing program 4 (id=4507): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, r0, 0x2000) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000400)=0x97, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x8}, 0x8) 1.566841331s ago: executing program 0 (id=4508): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000080)=0x28) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)='\x00', 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000000)=""/126, 0x7e}, {&(0x7f00000018c0)=""/133, 0x85}], 0x9}}], 0x1, 0x40010122, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000000280)={0x10f4, 0x3b, 0x1, 0x70bd25, 0x25dfdbfe, {0xd}, [@nested={0x4a, 0xd8, 0x0, 0x1, [@nested={0x4, 0x9a}, @typed={0x4, 0x123}, @nested={0x4, 0x12e}, @nested={0x4, 0xd}, @generic="8d2861923a83e068c3a0af1dd56a5da7d949d9cbb294a430efa9dbe067fd5fdabaffebe65e7ab4dcbe10cea0be725960ac6f", @nested={0x4, 0x149}]}, @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@loopback}, @generic="1ec9893169149c3ff817e4ffd0d3788f98f78d1c63c4a5b34d7e5cb9b4656b2d8f82c6a3c4d72efe4c6afa74bb6559d5477cab26083ffd2594eae8beca6e845de658bf46cdf6f43c7ec8a342bda62dae2999bdc2475bbd4555a3383e0934f89d07c3fb724726579540af5bee7eddb13191", @typed={0xc, 0x8d, 0x0, 0x0, @u64=0x4}, @generic="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"]}, 0x10f4}, 0x1, 0x0, 0x0, 0x38f60e90a52f6003}, 0x80) 1.437474962s ago: executing program 0 (id=4509): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8fd00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x41100, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000140)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000000a80)="bd8f7764c82169e1e1aa22842b25c32f0c8d88e6697c4509a4b87902c37ca2fb45efa234fd6605255fd00a9ad1f5efda43750313f77d1ca3db76cffcfb976124e44d22c2ee0936abd3b73cd13344fce73c4f8d5efdc1ecfc10f079e1c5bc5f592fd906391e564acb50c4f7a3f9472c87c2eff73469b13a565b9c573feb57cdddecd14890ec8941c8f74207e4209328cd0accca6eff93a2a4b7c0f181512133b15fbd8869558688599aa222c78031c8add531107fce3aa2a3f266a603f46266af6c563831840f4b90e217f7090de49856c24de25d9371b971d684b4ed19e4b99caa4a2cc056e16af79870c25dd0a13e77bf33c5cd5b432f2fd0669e819a48afc593e80815a77e0b1dc97d211ef01335eb1e9d479fb22b892a928b74f68e176524d255015c27d53e18dc7002a1a4aa1d843760357e8780bb5554507a9eda1b21c998296f122b600fe679f1a409ea5b6e8ba80d603dd2168238115ab6ca265ce6d4989c8fd4db923ba03dd2b818d6940b0b26bd51439d0b5c560140610a6662f9ed41305bf1dc329f24", 0x188}, {&(0x7f0000000940)="a282ae6122670f8138016cf6b282bc8b07944093fc5b732aa5df59941a1984c0ffffffffffffff1175044f066304051e87c3744d3dd7304af2ce676f8d62d6c5d2a06b33384a3bab7ef875146ffd02d5cc54c7dd4d81c9a325ccf64da0a4a98ba23e981794a8794c0d5a13cab6afd6b3ddc0a23391a892a8fb04976001634ec25f9d03c798e7b47bdf00"/150, 0x96}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000006800010000000100fddbdf250200040000000000060007000b0000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="2a750db8b43a3673c200000008004578003c00670000ab3c"], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x10001, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r3, 0x86, 0x7f, &(0x7f0000000140)="020000020d800089", 0x8) r6 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080)='broute\x00', 0x40, &(0x7f00000000c0)={@_ha_fsid={[0xfffffff5, 0x5]}, {0x9, 0x1, 0x4}}, 0x7, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x9}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000300)=@req={0x101, 0x0, 0x5789, 0x4}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x1, 0x0, 0x4, 0x4, 0x0, 0x20000000017d], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=0x0]}, 0x91) 1.391633236s ago: executing program 2 (id=4510): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@random="0100", @empty, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1000}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 1.333826326s ago: executing program 3 (id=4511): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300", @ANYRES32], 0x68}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300", @ANYRES32], 0x68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) 1.236933135s ago: executing program 4 (id=4512): socket$nl_netfilter(0x10, 0x3, 0xc) 1.236638093s ago: executing program 1 (id=4513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) r3 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004c10) 1.222702203s ago: executing program 0 (id=4514): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x800, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x2000000}, 0x20050800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e22, @multicast1}], 0x20) 1.130740658s ago: executing program 2 (id=4515): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.08169357s ago: executing program 1 (id=4516): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000080000014001280090001007665746800000001000002800800200001"], 0x3c}}, 0x24000080) 1.078269019s ago: executing program 4 (id=4517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x6, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendfile(r8, r9, 0x0, 0xffffffff000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r11, @ANYRESDEC=r2], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r12, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) 984.019384ms ago: executing program 3 (id=4518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 945.435675ms ago: executing program 0 (id=4519): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xff, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132835}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x2, 0x3, 0x1, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100, 0x700000, 0x8, 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400010076657468305f746f5f6873720000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30400000000900010073797a3000000000300003"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x40000) r6 = socket$inet(0x2, 0x18080f, 0x2) accept$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev}, &(0x7f0000000500)=0x10) 785.69286ms ago: executing program 1 (id=4520): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x200000d0) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5}]}}}]}, 0x3c}}, 0x54) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 745.433026ms ago: executing program 2 (id=4521): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000002180)=[{{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40050}}, {{&(0x7f0000000d80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x38}}], 0x2, 0x44800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$MRT6(r4, 0x29, 0xd0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @private2, 0x2}]}, &(0x7f0000000180)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r7}, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd844", 0x4d}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x20004000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x8) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a72ed35", 0x4}], 0x1}}], 0x1, 0x0) 482.515704ms ago: executing program 3 (id=4522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x13}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 343.012725ms ago: executing program 1 (id=4523): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trmw'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000730ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e3", 0xd}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d3002663e9e24fa795c945a99e", 0x43}], 0x3}], 0x1, 0x40800) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) 310.536312ms ago: executing program 0 (id=4524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @empty=0x300}}]}}}]}, 0x4c}}, 0x20000040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3d, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x50}}, 0x4000010) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x90}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000340)={0x6, 0x48, '\x00', 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 279.356147ms ago: executing program 3 (id=4525): socket(0x26, 0x6, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c00000077aa4efe42c645fa8f41f3f9de84c806b5c9a1daece19547cdddc2fc06bfc0bd1f9fcc90b9318ed19e7a8545c989f439c5bf1cfc132643956845dd7373355b9e5dfd984f683624dafe22c56ee74d31b6", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000b8008000900be950100"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="9a", 0x1, 0xc800, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) listen(0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0], 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00008d6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x800) 185.949457ms ago: executing program 1 (id=4526): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$xdp(0x2c, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0x1a2, 0x40010000, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) pwritev(r2, &(0x7f0000000a80)=[{0x0}], 0x1, 0x4739, 0x1) preadv(r2, 0x0, 0x0, 0x6, 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e8, 0xffffffff, 0xffffffff, 0x2e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x11, 0x64, 0x9}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1fd, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0xe0, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xf31], 0x4, 0x34, 0x1}}, @common=@inet=@hashlimit1={{0x58}, {'wlan1\x00', {0x11, 0x7fffffff, 0x91, 0x6, 0x2f800000, 0x80000000, 0x6, 0x60, 0x80}, {0x7ff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x418) sendto$inet6(r5, &(0x7f00000008c0)="f5f8292c8a470a4327486ee6040b195a4428de0ff24558f78ac7cc6edc8daf9573da8eafffd5c1a926c97a918d851a914f50b4ecbae47d6403aba96682b44a9d4bdaa920e97bb30a7be83f5ab62179e09c3dd97af367dc2ebb1fda6e3c3dbcbe0120ef6330a3bba69711da807992566b0f93177db689ac5d9237c1a2649a299296ad85a646963d6a6b88b5c649d44198ce8453cc0dfac810ff7eb6bb50ad1d7dcdf8e6657ebdd90961d33f353b061b1bb06f07ee92622ce297d1aeee550e94bc495b0c701c49988006204a58864638c2ac42c894086cc47ab95f5e842eadeeebb820d6f8dd6af0", 0xe7, 0x0, &(0x7f00000009c0)={0xa, 0x4e23, 0x98f2, @rand_addr=' \x01\x00', 0x1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000200)={r3, &(0x7f0000000000)='\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0x80000000, 0x80000001]}, {0x59bc, 0x0, 0x1, 0x1fa4d5b9}}, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x7}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xd, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x583}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x2c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9568, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x4, 0x8, 0x8, 0x10}, @call={0x85, 0x0, 0x0, 0xcf}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x29}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4244}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xa7af, 0xb4, &(0x7f0000000640)=""/180, 0x41100, 0x48, '\x00', r9, @fallback=0xc3e42fb8effbe79c, r3, 0x8, &(0x7f0000000700)={0x2, 0x9}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xa, 0x7, 0x1}, 0x10, 0x0, r1, 0x5, 0x0, &(0x7f0000000780)=[{0x2, 0x4, 0x0, 0x4}, {0x2, 0x5, 0xb, 0x6}, {0x5, 0xdba, 0xc}, {0x4, 0x4, 0xc, 0x3}, {0x1, 0x5, 0x6, 0x9}], 0x10, 0x4}, 0x94) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 125.456083ms ago: executing program 0 (id=4527): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) unshare(0x8040480) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x8, &(0x7f0000000200), 0x4) socket(0x2, 0x80805, 0x0) 0s ago: executing program 4 (id=4528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {0x0, 0x0, 0x0, 0x200}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0xfffe}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {0x7ff}, {}, {}, {}, {}, {}, {0x0, 0x8, 0x20}, {}, {}, {0x4}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1, {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="3000000010000108000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=r3, @ANYBLOB="08001b00"], 0x30}}, 0x4000880) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000040)='\\-\x00', 0x4402, &(0x7f00000000c0)={@_ha_fsid={[0x2, 0xf0f]}, {0x6, 0x9, 0x7, 0x9}}, 0x1, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000180)=0xa4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r5, 0x0, 0x20000000}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x8, &(0x7f0000000280)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xff}]}, 0x30}}, 0x0) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000200)) kernel console output (not intermixed with test programs): rer , priority 10 [ 524.009008][T19387] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3225'. [ 524.018171][T19383] bridge2: entered promiscuous mode [ 524.018198][T19383] bridge2: entered allmulticast mode [ 524.060920][T19383] team0: Port device bridge2 added [ 524.302623][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3227'. [ 524.314634][ T5645] syz_tun (unregistering): left allmulticast mode [ 524.657618][T19399] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3227'. [ 524.807423][ T5815] tipc: Node number set to 10463914 [ 524.831239][T19393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3227'. [ 525.067800][T19367] lo speed is unknown, defaulting to 1000 [ 525.422680][T19417] lo: entered allmulticast mode [ 525.442620][T19417] tunl0: entered allmulticast mode [ 525.508503][T19417] gre0: entered allmulticast mode [ 525.580179][T19417] gretap0: entered allmulticast mode [ 525.676837][ T4948] Bluetooth: hci2: command tx timeout [ 525.838935][T19417] erspan0: entered allmulticast mode [ 525.886479][T19417] ip_vti0: entered allmulticast mode [ 525.901919][T19417] ip6_vti0: entered allmulticast mode [ 525.921592][T19417] sit0: entered allmulticast mode [ 525.933449][T19417] ip6tnl0: entered allmulticast mode [ 525.943295][T19417] ip6gre0: entered allmulticast mode [ 525.956555][T19417] syz_tun: entered allmulticast mode [ 525.999812][T19417] ip6gretap0: entered allmulticast mode [ 526.010445][T19417] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.018244][T19417] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.030772][T19417] bridge0: entered allmulticast mode [ 526.041047][T19417] bond0: entered allmulticast mode [ 526.046532][T19417] bond_slave_0: entered allmulticast mode [ 526.052511][T19417] bond_slave_1: entered allmulticast mode [ 526.066875][T19417] team0: entered allmulticast mode [ 526.072166][T19417] team_slave_0: entered allmulticast mode [ 526.078267][T19417] team_slave_1: entered allmulticast mode [ 526.090760][T19417] batman_adv: batadv0: Interface deactivated: dummy0 [ 526.098474][T19417] dummy0: entered allmulticast mode [ 526.111798][T19417] nlmon0: entered allmulticast mode [ 526.119844][T19417] batadv0: entered allmulticast mode [ 526.130100][T19417] vxcan0: entered allmulticast mode [ 526.142523][T19417] vxcan1: entered allmulticast mode [ 526.150924][T19417] veth0: entered allmulticast mode [ 526.161718][T19417] veth1: entered allmulticast mode [ 526.172301][T19417] wg0: entered allmulticast mode [ 526.181939][T19417] wg1: entered allmulticast mode [ 526.193329][T19417] wg2: entered allmulticast mode [ 526.202065][T19417] veth0_to_bridge: entered allmulticast mode [ 526.229004][T19417] veth1_to_bridge: entered allmulticast mode [ 526.257057][T19417] veth0_to_bond: entered allmulticast mode [ 526.271366][T19417] veth1_to_bond: entered allmulticast mode [ 526.283944][T19417] veth0_to_team: entered allmulticast mode [ 526.299030][T19417] veth1_to_team: entered allmulticast mode [ 526.320586][T19417] veth0_to_batadv: entered allmulticast mode [ 526.331113][T19417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.339768][T19417] batadv_slave_0: entered allmulticast mode [ 526.350932][T19417] veth1_to_batadv: entered allmulticast mode [ 526.361970][T19417] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 526.379627][T19417] syzkaller0: entered allmulticast mode [ 526.399203][T19417] xfrm0: entered allmulticast mode [ 526.407080][T19417] veth0_to_hsr: entered allmulticast mode [ 526.416332][T19417] hsr_slave_0: entered allmulticast mode [ 526.424487][T19417] veth1_to_hsr: entered allmulticast mode [ 526.433675][T19417] hsr_slave_1: entered allmulticast mode [ 526.443925][T19417] hsr0: entered allmulticast mode [ 526.453808][T19417] veth1_virt_wifi: entered allmulticast mode [ 526.463752][T19417] veth0_virt_wifi: entered allmulticast mode [ 526.478062][T19417] virt_wifi0: entered allmulticast mode [ 526.488528][T19417] veth1_vlan: entered allmulticast mode [ 526.502138][T19417] veth0_vlan: entered allmulticast mode [ 526.558767][T19417] vlan0: entered allmulticast mode [ 526.564528][T19417] vlan1: entered allmulticast mode [ 526.573164][T19417] macvlan0: entered allmulticast mode [ 526.584419][T19417] macvlan1: entered allmulticast mode [ 526.594524][T19417] ipvlan0: entered allmulticast mode [ 526.607203][T19417] ipvlan1: entered allmulticast mode [ 526.618151][T19417] veth1_macvtap: entered allmulticast mode [ 526.629278][T19417] veth0_macvtap: entered allmulticast mode [ 526.647895][T19417] macvtap0: entered allmulticast mode [ 526.660936][T19417] macsec0: entered allmulticast mode [ 526.672270][T19417] geneve1: entered allmulticast mode [ 526.687369][T19417] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 526.704924][T19417] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 526.720138][T19417] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 526.741034][T19417] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 526.767034][T19417] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 526.783279][T19417] ipip0: entered allmulticast mode [ 526.791207][T19417] macsec1: entered allmulticast mode [ 526.800009][T19417] bond1: entered allmulticast mode [ 526.808807][T19417] bridge1: left promiscuous mode [ 526.817693][T19417] bridge2: left promiscuous mode [ 526.823963][T19427] netlink: 'syz.2.3235': attribute type 2 has an invalid length. [ 526.901513][T11632] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.931874][T11632] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.964001][T11632] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.986968][T11632] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.262995][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 527.400322][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3241'. [ 527.548398][T19461] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 527.756007][ T4948] Bluetooth: hci2: command tx timeout [ 527.999332][T19469] geneve2: entered promiscuous mode [ 528.033063][T19473] netlink: 49 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.046364][T19473] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.116297][T19473] netlink: 49 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.151740][T19469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.162013][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.171270][T19473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.180525][T19469] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.225493][T19469] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3245'. [ 528.305474][T19367] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.334276][T19367] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.374871][T19367] bridge_slave_0: entered allmulticast mode [ 528.403876][T19498] netlink: 'syz.1.3250': attribute type 1 has an invalid length. [ 528.441111][T19367] bridge_slave_0: entered promiscuous mode [ 528.592949][T19498] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 528.594816][T19367] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.621702][T19367] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.630198][T19367] bridge_slave_1: entered allmulticast mode [ 528.640416][T19367] bridge_slave_1: entered promiscuous mode [ 528.718019][T19367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.781598][T19506] lo speed is unknown, defaulting to 1000 [ 528.812632][T19367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.932694][T19367] team0: Port device team_slave_0 added [ 528.964592][T19367] team0: Port device team_slave_1 added [ 529.073624][T19367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.091029][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.141010][ T8256] IPVS: starting estimator thread 0... [ 529.147559][T19529] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 529.166156][T19367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.203844][T19367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.225794][T19367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.256508][T19531] IPVS: using max 30 ests per chain, 72000 per kthread [ 529.289839][T19367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.468098][T19367] hsr_slave_0: entered promiscuous mode [ 529.484534][T19367] hsr_slave_1: entered promiscuous mode [ 529.501634][T19367] debugfs: 'hsr0' already exists in 'hsr' [ 529.521958][T19367] Cannot create hsr debugfs directory [ 529.836055][ T4948] Bluetooth: hci2: command tx timeout [ 530.207316][T19557] netlink: 'syz.4.3265': attribute type 1 has an invalid length. [ 530.389913][T19367] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.404214][T19367] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.571517][T19367] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.603016][T19367] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.684087][T19577] netlink: 'syz.1.3271': attribute type 1 has an invalid length. [ 530.813995][T19367] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.843651][T19367] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.920109][T19367] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.934948][T19592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.954521][T19367] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.039906][T19597] x_tables: duplicate underflow at hook 2 [ 531.593632][T19367] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.645836][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.692859][T19623] vlan2: entered promiscuous mode [ 531.707543][T19623] bridge0: entered promiscuous mode [ 531.728613][T19367] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.749210][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.776152][T19367] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.815942][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.839474][T19367] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.911080][T19367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.916298][ T4948] Bluetooth: hci2: command tx timeout [ 531.970519][T19636] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 532.009756][T19636] netlink: 'syz.2.3284': attribute type 2 has an invalid length. [ 532.276418][T19367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.364149][T19367] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.522908][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.530196][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.595480][T11637] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.602746][T11637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.789649][T19679] __nla_validate_parse: 8 callbacks suppressed [ 532.789671][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 533.052263][T19684] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.236530][T19684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.254947][T19684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.429490][T19699] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 533.452834][T19699] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 533.490189][T11637] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.513905][T11637] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.544249][T11637] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.567000][T11637] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.054656][T19734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3303'. [ 534.068496][T19736] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3304'. [ 534.120616][T19734] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3303'. [ 534.133407][T19740] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3305'. [ 534.152180][T19736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3304'. [ 534.240910][T19740] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 534.289864][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3306'. [ 534.304242][T19438] IPVS: starting estimator thread 0... [ 534.385819][T19754] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3306'. [ 534.415692][T19750] IPVS: using max 26 ests per chain, 62400 per kthread [ 534.440274][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3306'. [ 534.564741][T19745] netlink: 'syz.1.3305': attribute type 3 has an invalid length. [ 534.592229][T19745] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3305'. [ 534.660706][T19766] netlink: 'syz.2.3309': attribute type 16 has an invalid length. [ 534.773535][T19367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.893834][T19775] ip6gretap0: entered promiscuous mode [ 535.037943][T19367] veth0_vlan: entered promiscuous mode [ 535.075351][T19367] veth1_vlan: entered promiscuous mode [ 535.160383][T19367] veth0_macvtap: entered promiscuous mode [ 535.175122][T19367] veth1_macvtap: entered promiscuous mode [ 535.200353][T19367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.257042][T19367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.278687][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.288371][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.306935][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.322394][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.492250][T19793] xt_l2tp: v2 doesn't support IP mode [ 535.542585][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.564996][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.627222][T11637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.636432][T11637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.935336][T19809] pim6reg: entered allmulticast mode [ 535.944507][T19809] pim6reg: left allmulticast mode [ 536.764248][T19842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.376203][T19865] syzkaller0: entered promiscuous mode [ 537.393452][T19865] syzkaller0: entered allmulticast mode [ 537.423267][T19865] tipc: Started in network mode [ 537.430911][T19865] tipc: Node identity caa14328d29a, cluster identity 4711 [ 537.447725][T19865] tipc: Enabled bearer , priority 0 [ 537.533398][T19864] tipc: Resetting bearer [ 537.569077][T19864] tipc: Disabling bearer [ 537.734116][T19881] netlink: 'syz.0.3340': attribute type 2 has an invalid length. [ 537.905132][T19888] pimreg: entered allmulticast mode [ 537.971158][T19888] __nla_validate_parse: 5 callbacks suppressed [ 537.971180][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3343'. [ 538.242291][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3348'. [ 538.271273][T19900] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.279044][T19900] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.536386][T19900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.555351][T19900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.898099][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.947055][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.066216][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.097218][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.230281][T19927] syzkaller0: entered promiscuous mode [ 539.236311][T19927] syzkaller0: entered allmulticast mode [ 539.543185][T19961] netlink: 'syz.2.3360': attribute type 1 has an invalid length. [ 540.476269][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 542.197989][T19955] bridge_slave_0: left allmulticast mode [ 542.214041][T19955] bridge_slave_0: left promiscuous mode [ 542.222583][T19955] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.250658][T19955] bridge_slave_1: left allmulticast mode [ 542.265130][T19955] bridge_slave_1: left promiscuous mode [ 542.275487][T19955] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.302215][T19955] bond0: (slave bond_slave_0): Releasing backup interface [ 542.312977][T20001] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 542.324023][T19955] bond0: (slave bond_slave_1): Releasing backup interface [ 542.353314][T19955] team0: Port device team_slave_0 removed [ 542.418259][T19955] team0: Port device team_slave_1 removed [ 542.448688][T19955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.478791][T19955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.498719][T19955] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 542.530180][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 542.530730][T19961] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 542.568916][T19974] gretap1: entered promiscuous mode [ 542.703385][T20013] sit0: entered promiscuous mode [ 542.709536][T20013] netlink: 'syz.3.3364': attribute type 1 has an invalid length. [ 542.718657][T20013] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3364'. [ 543.334666][T20018] syzkaller0: entered promiscuous mode [ 543.382815][T20018] syzkaller0: entered allmulticast mode [ 543.418254][T20029] netlink: 'syz.1.3372': attribute type 22 has an invalid length. [ 543.459725][T20029] tipc: Enabled bearer , priority 0 [ 543.476580][T20029] syzkaller0: entered promiscuous mode [ 543.484343][T20029] batman_adv: batadv0: Interface activated: syzkaller0 [ 543.492197][T20029] tipc: Resetting bearer [ 543.648768][T20036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3375'. [ 543.680027][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 543.703872][T20041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3373'. [ 543.744965][T20037] lo speed is unknown, defaulting to 1000 [ 544.092404][T20055] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 544.330631][T20074] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 544.360160][T20074] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3382'. [ 544.391098][T20074] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 544.430409][T20074] netlink: 638 bytes leftover after parsing attributes in process `syz.1.3382'. [ 544.452868][T20074] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3382'. [ 544.476965][ T5742] tipc: Node number set to 1816830437 [ 544.700066][T20092] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 544.797343][T20092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 544.807866][T20099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3389'. [ 544.882287][T20099] ip6gre1: entered promiscuous mode [ 544.898051][T20099] ip6gre1: entered allmulticast mode [ 544.990803][T20092] veth3: entered allmulticast mode [ 545.009969][T20092] bond4: (slave veth3): Enslaving as an active interface with an up link [ 545.098788][T20095] bond4 (unregistering): (slave veth3): Releasing backup interface [ 545.121395][T20095] bond4 (unregistering): Released all slaves [ 545.286748][T20110] lo speed is unknown, defaulting to 1000 [ 545.297635][T20111] lo speed is unknown, defaulting to 1000 [ 545.368525][T20117] bond0: (slave ip6tnl0): refused to change device type [ 545.490362][T20117] ip6erspan0: entered allmulticast mode [ 545.600509][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3395'. [ 545.689794][T20124] ip6tnl1: entered allmulticast mode [ 545.707823][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3396'. [ 545.797679][T20127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3396'. [ 545.851914][T20124] bond4 (unregistering): Released all slaves [ 546.023245][T20134] netlink: 'syz.2.3399': attribute type 11 has an invalid length. [ 547.932252][T11637] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.951370][T11637] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.983281][T20209] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 547.991955][T20208] ip6tnl1: entered allmulticast mode [ 548.008036][T11637] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.025602][T11637] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.500603][T20237] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 548.550654][T20241] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 548.622528][T20241] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 548.666973][T20238] lo speed is unknown, defaulting to 1000 [ 548.792138][T20251] netlink: 'syz.3.3430': attribute type 32 has an invalid length. [ 548.807980][T20251] __nla_validate_parse: 8 callbacks suppressed [ 548.807998][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3430'. [ 548.859401][T20256] netlink: 'syz.4.3432': attribute type 1 has an invalid length. [ 548.934461][T20251] bond1: Setting coupled_control to off (0) [ 549.016139][T20268] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3433'. [ 549.113979][T20271] Cannot find del_set index 0 as target [ 549.164773][ T148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.183672][ T148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.193359][ T8261] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.596705][ T8261] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 549.611872][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 549.650695][T20291] netlink: 'syz.3.3439': attribute type 21 has an invalid length. [ 549.679357][T20291] netlink: 'syz.3.3439': attribute type 20 has an invalid length. [ 549.773098][T20292] tipc: Resetting bearer [ 549.799798][T20292] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 549.905227][T20298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3441'. [ 550.063125][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.074963][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.092759][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.108330][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.139503][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.165168][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3443'. [ 550.236239][ T8261] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.249763][T20303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.259862][T20303] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.270520][T20303] batman_adv: batadv0: Interface activated: dummy0 [ 550.288937][T20303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.390312][T20303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.400464][T20303] syzkaller0: left promiscuous mode [ 550.407547][T20303] batman_adv: batadv0: Interface activated: syzkaller0 [ 550.415075][T20303] tipc: Resetting bearer [ 550.440016][T20303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 550.460153][T20303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.478825][T20303] veth1_vlan: left promiscuous mode [ 550.487826][T20303] veth0_vlan: left promiscuous mode [ 550.493845][T20303] veth0_vlan: entered promiscuous mode [ 550.509777][T20303] veth1_vlan: entered promiscuous mode [ 550.533485][T20303] veth1_macvtap: left promiscuous mode [ 550.540906][T20303] veth0_macvtap: left promiscuous mode [ 550.548549][T20303] veth0_macvtap: entered promiscuous mode [ 550.559545][T20303] veth1_macvtap: entered promiscuous mode [ 550.571052][T20303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.599255][T20317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.603320][T20303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.619127][T20303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.628280][T20303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.642628][T20303] ip6gretap0: entered promiscuous mode [ 550.650778][T20303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 550.664251][T20303] 8021q: adding VLAN 0 to HW filter on device bond2 [ 550.675249][T20303] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.727233][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.734459][T11630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.772512][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.779801][T11630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.853181][ T139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.862501][ T139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.886651][ T139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.910275][ T139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.350200][T20341] tipc: Enabled bearer , priority 10 [ 552.875810][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.463369][ T139] pimreg9: left allmulticast mode [ 553.760910][ T139] bond8 (unregistering): (slave ip6gretap2): Releasing backup interface [ 553.773400][ T139] ip6gretap2 (unregistering): left allmulticast mode [ 553.979258][ T139] bond13 (unregistering): (slave erspan1): Releasing active interface [ 553.987886][ T139] erspan1 (unregistering): left promiscuous mode [ 554.041736][ T139] gretap0 (unregistering): left promiscuous mode [ 554.063049][ T139] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 554.093993][ T139] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 554.187575][ T139] bond15 (unregistering): (slave gretap4): Releasing active interface [ 554.354341][ T139] bond18 (unregistering): (slave bridge6): Releasing backup interface [ 554.379504][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.391334][ T139] bond_slave_0: left allmulticast mode [ 554.400952][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.411032][ T139] bond_slave_1: left allmulticast mode [ 554.418134][ T139] bond0 (unregistering): Released all slaves [ 554.430944][ T139] bond1 (unregistering): (slave bond2): Releasing backup interface [ 554.440376][ T139] bond1 (unregistering): Released all slaves [ 554.457575][ T139] bond2 (unregistering): Released all slaves [ 554.473897][ T139] bond3 (unregistering): Released all slaves [ 554.494758][ T139] bond4 (unregistering): Released all slaves [ 554.515371][ T139] bond5 (unregistering): Released all slaves [ 554.541037][ T139] bond6 (unregistering): Released all slaves [ 554.557914][ T139] bond7 (unregistering): Released all slaves [ 554.586629][ T139] bond8 (unregistering): Released all slaves [ 554.604417][ T139] bond9 (unregistering): Released all slaves [ 554.621294][ T139] bond10 (unregistering): Released all slaves [ 554.638331][ T139] bond11 (unregistering): Released all slaves [ 554.664482][ T139] bond12 (unregistering): Released all slaves [ 554.684981][ T139] bond13 (unregistering): Released all slaves [ 554.701556][ T139] bond14 (unregistering): Released all slaves [ 554.718492][ T139] bond15 (unregistering): Released all slaves [ 554.736520][ T139] bond16 (unregistering): (slave bond17): Releasing backup interface [ 554.745716][ T139] bond16 (unregistering): Released all slaves [ 554.766382][ T139] bond17 (unregistering): Released all slaves [ 554.804442][ T139] bond18 (unregistering): (slave veth5): Releasing backup interface [ 554.814623][ T139] bond18 (unregistering): Released all slaves [ 554.830806][ T139] bond19 (unregistering): Released all slaves [ 554.847396][T20374] netlink: 'syz.0.3463': attribute type 12 has an invalid length. [ 554.981018][T20371] lo speed is unknown, defaulting to 1000 [ 555.244900][T20419] bond1: entered allmulticast mode [ 555.268136][T20419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.308705][T20409] lo speed is unknown, defaulting to 1000 [ 555.327707][ T139] tipc: Disabling bearer [ 555.334503][T20419] __nla_validate_parse: 79 callbacks suppressed [ 555.334524][T20419] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3474'. [ 555.348601][ T139] tipc: Disabling bearer [ 555.359500][T20419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3474'. [ 555.372830][T20419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3474'. [ 555.390060][ T139] tipc: Left network mode [ 555.603826][T20426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 556.219201][T20440] openvswitch: netlink: Key type 46 is out of range max 32 [ 556.973059][T20458] netlink: 'syz.1.3484': attribute type 3 has an invalid length. [ 556.994442][T20458] netlink: 'syz.1.3484': attribute type 3 has an invalid length. [ 557.078870][T20458] netlink: 452 bytes leftover after parsing attributes in process `syz.1.3484'. [ 557.438411][T20476] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 557.649114][T20492] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 557.677913][T20492] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3489'. [ 557.711678][T20492] netlink: 658 bytes leftover after parsing attributes in process `syz.1.3489'. [ 557.743954][T20492] netlink: 'syz.1.3489': attribute type 2 has an invalid length. [ 557.917814][T20501] xt_socket: unknown flags 0x8 [ 558.234126][T20521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3497'. [ 558.313028][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3496'. [ 558.556220][ T5639] Bluetooth: hci2: command 0x0405 tx timeout [ 558.768293][T20525] team0: Port device team_slave_0 removed [ 558.991386][ T139] veth1_to_team: left promiscuous mode [ 559.025761][T20550] siw: device registration error -23 [ 559.042570][ T139] hsr_slave_0: left promiscuous mode [ 559.049096][T20550] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3501'. [ 559.066876][ T139] hsr_slave_1: left promiscuous mode [ 559.073924][ T139] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 559.083313][ T139] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 559.091931][ T139] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 559.105950][ T139] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 559.160469][ T139] veth1_macvtap: left promiscuous mode [ 559.166355][ T139] veth0_macvtap: left promiscuous mode [ 559.172195][ T139] veth1_vlan: left promiscuous mode [ 559.177647][ T139] veth0_vlan: left promiscuous mode [ 560.957643][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.547429][T11628] smc: removing ib device uyz0 [ 561.849620][ T8261] uyz0: Port: 1 Link DOWN [ 562.079258][T20563] lo speed is unknown, defaulting to 1000 [ 562.091932][T11628] smbdirect: ib_dev[uyz0] removed [ 562.161066][T20569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3506'. [ 562.750502][T20594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 563.204737][T20616] netlink: 'syz.4.3515': attribute type 13 has an invalid length. [ 563.388146][T20620] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 563.508102][T20618] syzkaller0: entered promiscuous mode [ 563.530335][T20618] syzkaller0: entered allmulticast mode [ 564.003153][T20629] veth1_to_bond: entered promiscuous mode [ 564.031883][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3519'. [ 564.046433][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 564.186697][T20629] veth1_to_bond (unregistering): left promiscuous mode [ 564.211171][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3521'. [ 564.289262][T20629] bond0: (slave bond_slave_1): Releasing backup interface [ 564.959168][ T5639] Bluetooth: hci5: command 0x0406 tx timeout [ 565.151063][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3527'. [ 565.489614][T20675] syzkaller0: entered promiscuous mode [ 565.510702][T20675] syzkaller0: entered allmulticast mode [ 565.700829][T20675] tipc: Started in network mode [ 565.722357][T20675] tipc: Node identity f2e222086918, cluster identity 4711 [ 565.762018][T20675] tipc: Enabled bearer , priority 0 [ 565.796774][T20674] tipc: Resetting bearer [ 565.889447][T20674] tipc: Disabling bearer [ 566.190446][T20699] pimreg9: entered allmulticast mode [ 566.251997][ T139] IPVS: stop unused estimator thread 0... [ 566.276877][T20699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 566.368050][T20707] vxcan2: entered allmulticast mode [ 566.469903][T20714] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 566.883777][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.891289][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.952329][T20704] batman_adv: batadv0: Interface deactivated: dummy0 [ 567.064718][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3542'. [ 567.304925][T20704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.341186][T20704] tipc: Resetting bearer [ 567.362187][T20704] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 568.154768][T11632] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.194682][T11632] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.220331][T11632] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.232850][T11632] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.321980][T20732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3544'. [ 568.362568][T20738] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 568.374399][T20732] ip6gre1: entered promiscuous mode [ 568.380996][T20732] ip6gre1: entered allmulticast mode [ 568.386747][T20738] netlink: 'syz.2.3547': attribute type 4 has an invalid length. [ 568.416641][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3546'. [ 568.423858][T20738] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3547'. [ 568.490317][T20744] netlink: 'syz.2.3547': attribute type 1 has an invalid length. [ 568.506151][T11632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.516428][T20744] netlink: 'syz.2.3547': attribute type 4 has an invalid length. [ 568.524756][T20744] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3547'. [ 568.555280][T11632] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.563276][ T8261] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.708632][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3550'. [ 568.774276][T20753] tunl0: Caught tx_queue_len zero misconfig [ 568.836997][ T8256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.998107][T20774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 569.259957][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'. [ 569.283005][T20790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3562'. [ 569.292806][T20782] lo speed is unknown, defaulting to 1000 [ 569.502302][T20796] openvswitch: netlink: Unknown key attributes 2 [ 569.516155][ T8256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.963265][T20821] netlink: 'syz.1.3571': attribute type 13 has an invalid length. [ 570.034733][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3571'. [ 570.085777][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 570.319328][T20839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3573'. [ 570.731456][T20849] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3576'. [ 570.799729][T20858] openvswitch: netlink: IP tunnel dst address not specified [ 570.815942][T20858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.878540][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.251267][T20873] lo speed is unknown, defaulting to 1000 [ 571.350651][T20886] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 572.058468][T20905] gretap0: entered promiscuous mode [ 572.109717][T20905] sit0: left promiscuous mode [ 572.193530][T20905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.229774][T20905] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.272892][T20905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.366210][T20905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 572.377715][T20905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 572.392457][T20905] veth1_vlan: left promiscuous mode [ 572.399797][T20905] veth0_vlan: left promiscuous mode [ 572.406164][T20905] veth0_vlan: entered promiscuous mode [ 572.417017][T20905] veth1_vlan: entered promiscuous mode [ 572.432267][T20905] veth1_macvtap: left promiscuous mode [ 572.439921][T20905] veth0_macvtap: left promiscuous mode [ 572.447777][T20905] veth0_macvtap: entered promiscuous mode [ 572.455192][T20905] veth1_macvtap: entered promiscuous mode [ 572.467318][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.475778][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.485478][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.496254][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.508062][T20905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.531342][T20905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.636741][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.661996][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.737067][T20921] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 572.857307][T20920] bridge_slave_0: left allmulticast mode [ 572.893697][T20920] bridge_slave_0: left promiscuous mode [ 572.925544][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.941853][T20920] bridge_slave_1: left allmulticast mode [ 572.949167][T20920] bridge_slave_1: left promiscuous mode [ 572.957512][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.979800][T20940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.993216][T20932] netlink: 'syz.3.3602': attribute type 5 has an invalid length. [ 573.009911][T20920] bond0: (slave bond_slave_0): Releasing backup interface [ 573.022778][T20920] bond0: (slave bond_slave_1): Releasing backup interface [ 573.053917][T20920] team0: Port device team_slave_0 removed [ 573.065191][T20920] team0: Port device team_slave_1 removed [ 573.073041][T20920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.081870][T20920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.093142][T20920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.102747][T20920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.143644][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.160334][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.267268][T20926] team0: Port device xfrm0 added [ 573.601762][T20957] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 573.673586][T20952] lo speed is unknown, defaulting to 1000 [ 573.872917][T20966] __nla_validate_parse: 12 callbacks suppressed [ 573.872937][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 573.928902][T20970] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 573.978148][T20970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.311059][T20991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 574.357373][T20991] ipip0: entered promiscuous mode [ 574.560149][T21001] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3616'. [ 574.729501][T21005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 574.883265][T11628] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.918332][T11628] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.942187][T11628] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.965102][T11628] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.009196][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 575.031349][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 575.297281][T21040] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 575.315849][T21040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.675754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.778372][T21069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3637'. [ 575.840125][T21071] pimreg9: entered allmulticast mode [ 575.865033][T21074] Bluetooth: MGMT ver 1.23 [ 575.896634][T21069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.912359][T21073] gretap2: entered allmulticast mode [ 575.923208][T21073] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 575.941913][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3636'. [ 575.958807][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3639'. [ 576.001707][T21077] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 576.037120][T21077] bond4 (unregistering): Released all slaves [ 576.104465][T21079] ip6gre2: entered promiscuous mode [ 576.120671][T21079] ip6gre2: entered allmulticast mode [ 576.139310][T11628] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.154017][T11628] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.169306][ T8263] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.328678][ T8256] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.532302][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 576.578224][ T139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.603918][ T139] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.634776][ T139] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.671544][ T139] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.810696][T21112] block nbd4: not configured, cannot reconfigure [ 576.900571][T21116] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 576.981664][ T8256] IPVS: starting estimator thread 0... [ 577.086338][T21124] IPVS: using max 28 ests per chain, 67200 per kthread [ 577.341015][T21138] bond0: (slave bond_slave_0): Releasing backup interface [ 578.042551][T21172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.232645][T21178] bridge_slave_0: left allmulticast mode [ 578.262024][T21178] bridge_slave_0: left promiscuous mode [ 578.314636][T21178] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.356325][T21178] bridge_slave_1: left allmulticast mode [ 578.362218][T21178] bridge_slave_1: left promiscuous mode [ 578.369350][T21178] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.421918][T21178] bond0: (slave bond_slave_0): Releasing backup interface [ 578.471273][T21178] bond0: (slave bond_slave_1): Releasing backup interface [ 578.527564][T21178] team0: Port device team_slave_1 removed [ 578.544857][T21178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.560318][T21178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.580545][T21178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.588990][T21178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.600530][T21178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 579.093679][T21216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.183981][T21218] bridge2: entered promiscuous mode [ 579.203133][T21218] bridge2: entered allmulticast mode [ 579.218398][T21218] team0: Port device bridge2 added [ 579.312410][T21239] bridge3: entered promiscuous mode [ 579.318881][T21239] bridge3: entered allmulticast mode [ 579.328754][T21239] team0: Port device bridge3 added [ 579.350371][T21236] tipc: Enabled bearer , priority 0 [ 579.369435][T21243] syzkaller0: entered promiscuous mode [ 579.395922][T21243] syzkaller0: entered allmulticast mode [ 579.415459][T21237] tipc: New replicast peer: 255.255.255.255 [ 579.430599][T21237] tipc: Enabled bearer , priority 10 [ 579.537833][T21236] tipc: Resetting bearer [ 579.550800][T21240] lo speed is unknown, defaulting to 1000 [ 579.570817][T21236] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 579.594881][T21236] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3672'. [ 579.697240][T21235] tipc: Resetting bearer [ 579.761910][T21235] tipc: Disabling bearer [ 579.915721][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.137309][T21256] netlink: 'syz.0.3677': attribute type 2 has an invalid length. [ 580.546020][ T29] tipc: Node number set to 406537000 [ 580.657384][T21289] netlink: 'syz.0.3683': attribute type 41 has an invalid length. [ 580.673316][T21287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.011741][T21291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.085305][T21291] 8021q: adding VLAN 0 to HW filter on device team0 [ 581.121643][T21294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3686'. [ 581.159721][T21291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.278485][T21291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.289299][T21291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.304488][T21291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.321726][T21291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.352332][T21291] veth1_vlan: left promiscuous mode [ 581.359526][T21291] veth0_vlan: left promiscuous mode [ 581.366035][T21291] veth0_vlan: entered promiscuous mode [ 581.378905][T21291] veth1_vlan: entered promiscuous mode [ 581.390102][T21291] veth1_macvtap: left promiscuous mode [ 581.398907][T21291] veth0_macvtap: left promiscuous mode [ 581.405376][T21291] veth0_macvtap: entered promiscuous mode [ 581.412835][T21291] veth1_macvtap: entered promiscuous mode [ 581.427257][T21291] 8021q: adding VLAN 0 to HW filter on device eth0 [ 581.434893][T21291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 581.449685][T21323] xt_hashlimit: size too large, truncated to 1048576 [ 581.457689][T21291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 581.465339][T21291] 8021q: adding VLAN 0 to HW filter on device eth3 [ 581.479832][T21291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.500643][T21291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.536832][T21291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.562023][T21291] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 581.588486][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 581.661262][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.668508][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.725989][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 581.777895][T21308] syzkaller1: entered promiscuous mode [ 581.792444][T21308] syzkaller1: entered allmulticast mode [ 581.826253][T11628] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.843540][T11628] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.856238][T21329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3692'. [ 581.868767][T11628] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.884949][T11628] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.032952][T21327] netlink: 'syz.4.3691': attribute type 2 has an invalid length. [ 582.042357][T11628] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.062362][T11628] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.079069][T11628] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.095911][T11628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.113033][T21334] C: renamed from veth1_to_team [ 582.130027][T21334] netlink: 'syz.3.3693': attribute type 3 has an invalid length. [ 582.149823][T21334] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3693'. [ 582.166228][T21334] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 582.462131][T21359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3700'. [ 582.616845][T21367] bridge0: left allmulticast mode [ 582.834842][T21375] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 583.035235][T21380] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 583.073965][T21380] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3707'. [ 583.237423][T21385] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3709'. [ 583.341981][T21396] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3711'. [ 583.418512][T21394] lo speed is unknown, defaulting to 1000 [ 584.140827][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 584.172308][T21422] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 584.197259][T21418] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 584.210778][T21418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 584.299345][T21430] C: renamed from veth1_to_team [ 584.359989][T21430] netlink: 'syz.1.3716': attribute type 3 has an invalid length. [ 584.369051][T21430] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3716'. [ 584.381517][T21430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 584.433150][T21421] ip6tnl1: entered allmulticast mode [ 584.469572][T21422] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 584.681038][T21421] gretap0: left promiscuous mode [ 584.708737][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3719'. [ 584.896368][T21421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.908032][T21421] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.929065][T21421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.110232][T21421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.170862][T21421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.257559][T21421] veth1_vlan: left promiscuous mode [ 585.274893][T21421] veth0_vlan: left promiscuous mode [ 585.296730][T21421] veth0_vlan: entered promiscuous mode [ 585.324684][T21421] veth1_vlan: entered promiscuous mode [ 585.364811][T21421] veth1_macvtap: left promiscuous mode [ 585.385319][T21421] veth0_macvtap: left promiscuous mode [ 585.397384][T21421] veth0_macvtap: entered promiscuous mode [ 585.405251][T21421] veth1_macvtap: entered promiscuous mode [ 585.419278][T21421] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.429632][T21421] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.436867][ T4948] Bluetooth: hci0: command 0x080f tx timeout [ 585.462210][T21421] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 585.471865][T21421] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 585.488832][T21421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.498368][T21421] gretap0: entered promiscuous mode [ 585.508226][T21421] ipip0: left promiscuous mode [ 585.517144][T21421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.641286][T21434] syzkaller0: entered promiscuous mode [ 585.656156][T21434] syzkaller0: entered allmulticast mode [ 587.835723][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 588.576516][T11640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.585469][T11640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.610180][T21478] tun0: tun_chr_ioctl cmd 1074812118 [ 588.638401][T21480] tun0: tun_chr_ioctl cmd 1074033169 [ 588.655181][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3724'. [ 588.668775][T21485] kthread_run failed with err -4 [ 588.683347][T21490] netlink: 'syz.4.3726': attribute type 2 has an invalid length. [ 588.755007][T11640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.791366][T11640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.860129][T21495] tipc: Enabling of bearer rejected, already enabled [ 588.890278][T21495] syzkaller0: entered promiscuous mode [ 588.913988][T21495] batman_adv: batadv0: Interface activated: syzkaller0 [ 588.950197][T21495] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3727'. [ 588.994509][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3730'. [ 589.268716][T21519] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3733'. [ 589.306196][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3733'. [ 589.442436][T21529] openvswitch: netlink: IPv4 tun info is not correct [ 589.645857][ T8263] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 589.784322][T21543] ip6tnl1: entered allmulticast mode [ 589.801341][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3743'. [ 589.846257][ T5756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 589.998408][T21547] syzkaller0: entered promiscuous mode [ 590.004135][T21547] syzkaller0: entered allmulticast mode [ 590.114951][T21556] xt_hashlimit: size too large, truncated to 1048576 [ 590.230298][T21562] netlink: 'syz.4.3747': attribute type 32 has an invalid length. [ 590.253730][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3747'. [ 590.638154][ T5756] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 592.617186][T21562] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 592.812606][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3754'. [ 592.832049][T21561] lo speed is unknown, defaulting to 1000 [ 592.941682][T21596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 593.164318][T21602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3757'. [ 593.192497][T21602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3757'. [ 593.272077][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 593.600907][T21626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.615294][T21621] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 593.879079][ T5742] IPVS: starting estimator thread 0... [ 593.962070][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 593.996226][T21637] IPVS: using max 25 ests per chain, 60000 per kthread [ 594.065749][T21648] team0: Mode changed to "activebackup" [ 594.194066][T21656] pimreg: entered allmulticast mode [ 594.207643][T21656] pimreg: left allmulticast mode [ 594.303057][T21662] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3773'. [ 594.418012][T21646] bond4 (unregistering): Released all slaves [ 594.864578][T21687] xt_hashlimit: overflow, try lower: 6/0 [ 594.989549][T21688] lo speed is unknown, defaulting to 1000 [ 595.014924][T21686] netlink: 'syz.2.3777': attribute type 2 has an invalid length. [ 595.129996][T21695] netlink: 'syz.2.3781': attribute type 1 has an invalid length. [ 595.248347][T21697] lo speed is unknown, defaulting to 1000 [ 595.444084][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3784'. [ 595.572432][T21711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3786'. [ 595.847457][T21721] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20000 [ 596.124542][T21729] netlink: 'syz.0.3792': attribute type 1 has an invalid length. [ 596.149685][T21729] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3792'. [ 596.179469][T21729] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3792'. [ 596.217294][T21729] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3792'. [ 596.573132][T21750] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 596.598871][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.606584][T21750] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3798'. [ 596.634214][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.808352][T21756] lo speed is unknown, defaulting to 1000 [ 596.881024][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 596.909755][T21750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3798'. [ 596.923981][T21750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3798'. [ 597.120556][T21776] netlink: 'syz.3.3806': attribute type 4 has an invalid length. [ 597.128822][T21776] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3806'. [ 597.227779][T21779] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 597.244194][T21779] netlink: 'syz.2.3805': attribute type 1 has an invalid length. [ 597.702290][T21798] netlink: 'syz.1.3811': attribute type 3 has an invalid length. [ 597.848242][T21804] netlink: 'syz.2.3813': attribute type 29 has an invalid length. [ 598.392827][T21824] veth1_to_batadv: entered promiscuous mode [ 598.523927][T21834] siw: device registration error -23 [ 599.547555][T21890] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 599.658892][T21894] tipc: Can't bind to reserved service type 2 [ 600.049375][T21903] bond4 (unregistering): Released all slaves [ 600.400939][T21932] vlan0: entered promiscuous mode [ 602.821734][T21904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 603.018602][T21945] __nla_validate_parse: 5 callbacks suppressed [ 603.018623][T21945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 603.197285][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 603.238285][T21945] hsr_slave_0: left promiscuous mode [ 603.244959][T21945] hsr_slave_1: left promiscuous mode [ 603.362760][T21958] FAULT_INJECTION: forcing a failure. [ 603.362760][T21958] name failslab, interval 1, probability 0, space 0, times 0 [ 603.387110][T21958] CPU: 0 UID: 0 PID: 21958 Comm: syz.1.3854 Not tainted syzkaller #0 PREEMPT(full) [ 603.387141][T21958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.387159][T21958] Call Trace: [ 603.387172][T21958] [ 603.387182][T21958] dump_stack_lvl+0xe8/0x150 [ 603.387213][T21958] should_fail_ex+0x40c/0x560 [ 603.387254][T21958] should_failslab+0xa8/0x100 [ 603.387278][T21958] __kmalloc_noprof+0xe8/0x750 [ 603.387310][T21958] ? ipv6_flowlabel_opt+0x104a/0x2ae0 [ 603.387347][T21958] ipv6_flowlabel_opt+0x104a/0x2ae0 [ 603.387392][T21958] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 603.387433][T21958] ? __lock_acquire+0x683/0x2cd0 [ 603.387477][T21958] ? do_raw_spin_lock+0x12b/0x2f0 [ 603.387506][T21958] ? lock_sock_nested+0x6a/0x100 [ 603.387551][T21958] ? __local_bh_enable_ip+0xd0/0x130 [ 603.387578][T21958] do_ipv6_setsockopt+0xe0e/0x3190 [ 603.387621][T21958] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 603.387652][T21958] ? kstrtouint+0x6e/0xe0 [ 603.387685][T21958] ? aa_label_sk_perm+0x532/0x6e0 [ 603.387712][T21958] ? get_pid_task+0x20/0x1f0 [ 603.387749][T21958] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 603.387778][T21958] ? get_pid_task+0x20/0x1f0 [ 603.387804][T21958] ? get_pid_task+0x20/0x1f0 [ 603.387829][T21958] ? get_pid_task+0x20/0x1f0 [ 603.387868][T21958] ? __lock_acquire+0x683/0x2cd0 [ 603.387911][T21958] ? aa_sk_perm+0x6d5/0x900 [ 603.387945][T21958] ipv6_setsockopt+0x59/0x170 [ 603.387980][T21958] rawv6_setsockopt+0x276/0x5e0 [ 603.388016][T21958] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 603.388045][T21958] ? aa_sock_opt_perm+0xff/0x1a0 [ 603.388078][T21958] ? sock_common_setsockopt+0x36/0xc0 [ 603.388108][T21958] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 603.388141][T21958] do_sock_setsockopt+0x17c/0x1b0 [ 603.388168][T21958] __x64_sys_setsockopt+0x13d/0x1b0 [ 603.388193][T21958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.388216][T21958] do_syscall_64+0x174/0x580 [ 603.388241][T21958] ? trace_irq_disable+0x3b/0x140 [ 603.388273][T21958] ? clear_bhb_loop+0x40/0x90 [ 603.388300][T21958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.388322][T21958] RIP: 0033:0x7fd79b19ce59 [ 603.388343][T21958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.388361][T21958] RSP: 002b:00007fd79c125028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 603.388385][T21958] RAX: ffffffffffffffda RBX: 00007fd79b415fa0 RCX: 00007fd79b19ce59 [ 603.388401][T21958] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 603.388413][T21958] RBP: 00007fd79c125090 R08: 0000000000000023 R09: 0000000000000000 [ 603.388427][T21958] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 603.388440][T21958] R13: 00007fd79b416038 R14: 00007fd79b415fa0 R15: 00007ffecfb5b578 [ 603.388482][T21958] [ 603.702770][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3855'. [ 603.746132][T21962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3856'. [ 604.174086][T21990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3864'. [ 604.213531][T21990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3864'. [ 604.246183][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3865'. [ 604.309127][T21990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3864'. [ 604.476420][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 604.954840][T22018] validate_nla: 2 callbacks suppressed [ 604.954860][T22018] netlink: 'syz.2.3871': attribute type 4 has an invalid length. [ 605.007158][T22021] netlink: 'syz.2.3871': attribute type 4 has an invalid length. [ 605.093564][T22027] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3874'. [ 605.169971][T22028] netlink: 'syz.0.3874': attribute type 2 has an invalid length. [ 605.186046][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3874'. [ 605.231131][T22040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3877'. [ 605.249505][T22029] lo speed is unknown, defaulting to 1000 [ 605.395783][T22048] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 605.789287][T22071] netlink: 'syz.3.3884': attribute type 39 has an invalid length. [ 605.952452][T22074] netlink: 'syz.2.3885': attribute type 9 has an invalid length. [ 605.971184][T22074] netlink: 'syz.2.3885': attribute type 6 has an invalid length. [ 606.002442][T22074] netlink: 'syz.2.3885': attribute type 7 has an invalid length. [ 606.067000][T22074] netlink: 'syz.2.3885': attribute type 8 has an invalid length. [ 606.508291][T22101] netlink: 'syz.4.3891': attribute type 2 has an invalid length. [ 607.141712][T22125] FAULT_INJECTION: forcing a failure. [ 607.141712][T22125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.177736][T22125] CPU: 0 UID: 0 PID: 22125 Comm: syz.0.3898 Not tainted syzkaller #0 PREEMPT(full) [ 607.177770][T22125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 607.177783][T22125] Call Trace: [ 607.177792][T22125] [ 607.177801][T22125] dump_stack_lvl+0xe8/0x150 [ 607.177831][T22125] should_fail_ex+0x40c/0x560 [ 607.177872][T22125] _copy_to_user+0x31/0xb0 [ 607.177900][T22125] simple_read_from_buffer+0xe1/0x170 [ 607.177933][T22125] proc_fail_nth_read+0x1bb/0x230 [ 607.177966][T22125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.177998][T22125] ? rw_verify_area+0x24a/0x4c0 [ 607.178032][T22125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.178059][T22125] vfs_read+0x213/0xa80 [ 607.178095][T22125] ? __pfx___mutex_lock+0x10/0x10 [ 607.178123][T22125] ? __pfx_vfs_read+0x10/0x10 [ 607.178156][T22125] ? __fget_files+0x2a/0x420 [ 607.178188][T22125] ? __fget_files+0x3a2/0x420 [ 607.178213][T22125] ? __fget_files+0x2a/0x420 [ 607.178249][T22125] ksys_read+0x150/0x270 [ 607.178283][T22125] ? __pfx_ksys_read+0x10/0x10 [ 607.178330][T22125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.178354][T22125] do_syscall_64+0x174/0x580 [ 607.178378][T22125] ? trace_irq_disable+0x3b/0x140 [ 607.178411][T22125] ? clear_bhb_loop+0x40/0x90 [ 607.178438][T22125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.178460][T22125] RIP: 0033:0x7f3ec835d68e [ 607.178480][T22125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 607.178499][T22125] RSP: 002b:00007f3ec9302fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.178522][T22125] RAX: ffffffffffffffda RBX: 00007f3ec93036c0 RCX: 00007f3ec835d68e [ 607.178539][T22125] RDX: 000000000000000f RSI: 00007f3ec93030a0 RDI: 0000000000000004 [ 607.178552][T22125] RBP: 00007f3ec9303090 R08: 0000000000000000 R09: 0000000000000000 [ 607.178565][T22125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.178578][T22125] R13: 00007f3ec8616038 R14: 00007f3ec8615fa0 R15: 00007ffc4c361908 [ 607.178615][T22125] [ 607.430938][T22100] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 607.439227][T22100] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 608.168780][T22164] __nla_validate_parse: 4 callbacks suppressed [ 608.168801][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3908'. [ 608.365035][T22159] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3908'. [ 608.669622][T22179] netlink: 'syz.1.3912': attribute type 1 has an invalid length. [ 608.791123][T22179] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.841379][T22185] gretap0: left allmulticast mode [ 608.864080][T22185] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 608.885417][T22189] syz_tun: entered promiscuous mode [ 608.893084][ T148] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 608.952721][T22189] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 609.077836][ T153] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 609.428744][T22223] tipc: Started in network mode [ 609.469575][T22223] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 609.493458][T22223] tipc: Enabled bearer , priority 10 [ 609.913353][T22243] lo: left allmulticast mode [ 609.948133][T22243] tunl0: left allmulticast mode [ 609.970213][T22243] gre0: left allmulticast mode [ 609.987880][T22243] erspan0: left allmulticast mode [ 609.995131][T22243] ip_vti0: left allmulticast mode [ 610.001343][T11628] bond4: (slave gretap0): link status up again after 0 ms [ 610.028958][T22251] validate_nla: 1 callbacks suppressed [ 610.028975][T22251] netlink: 'syz.2.3933': attribute type 27 has an invalid length. [ 610.048841][T22243] ip6_vti0: left allmulticast mode [ 610.061726][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3929'. [ 610.085970][T11628] bond4: (slave gretap0): link status up again after 0 ms [ 610.101231][T22243] sit0: left allmulticast mode [ 610.125878][T11628] bond4: (slave gretap0): link status up again after 0 ms [ 610.133875][T22243] ip6tnl0: left allmulticast mode [ 610.164958][T22243] ip6gre0: left allmulticast mode [ 610.176139][T11628] bond4: (slave gretap0): link status up again after 0 ms [ 610.192383][T22243] syz_tun: left allmulticast mode [ 610.208471][ T139] bond4: (slave gretap0): link status up again after 0 ms [ 610.245874][ T139] bond4: (slave gretap0): link status up again after 0 ms [ 610.266705][T22243] ip6gretap0: left promiscuous mode [ 610.283873][T22243] ip6gretap0: left allmulticast mode [ 610.296158][ T139] bond4: (slave gretap0): link status up again after 0 ms [ 610.313962][T22243] bond0: left allmulticast mode [ 610.325371][T22243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.336300][ T139] bond4: (slave gretap0): link status up again after 0 ms [ 610.360265][T22243] team0: left allmulticast mode [ 610.369847][T22243] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.387302][T22243] dummy0: left allmulticast mode [ 610.397446][T22243] batman_adv: batadv0: Interface activated: dummy0 [ 610.404818][T22243] nlmon0: left allmulticast mode [ 610.412078][T22243] batadv0: left allmulticast mode [ 610.419862][T22243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.428433][T22243] vxcan0: left allmulticast mode [ 610.435044][T22243] vxcan1: left allmulticast mode [ 610.442186][T22243] veth0: left allmulticast mode [ 610.449378][T22243] veth1: left allmulticast mode [ 610.459166][T22243] wg0: left allmulticast mode [ 610.472908][T22243] wg2: left allmulticast mode [ 610.481294][T22243] veth0_to_bridge: left allmulticast mode [ 610.492529][T22243] veth1_to_bridge: left allmulticast mode [ 610.502601][T22243] veth0_to_team: left allmulticast mode [ 610.510547][T22243] team_slave_0: left allmulticast mode [ 610.519015][T22243] C: left allmulticast mode [ 610.525369][T22243] team_slave_1: left allmulticast mode [ 610.533303][T22243] veth0_to_batadv: left allmulticast mode [ 610.541754][T22243] batadv_slave_0: left allmulticast mode [ 610.549789][T22243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.560096][T22243] veth1_to_batadv: left allmulticast mode [ 610.568793][T22243] syzkaller0: left promiscuous mode [ 610.574287][T22243] syzkaller0: left allmulticast mode [ 610.580670][T22243] tipc: Resetting bearer [ 610.587275][T22243] tipc: Resetting bearer [ 610.593492][T22243] xfrm0: left allmulticast mode [ 610.601441][T22243] veth0_to_hsr: left allmulticast mode [ 610.610248][T22243] veth1_to_hsr: left allmulticast mode [ 610.618733][T22243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 610.629694][T22243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 610.646763][T22243] hsr0: left allmulticast mode [ 610.651673][T22243] hsr_slave_0: left allmulticast mode [ 610.658013][T22243] hsr_slave_1: left allmulticast mode [ 610.665233][T22243] veth1_virt_wifi: left allmulticast mode [ 610.674556][T22243] veth0_virt_wifi: left allmulticast mode [ 610.682450][T22243] virt_wifi0: left allmulticast mode [ 610.690028][T22243] veth1_vlan: left promiscuous mode [ 610.696673][T22243] veth1_vlan: left allmulticast mode [ 610.703710][T22243] veth0_vlan: left promiscuous mode [ 610.710826][T22243] veth0_vlan: entered promiscuous mode [ 610.729231][T22243] vlan0: left allmulticast mode [ 610.740222][T22243] vlan1: left allmulticast mode [ 610.752590][T22243] veth1_vlan: entered promiscuous mode [ 610.765956][T22243] veth1_vlan: entered allmulticast mode [ 610.781331][T22243] macvlan0: left allmulticast mode [ 610.791032][T22243] veth1_vlan: left allmulticast mode [ 610.800435][T22243] veth1_vlan: entered allmulticast mode [ 610.806401][T22243] macvlan1: left allmulticast mode [ 610.811879][T22243] veth1_vlan: left allmulticast mode [ 610.819040][T22243] ipvlan0: left allmulticast mode [ 610.825861][T22243] ipvlan1: left allmulticast mode [ 610.832617][T22243] veth0_vlan: left allmulticast mode [ 610.844915][T22243] veth1_macvtap: left promiscuous mode [ 610.852008][T22243] veth1_macvtap: left allmulticast mode [ 610.861314][T22243] veth0_macvtap: left promiscuous mode [ 610.867282][T22243] veth0_macvtap: left allmulticast mode [ 610.875099][T22243] veth0_macvtap: entered promiscuous mode [ 610.885363][T22243] veth0_macvtap: entered allmulticast mode [ 610.894458][T22243] macvtap0: left allmulticast mode [ 610.900184][T22243] veth0_macvtap: left allmulticast mode [ 610.908375][T22243] veth1_macvtap: entered promiscuous mode [ 610.914332][T22243] veth1_macvtap: entered allmulticast mode [ 610.921704][T22243] macsec0: left allmulticast mode [ 610.927114][T22243] veth1_macvtap: left allmulticast mode [ 610.936183][T22243] geneve1: left allmulticast mode [ 610.943706][T22243] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 610.951822][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.963800][T22243] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 610.972630][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.981466][T22243] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 610.990170][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.999443][T22243] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 611.007256][T22243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.017655][T22243] mac80211_hwsim hwsim44 wlan0: left allmulticast mode [ 611.026344][T22243] mac80211_hwsim hwsim45 wlan1: left allmulticast mode [ 611.034334][T22243] gretap1: left allmulticast mode [ 611.041222][T22243] ipip0: left allmulticast mode [ 611.047398][T22243] ip6gretap0: entered promiscuous mode [ 611.052949][T22243] ip6gretap0: entered allmulticast mode [ 611.059489][T22243] macsec1: left allmulticast mode [ 611.064641][T22243] ip6gretap0: left allmulticast mode [ 611.071563][T22243] bond1: left allmulticast mode [ 611.077628][T22243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.086451][T22243] bridge1: left allmulticast mode [ 611.093462][T22243] bridge2: left allmulticast mode [ 611.102545][T22243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 611.111532][T22243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.123580][T22243] veth3: left allmulticast mode [ 611.130071][T22243] ip6tnl1: left allmulticast mode [ 611.180938][T22243] ip6gre1: left promiscuous mode [ 611.187460][T22243] ip6gre1: left allmulticast mode [ 611.197546][T22243] gretap2: left allmulticast mode [ 611.211526][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.218724][T11640] bridge0: port 1(bridge_slave_0) entered listening state [ 611.228552][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.235733][T11640] bridge0: port 2(bridge_slave_1) entered listening state [ 611.298125][ T5768] tipc: Node number set to 10463914 [ 611.308699][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.331977][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.353854][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.394555][T22276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3936'. [ 611.433652][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.453666][T22276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3936'. [ 611.514038][ T148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.546905][ T8256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.554721][ T148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.776485][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 611.883556][T22293] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 611.930051][T22287] netlink: 'syz.3.3939': attribute type 2 has an invalid length. [ 612.057645][T22298] tipc: Enabled bearer , priority 0 [ 612.117239][T22310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3947'. [ 612.139269][T22311] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 612.166838][T22294] tipc: Disabling bearer [ 612.291748][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3946'. [ 612.308527][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3948'. [ 612.477910][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.630953][T22338] ip6erspan0: entered allmulticast mode [ 612.706156][T22342] geneve0: entered promiscuous mode [ 612.728421][T22342] geneve0: left promiscuous mode [ 612.819022][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 613.092157][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 613.298716][T22371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3963'. [ 613.487484][T22371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 613.559127][T22379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3966'. [ 613.585339][T22383] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3967'. [ 613.797431][T22392] netlink: 12700 bytes leftover after parsing attributes in process `syz.0.3967'. [ 613.976546][T11640] net_ratelimit: 65 callbacks suppressed [ 613.976569][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 614.136753][T11637] bond4: (slave gretap0): failed to get link speed/duplex [ 614.529146][T22418] bond4: option ad_user_port_key: invalid value (65535) [ 614.546245][T22418] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 614.601459][T22418] bond4 (unregistering): Released all slaves [ 614.631567][T22433] netlink: 'syz.1.3973': attribute type 49 has an invalid length. [ 614.878424][T22445] netlink: 'syz.0.3976': attribute type 61 has an invalid length. [ 614.888518][T22445] netlink: 'syz.0.3976': attribute type 105 has an invalid length. [ 614.921358][T22445] bond3: entered promiscuous mode [ 614.930918][T22445] bond3: entered allmulticast mode [ 614.946284][T22445] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.978590][ T36] bond4: (slave gretap0): failed to get link speed/duplex [ 615.127966][T22451] FAULT_INJECTION: forcing a failure. [ 615.127966][T22451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.158205][T22451] CPU: 0 UID: 0 PID: 22451 Comm: syz.3.3977 Not tainted syzkaller #0 PREEMPT(full) [ 615.158235][T22451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.158249][T22451] Call Trace: [ 615.158258][T22451] [ 615.158267][T22451] dump_stack_lvl+0xe8/0x150 [ 615.158298][T22451] should_fail_ex+0x40c/0x560 [ 615.158339][T22451] _copy_to_user+0x31/0xb0 [ 615.158367][T22451] bpf_test_finish+0x53c/0x6b0 [ 615.158399][T22451] ? __pfx____migrate_enable+0x10/0x10 [ 615.158428][T22451] ? __pfx_bpf_test_finish+0x10/0x10 [ 615.158451][T22451] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 615.158478][T22451] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 615.158510][T22451] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 615.158561][T22451] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 615.158590][T22451] ? __fget_files+0x2a/0x420 [ 615.158624][T22451] ? __fget_files+0x2a/0x420 [ 615.158656][T22451] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 615.158684][T22451] bpf_prog_test_run+0x2c5/0x340 [ 615.158710][T22451] __sys_bpf+0x643/0x950 [ 615.158749][T22451] ? __pfx___sys_bpf+0x10/0x10 [ 615.158799][T22451] ? ksys_write+0x242/0x270 [ 615.158834][T22451] ? __pfx_ksys_write+0x10/0x10 [ 615.158870][T22451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.158894][T22451] __x64_sys_bpf+0x7c/0x90 [ 615.158925][T22451] do_syscall_64+0x174/0x580 [ 615.158950][T22451] ? trace_irq_disable+0x3b/0x140 [ 615.158982][T22451] ? clear_bhb_loop+0x40/0x90 [ 615.159010][T22451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.159031][T22451] RIP: 0033:0x7f427a59ce59 [ 615.159052][T22451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.159071][T22451] RSP: 002b:00007f427b471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.159094][T22451] RAX: ffffffffffffffda RBX: 00007f427a815fa0 RCX: 00007f427a59ce59 [ 615.159110][T22451] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 615.159124][T22451] RBP: 00007f427b471090 R08: 0000000000000000 R09: 0000000000000000 [ 615.159137][T22451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.159150][T22451] R13: 00007f427a816038 R14: 00007f427a815fa0 R15: 00007ffd07cbcf28 [ 615.159185][T22451] [ 615.490755][T22454] ip6erspan0: entered allmulticast mode [ 615.497251][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 615.624742][ T36] bond4: (slave gretap0): failed to get link speed/duplex [ 615.735812][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 615.778039][T22469] netlink: 'syz.4.3981': attribute type 268 has an invalid length. [ 615.815446][T22475] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 615.848279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.857437][T22472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3983'. [ 615.956400][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 616.116048][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 616.225900][ T1046] bond4: (slave gretap0): failed to get link speed/duplex [ 616.310094][T22495] syzkaller0: entered promiscuous mode [ 616.316214][T22495] syzkaller0: entered allmulticast mode [ 616.334645][T22495] tipc: Enabled bearer , priority 0 [ 616.359454][T22494] tipc: Resetting bearer [ 616.420375][T22494] tipc: Disabling bearer [ 616.445666][T22502] netlink: 'syz.0.3992': attribute type 2 has an invalid length. [ 616.619089][T22514] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3995'. [ 616.633305][T22514] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 617.314905][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4005'. [ 617.656193][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 617.672733][T22554] unsupported nla_type 216 [ 617.682415][T22554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 618.188576][T22579] syzkaller1: entered promiscuous mode [ 618.194318][T22579] syzkaller1: entered allmulticast mode [ 618.340268][T22587] syzkaller0: entered promiscuous mode [ 618.354950][T22587] syzkaller0: entered allmulticast mode [ 618.378987][T22587] SET target dimension over the limit! [ 618.473277][T22590] __nla_validate_parse: 33 callbacks suppressed [ 618.473299][T22590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4021'. [ 618.502894][T22590] netlink: 'syz.3.4021': attribute type 22 has an invalid length. [ 618.511576][T22590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4021'. [ 618.547249][T22590] vlan3: entered allmulticast mode [ 618.553024][T22590] bond0: entered allmulticast mode [ 618.564591][T22590] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4021'. [ 618.596499][T22590] bond0 (unregistering): Released all slaves [ 619.040371][T22613] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 619.050236][T22613] batman_adv: batadv0: Adding interface: wlan0 [ 619.056605][T22613] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.089028][T22613] batman_adv: batadv0: Interface activated: wlan0 [ 619.117478][T11628] net_ratelimit: 22 callbacks suppressed [ 619.117501][T11628] bond4: (slave gretap0): failed to get link speed/duplex [ 619.265619][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 619.351892][T22620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 619.364637][T22624] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4029'. [ 619.375708][T22624] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 619.718974][T22642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4030'. [ 619.802012][T22642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4030'. [ 619.856644][ T36] bond4: (slave gretap0): failed to get link speed/duplex [ 619.881410][T22645] netlink: 'syz.3.4032': attribute type 1 has an invalid length. [ 619.899004][T22647] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4031'. [ 620.112506][T22645] bond0: entered promiscuous mode [ 620.147637][T22645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.213358][T22661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.233049][T22661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.294336][T22667] syzkaller0: entered promiscuous mode [ 620.305553][T22667] syzkaller0: entered allmulticast mode [ 620.418159][ T148] bond4: (slave gretap0): failed to get link speed/duplex [ 620.544341][T22673] netlink: 'syz.1.4038': attribute type 20 has an invalid length. [ 620.553999][ T148] bond4: (slave gretap0): failed to get link speed/duplex [ 620.600921][T22673] netlink: 'syz.1.4038': attribute type 20 has an invalid length. [ 620.601439][ T148] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.632841][ T148] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.668316][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4040'. [ 620.686402][ T148] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.715339][ T148] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.749610][ T148] bond4: (slave gretap0): failed to get link speed/duplex [ 620.885668][ T153] bond4: (slave gretap0): failed to get link speed/duplex [ 621.015623][ T153] bond4: (slave gretap0): failed to get link speed/duplex [ 621.066118][T22697] bridge8: entered promiscuous mode [ 621.081450][T22697] bridge8: entered allmulticast mode [ 621.103658][T22697] team0: Port device bridge8 added [ 621.145662][T11630] bond4: (slave gretap0): failed to get link speed/duplex [ 621.724921][T22731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4056'. [ 622.024003][T22746] xt_hashlimit: size too large, truncated to 1048576 [ 622.853229][T22769] netlink: 'syz.4.4069': attribute type 6 has an invalid length. [ 623.128380][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 623.154690][T22778] dvmrp8: entered allmulticast mode [ 623.463142][T22791] pimreg9: entered allmulticast mode [ 623.566343][T22791] __nla_validate_parse: 4 callbacks suppressed [ 623.566365][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 623.682280][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 623.795371][T22809] netlink: 'syz.3.4080': attribute type 1 has an invalid length. [ 623.963216][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'. [ 624.321822][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.588405][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4084'. [ 624.674192][T22825] netlink: 1744 bytes leftover after parsing attributes in process `syz.4.4084'. [ 624.737226][T22826] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4084'. [ 625.440445][T22794] tipc: Resetting bearer [ 625.826273][ T153] net_ratelimit: 21 callbacks suppressed [ 625.826297][ T153] bond4: (slave gretap0): failed to get link speed/duplex [ 625.909754][T22809] bond3: option mode: invalid value (7) [ 625.946931][T22809] bond3 (unregistering): Released all slaves [ 626.055685][T11635] bond4: (slave gretap0): failed to get link speed/duplex [ 626.074642][T11640] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.094265][T11640] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.115065][T11630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.144017][T11630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.196008][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 626.248319][T22833] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4086'. [ 626.275711][T22833] netlink: 'syz.2.4086': attribute type 9 has an invalid length. [ 626.307505][T22833] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4086'. [ 626.327957][T11630] bond4: (slave gretap0): failed to get link speed/duplex [ 626.373451][T22833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4086'. [ 626.397669][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 626.429308][T22847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4091'. [ 626.591730][T22856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4092'. [ 626.629668][T11635] bond4: (slave gretap0): failed to get link speed/duplex [ 626.767759][ T148] bond4: (slave gretap0): failed to get link speed/duplex [ 626.906871][ T153] bond4: (slave gretap0): failed to get link speed/duplex [ 627.045609][ T148] bond4: (slave gretap0): failed to get link speed/duplex [ 627.188337][T11640] bond4: (slave gretap0): failed to get link speed/duplex [ 627.325858][ T153] bond4: (slave gretap0): failed to get link speed/duplex [ 627.388033][T22888] syzkaller0: entered promiscuous mode [ 627.397572][T22888] syzkaller0: entered allmulticast mode [ 627.964453][T22903] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 628.359750][T22928] netlink: 'syz.0.4111': attribute type 3 has an invalid length. [ 628.708283][T22947] __nla_validate_parse: 8 callbacks suppressed [ 628.708306][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4116'. [ 628.769490][T22944] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4115'. [ 628.823171][T22944] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4115'. [ 628.990301][T22953] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4119'. [ 629.058171][T22964] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4123'. [ 629.887450][T22973] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 629.910618][T22973] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4125'. [ 629.938566][T22969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'. [ 629.945395][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4125'. [ 629.984146][T22980] xfrm0: entered allmulticast mode [ 630.071465][T22983] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4128'. [ 630.126305][T22983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4128'. [ 630.721604][T22982] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.728974][T22982] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.790355][T22982] batman_adv: batadv0: Interface deactivated: dummy0 [ 631.076599][T22982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.116511][T22982] tipc: Resetting bearer [ 631.122402][T22982] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 631.731479][T22983] bond5: entered promiscuous mode [ 631.744212][T22983] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.768855][T22976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.776547][T22976] bond5: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 631.789667][T22976] bond5: (slave ip6gre4): Error -95 calling set_mac_address [ 631.870511][T11630] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.880214][T11630] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.889559][T11630] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.898949][T11630] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.908400][T11630] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.932968][T11630] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.969736][T11630] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.003665][T11630] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.294889][T23032] netlink: 'syz.1.4138': attribute type 2 has an invalid length. [ 632.418116][T23045] bridge0: port 1(team0) entered blocking state [ 632.442504][T23045] bridge0: port 1(team0) entered disabled state [ 632.470818][T23045] team0: entered allmulticast mode [ 632.480797][T23045] team_slave_0: entered allmulticast mode [ 632.501720][T23045] team_slave_1: entered allmulticast mode [ 632.562719][T23045] team0: entered promiscuous mode [ 632.582655][T23045] team_slave_0: entered promiscuous mode [ 632.599255][T23045] team_slave_1: entered promiscuous mode [ 632.628884][T23045] bridge0: port 1(team0) entered blocking state [ 632.635366][T23045] bridge0: port 1(team0) entered forwarding state [ 633.155350][T23071] geneve2: entered promiscuous mode [ 633.169346][ T148] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 32968 - 0 [ 633.200437][ T148] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 32968 - 0 [ 633.240911][ T148] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 32968 - 0 [ 633.263570][ T148] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 32968 - 0 [ 633.275896][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 633.915365][T23082] netlink: 'syz.2.4150': attribute type 28 has an invalid length. [ 633.934155][T23083] __nla_validate_parse: 10 callbacks suppressed [ 633.934176][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4153'. [ 633.993425][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4153'. [ 634.046651][T23089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4153'. [ 634.056520][T23087] xt_cgroup: path and classid specified [ 634.081406][T23091] net_ratelimit: 54 callbacks suppressed [ 634.081427][T23091] openvswitch: netlink: Missing valid actions attribute. [ 634.106334][T23091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.139167][T23085] bond5: option tlb_dynamic_lb: invalid value (115) [ 634.171416][T23085] bond5 (unregistering): Released all slaves [ 634.333154][T23091] lo speed is unknown, defaulting to 1000 [ 634.368905][T23091] lo speed is unknown, defaulting to 1000 [ 634.389051][T23101] bond0: (slave syz_tun): Releasing backup interface [ 634.444501][T23101] team0: left allmulticast mode [ 634.461370][T23101] team_slave_0: left allmulticast mode [ 634.481747][T23101] team_slave_1: left allmulticast mode [ 634.489293][T23101] team0: left promiscuous mode [ 634.494197][T23101] team_slave_0: left promiscuous mode [ 634.501234][T23101] team_slave_1: left promiscuous mode [ 634.508273][T23101] bridge0: port 1(team0) entered disabled state [ 634.538437][T23101] bridge_slave_1: left allmulticast mode [ 634.555349][T23101] bridge_slave_1: left promiscuous mode [ 634.609547][T23101] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.662301][T23101] bond0: (slave bond_slave_0): Releasing backup interface [ 634.700246][T23101] bond0: (slave bond_slave_1): Releasing backup interface [ 634.724608][T23101] team0: Port device team_slave_0 removed [ 634.744172][T23101] team0: Port device team_slave_1 removed [ 634.753350][T23101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.763306][T23101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.774888][T23101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 634.811017][T23102] team0: Device xfrm0 is of different type [ 634.831036][T23091] lo speed is unknown, defaulting to 1000 [ 634.901589][T23112] netlink: 'syz.1.4162': attribute type 3 has an invalid length. [ 635.242124][T23129] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4164'. [ 635.428142][T23135] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4164'. [ 635.640457][T23091] infiniband syz0: set down [ 635.659338][T23091] infiniband syz0: added lo [ 635.663985][ T8262] lo speed is unknown, defaulting to 1000 [ 635.688310][T23091] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 635.704054][T23091] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 635.721957][T23091] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 635.855371][T23091] RDS/IB: syz0: added [ 635.875078][T23091] smc: adding ib device syz0 with port count 1 [ 635.895992][T23091] smc: ib device syz0 port 1 has no pnetid [ 635.925038][ T5742] lo speed is unknown, defaulting to 1000 [ 635.935300][T23154] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4172'. [ 635.949510][T23091] lo speed is unknown, defaulting to 1000 [ 636.089663][T23161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4173'. [ 636.373660][T23176] netlink: 'syz.3.4178': attribute type 1 has an invalid length. [ 636.607279][T23091] lo speed is unknown, defaulting to 1000 [ 636.854123][T23199] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 636.932867][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'. [ 639.689681][T23244] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 639.750689][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'. [ 639.809787][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'. [ 639.901220][T23250] netlink: 316 bytes leftover after parsing attributes in process `syz.0.4194'. [ 639.958410][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4194'. [ 639.975016][T23206] lo speed is unknown, defaulting to 1000 [ 639.975291][T23091] lo speed is unknown, defaulting to 1000 [ 640.031041][T23229] syz_tun: left promiscuous mode [ 640.184684][T23229] vlan0: left promiscuous mode [ 640.265405][T23229] ip6gre1: left promiscuous mode [ 640.280290][T23229] ip6gre1: left allmulticast mode [ 640.351731][T23229] ip6gre2: left promiscuous mode [ 640.361113][T23229] ip6gre2: left allmulticast mode [ 640.377558][T23229] ip6tnl1: left allmulticast mode [ 640.451138][T23229] bridge8: left promiscuous mode [ 640.456518][T23229] bridge8: left allmulticast mode [ 640.464686][T23231] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 640.477125][T11630] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.497191][T11630] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.515830][T11630] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.535914][T11630] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.546152][T23091] lo speed is unknown, defaulting to 1000 [ 640.551960][T11630] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.574841][T11630] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.596009][T11630] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 640.609552][T11630] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.687795][T23262] xt_hashlimit: size too large, truncated to 1048576 [ 640.709609][T23260] netlink: 'syz.0.4196': attribute type 10 has an invalid length. [ 640.943096][T23269] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4199'. [ 641.129012][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4201'. [ 641.194680][T23206] lo speed is unknown, defaulting to 1000 [ 641.379520][T23284] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4204'. [ 641.471043][T23290] netlink: 'syz.4.4205': attribute type 1 has an invalid length. [ 641.634308][T23299] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4205'. [ 641.695637][T23290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.765658][ T4948] Bluetooth: hci1: command 0x0406 tx timeout [ 641.877509][T23304] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4208'. [ 641.913827][T23300] bond6 (unregistering): Released all slaves [ 641.949221][T23091] lo speed is unknown, defaulting to 1000 [ 642.437191][T23091] lo speed is unknown, defaulting to 1000 [ 642.831964][T23091] lo speed is unknown, defaulting to 1000 [ 642.941621][T23310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 643.683567][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 643.736415][T23355] xt_hashlimit: size too large, truncated to 1048576 [ 644.052590][T23366] syzkaller1: entered promiscuous mode [ 644.064918][T23366] syzkaller1: entered allmulticast mode [ 644.873237][T23400] __nla_validate_parse: 2 callbacks suppressed [ 644.873256][T23400] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4235'. [ 645.339490][T23424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4239'. [ 645.368020][T23424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4239'. [ 646.151461][T23442] netlink: 'syz.1.4245': attribute type 13 has an invalid length. [ 646.175108][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4245'. [ 646.392319][T23450] batman_adv: batadv0: Interface activated: syzkaller0 [ 646.681949][T23455] IPv6: sit1: Disabled Multicast RS [ 646.752673][T23458] netlink: 'syz.2.4252': attribute type 3 has an invalid length. [ 646.801230][T23458] syzkaller0: entered promiscuous mode [ 646.822989][T23458] syzkaller0: entered allmulticast mode [ 647.008387][T23470] lo speed is unknown, defaulting to 1000 [ 647.150419][T23470] lo speed is unknown, defaulting to 1000 [ 647.241925][T23489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4259'. [ 647.256762][T23487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4259'. [ 647.649786][T23505] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 647.720954][T23508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4265'. [ 647.874336][T23514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4255'. [ 648.497941][T23543] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 648.509522][T23543] bond4 (unregistering): Released all slaves [ 648.528345][T23550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4273'. [ 648.664236][T23554] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 648.754787][T23557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 649.559501][T23584] netlink: 'syz.0.4282': attribute type 1 has an invalid length. [ 649.698553][T23586] bond4: (slave veth5): Enslaving as an active interface with a down link [ 649.857946][T23584] bond4: (slave veth7): Enslaving as an active interface with a down link [ 649.873750][T23590] tipc: Enabling of bearer rejected, media not registered [ 649.890532][T23590] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4284'. [ 650.131289][T23598] pimreg9: entered allmulticast mode [ 650.167866][T23607] syzkaller1: entered promiscuous mode [ 650.184744][T23607] syzkaller1: entered allmulticast mode [ 650.199996][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4289'. [ 650.210959][T23598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 650.227297][T11640] bridge_slave_1: left allmulticast mode [ 650.233720][T11640] bridge_slave_1: left promiscuous mode [ 650.243194][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.270979][T11640] bridge_slave_0: left allmulticast mode [ 650.279403][T11640] bridge_slave_0: left promiscuous mode [ 650.296689][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.380005][T11640] pim6reg99999999: left allmulticast mode [ 650.387700][T11640] pimreg9: left allmulticast mode [ 650.543984][T11640] bond11 (unregistering): (slave erspan1): Releasing active interface [ 650.552544][T11640] erspan1 (unregistering): left promiscuous mode [ 650.633264][T11640] bond6 (unregistering): (slave geneve4): Releasing active interface [ 650.650870][T11640] bond1 (unregistering): (slave geneve2): Releasing active interface [ 650.854644][T11640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.863728][T11640] bond_slave_0: left promiscuous mode [ 650.870876][T11640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.883584][T11640] bond_slave_1: left promiscuous mode [ 650.890183][T11640] bond0 (unregistering): Released all slaves [ 650.897510][T23614] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4290'. [ 650.910228][T11640] bond1 (unregistering): Released all slaves [ 650.939842][T11640] bond2 (unregistering): Released all slaves [ 651.001933][T11640] bond3 (unregistering): (slave veth7): Releasing active interface [ 651.013239][T11640] bond3 (unregistering): Released all slaves [ 651.030823][T11640] bond4 (unregistering): Released all slaves [ 651.048502][T11640] bond5 (unregistering): Released all slaves [ 651.071008][T11640] bond6 (unregistering): Released all slaves [ 651.108806][T11640] bond7 (unregistering): Released all slaves [ 651.152898][T11640] bond8 (unregistering): Released all slaves [ 651.191574][T11640] bond9 (unregistering): Released all slaves [ 651.222852][T11640] bond10 (unregistering): Released all slaves [ 651.245440][T11640] bond11 (unregistering): Released all slaves [ 651.263336][T11640] bond12 (unregistering): Released all slaves [ 651.281548][T11640] bond13 (unregistering): Released all slaves [ 651.467002][T23625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4292'. [ 651.851803][T23603] tipc: Resetting bearer [ 651.918029][T23603] batman_adv: batadv0: Interface deactivated: wlan0 [ 652.133404][T23631] team0: entered promiscuous mode [ 652.147330][T23631] bridge8: entered promiscuous mode [ 652.157526][T23631] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 652.178721][ T148] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.190211][ T148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.203212][T11640] : left promiscuous mode [ 652.221878][ T148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.232670][ T148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.282930][T11640] tipc: Disabling bearer [ 652.313685][T11640] tipc: Left network mode [ 652.460564][T23643] geneve1: entered promiscuous mode [ 652.521334][T11640] IPVS: stopping backup sync thread 16639 ... [ 652.615941][T23647] lo speed is unknown, defaulting to 1000 [ 652.688614][T23647] lo speed is unknown, defaulting to 1000 [ 653.326656][T23667] tipc: Resetting bearer [ 653.332756][T23667] tipc: Resetting bearer [ 653.719139][T23677] raw_sendmsg: syz.0.4304 forgot to set AF_INET. Fix it! [ 654.967001][T23695] netlink: 'syz.1.4307': attribute type 1 has an invalid length. [ 655.056468][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 655.333316][T23702] vlan3: entered promiscuous mode [ 655.348483][T23702] erspan0: entered promiscuous mode [ 655.814166][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4314'. [ 655.834106][T23721] netlink: 'syz.1.4314': attribute type 30 has an invalid length. [ 655.887931][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4314'. [ 655.930422][T23725] netlink: 'syz.1.4314': attribute type 30 has an invalid length. [ 656.103265][ T1046] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.186117][T11640] hsr_slave_0: left promiscuous mode [ 656.204966][T11640] hsr_slave_1: left promiscuous mode [ 656.229308][T11640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.278500][T11640] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 656.292024][T11640] batman_adv: batadv0: Removing interface: syzkaller0 [ 656.310838][T23735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.844513][ T1046] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.854048][ T1046] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.871373][T23733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4317'. [ 656.882248][ T1046] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.202600][T23751] gre1: entered allmulticast mode [ 657.323947][T23767] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4320'. [ 657.391128][T23764] bond6: (slave tunl0): Device is not bonding slave [ 657.399088][T23764] bond6: option active_slave: invalid value (tunl0) [ 657.411557][T23764] bond6 (unregistering): Released all slaves [ 657.604216][T11640] IPVS: stop unused estimator thread 0... [ 660.105895][T23752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.431842][T23803] netlink: 'syz.3.4332': attribute type 13 has an invalid length. [ 660.580380][T23812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4335'. [ 660.688283][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4336'. [ 660.723001][T23820] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.4336'. [ 660.851856][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4339'. [ 660.901942][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4337'. [ 660.933284][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4337'. [ 660.963135][T23825] netlink: 'syz.1.4337': attribute type 6 has an invalid length. [ 661.182679][T23839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4342'. [ 661.229246][T23839] syzkaller1: entered promiscuous mode [ 661.235979][T23839] syzkaller1: entered allmulticast mode [ 661.258981][T23842] syzkaller0: entered promiscuous mode [ 661.276413][T23842] syzkaller0: entered allmulticast mode [ 661.725145][T23865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4348'. [ 661.804467][T23869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4347'. [ 661.919709][T23867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.940649][T23867] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.988061][T23867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.164607][T23867] veth1_to_batadv: left promiscuous mode [ 662.207714][T23867] batadv_slave_1: left promiscuous mode [ 662.248221][T23867] veth1_vlan: left promiscuous mode [ 662.256302][T23867] veth0_vlan: left promiscuous mode [ 662.262835][T23867] veth0_vlan: entered promiscuous mode [ 662.275942][T23867] veth1_vlan: entered promiscuous mode [ 662.285021][T23867] tipc: Resetting bearer [ 662.304369][T23867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 662.313669][T23867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 662.334610][T23867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 662.345275][T23867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.354041][T23867] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 662.361750][T23867] batman_adv: batadv0: Interface activated: wlan0 [ 662.406652][T23867] ip6gre1: left promiscuous mode [ 662.414330][T23867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 662.424598][T23867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 662.440173][T23867] ip6gretap0: entered promiscuous mode [ 662.450290][T23867] veth1_to_batadv: entered promiscuous mode [ 662.474357][T23867] bond3: left promiscuous mode [ 662.484192][T23867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 662.504631][T23867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 662.532739][T11632] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.548293][T11632] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.565965][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 662.872119][ T3277] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 662.884116][ T3277] bond4: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 662.914625][ T3277] bond4: (slave veth5): making interface the new active one [ 662.942852][ T3277] bond4: active interface up! [ 662.969038][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.005811][ T8236] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 663.052508][T23904] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4354'. [ 663.136508][ T3277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.198632][ T8262] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 663.213386][ T3277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.257414][ T3277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.366098][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 663.599536][ T8236] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 663.644170][T23926] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 663.997523][ T153] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 664.112374][T23933] netlink: 'syz.0.4360': attribute type 7 has an invalid length. [ 665.038295][T11640] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 665.071590][T11640] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 665.632436][T23990] __nla_validate_parse: 4 callbacks suppressed [ 665.632458][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 665.699839][T23990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 665.973835][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 666.006283][T23994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4377'. [ 666.238056][T24001] xt_hashlimit: invalid rate [ 666.666261][T24010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4382'. [ 667.153232][T24041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4389'. [ 667.178640][T24041] netlink: 'syz.1.4389': attribute type 7 has an invalid length. [ 667.188007][T24041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 667.389400][T24052] bridge0: port 1(vlan3) entered blocking state [ 667.416618][T24052] bridge0: port 1(vlan3) entered disabled state [ 667.436843][T24052] vlan3: entered allmulticast mode [ 667.446595][T24054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4392'. [ 667.456030][T24052] geneve0: entered allmulticast mode [ 667.482129][T24052] vlan3: entered promiscuous mode [ 667.507624][T24052] geneve0: entered promiscuous mode [ 667.545848][T24047] vlan3: left promiscuous mode [ 667.556703][T24047] geneve0: left promiscuous mode [ 667.729863][T24061] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4395'. [ 667.788360][T24061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4395'. [ 668.468619][T24101] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 668.955998][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 668.956019][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 669.202811][T24115] lo speed is unknown, defaulting to 1000 [ 669.231094][T24115] lo speed is unknown, defaulting to 1000 [ 669.753328][T24141] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 670.681173][T24174] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 670.757471][T24177] __nla_validate_parse: 5 callbacks suppressed [ 670.757491][T24177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4423'. [ 670.784655][T24174] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 671.019837][T24178] ipvlan1: entered promiscuous mode [ 671.059921][T24178] ipvlan1: entered allmulticast mode [ 671.090908][T24178] veth0_vlan: entered allmulticast mode [ 671.319333][T24193] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4428'. [ 671.380095][T24197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 671.391786][T24193] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 671.407445][T24200] netlink: 'syz.0.4428': attribute type 3 has an invalid length. [ 671.703414][T24213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4430'. [ 673.302396][ T3277] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.334693][T24228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4434'. [ 673.347133][ T3277] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 32968 - 0 [ 673.386261][ T3277] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.409468][T24230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 673.422936][ T3277] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 32968 - 0 [ 673.452520][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4435'. [ 673.472323][ T3277] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.507894][ T3277] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 32968 - 0 [ 673.528739][T24236] netlink: 'syz.0.4435': attribute type 3 has an invalid length. [ 673.537089][T24238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4438'. [ 673.628092][ T3277] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.641730][ T3277] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 32968 - 0 [ 673.763925][T24238] bond6: entered promiscuous mode [ 673.773384][T24238] 8021q: adding VLAN 0 to HW filter on device bond6 [ 673.807647][T24243] xfrm1: entered allmulticast mode [ 674.236623][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 674.292439][T24262] sch_tbf: burst 6 is lower than device gretap0 mtu (1514) ! [ 674.403741][T24269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4447'. [ 674.856751][T24282] lo speed is unknown, defaulting to 1000 [ 674.907042][T24282] lo speed is unknown, defaulting to 1000 [ 675.236639][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4451'. [ 676.155723][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 676.298466][T24327] __nla_validate_parse: 3 callbacks suppressed [ 676.298486][T24327] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4461'. [ 677.219919][T24361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 677.237524][T24361] batman_adv: batadv0: Adding interface: gretap2 [ 677.244282][T24361] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.273278][T24361] batman_adv: batadv0: Interface activated: gretap2 [ 677.345218][T24363] syzkaller0: entered promiscuous mode [ 677.359260][T24363] syzkaller0: entered allmulticast mode [ 677.492538][T24372] netlink: 'syz.2.4475': attribute type 13 has an invalid length. [ 677.829942][T24380] netlink: 'syz.1.4478': attribute type 1 has an invalid length. [ 677.863200][T24380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4478'. [ 678.305034][T24399] netlink: 'syz.3.4483': attribute type 8 has an invalid length. [ 678.336267][T24399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4483'. [ 678.528280][T24412] geneve2: left promiscuous mode [ 678.547777][T24412] vlan2: left promiscuous mode [ 678.561874][T24412] bridge0: left promiscuous mode [ 678.574234][T24412] gretap1: left promiscuous mode [ 678.590018][T24412] bridge2: left promiscuous mode [ 678.599054][T24412] bridge2: left allmulticast mode [ 678.604487][T24412] bridge3: left promiscuous mode [ 678.610124][T24412] bridge3: left allmulticast mode [ 678.628218][T24412] xfrm1: left allmulticast mode [ 678.642553][T24412] batman_adv: batadv0: Interface deactivated: gretap2 [ 678.906456][T24422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4488'. [ 679.501947][T24455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4500'. [ 679.720369][T24467] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4504'. [ 680.127225][T24486] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4510'. [ 680.196230][T24492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 680.230576][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4511'. [ 680.294595][T24495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4511'. [ 680.744267][T24514] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 680.817592][T24514] bond5 (unregistering): Released all slaves [ 681.248018][T24528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.296930][T24531] netlink: 'syz.1.4526': attribute type 10 has an invalid length. [ 681.335892][T24531] batman_adv: batadv0: Removing interface: dummy0 [ 681.420579][T24531] [ 681.422966][T24531] ============================================ [ 681.429145][T24531] WARNING: possible recursive locking detected [ 681.435338][T24531] syzkaller #0 Not tainted [ 681.439786][T24531] -------------------------------------------- [ 681.445963][T24531] syz.1.4526/24531 is trying to acquire lock: [ 681.452052][T24531] ffff88802d21ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 681.463302][T24531] [ 681.463302][T24531] but task is already holding lock: [ 681.470698][T24531] ffff88802d21ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 681.480044][T24531] and the lock comparison function returns 0: [ 681.486125][T24531] [ 681.486125][T24531] other info that might help us debug this: [ 681.494195][T24531] Possible unsafe locking scenario: [ 681.494195][T24531] [ 681.501656][T24531] CPU0 [ 681.504953][T24531] ---- [ 681.508244][T24531] lock(&dev_instance_lock_key#3); [ 681.513468][T24531] lock(&dev_instance_lock_key#3); [ 681.518697][T24531] [ 681.518697][T24531] *** DEADLOCK *** [ 681.518697][T24531] [ 681.526857][T24531] May be due to missing lock nesting notation [ 681.526857][T24531] [ 681.535195][T24531] 2 locks held by syz.1.4526/24531: [ 681.540403][T24531] #0: ffffffff8fdbd5c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 681.549499][T24531] #1: ffff88802d21ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 681.559366][T24531] [ 681.559366][T24531] stack backtrace: [ 681.565269][T24531] CPU: 1 UID: 0 PID: 24531 Comm: syz.1.4526 Not tainted syzkaller #0 PREEMPT(full) [ 681.565295][T24531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.565312][T24531] Call Trace: [ 681.565327][T24531] [ 681.565335][T24531] dump_stack_lvl+0xe8/0x150 [ 681.565357][T24531] print_deadlock_bug+0x279/0x290 [ 681.565381][T24531] __lock_acquire+0x24bf/0x2cd0 [ 681.565400][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.565418][T24531] ? do_set_master+0x563/0x720 [ 681.565436][T24531] ? do_setlink+0xe7b/0x4670 [ 681.565460][T24531] ? rtnl_newlink+0x15c2/0x1bd0 [ 681.565498][T24531] ? rtnetlink_rcv_msg+0x802/0xc00 [ 681.565531][T24531] ? netlink_rcv_skb+0x226/0x4a0 [ 681.565551][T24531] ? netlink_unicast+0x7bb/0x940 [ 681.565582][T24531] ? netlink_sendmsg+0x813/0xb40 [ 681.565604][T24531] ? ____sys_sendmsg+0x9b9/0xa20 [ 681.565630][T24531] ? ___sys_sendmsg+0x2a5/0x360 [ 681.565650][T24531] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 681.565677][T24531] ? do_syscall_64+0x174/0x580 [ 681.565702][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.565728][T24531] ? __ethtool_get_link_ksettings+0x109/0x250 [ 681.565756][T24531] lock_acquire+0x106/0x350 [ 681.565777][T24531] ? __ethtool_get_link_ksettings+0x109/0x250 [ 681.565814][T24531] __mutex_lock+0x19d/0x1590 [ 681.565839][T24531] ? __ethtool_get_link_ksettings+0x109/0x250 [ 681.565863][T24531] ? lockdep_hardirqs_on+0x7a/0x110 [ 681.565889][T24531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 681.565907][T24531] ? __wake_up_common_lock+0x195/0x1f0 [ 681.565936][T24531] ? __ethtool_get_link_ksettings+0x109/0x250 [ 681.565961][T24531] ? __pfx___mutex_lock+0x10/0x10 [ 681.565986][T24531] ? igmp_group_added+0x238/0x910 [ 681.566005][T24531] ? igmpv3_del_delrec+0x204/0x710 [ 681.566024][T24531] __ethtool_get_link_ksettings+0x109/0x250 [ 681.566057][T24531] bond_netdev_event+0x643/0xf80 [ 681.566085][T24531] ? __pfx_bond_netdev_event+0x10/0x10 [ 681.566116][T24531] ? ipmr_device_event+0x1f6/0x220 [ 681.566144][T24531] notifier_call_chain+0x1a5/0x3d0 [ 681.566170][T24531] __dev_notify_flags+0x1aa/0x310 [ 681.566189][T24531] ? __pfx___dev_notify_flags+0x10/0x10 [ 681.566210][T24531] ? __dev_change_flags+0x5f1/0x820 [ 681.566229][T24531] ? __pfx___dev_change_flags+0x10/0x10 [ 681.566250][T24531] netif_change_flags+0xde/0x1b0 [ 681.566268][T24531] dev_change_flags+0x128/0x260 [ 681.566298][T24531] vlan_device_event+0x1b4e/0x1f00 [ 681.566326][T24531] ? packet_notifier+0xf1b/0xf70 [ 681.566345][T24531] ? br_device_event+0x282/0x9c0 [ 681.566363][T24531] ? __pfx_phonet_device_notify+0x10/0x10 [ 681.566390][T24531] ? __pfx_vlan_device_event+0x10/0x10 [ 681.566409][T24531] ? bcm_notifier+0xa9/0x890 [ 681.566425][T24531] ? raw_notifier+0x9d/0x7d0 [ 681.566452][T24531] ? cgw_notifier+0x314/0x380 [ 681.566471][T24531] notifier_call_chain+0x1a5/0x3d0 [ 681.566497][T24531] netif_open+0x10f/0x190 [ 681.566521][T24531] ? __pfx_netif_open+0x10/0x10 [ 681.566549][T24531] dev_open+0x101/0x220 [ 681.566565][T24531] team_add_slave+0x6d5/0x28c0 [ 681.566594][T24531] ? __pfx_team_add_slave+0x10/0x10 [ 681.566608][T24531] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 681.566629][T24531] ? do_set_master+0x41e/0x720 [ 681.566647][T24531] ? __pfx___mutex_lock+0x10/0x10 [ 681.566668][T24531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 681.566688][T24531] ? __dev_change_flags+0x5f1/0x820 [ 681.566712][T24531] do_set_master+0x563/0x720 [ 681.566733][T24531] do_setlink+0xe7b/0x4670 [ 681.566750][T24531] ? __wake_up_klogd+0xe6/0x120 [ 681.566777][T24531] ? __pfx_vprintk_emit+0x10/0x10 [ 681.566802][T24531] ? __pfx_do_setlink+0x10/0x10 [ 681.566820][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.566842][T24531] ? lockdep_hardirqs_on+0x7a/0x110 [ 681.566861][T24531] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 681.566879][T24531] ? ___ratelimit+0x584/0x8e0 [ 681.566900][T24531] ? __mutex_trylock_common+0x15f/0x270 [ 681.566924][T24531] ? __pfx___mutex_trylock_common+0x10/0x10 [ 681.566948][T24531] ? rcu_is_watching+0x15/0xb0 [ 681.566968][T24531] ? trace_contention_end+0x3d/0x140 [ 681.566991][T24531] ? __mutex_lock+0x30f/0x1590 [ 681.567016][T24531] ? rtnl_newlink+0x8a3/0x1bd0 [ 681.567044][T24531] ? __pfx___mutex_lock+0x10/0x10 [ 681.567069][T24531] ? ns_capable+0x89/0xe0 [ 681.567086][T24531] ? rtnl_link_get_net_capable+0xd3/0x310 [ 681.567106][T24531] rtnl_newlink+0x15c2/0x1bd0 [ 681.567139][T24531] ? __pfx_rtnl_newlink+0x10/0x10 [ 681.567175][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.567195][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.567215][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.567235][T24531] ? unwind_next_frame+0x8f/0x2550 [ 681.567260][T24531] ? is_bpf_text_address+0x26/0x2b0 [ 681.567284][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.567305][T24531] ? kernel_text_address+0xa5/0xe0 [ 681.567337][T24531] ? __kernel_text_address+0xd/0x30 [ 681.567361][T24531] ? unwind_get_return_address+0x4d/0x90 [ 681.567381][T24531] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 681.567408][T24531] ? arch_stack_walk+0xfb/0x150 [ 681.567433][T24531] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 681.567461][T24531] ? __pfx_rtnl_newlink+0x10/0x10 [ 681.567494][T24531] ? __pfx_rtnl_newlink+0x10/0x10 [ 681.567520][T24531] rtnetlink_rcv_msg+0x802/0xc00 [ 681.567547][T24531] ? kasan_save_track+0x3e/0x80 [ 681.567572][T24531] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 681.567599][T24531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 681.567626][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.567649][T24531] netlink_rcv_skb+0x226/0x4a0 [ 681.567667][T24531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 681.567696][T24531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.567720][T24531] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.567738][T24531] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.567759][T24531] netlink_unicast+0x7bb/0x940 [ 681.567791][T24531] netlink_sendmsg+0x813/0xb40 [ 681.567813][T24531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.567835][T24531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 681.567862][T24531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.567886][T24531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.567905][T24531] ____sys_sendmsg+0x9b9/0xa20 [ 681.567923][T24531] ? __might_fault+0xaf/0x130 [ 681.567949][T24531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.567971][T24531] ? import_iovec+0x73/0xa0 [ 681.567992][T24531] ___sys_sendmsg+0x2a5/0x360 [ 681.568009][T24531] ? __lock_acquire+0x683/0x2cd0 [ 681.568028][T24531] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.568049][T24531] ? futex_wait+0x2a2/0x390 [ 681.568085][T24531] ? __fget_files+0x2a/0x420 [ 681.568106][T24531] ? __fget_files+0x3a2/0x420 [ 681.568132][T24531] __x64_sys_sendmsg+0x1bd/0x2a0 [ 681.568152][T24531] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.568179][T24531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.568198][T24531] do_syscall_64+0x174/0x580 [ 681.568217][T24531] ? trace_irq_disable+0x3b/0x140 [ 681.568243][T24531] ? clear_bhb_loop+0x40/0x90 [ 681.568263][T24531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.568280][T24531] RIP: 0033:0x7fd79b19ce59 [ 681.568298][T24531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.568319][T24531] RSP: 002b:00007fd79c125028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.568338][T24531] RAX: ffffffffffffffda RBX: 00007fd79b415fa0 RCX: 00007fd79b19ce59 [ 681.568354][T24531] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000005 [ 681.568366][T24531] RBP: 00007fd79b232d6f R08: 0000000000000000 R09: 0000000000000000 [ 681.568377][T24531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.568388][T24531] R13: 00007fd79b416038 R14: 00007fd79b415fa0 R15: 00007ffecfb5b578 [ 681.568410][T24531] [ 682.315528][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.427735][T24534] netlink: 'syz.1.4526': attribute type 10 has an invalid length. [ 688.955667][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 690.235751][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!