last executing test programs: 10.530675312s ago: executing program 0 (id=4635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r8) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000800)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="08000100000000000c000200ff7f000000000000"], 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r15, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r16, @ANYBLOB="2b030000000000002400128009000600626f6e640000000014000280080009000200000008000a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 10.26603587s ago: executing program 0 (id=4639): syz_emit_ethernet(0x69, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x33, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2c6"}}}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000140)='caif0\x00'}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002100290100000400fcdbdf250a0080fd000000000000000000000001"], 0x30}}, 0x8044) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) close(0x3) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, 0x0, &(0x7f0000000180)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x110, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8}], 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x1c, 0x1, 0x1, [r8, r8, r8]}}], 0x20, 0x40044}}], 0x1, 0x4) 9.749188113s ago: executing program 0 (id=4645): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x14, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000001f80)=""/226, 0x18, 0xe2, 0x2}, 0x28) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) ioctl$sock_proto_private(r2, 0x8b21, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="fd012bbd7000fddbdf250e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x400c8c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffefb) 9.286977745s ago: executing program 0 (id=4648): socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010026bd7000ffcbdf250900020073797a1b0000000008004100736977001400330077673100"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r4], 0x7c}}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1c, 0x16, 0x400, 0x0, 0x8, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@typed={0x4, 0xb, 0x0, 0x0, @binary}]}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a31000000000900010073797a30000000000900020073797a3200"], 0xb8}}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e23, 0xa, 0x4e23, 0x0, 0x2, 0xa0, 0x0, 0x3b, r7, 0xffffffffffffffff}, {0x5, 0x5, 0x4, 0x5, 0xcc, 0x1, 0x4, 0x1}, {0x0, 0x8, 0x66296995, 0x9}, 0x3, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d5, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x3501, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8916, &(0x7f0000000000)={r11}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8936, &(0x7f0000000000)={r11}) 7.650897543s ago: executing program 0 (id=4659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000010) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e25, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0), 0x0, 0x4001c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004850) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)={0x14, 0x0, 0x8, 0x60bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4800) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010129bd7000fddbdf25310000000500330004000000050036000100000008000200", @ANYRES32=r10, @ANYBLOB="0500350007000000c69fd5cece28bc02df7f7ef32d14ff2b7f29cad886cc7cc691ca5046a0bb15065b1b9620511a66dd0186562f1e0ab076471b2fe94fb6e436ca3b60b95213d5f817f081de1944218fb3d5d34b37f135782206cb70fc79c0a014b5acbc69fe9537d15809e6c3b6f3447b9d"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x84) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd700d0000000080000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7, 0xee, 0x74, @dev={0xfe, 0x80, '\x00', 0x12}, @local, 0x7, 0x7800, 0x3, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip_vti0\x00', r11, 0x80, 0x1, 0x7, 0xfffffff8, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x66, 0x0, 0xcb, 0x2f, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0xc, 0x68, 0x0, 0xf, [0x10, 0x1000]}, @end, @timestamp_addr={0x44, 0x2c, 0x88, 0x1, 0xd, [{@multicast2, 0xaf}, {@remote, 0x7f}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@multicast2, 0x4}]}]}}}}}) 4.540258167s ago: executing program 0 (id=4692): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) socket$netlink(0x10, 0x3, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x21, &(0x7f0000000500)=ANY=[@ANYBLOB="818a00000000000018000000a808000000000000a6ffffff783110000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000c50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000852000000200000018210000", @ANYRES32, @ANYBLOB="000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x63, &(0x7f0000000400)=""/99, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x5, 0x2, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x3, 0x3, 0x7, 0xd}, {0x1, 0x2, 0x1, 0xc}, {0x1, 0x4, 0xd, 0xa}, {0x3, 0x3, 0x5, 0x5}]}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a140000000b0a01020000"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r7, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0006000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 4.40132328s ago: executing program 3 (id=4694): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = epoll_create1(0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) epoll_create1(0x0) (async) connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) (async) 4.186113694s ago: executing program 3 (id=4696): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000063aaec9f0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) 3.746302772s ago: executing program 1 (id=4702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async) close(r0) 3.709767707s ago: executing program 4 (id=4703): syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x46, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x0, [0x8]}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3.609669982s ago: executing program 4 (id=4705): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYBLOB='\x00'/28, @ANYRES32=0x0, @ANYBLOB="0400000000000000000040000000000000000000", @ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES64=r0], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x401, 0x870bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x38}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0x8d, &(0x7f0000000680)=""/141}, 0x94) 3.522368621s ago: executing program 1 (id=4706): r0 = socket(0x3, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ffffffe600000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f00010000d5", 0x24) (rerun: 32) 3.365304565s ago: executing program 4 (id=4708): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000080)=""/183, 0xb7, 0x0, &(0x7f0000000240)=""/77, 0x4d}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r2, 0x1, 0xe, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x5, &(0x7f0000002500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="30b6bec50d2d00d4a6f246d062eb8b932a3e6240c81a3b79ab73dcf1fc3a70445532826e1e568ebb9e6cc565740c8332feb9b05dbf5e92d830f01217b2b4579f99223c31c73e939cef1efa338878134adc503b18b45c7a89beb0934de9cc5d8611206000ef61397d959e8ce256f534d4468c4b80b71b139aff055572ca5a397ad449f304fc17bc6352f54c47d260c3cbb08a7635fb7661c9aba3713c0b7a8fff47181c59167d58a4fc1366d5597c17d35834bb4128d29a24b25d92eba3cbf75e19cff76c4ae42738e8322c7d36555b43c4169a3af357aa6b0461025c1b1633799853c44b255d30adde1a4c28", 0xec}, {&(0x7f0000000840)="711704a9ca89770a1b8feeabc05ddde6966ab98e016aa85c2e8cb4498ce3140e7bfbe75b37606863ea278a935e5061b6d3ee0a58aa01124079e9120b12b5d0e187b498aca1ad20503b79dafd860ffc0fbd57bf2b042141c43190bf3d39b5b3629d87422c0eee19da9305701ce2b6867bb20ca0603239c45530259148a898bfee5ac426140cdc6ab8e29efe1dc322f6be2efe6f3d44e20804438c469532626a26574f636392d0a629bce7aecdfc7e9b30df68a2", 0xb3}, {&(0x7f00000007c0)="af78908bd71ce6f25ef0def9dcbf83f63d79acc60acd91e064d12a752ac533db336eb3f951cfd9b98a5cda0267e0e7fbe252892df89f90fd3761ec48b9e95acf959264802dbf962865eff0feee709d128eda0f0d1f81aa", 0x57}, {&(0x7f0000000680)="fd78ed121cc286f51081b3ca130704a05d3669f490a952be474a335986a1a9eef3ddb69546e0ebc167db2b43763c4fb69fcce3372560c5245a29f46e9d5bb2a819a4b3844efdd13728031421e8a07b7231fdadd28652e6a278fb7ca0da091ff70ae7f7227cbf0876c30c410ecfbb2594835b8984e7194a0ff2338064f2d3a0935445", 0x82}], 0x5, 0x5, 0x7fff) 3.365024835s ago: executing program 1 (id=4709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffba, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010018506000300ffffffff0000000000", @ANYRES32=r2, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 3.282313209s ago: executing program 4 (id=4710): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r2}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x51, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r6, r5, 0x25, 0x0, @val=@tracing}, 0x40) unshare(0x20000400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x13}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) vmsplice(r7, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r7, &(0x7f00000004c0)=[{&(0x7f0000000480)="00d67b61e6006b5bf436dc1c6384d4b5000000554a3c61383bcfbd61b3", 0x1d}], 0x1, 0xe) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r10, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000140), 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 3.145756562s ago: executing program 3 (id=4712): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={r0, 0x0, 0x4, 0xffff}, &(0x7f00000000c0)=0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno', 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f00000001c0)={0x1258, 0x27, 0x300, 0x70bd28, 0x25dfdbfc, {0x6}, [@typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="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", @generic="20b7f237b3649a3ab24e2cf19277339ef94cc3290eb6349a6e513b", @typed={0x8, 0x9, 0x0, 0x0, @pid=r3}, @generic="e0059e260665d1c87fc192a7bee5d88d712a01b3d5baebfad6ea3b2d8b63974bff5062452dc9e89f534e9f4e360a154edc823d9832d9a56241a369babd88d77d6491d19940eeee928c58da0cd039030d62877277be6e6c7611ba78f162f80c0cc1884bd8995d6432ddb0ee840a2e7648e8f3da63aec58d1354", @nested={0xf1, 0x44, 0x0, 0x1, [@typed={0x14, 0x151, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="ccc31e724d546d3f90a1d7a683f229e9f42bd191239170dfd93d7a55e3e0fe2fa9eb8f65efc2b303c5313e787a4f815f9669aeb268f949a285ae8f4316eb342061235aa50a661bce82a1158600575e24a8fb399a9db1e3b559a768be8a", @nested={0x4, 0xcd}, @typed={0x76, 0xd5, 0x0, 0x0, @binary="1e22fca8867e711b41b39d9680334ac10518f4aacacc7b7d1e7f0583caef7ed01035724bcec6974408cc70c3058ba083b6494c04d7cf270846564e1fede9a7611750ec6d62e1a4b21edf8b1d7cd822f2024edd22e2ea8e85b3b0f28cb97d2fbc3329062a2194fd86e874bb34243c4a7e4ea6"}]}, @nested={0x10, 0x4c, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0xdf}]}, @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x6e}, @generic="e68f33af1f5061a99d011e203c392fff655adfd6f4b1bd29d87175867b72aa73fe0a08e5de5016980f0450885235b80138f08b15fc72be02a7e58c97a26530257eaed512690041464f8102e6d044187ce6e178872ee62f799a1aeab33d6331caef10d05fcebe4e736afe26a053a7f9f7be0ef4521efed08e188c8744d0e09c0a79b98f8a4994d22ed3a0222632"]}, 0x1258}, 0x1, 0x0, 0x0, 0xb6a9c901633f6a9f}, 0xc54) socket$isdn_base(0x22, 0x3, 0x0) (async) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000014c0)) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000001500)={@loopback, @initdev}, &(0x7f0000001540)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000001880)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001900)={&(0x7f0000001580)="eab24a7ee1793ca82949e4067fa33ea92157dfcfbad41278721784b8609852cbfb20578f5910632b1f276e5f46efd73160bbf7a1ca38046258b9b6405a236d050b3bab1c4704ee8f0f2a23d7b22ddd4aa81f9bde1ea384a1cea0462d24028c5a4c15040190ebf41e7464d323c2d6a6a2f892d9c73199ef9ca8f7d2b61dba33d510febb292bf549ff71ef3a10", &(0x7f0000001640)=""/146, &(0x7f0000001700)="171ff1027d678e1003c99c1c36acd4509e9f1476baf26ed48d59cbabb9c2c77960247a53765df53714c621e181c4516421224d14e3a891a3568130762e75c4021646", &(0x7f0000001780)="8622c6413cf539b6707da329bd227de080fae69c20bf3a8ad49f13dec8763152cd45b819c8c6caf71d23abca93df4bce9574f62a9de0a15a0db4f2f8a0cd006625508a6134f2ec06204ed476bf5ad851ea9a651ad396837a3d5a80d40881e5cae15adc5b976670106b2fe7a46c5dff5d41acd7085dfba975ee75e4b9e4b5867479ec3d2b62838a", 0x87, r5, 0x4}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2ab0400}, 0xc, &(0x7f0000001b00)={&(0x7f00000019c0)={0x140, r6, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0xc}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x110, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="cb53ebf80c3d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="dd741efc6814"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="353f499822ba476a84f265e4f78e0858"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x20070b3a}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffe00}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f149dabf8434"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xc0b}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x48}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x10, 0x1, @random="8aba70d790e1679c5c22a5fe"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="230e12e46daa"}]}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc96}]}, 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001b80)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) socket$inet6(0xa, 0x6, 0x7ff) (async) r8 = socket$inet6(0xa, 0x6, 0x7ff) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001c00)={r0, 0x2, 0x8, 0x710, 0x120, 0x2, 0x6, 0x6, {r1, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x8, 0xc, 0xc1, 0xfffffff7, 0x100}}, &(0x7f0000001cc0)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001c00)={r0, 0x2, 0x8, 0x710, 0x120, 0x2, 0x6, 0x6, {r1, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x8, 0xc, 0xc1, 0xfffffff7, 0x100}}, &(0x7f0000001cc0)=0xb0) syz_emit_ethernet(0x101b, &(0x7f0000001d00)={@random="c12ac95c18c2", @random="80c9ea3b288e", @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "96d5", "a602e8", 0x5, "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"}}}}}, &(0x7f0000002d40)={0x0, 0x2, [0x28b, 0x948, 0xea4, 0x448]}) (async) syz_emit_ethernet(0x101b, &(0x7f0000001d00)={@random="c12ac95c18c2", @random="80c9ea3b288e", @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0x1, "96d5", "a602e8", 0x5, "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"}}}}}, &(0x7f0000002d40)={0x0, 0x2, [0x28b, 0x948, 0xea4, 0x448]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f0000002e80)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x40, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x28, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x6b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x4000040) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000002fc0)={0x1, 0x4}) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000002fc0)={0x1, 0x4}) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) recvfrom$l2tp6(r8, &(0x7f0000003000)=""/57, 0x39, 0x1, &(0x7f0000003040)={0xa, 0x0, 0x0, @dev}, 0x20) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003200)={&(0x7f0000003080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@union={0x9, 0x3, 0x0, 0x5, 0x0, 0x3ff, [{0x5, 0x1, 0x6}, {0x5, 0x3, 0xd8f}, {0xc, 0x3, 0x2}]}, @union={0x6, 0x4, 0x0, 0x5, 0x0, 0x9, [{0xc, 0x1, 0xffffffff}, {0xd, 0x5}, {0x1, 0x4, 0xffff9f4f}, {0x2, 0x4, 0x7fffffff}]}, @const={0x81, 0x0, 0x0, 0xa, 0x2}, @fwd={0x7}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f0000003140)=""/191, 0xa2, 0xbf, 0x1, 0xa0, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003240)=@bloom_filter={0x1e, 0xa, 0xfffffff8, 0xfffffff8, 0x2008, r5, 0x4, '\x00', 0x0, r11, 0x2, 0x4, 0x4, 0x4}, 0x50) pwritev(r7, &(0x7f00000036c0)=[{&(0x7f00000032c0)="37af697197c4cb0fe6aa21cae588c5388173b2ce5d91d517bbf0abc4c62adafefb45f6d6c67d3643bce7c4ee5060a8", 0x2f}, {&(0x7f0000003300)="56f57d80cf8eaacfb0a8042f33d49546782c9eee4ce3c0f4c1998e0497fd2e13a94aa6956d2ec260560b3fdaf9ab501402e70398099f5b852aec7c86ef704cb7f91d9cf1d07d9fb0d63bcc2aabb7a34820eedca666640ecd2a22e297389af08952bc44a90e6537c9d6fa1921fde3ffb78087bcf933973c5224e3b95c5b3a50030be81140927bdbb5073d39fd3e57940287ded820c33b552fa5f8c1137112cfd97e9203c9b2989d3c3d74c2bc6196c9cb64b837b02424b893739b51e7e13f2d3b32825fdc81bfdc7a5aec84b9fef850acd9a5aa", 0xd3}, {&(0x7f0000003400)="ce22cf620d75b2d221bc395a18204516f5aa45e994a785ec72bf479d35", 0x1d}, {&(0x7f0000003440)="5e810124ae040a3cb61ce7e8ec618c9d8ad8f50c8aef70b18ef14014426dcd92f27ba97db949ba885e3e1ba2acecb1a0460649b230477a9c8482eac1809bd47247dc50df489209f19109344883516839ba5d142d0bd73193c8ff5f6a18bbc629a99060592a463de7d6bae05cc00b0349ce2fcd3f893a6c89df665c9cfe7f7e0b9bc22b807c1f8041b15fe07e47b1476af3b794652458a114a2061ee6790331978370a1e0f22ad91ec82f12b2e783b173fd8edcf09270ad71e2f2d0a487d976c32aa89b9d829e86f690d2a969f595c7a6207da2e5077920e17a34837241ab9c9ff97d34423c3c33f7e12342", 0xeb}, {&(0x7f0000003540)="30fea43ca23eafbdd3e2175271cbc4e966937bc4b3b2f240682f66d9162cbf718c963fadfacaa309b72fd7c77ad014eac7641509b99ad35b0edd5381e955515e208bedecbac056cc79f137c8b0b36777fb984b67d02e3bf57ffb0f3651485355b390", 0x62}, {&(0x7f00000035c0)="16092391053787dffac6ba9525217f4b648db4dbed661ef4ddeae84970f8593865885e1bd32d4ee67f4a0defc43d8fc95c4320389b9c88b103326bae416bf1cd6b5a75cad155b447e4165151a3f01da411eb13c9eecb9b23bad84a81d04859ab6d0a9de17d66e91dee584de7c04128b1bf87cb0b9efb35ae154d953ead8d01a2b5be7f8185ad10596563292c04f845605b4262b470e4851d94b2d426785400bb6d", 0xa1}, {&(0x7f0000003680)}], 0x7, 0x80, 0xa) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x64, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x1b, 0x1}, {0x9, 0x1}, {0x48, 0x1}, {0x3}, {0x1}, {0x48, 0x1}, {0xc}, {0x5, 0x1}, {0x24, 0x1}, {0x60}, {0x5}, {0xc, 0x1}, {0x3}, {0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40c4) (async) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003800)={&(0x7f0000003780)={0x64, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x1b, 0x1}, {0x9, 0x1}, {0x48, 0x1}, {0x3}, {0x1}, {0x48, 0x1}, {0xc}, {0x5, 0x1}, {0x24, 0x1}, {0x60}, {0x5}, {0xc, 0x1}, {0x3}, {0x1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40c4) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20040011) 3.108942325s ago: executing program 2 (id=4713): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0xcb, &(0x7f00000001c0)=""/203, 0x40f00, 0x2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x258f5, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x7}, {0x5, 0x2, 0x2, 0x8}, {0x4, 0x4, 0xa}, {0x5, 0x1, 0x7, 0x5}, {0x1, 0x5, 0x4, 0x9}], 0x10, 0x6}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.events\x00', 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r2, r1, 0x18, 0x2000, 0x0, @value=r3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000001080), 0x0, 0x40000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f00000004c0)={0x67446698, 0x0, 0x3, 0x3, 0x2, "58220c999e726942e6a8f24cd31e14f90303be6faddb072516c411971b1244c2320da106cae9af2ec5108c582597687e1923a24323e2d5677a849cc4317d050c75d781bdfd25b83daa64a4f143524e478211da90e5a5c98b8f02a174d06717ef8b0aeec864fb6c37bccb011317635490387532bece49ad7670afa2ecb64986afdc7c853e038969747b644acbe2723b74a36b90e23f24ba3a7e62"}, 0xaa) 3.061583224s ago: executing program 3 (id=4714): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x34}}, 0xd9f1fec1318552c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) unshare(0x2c020400) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) unshare(0x40100) (async) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)={0x0, @aes128, 0x0, @desc3}) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r7, 0x5421, 0x110e22fff7) (async) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xa8001, 0x0) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x400}) 2.936575561s ago: executing program 1 (id=4715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/219, &(0x7f0000000040)=0xdb) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'dummy0\x00', &(0x7f0000000200)=@ethtool_cmd={0x4e, 0x200, 0x3, 0x1, 0xdb, 0x5, 0x9, 0x2, 0x2, 0x0, 0x7, 0x1, 0x5, 0x7, 0x0, 0xd, [0xe, 0x7fff]}}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000034c0)=""/5, 0x5}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 2.874282615s ago: executing program 2 (id=4716): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x490, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffe0}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x54, 0x2, [@TCA_ATM_HDR={0x21, 0x3, "6203455e663ca843f9df6aa72f0862e1fe2e59c2e0e9666a0a8bc6d139"}, @TCA_ATM_HDR={0x29, 0x3, "b27ce56d7bd66b577e2a00fa2a6f8cad70c37fd0b6897c949b3eae33effdff0994e913a6b5"}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x8, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x0, 0x1bc2, 0x2, 0x7, 0x5690bb00, 0x0, 0x1, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x40, 0x5, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x4, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000000, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x800000, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0x5, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x4, 0x2, 0x6, 0x7, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd13, 0x3, 0x7ff, 0x2, 0xfff, 0x9371, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xf, 0x2, 0x0, 0x4, 0x7, 0x7, 0xc0, 0xd1b7, 0x2, 0x8, 0xddf3, 0x8, 0x4, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x8, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x7, 0x9, 0x94, 0xe74, 0x80000000, 0x63, 0x8, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x2, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x2, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x6, 0x90, 0xfffffff7, 0x3, 0x8, 0x81, 0xff, 0x5, 0x9, 0x9, 0x8, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x0, 0x3, 0x7, 0xe755, 0x3, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x81, 0x100, 0x401, 0xc6]}]}}]}, 0x490}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) recvmsg(r3, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x7800, 0x1, 0x0, 0x3, {{0x7, 0x4, 0x1, 0x3a, 0x1c, 0x66, 0x0, 0x69, 0x4, 0x0, @local, @multicast1, {[@ssrr={0x89, 0x3, 0x5f}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="7f00424704000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 2.854210246s ago: executing program 1 (id=4717): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) (async) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/220, 0xdc}], 0x1}, 0x6}], 0x1, 0x40000001, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) splice(r2, &(0x7f0000000080)=0x8000000000000000, r0, &(0x7f00000000c0)=0x8fcd, 0x8000000000000000, 0x1) (async) mmap(&(0x7f0000003000/0xb000)=nil, 0xb000, 0x2000009, 0x4010, r0, 0x0) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'pimreg\x00', {0xfffff8fa}, 0x1}) 2.56538779s ago: executing program 2 (id=4718): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.96110521s ago: executing program 4 (id=4719): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x3, 0x0, 0x0, 0x2}, {0xfffffffffffffffb, 0x1, 0x1, 0x200000000000}, {0x0, 0x0, 0x6, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xefffffb, 0x6}}, 0xe8) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 1.945064755s ago: executing program 3 (id=4720): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400100001000e90500000000fedbdf2500000000", @ANYRES64, @ANYRESOCT=r0], 0x40}}, 0x28000000) 1.846181658s ago: executing program 4 (id=4721): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r1 = socket(0x2d, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$inet6(0xa, 0x805, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000001080)={0xfffffffe, 0x3, 0x2, 0x0, 0x1}, 0x8) 1.80293285s ago: executing program 3 (id=4722): bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r3, 0x0, 0x6}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(0x0, r4) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071105f0000000000c60000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES8=r3], &(0x7f00000001c0)='GPL\x00', 0x4, 0x127, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, r7, 0x8, &(0x7f0000000040)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8b4d}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) 380.744297ms ago: executing program 2 (id=4723): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb4}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="192c2fbd7000fcdbdf2515000000080014006e666310080001006e9d54"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000088000000000000000600000018110000", @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f0000000080)='GPL\x00', 0xb, 0xffd, &(0x7f0000001cc0)=""/4093, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 217.039122ms ago: executing program 2 (id=4724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x50, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@call={0x85, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000280)=""/7, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x4, 0x5, 0xa, 0x6}, {0x0, 0x5, 0xf}, {0x3, 0x2, 0x10, 0x9}, {0x4, 0x2, 0x7, 0xc}, {0x1, 0x4, 0x3, 0xa}, {0x3, 0x5, 0x6, 0x7}, {0x0, 0x1, 0xa, 0xb458246d291037dd}, {0x5, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x0, 0xb}]}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x5, 0x2, 0x7, 0x8, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x8}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r2, r3}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20080040}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x48}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x800) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r1, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000081}, 0x20000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x2, &(0x7f0000000980)=@raw=[@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], &(0x7f00000009c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x0, 0xfffffffa}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a80)=[{0x4, 0x1, 0x5, 0xc}, {0x4, 0x1, 0x10, 0xc}], 0x10, 0x3}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000940)='btrfs_cow_block\x00', r7, 0x0, 0x4}, 0x18) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r8) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000e40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1b4, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000001040)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xd4, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8, 0x3, 0x6, 0x0, {0x3, 0x11e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x5, 0x1}}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x8b, 0xfc, "e25627091ea96f6b7d5806b962ed960537eff99cd0359ba16a5963992df0b68b333ac9bbaa3c4a8cb611757f002daf6c8d127b2850688efaab9c988fe4cf792527f7dfe83217ea2667977f2185a159102a1a540e3a01d79aa74eb4b38c3ac61879dacb6d66a1b331ff8bfe0ddfe17bae76b0f6312d6520388093ee3fe8b4f7371d4da8d8357e32"}]]}, 0xd4}, 0x1, 0x0, 0x0, 0x10008000}, 0x4c0c1) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', r2}, 0x18) (async, rerun: 64) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x34, r12, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'syzkaller\x00'}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x850) (async) socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001280)={@rand_addr, @initdev, 0x0}, &(0x7f00000012c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001300)={0x0, @broadcast, @empty}, &(0x7f0000001340)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000014c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xdc, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10000004}, 0x10000) r15 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r15, &(0x7f0000001800)={&(0x7f0000001500)={0x2c, 0x0, r14, 0x29}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000001540)="b335ca7ef81bf1e1049b1d45c9fc513360f9546a5de9f9f236d5f169501bc557da91deeecd14e0caed4e44242d319b534b0f39c68fe1d18fd9c2c9d5712a2e0ce010ba36895f76771c5a7efe21066182d2cd7811fa6985cc51a9f0ed793f768f449c181eea080a1ebe6df7835956bff5dd659b02e2a57f8dd5a5e849f5c2c999014f512340858114bcc857f48fca", 0x8e}, {&(0x7f0000001600)="9fe530e115ef269f6ec998f838fbb91bfc5a84635f893b437d84bcb119054daf19c4474e73f71c4e168835d86e6515febe8d94ba3b82324ba00a3cd0c41ffb6e560879bbafdcfd8850dde523996eecf088f25433fc1c8921b1388ca01081c7ec27ef2c82fc693f9019e022fb2246d68f12ec0ea8057355997febbba7426d8e75006aaac8e18e8f7fe501f8fb3be411866c1eba6f1270179906a694870afd794aac94c1cf4c8d68fdd899e151d1091e425d39f2a61024c4a49f5b697bf1a26300c3628772b7d8d7ce4aa9a085e700b9230b2bd6", 0xd3}, {&(0x7f0000001700)="78420c835bbc9feda24ef9ea9910740da46bab7cdb77d46c50fcf940a3178e0ebdf63291ee1217352596de1ffde0076cd72af4c8132bfcebe61bd316f940efaa08dac3786a15c9e11b3745b528c15087011c882b6ba45ffb640b8dd0dc83f762167fba49ad4368f1589cf42ba6b571ebba8142d14da7d49c6b43ed044f5c7af577eb56b9b870e69b0e105d26dae56df45931ace013dde2048020b68e88f0f1700bb36a5d4cee0ddc17490185bb9c1e32f838263b79f7715ef157f6ef09e37564", 0xc0}], 0x3, 0x0, 0x0, 0x20000800}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x88, r4, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "1ee7"}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c6bcfbb2cbb0f1a98b5825b850"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bb68043e700c02f2a7ed176c2c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e6654ba094"}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) 102.998878ms ago: executing program 1 (id=4725): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) sendmsg$xdp(r4, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000000)=0xfffffffe, 0x4) bind$inet(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x8, 0x0, 0x0, 0x4000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xffffffffbffffffc}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 0s ago: executing program 2 (id=4726): syz_emit_ethernet(0x4a, &(0x7f0000000180)={@remote, @random="fe5d15d949c0", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x65, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x7, "0441b613a3"}, @timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@multicast1, 0x7}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) unshare(0x26020480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x4, 0xb0, &(0x7f0000000040)="f8f615de52fd0f8955adb1b5d4807c626a108feab95e7e2ac588d7d80dbe47f1e71206565d1ed73d4d97b075bdb42ffbcc49eded14f29352aaabb1a6262ca63ab4db98235545cd72624b3a1ec1447a1190347abd42a423027bfe9f161e5a9b9e680636d1f77bcf21d0cceab87e427984a62c60a73bd423bbe48680965f5a9a7d83383cc4f65cd9d834979a6d73ca680c91720fbf99fe1ee6d050c25a05ba44bd8d7dee97d5a8fbafb37bcbb2394c2776", 0x0, 0x1}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="05dff72e1800cd1338160000000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r2 = socket(0x10, 0x3, 0x0) unshare(0x52080800) accept4$netrom(r2, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x306, @local}, 0x2, {0x2, 0xe22, @private=0xa010100}, 'bond_slave_1\x00'}) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r0, 0x2f, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): nd7 [ 695.176081][T18058] bond7: (slave veth13): Enslaving as an active interface with a down link [ 695.354877][T18058] bond7 (unregistering): (slave veth13): Releasing active interface [ 695.375332][T18058] bond7 (unregistering): Released all slaves [ 695.491648][T17967] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.610594][T17967] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.640913][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 695.682757][T17967] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.820117][T17967] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 695.972525][T18064] infiniband !yz!: set active [ 695.977377][T18064] infiniband !yz!: added team_slave_0 [ 696.115777][T18064] RDS/IB: !yz!: added [ 696.124259][T18064] smc: adding ib device !yz! with port count 1 [ 696.132785][T18064] smc: ib device !yz! port 1 has no pnetid [ 696.245207][T17967] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.289709][T17967] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.319881][T17967] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.351603][T17967] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 696.478074][ T5841] Bluetooth: hci3: command tx timeout [ 696.493345][T17967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.519701][T17967] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.534938][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.542205][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.609823][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.617054][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.975236][T18109] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 696.985606][T18115] ip6_vti0 speed is unknown, defaulting to 1000 [ 697.228215][T17967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.350487][T17967] veth0_vlan: entered promiscuous mode [ 697.387172][T17967] veth1_vlan: entered promiscuous mode [ 697.626107][T17967] veth0_macvtap: entered promiscuous mode [ 697.662701][T17967] veth1_macvtap: entered promiscuous mode [ 697.680675][T18115] wg1 speed is unknown, defaulting to 1000 [ 697.731724][T17967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.762893][T17967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.799757][ T6015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.822714][ T6015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.846013][ T6015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.877094][ T6015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.020169][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.045461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.183127][ T8889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.199052][ T8889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.559559][ T5841] Bluetooth: hci3: command tx timeout [ 699.232448][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 699.245888][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 699.255275][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 699.263798][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 699.272845][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.631331][T18164] ip6_vti0 speed is unknown, defaulting to 1000 [ 700.639789][ T5834] Bluetooth: hci3: command tx timeout [ 700.783092][T18164] wg1 speed is unknown, defaulting to 1000 [ 700.803946][T18183] ip6_vti0 speed is unknown, defaulting to 1000 [ 701.149483][T18183] wg1 speed is unknown, defaulting to 1000 [ 701.158218][T18196] syzkaller1: entered promiscuous mode [ 701.163782][T18196] syzkaller1: entered allmulticast mode [ 701.190613][T18196] __nla_validate_parse: 6 callbacks suppressed [ 701.190634][T18196] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3078'. [ 701.218190][T18181] rdma_rxe: rxe_newlink: failed to add bond0 [ 701.286665][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 701.349102][T18164] chnl_net:caif_netlink_parms(): no params data found [ 701.359399][ T5834] Bluetooth: hci2: command tx timeout [ 701.455512][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3079'. [ 702.019763][T18212] netlink: 'syz.2.3083': attribute type 11 has an invalid length. [ 702.068861][T18217] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 702.499835][T18164] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.509351][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.520171][T18164] bridge_slave_0: entered allmulticast mode [ 702.529065][T18164] bridge_slave_0: entered promiscuous mode [ 702.566683][T18164] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.576953][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.592703][T18164] bridge_slave_1: entered allmulticast mode [ 702.604394][T18164] bridge_slave_1: entered promiscuous mode [ 702.709557][T18164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.749607][T18164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.760634][T18235] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 702.891110][T18164] team0: Port device team_slave_0 added [ 702.911613][T18164] team0: Port device team_slave_1 added [ 703.031801][T18164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.045042][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.084657][T18164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.109533][T18164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 703.127219][T18164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.171898][T18164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.260654][T18247] netlink: 'syz.0.3092': attribute type 1 has an invalid length. [ 703.368310][T18164] hsr_slave_0: entered promiscuous mode [ 703.375400][T18164] hsr_slave_1: entered promiscuous mode [ 703.383042][T18164] debugfs: 'hsr0' already exists in 'hsr' [ 703.389214][T18164] Cannot create hsr debugfs directory [ 703.438167][ T5834] Bluetooth: hci2: command tx timeout [ 703.519312][T18256] block nbd3: shutting down sockets [ 703.615212][T18259] netlink: 'syz.4.3096': attribute type 4 has an invalid length. [ 703.893332][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3102'. [ 703.911746][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3101'. [ 704.092360][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'. [ 704.463448][T18164] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 704.502045][T18307] ip6_vti0 speed is unknown, defaulting to 1000 [ 704.523499][T18164] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 704.549054][T18164] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 704.571550][T18164] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 704.896597][T18164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.975603][T18164] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.015501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.022794][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.098607][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.105840][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.211161][T18324] ip6_vti0 speed is unknown, defaulting to 1000 [ 705.224821][T18307] wg1 speed is unknown, defaulting to 1000 [ 705.517611][ T5834] Bluetooth: hci2: command tx timeout [ 705.682402][T18164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.793886][T18164] veth0_vlan: entered promiscuous mode [ 705.826728][T18164] veth1_vlan: entered promiscuous mode [ 705.874110][T18324] wg1 speed is unknown, defaulting to 1000 [ 705.902120][T18164] veth0_macvtap: entered promiscuous mode [ 705.914225][T18164] veth1_macvtap: entered promiscuous mode [ 705.953359][T18164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.990424][T18164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.014210][ T8907] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.034250][ T8907] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.092024][T18347] sctp: [Deprecated]: syz.4.3115 (pid 18347) Use of int in max_burst socket option deprecated. [ 706.092024][T18347] Use struct sctp_assoc_value instead [ 706.171954][T18349] x_tables: duplicate underflow at hook 3 [ 706.451039][ T8907] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.484960][ T8907] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.744612][T18352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3116'. [ 707.046968][ T8892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.056495][ T8892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.076851][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3118'. [ 707.235554][ T8892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.270864][ T8892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.488056][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3071'. [ 707.563213][T18366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3120'. [ 707.597628][ T5834] Bluetooth: hci2: command tx timeout [ 707.952068][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3124'. [ 707.965587][T18386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3124'. [ 707.978386][T18386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.230791][T18395] veth1_to_bond: entered allmulticast mode [ 708.344850][T18395] veth1_to_bond: left allmulticast mode [ 709.234868][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 709.246515][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 709.255382][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 709.266614][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 709.279114][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 709.342751][T18429] ip6_vti0 speed is unknown, defaulting to 1000 [ 709.618498][T18439] IPVS: set_ctl: invalid protocol: 60 100.1.1.1:20002 [ 709.658410][ T5829] bond0: (slave syz_tun): Releasing backup interface [ 709.673298][ T5829] syz_tun (unregistering): left promiscuous mode [ 709.680199][T18445] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3138'. [ 709.752883][T18443] bond1 (unregistering): Released all slaves [ 709.790536][T18436] netlink: 'syz.1.3138': attribute type 4 has an invalid length. [ 709.803564][T18429] wg1 speed is unknown, defaulting to 1000 [ 710.769279][T18485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3148'. [ 711.369048][ T5841] Bluetooth: hci0: command tx timeout [ 712.075774][T18491] delete_channel: no stack [ 712.593584][T18492] bridge1: entered allmulticast mode [ 712.676867][T18496] gretap1: entered promiscuous mode [ 712.872110][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3151'. [ 713.399176][T18526] netlink: 'syz.1.3156': attribute type 1 has an invalid length. [ 713.424976][T18429] chnl_net:caif_netlink_parms(): no params data found [ 713.444992][ T5834] Bluetooth: hci0: command tx timeout [ 713.780646][T18429] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.793437][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.801305][T18429] bridge_slave_0: entered allmulticast mode [ 713.809592][T18429] bridge_slave_0: entered promiscuous mode [ 713.830217][T18539] netlink: 'syz.0.3162': attribute type 1 has an invalid length. [ 713.850366][T18429] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.858167][T18429] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.865588][T18429] bridge_slave_1: entered allmulticast mode [ 713.873911][T18429] bridge_slave_1: entered promiscuous mode [ 714.014933][T18429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.050313][T18429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.109629][T18550] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3166'. [ 714.170337][T18552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3167'. [ 714.216699][T18429] team0: Port device team_slave_0 added [ 714.233543][T18552] tipc: Started in network mode [ 714.248652][T18552] tipc: Node identity ac14140f, cluster identity 4711 [ 714.259453][T18552] tipc: New replicast peer: 255.255.255.255 [ 714.269059][T18552] tipc: Enabled bearer , priority 10 [ 714.286972][T18429] team0: Port device team_slave_1 added [ 714.366654][T18429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.375676][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.406628][T18429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.424098][T18429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.432509][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.494736][T18429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.545622][T18567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3173'. [ 714.676013][T18429] hsr_slave_0: entered promiscuous mode [ 714.692522][T18429] hsr_slave_1: entered promiscuous mode [ 714.722610][T18429] debugfs: 'hsr0' already exists in 'hsr' [ 714.770512][T18429] Cannot create hsr debugfs directory [ 714.820467][T18583] xt_connbytes: Forcing CT accounting to be enabled [ 714.851519][T18583] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3175'. [ 715.035361][T18577] ip6_vti0 speed is unknown, defaulting to 1000 [ 715.277352][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3180'. [ 715.301374][T18594] nbd: must specify at least one socket [ 715.314597][T18596] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 715.317168][T18597] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 715.325181][T18596] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3181'. [ 715.388185][T18597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3181'. [ 715.399625][T11399] tipc: Node number set to 2886997007 [ 715.405418][T18596] team0: entered promiscuous mode [ 715.432575][T18596] team_slave_0: entered promiscuous mode [ 715.453076][T18596] team_slave_1: entered promiscuous mode [ 715.472304][T18596] bridge0: port 3(team0) entered blocking state [ 715.482086][T18596] bridge0: port 3(team0) entered disabled state [ 715.498366][T18596] team0: entered allmulticast mode [ 715.508811][T18596] team_slave_0: entered allmulticast mode [ 715.524962][T18596] team_slave_1: entered allmulticast mode [ 715.533843][ T5834] Bluetooth: hci0: command tx timeout [ 715.554374][T18596] bridge0: port 3(team0) entered blocking state [ 715.560878][T18596] bridge0: port 3(team0) entered forwarding state [ 715.596151][T18429] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.620829][T18429] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.710390][T18589] netlink: 'syz.1.3178': attribute type 39 has an invalid length. [ 715.786963][T18589] hsr_slave_1 (unregistering): left promiscuous mode [ 715.835422][T18577] wg1 speed is unknown, defaulting to 1000 [ 715.835613][T18569] ip6_vti0 speed is unknown, defaulting to 1000 [ 715.854859][T18429] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.866010][T18429] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 715.985886][T18429] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.040543][T18429] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.178858][T18429] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 716.211505][T18429] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 716.619816][T18616] bridge0: entered promiscuous mode [ 716.637122][T18618] netlink: 'syz.1.3186': attribute type 11 has an invalid length. [ 716.660540][T18618] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.3186'. [ 716.661241][T18616] bridge0: port 3(macvtap1) entered blocking state [ 716.707677][T18616] bridge0: port 3(macvtap1) entered disabled state [ 716.787853][T18616] macvtap1: entered allmulticast mode [ 716.793462][T18616] bridge0: entered allmulticast mode [ 716.807223][T18616] macvtap1: left allmulticast mode [ 716.828151][T18616] bridge0: left allmulticast mode [ 716.935614][T18616] bridge0: left promiscuous mode [ 717.237355][T18569] wg1 speed is unknown, defaulting to 1000 [ 717.344284][T18429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 717.368511][T18640] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3190'. [ 717.458246][T18429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 717.498547][T18429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 717.528968][T18429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 717.597972][ T5834] Bluetooth: hci0: command tx timeout [ 717.852694][T18429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.976764][T18429] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.045009][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.052322][ T6015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.186094][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.193359][ T6015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.049837][T18684] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 719.120105][T18429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.189971][T18686] syzkaller0: entered promiscuous mode [ 719.208266][T18686] syzkaller0: entered allmulticast mode [ 719.275905][T18688] netlink: 'syz.0.3201': attribute type 13 has an invalid length. [ 719.535302][T18429] veth0_vlan: entered promiscuous mode [ 719.566804][T18429] veth1_vlan: entered promiscuous mode [ 719.588629][T18694] __nla_validate_parse: 1 callbacks suppressed [ 719.588649][T18694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'. [ 719.768934][T18429] veth0_macvtap: entered promiscuous mode [ 719.795121][T18429] veth1_macvtap: entered promiscuous mode [ 719.875830][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3204'. [ 719.893819][T18429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.942445][T18701] syzkaller0: entered promiscuous mode [ 719.956841][T18701] syzkaller0: entered allmulticast mode [ 719.971202][T18429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.980583][T18709] team0: Caught tx_queue_len zero misconfig [ 720.012693][T18709] netlink: 'syz.0.3207': attribute type 1 has an invalid length. [ 720.032159][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 720.049073][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3204'. [ 720.149511][ T3433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.354664][T18725] xt_TCPMSS: Only works on TCP SYN packets [ 720.445235][ T3433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.465206][ T3433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.543685][T18722] tipc: Started in network mode [ 720.550538][T18722] tipc: Node identity 72823233d10b, cluster identity 4711 [ 720.561053][T18722] tipc: Enabled bearer , priority 0 [ 720.585540][ T3433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.676548][T18726] syzkaller0: entered promiscuous mode [ 720.685063][T18726] syzkaller0: entered allmulticast mode [ 720.793361][T18720] tipc: Resetting bearer [ 720.830796][T18720] tipc: Disabling bearer [ 720.927701][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.944012][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.965417][T18747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.068128][ T6015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.093804][ T6015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.140302][T18761] netlink: 'syz.0.3217': attribute type 3 has an invalid length. [ 721.170631][T18763] netlink: 'syz.4.3218': attribute type 1 has an invalid length. [ 721.202969][T18761] netlink: 'syz.0.3217': attribute type 3 has an invalid length. [ 721.306096][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'. [ 721.338784][T18767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3219'. [ 721.405688][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3219'. [ 721.649529][T18777] tipc: Enabling of bearer rejected, failed to enable media [ 721.820740][T18789] syzkaller1: entered promiscuous mode [ 721.826385][T18789] syzkaller1: entered allmulticast mode [ 721.915958][T18797] syzkaller1: entered promiscuous mode [ 721.950439][T18797] syzkaller1: entered allmulticast mode [ 722.066593][T18809] openvswitch: netlink: Key type 108 is out of range max 32 [ 722.193901][T18813] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 722.224636][T18813] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3229'. [ 722.235366][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 722.291092][T18806] macsec1: entered promiscuous mode [ 722.309087][T18806] macsec1: entered allmulticast mode [ 722.513946][T18829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3234'. [ 722.551922][T18829] netlink: 'syz.4.3234': attribute type 13 has an invalid length. [ 722.573772][T18829] netlink: 'syz.4.3234': attribute type 12 has an invalid length. [ 722.772026][T18849] tipc: Started in network mode [ 722.785127][T18849] tipc: Node identity 9608e15940c7, cluster identity 4711 [ 722.806764][T18849] tipc: Enabled bearer , priority 0 [ 722.824606][T18849] syzkaller0: entered promiscuous mode [ 722.847623][T18849] syzkaller0: entered allmulticast mode [ 722.976062][T18849] tipc: Resetting bearer [ 723.003846][T18848] tipc: Resetting bearer [ 723.043514][T18848] tipc: Disabling bearer [ 723.244442][ T10] hid-generic 0005:0002:5508.0001: item fetching failed at offset 3/4 [ 723.255149][ T10] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22 [ 723.733942][T18904] delete_channel: no stack [ 723.745418][ T10] IPVS: starting estimator thread 0... [ 723.755599][T18899] delete_channel: no stack [ 723.762410][T18904] delete_channel: no stack [ 723.838120][T18913] IPVS: using max 26 ests per chain, 62400 per kthread [ 724.486361][T18944] netlink: 'syz.3.3259': attribute type 33 has an invalid length. [ 724.711015][T18948] ip6_vti0 speed is unknown, defaulting to 1000 [ 724.855347][T18956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 725.184107][T18978] netlink: 'syz.2.3270': attribute type 1 has an invalid length. [ 725.209909][T18948] wg1 speed is unknown, defaulting to 1000 [ 725.295787][T18978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 725.416120][T18983] bond1: (slave gretap1): making interface the new active one [ 725.435031][T18983] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 725.692708][T18978] ip6_vti0 speed is unknown, defaulting to 1000 [ 725.695351][T19002] syzkaller0: entered promiscuous mode [ 725.706824][T19002] syzkaller0: entered allmulticast mode [ 725.736425][T19003] tipc: Started in network mode [ 725.746207][T19003] tipc: Node identity 6e02652e3bff, cluster identity 4711 [ 725.773793][T19003] tipc: Enabled bearer , priority 0 [ 725.795554][T19010] syzkaller0: entered promiscuous mode [ 725.815437][T19010] syzkaller0: entered allmulticast mode [ 725.900664][T19003] tipc: Resetting bearer [ 725.940011][T19001] tipc: Resetting bearer [ 726.010252][T19001] tipc: Disabling bearer [ 726.041972][T19016] __nla_validate_parse: 5 callbacks suppressed [ 726.041992][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3279'. [ 726.289215][T19023] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3281'. [ 726.298607][T19023] netlink: 'syz.1.3281': attribute type 1 has an invalid length. [ 726.322136][T19021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3280'. [ 726.343371][T18978] wg1 speed is unknown, defaulting to 1000 [ 726.382366][T19018] ip6_vti0 speed is unknown, defaulting to 1000 [ 726.385257][T19025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'. [ 726.741585][T19039] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 726.808118][T19039] syzkaller0: create flow: hash 4099277341 index 1 [ 726.998404][ T8904] syzkaller0: tun_net_xmit 76 [ 727.005792][ T8904] syzkaller0: tun_net_xmit 48 [ 727.048243][T19043] syzkaller0: delete flow: hash 4099277341 index 1 [ 728.531685][T19018] wg1 speed is unknown, defaulting to 1000 [ 728.778669][T19052] netlink: 'syz.1.3287': attribute type 1 has an invalid length. [ 728.806703][T19055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3288'. [ 728.818608][T19055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'. [ 728.895329][T19057] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3287'. [ 728.984264][T19056] bond1: entered promiscuous mode [ 728.990078][T19056] bond1: entered allmulticast mode [ 729.019107][T19056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 729.202531][T19067] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3290'. [ 729.228463][T19067] netlink: 'syz.4.3290': attribute type 1 has an invalid length. [ 729.236337][T19067] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3290'. [ 729.251798][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 729.353995][T19067] xt_connbytes: Forcing CT accounting to be enabled [ 729.435925][T19071] netlink: 'syz.1.3292': attribute type 10 has an invalid length. [ 729.477849][T19071] batman_adv: batadv0: Adding interface: virt_wifi0 [ 729.490046][T19071] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.533393][T19071] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 729.964024][T19080] ip6_vti0 speed is unknown, defaulting to 1000 [ 730.784139][T19119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.950833][T19079] ip6_vti0 speed is unknown, defaulting to 1000 [ 731.022460][T19080] wg1 speed is unknown, defaulting to 1000 [ 731.174830][T19141] IPv6: addrconf: prefix option has invalid lifetime [ 731.653366][T19160] netlink: 'syz.2.3316': attribute type 4 has an invalid length. [ 731.727186][T19160] __nla_validate_parse: 3 callbacks suppressed [ 731.727206][T19160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3316'. [ 731.768824][T19160] nbd: couldn't find a device at index 0 [ 731.849136][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3319'. [ 732.074449][T19079] wg1 speed is unknown, defaulting to 1000 [ 732.212608][T19188] netlink: 'syz.3.3322': attribute type 13 has an invalid length. [ 732.582504][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 732.592496][T19194] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3323'. [ 732.741256][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3326'. [ 732.972227][T19217] lo: Caught tx_queue_len zero misconfig [ 733.026560][T19222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 733.115217][T19221] bridge_slave_0: left allmulticast mode [ 733.148917][T19221] bridge_slave_0: left promiscuous mode [ 733.168239][T19221] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.239404][T19221] bridge_slave_1: left allmulticast mode [ 733.245816][T19221] bridge_slave_1: left promiscuous mode [ 733.251992][T19221] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.296409][T19221] bond0: (slave bond_slave_0): Releasing backup interface [ 733.400165][T19221] bond0: (slave bond_slave_1): Releasing backup interface [ 733.459266][T19221] team0: Port device team_slave_0 removed [ 733.475114][T19221] team0: Port device team_slave_1 removed [ 733.483119][T19221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.494062][T19221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.512008][T19221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.522642][T19221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.561446][T19221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 733.676593][T19232] bridge1: entered allmulticast mode [ 733.791025][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 733.873314][T19241] bond0: Caught tx_queue_len zero misconfig [ 733.917233][T19248] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 733.969056][T19252] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3339'. [ 734.100514][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3337'. [ 734.130172][T19255] xt_CT: No such helper "netbios-ns" [ 734.297246][T19261] x_tables: duplicate underflow at hook 2 [ 734.449393][T19265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3340'. [ 734.485517][T19265] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 734.577733][T19253] syzkaller1: entered promiscuous mode [ 734.583276][T19253] syzkaller1: entered allmulticast mode [ 734.647163][T19252] ip6_vti0 speed is unknown, defaulting to 1000 [ 735.288456][T19252] wg1 speed is unknown, defaulting to 1000 [ 735.467320][T19302] netlink: 'syz.4.3349': attribute type 1 has an invalid length. [ 735.542702][T19302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.686753][T19309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.705380][T19320] netlink: 'syz.3.3354': attribute type 21 has an invalid length. [ 735.735195][T19309] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 735.749159][T19309] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 735.779634][T19322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3354'. [ 735.914665][T19302] veth3: entered promiscuous mode [ 735.942550][T19302] bond2: (slave veth3): Enslaving as an active interface with a down link [ 735.974662][T19318] dvmrp0: entered allmulticast mode [ 736.792694][T19345] dummy0: entered promiscuous mode [ 736.844627][T19345] bond0: entered promiscuous mode [ 736.861852][T19345] bond_slave_0: entered promiscuous mode [ 736.878195][T19345] bond_slave_1: entered promiscuous mode [ 736.956837][T19345] debugfs: 'hsr1' already exists in 'hsr' [ 737.017960][T19345] Cannot create hsr debugfs directory [ 737.036302][T19345] hsr1: entered allmulticast mode [ 737.045012][T19345] dummy0: entered allmulticast mode [ 737.050877][T19345] bond0: entered allmulticast mode [ 737.056465][T19345] bond_slave_0: entered allmulticast mode [ 737.064197][T19345] bond_slave_1: entered allmulticast mode [ 737.074469][T19348] __nla_validate_parse: 2 callbacks suppressed [ 737.074489][T19348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3357'. [ 737.600537][T19370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 737.682904][T19370] bridge_slave_1: left allmulticast mode [ 737.698136][T19370] bridge_slave_1: left promiscuous mode [ 737.704041][T19370] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.739628][T19370] bridge_slave_0: left allmulticast mode [ 737.755581][T19370] bridge_slave_0: left promiscuous mode [ 737.763611][T19370] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.935994][T19373] netlink: 'syz.2.3365': attribute type 3 has an invalid length. [ 738.293535][T19396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 738.396042][T19404] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 738.409730][T19404] netlink: 'syz.3.3372': attribute type 4 has an invalid length. [ 738.418278][T19404] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3372'. [ 738.435736][T19394] syzkaller0: entered promiscuous mode [ 738.452122][T19394] syzkaller0: entered allmulticast mode [ 738.569679][T19409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3375'. [ 738.593996][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3375'. [ 738.689649][T19415] syz.3.3376 uses old SIOCAX25GETINFO [ 738.725402][T19419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'. [ 738.994248][T19431] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3379'. [ 739.158968][T19438] netlink: 'syz.4.3380': attribute type 33 has an invalid length. [ 739.166858][T19438] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3380'. [ 739.300987][T19431] IPv6: sit1: Disabled Multicast RS [ 739.307184][T19431] sit1: entered allmulticast mode [ 739.449392][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3384'. [ 740.984520][T19452] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3384'. [ 741.017549][T19455] tipc: Enabling of bearer rejected, failed to enable media [ 741.784890][T19465] bond1: left promiscuous mode [ 741.792529][T19465] bond1: left allmulticast mode [ 741.799994][ T8904] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.833003][ T8904] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.849346][ T8904] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.859232][ T8904] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.941317][T19477] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.461222][T19503] tipc: Enabled bearer , priority 0 [ 742.497672][T19477] wg1 speed is unknown, defaulting to 1000 [ 742.505211][T19468] ip6_vti0 speed is unknown, defaulting to 1000 [ 742.602854][T19503] tipc: Resetting bearer [ 742.862904][T19502] tipc: Disabling bearer [ 742.964906][T19519] xt_policy: output policy not valid in PREROUTING and INPUT [ 743.153356][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3400'. [ 743.173463][T19527] vlan2: entered promiscuous mode [ 743.187848][T19527] bond0: entered promiscuous mode [ 743.446493][T19468] wg1 speed is unknown, defaulting to 1000 [ 743.622811][T19541] xt_hashlimit: max too large, truncated to 1048576 [ 743.846883][T19549] Bluetooth: MGMT ver 1.23 [ 744.508248][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3403'. [ 744.818541][T19567] netlink: 'syz.1.3407': attribute type 9 has an invalid length. [ 745.049958][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3410'. [ 745.240940][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 745.265022][T19581] : renamed from bond_slave_0 (while UP) [ 745.830638][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 745.843256][T19601] veth0_to_bridge: entered promiscuous mode [ 745.886531][T19592] veth0_to_bridge: left promiscuous mode [ 746.161911][T19609] netlink: 'syz.3.3417': attribute type 1 has an invalid length. [ 746.279518][T19616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3422'. [ 746.291001][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 746.338460][T19609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 746.363131][T19612] bond1: (slave gretap1): making interface the new active one [ 746.374096][T19612] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 746.663386][T19632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3425'. [ 746.731034][T19620] bond1 (unregistering): (slave gretap1): Releasing active interface [ 746.752621][T19620] bond1 (unregistering): Released all slaves [ 747.081770][T19642] batman_adv: batadv0: Adding interface: dummy0 [ 747.096613][T19644] sctp: [Deprecated]: syz.4.3428 (pid 19644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.096613][T19644] Use struct sctp_sack_info instead [ 747.117944][T19642] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.185993][T19644] sctp: [Deprecated]: syz.4.3428 (pid 19644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 747.185993][T19644] Use struct sctp_sack_info instead [ 747.194029][T19642] batman_adv: batadv0: Interface activated: dummy0 [ 747.434502][T19666] tipc: Started in network mode [ 747.464651][T19666] tipc: Node identity 0e441ca6223a, cluster identity 4711 [ 747.529378][T19666] tipc: Enabled bearer , priority 0 [ 747.536828][T19667] syzkaller0: entered promiscuous mode [ 747.544440][T19667] syzkaller0: entered allmulticast mode [ 747.669863][T19666] netlink: 62 bytes leftover after parsing attributes in process `syz.1.3431'. [ 747.687634][T19666] tipc: Resetting bearer [ 747.717507][T19666] netlink: 'syz.1.3431': attribute type 5 has an invalid length. [ 747.731515][T19662] tipc: Resetting bearer [ 747.752379][T19662] tipc: Disabling bearer [ 748.254365][T19708] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 748.335724][T19708] netlink: 14343 bytes leftover after parsing attributes in process `syz.1.3444'. [ 749.058281][T19729] netlink: 'syz.3.3448': attribute type 1 has an invalid length. [ 749.089789][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 749.129187][T19729] nbd: error processing sock list [ 749.223283][T19727] erspan0: entered promiscuous mode [ 749.254442][T19727] macvtap1: entered promiscuous mode [ 749.292577][T19727] macvtap1: entered allmulticast mode [ 749.326330][T19727] erspan0: entered allmulticast mode [ 749.385611][T19733] macvtap1: left promiscuous mode [ 749.392967][T19733] macvtap1: left allmulticast mode [ 749.400153][T19733] erspan0: left allmulticast mode [ 749.649851][T19741] netlink: 'syz.0.3451': attribute type 3 has an invalid length. [ 749.794375][T19746] ip6_vti0 speed is unknown, defaulting to 1000 [ 750.093116][T19768] netlink: 'syz.2.3457': attribute type 13 has an invalid length. [ 750.377455][T19768] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.385359][T19768] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.629638][T19768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.661045][T19768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.067336][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 751.192573][T19771] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 751.195624][T19762] ip6_vti0 speed is unknown, defaulting to 1000 [ 751.195659][T19746] wg1 speed is unknown, defaulting to 1000 [ 751.318154][ T8902] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.339854][T19793] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3460'. [ 751.401380][ T8902] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.415492][ T8902] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.427694][T19797] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3460'. [ 751.437044][ T8902] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.885443][T19762] wg1 speed is unknown, defaulting to 1000 [ 752.387470][T19829] bond0: (slave rose0): Error: Device can not be enslaved while up [ 752.654016][T19836] netlink: 'syz.2.3469': attribute type 4 has an invalid length. [ 753.198534][T19854] netlink: 'syz.2.3475': attribute type 4 has an invalid length. [ 753.219263][T19854] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3475'. [ 753.253393][T19857] nftables ruleset with unbound chain [ 753.260349][T19854] .`: renamed from bond0 [ 753.346169][T19856] can: request_module (can-proto-0) failed. [ 753.414154][T19861] netlink: 'syz.2.3477': attribute type 33 has an invalid length. [ 753.425615][T19861] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3477'. [ 753.436008][T19861] `: renamed from team0 [ 753.531368][T19865] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 753.774940][T19877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3480'. [ 753.785823][T19877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3480'. [ 754.222760][T19893] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3486'. [ 754.238607][T19884] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.270600][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 754.302525][T19888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3483'. [ 754.414835][T19884] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.512425][T19904] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 754.551730][T19884] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.585084][T19906] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 754.641472][T19904] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.655905][T19910] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 754.676985][T19904] bond0: (slave team0): Enslaving as an active interface with an up link [ 754.746399][T19884] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.963777][ T8908] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.004556][ T8908] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.034373][ T8908] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.056389][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3496'. [ 755.107726][T19927] syzkaller0: entered promiscuous mode [ 755.120511][T19927] syzkaller0: entered allmulticast mode [ 755.229423][ T8908] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.287746][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 755.474172][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3500'. [ 755.504289][T19934] dummy0 (unregistering): left promiscuous mode [ 755.598529][T19947] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3502'. [ 755.879432][T19956] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.959526][T19963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3506'. [ 756.358006][T19956] wg1 speed is unknown, defaulting to 1000 [ 756.537134][T19977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.845308][T20003] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 758.078541][T20025] pim6reg: entered allmulticast mode [ 758.471423][T20046] netlink: 'syz.2.3529': attribute type 30 has an invalid length. [ 758.542038][T20046] __nla_validate_parse: 1 callbacks suppressed [ 758.542059][T20046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 758.562642][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 758.618990][T20046] xt_cgroup: path and classid specified [ 758.769381][T20063] ip6_vti0 speed is unknown, defaulting to 1000 [ 758.865409][T20060] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 759.239289][T20069] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 759.269987][T20063] wg1 speed is unknown, defaulting to 1000 [ 759.293948][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3533'. [ 759.529528][T20075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 759.546337][T20076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'. [ 759.770565][T20081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3537'. [ 760.150306][T20087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.198466][T20089] tipc: Enabled bearer , priority 0 [ 760.233658][T20091] syzkaller0: entered promiscuous mode [ 760.248257][T20091] syzkaller0: entered allmulticast mode [ 760.276934][T20089] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 760.411059][T20089] tipc: Resetting bearer [ 760.580071][T20088] tipc: Resetting bearer [ 760.627323][T20097] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3542'. [ 760.649397][T20099] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3541'. [ 760.824939][T20088] tipc: Disabling bearer [ 761.443105][T20102] syzkaller1: entered promiscuous mode [ 761.463351][T20102] syzkaller1: entered allmulticast mode [ 761.490316][T20102] syzkaller1: left promiscuous mode [ 761.496428][T20102] syzkaller1: left allmulticast mode [ 761.612782][T20114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 761.670220][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3543'. [ 761.816285][T20125] netlink: 'syz.1.3550': attribute type 7 has an invalid length. [ 761.825327][T20124] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 761.930857][T20124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 761.945194][T20132] erspan0: entered allmulticast mode [ 762.029113][T20132] bond1: (slave erspan0): making interface the new active one [ 762.064682][T20132] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 762.115161][T20124] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 762.173780][T20140] syzkaller1: entered promiscuous mode [ 762.186754][T20140] syzkaller1: entered allmulticast mode [ 762.532865][T20166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.813353][T20185] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 762.887968][T20189] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 763.518700][T20229] netlink: 'syz.3.3576': attribute type 2 has an invalid length. [ 763.563741][T20231] __nla_validate_parse: 6 callbacks suppressed [ 763.563762][T20231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 763.616997][T20231] sit0: Caught tx_queue_len zero misconfig [ 764.121213][T20252] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3585'. [ 764.382473][T20231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3578'. [ 765.363003][T20289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'. [ 765.455399][T20288] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 765.472478][T20278] netlink: 'syz.1.3592': attribute type 11 has an invalid length. [ 765.506381][T20278] netlink: 'syz.1.3592': attribute type 11 has an invalid length. [ 765.610849][T20288] bond2: entered promiscuous mode [ 765.616342][T20288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 765.627522][T20278] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3592'. [ 765.969427][T20312] netlink: 'syz.4.3598': attribute type 13 has an invalid length. [ 766.400429][ T5841] Bluetooth: hci2: command 0x0405 tx timeout [ 766.435760][T20327] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 766.468426][T20326] syzkaller0: entered promiscuous mode [ 766.474055][T20326] syzkaller0: entered allmulticast mode [ 766.616935][T20326] tipc: Enabled bearer , priority 0 [ 766.634069][T20326] tipc: Enabling of bearer rejected, already enabled [ 766.637693][T20331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3604'. [ 766.659600][T20324] tipc: Resetting bearer [ 766.696709][T20324] tipc: Disabling bearer [ 766.743776][T20331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3604'. [ 766.774975][T20331] block nbd3: Unsupported socket: should be TCP or UNIX. [ 766.992349][T20342] syzkaller0: entered promiscuous mode [ 767.013251][T20342] syzkaller0: entered allmulticast mode [ 767.642232][T20357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 767.695486][T20359] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3610'. [ 767.941027][T20363] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3612'. [ 769.261361][T20369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3615'. [ 769.413937][T20376] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3618'. [ 769.477112][T20373] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3614'. [ 769.523592][T20373] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3614'. [ 769.539633][T20391] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 769.598606][T20391] netlink: 'syz.1.3619': attribute type 10 has an invalid length. [ 769.606572][T20391] mac80211_hwsim hwsim49 wlan1: left allmulticast mode [ 769.629588][T20391] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 769.646780][T20391] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 769.716592][T20398] IPVS: set_ctl: invalid protocol: 8 172.20.20.45:20000 [ 769.751707][T20392] ip6_vti0 speed is unknown, defaulting to 1000 [ 769.875445][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 770.130092][T20392] wg1 speed is unknown, defaulting to 1000 [ 770.402069][T20431] netlink: 'syz.3.3629': attribute type 5 has an invalid length. [ 770.819327][T20445] tipc: Enabled bearer , priority 0 [ 770.894613][T20447] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 770.903013][T20447] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 770.914659][T20447] tipc: Resetting bearer [ 771.061229][ T8907] tipc: Resetting bearer [ 771.266896][T20461] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3638'. [ 771.509921][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3641'. [ 771.569088][T20465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3636'. [ 771.589668][T20465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.974257][T11399] tipc: Node number set to 746462374 [ 772.191233][T20509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3648'. [ 772.215174][T20506] bond2: option tlb_dynamic_lb: invalid value (163) [ 772.225361][T20506] bond2 (unregistering): Released all slaves [ 772.304460][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3649'. [ 772.373815][ T8889] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.407658][ T8889] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.418397][ T8889] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.427153][ T8889] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.540872][T20524] veth1_macvtap: left promiscuous mode [ 772.857006][T20529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 772.882073][T20529] batman_adv: batadv0: Adding interface: gretap1 [ 772.889012][T20529] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.921265][T20529] batman_adv: batadv0: Interface activated: gretap1 [ 773.030309][T20535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 773.422306][T20558] ip6erspan0: entered allmulticast mode [ 773.775981][T20574] ip6_vti0 speed is unknown, defaulting to 1000 [ 773.822583][T20570] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 773.850427][T20570] bond3 (unregistering): Released all slaves [ 774.493874][T20574] wg1 speed is unknown, defaulting to 1000 [ 774.506425][T20599] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 774.517144][T20599] __nla_validate_parse: 7 callbacks suppressed [ 774.517162][T20599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3670'. [ 774.649633][T20605] delete_channel: no stack [ 774.775473][T20610] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3671'. [ 774.891577][T20602] bond2: option arp_validate: invalid value (18446744073491447809) [ 774.920622][T20602] bond2 (unregistering): Released all slaves [ 775.347999][T20642] openvswitch: netlink: Message has 592 unknown bytes. [ 775.377882][T20642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.623720][T20643] tunl0: Caught tx_queue_len zero misconfig [ 775.808516][T20661] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 775.838096][T20661] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 775.890695][T20661] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 775.990106][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3685'. [ 776.028085][T20670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.298281][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'. [ 776.354538][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3688'. [ 776.381543][T20679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3688'. [ 776.416469][T20679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3688'. [ 776.435840][T20679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3688'. [ 776.541746][T20680] macsec0: entered promiscuous mode [ 776.568427][T20680] macsec0: entered allmulticast mode [ 776.591983][T20682] syzkaller0: entered promiscuous mode [ 776.634018][T20682] syzkaller0: entered allmulticast mode [ 776.921624][T20691] netlink: zone id is out of range [ 776.926814][T20691] netlink: zone id is out of range [ 776.948323][T20691] netlink: zone id is out of range [ 776.953520][T20691] netlink: zone id is out of range [ 776.982123][T20691] netlink: zone id is out of range [ 776.987852][T20691] netlink: zone id is out of range [ 776.994126][T20691] netlink: zone id is out of range [ 776.999553][T20691] netlink: zone id is out of range [ 777.034441][T20693] ip6_vti0 speed is unknown, defaulting to 1000 [ 777.542089][T20693] wg1 speed is unknown, defaulting to 1000 [ 777.711954][T20725] syz_tun: entered allmulticast mode [ 777.910585][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3703'. [ 778.017871][T20731] tc_dump_action: action bad kind [ 778.055568][T20738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3704'. [ 778.258671][T20735] batman_adv: batadv0: Interface deactivated: dummy0 [ 778.304110][T20751] netlink: 'syz.0.3707': attribute type 1 has an invalid length. [ 778.374164][T20735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.389376][T20735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.563497][ T8906] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.603232][ T8906] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.635756][ T8906] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.679163][ T8906] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.038150][ T5841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 779.179853][T20778] Bluetooth: MGMT ver 1.23 [ 779.725395][T20781] netlink: 'syz.2.3716': attribute type 10 has an invalid length. [ 779.776212][T20776] __nla_validate_parse: 3 callbacks suppressed [ 779.776232][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 779.795285][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 779.830994][T20781] hsr0: entered promiscuous mode [ 779.847753][T20781] .`: (slave hsr0): The slave device specified does not support setting the MAC address [ 779.861060][T20781] .`: (slave hsr0): Error -95 calling set_mac_address [ 780.026630][T20789] mac80211_hwsim hwsim48 ªªªªª;: renamed from wlan0 [ 780.212444][T20799] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3725'. [ 780.246159][T20804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'. [ 780.294262][T20802] ip6_vti0 speed is unknown, defaulting to 1000 [ 780.356673][T20812] tipc: Enabled bearer , priority 0 [ 780.370031][T20812] syzkaller0: entered promiscuous mode [ 780.386917][T20812] syzkaller0: entered allmulticast mode [ 780.421986][T20812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3726'. [ 780.440336][T20812] tipc: Resetting bearer [ 780.718904][T20812] tipc: Disabling bearer [ 780.750501][T20818] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 780.759626][T20818] bridge4: entered allmulticast mode [ 780.774623][T20802] wg1 speed is unknown, defaulting to 1000 [ 780.782171][T20818] netlink: 652 bytes leftover after parsing attributes in process `syz.4.3729'. [ 780.902722][T20825] netlink: 'syz.2.3731': attribute type 2 has an invalid length. [ 780.912243][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3731'. [ 781.269099][T20837] ip6_vti0 speed is unknown, defaulting to 1000 [ 781.361869][T20842] syzkaller0: entered promiscuous mode [ 781.368178][T20842] syzkaller0: entered allmulticast mode [ 781.631087][T11401] IPVS: starting estimator thread 0... [ 781.737936][T20847] IPVS: using max 26 ests per chain, 62400 per kthread [ 781.830021][T20839] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.329062][T20839] wg1 speed is unknown, defaulting to 1000 [ 782.337995][T20837] wg1 speed is unknown, defaulting to 1000 [ 782.366109][T20866] netlink: 'syz.4.3740': attribute type 6 has an invalid length. [ 782.387468][T20866] tipc: Enabled bearer , priority 0 [ 782.408707][T20866] syzkaller0: entered promiscuous mode [ 782.414237][T20866] syzkaller0: entered allmulticast mode [ 782.856014][T20863] ip6_vti0 speed is unknown, defaulting to 1000 [ 782.936432][T20859] tipc: Resetting bearer [ 782.986066][T20859] tipc: Disabling bearer [ 783.445700][T20863] wg1 speed is unknown, defaulting to 1000 [ 785.278969][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 805.758504][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 815.998317][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 878.064206][T20886] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 878.089381][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3744'. [ 878.103013][T20885] batman_adv: batadv0: Adding interface: vlan2 [ 878.109627][T20885] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.144897][T20885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.156636][T20885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.168305][T20885] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 878.181854][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 878.192004][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3744'. [ 878.212157][T20878] geneve3: entered promiscuous mode [ 878.228391][T20878] geneve3: entered allmulticast mode [ 878.259512][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 53248 - 0 [ 878.280456][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 53248 - 0 [ 878.301325][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 53248 - 0 [ 878.332883][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 53248 - 0 [ 878.363412][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'. [ 878.801455][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 878.874882][T20922] netlink: 'syz.0.3757': attribute type 39 has an invalid length. [ 878.976034][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 878.998951][T20916] ip6_vti0 speed is unknown, defaulting to 1000 [ 879.323808][T20916] wg1 speed is unknown, defaulting to 1000 [ 879.385416][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3762'. [ 879.550389][T20950] netlink: 'syz.2.3765': attribute type 50 has an invalid length. [ 879.607690][T20954] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3766'. [ 879.682164][T20954] ip6_vti0 speed is unknown, defaulting to 1000 [ 879.706474][T20953] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3765'. [ 879.737010][T20956] dvmrp12: entered allmulticast mode [ 879.974497][T20961] bond3: option arp_validate: invalid value (18446744073709551614) [ 880.025294][T20961] bond3 (unregistering): Released all slaves [ 880.113218][T20955] dvmrp12: left allmulticast mode [ 880.553124][T20978] SET target dimension over the limit! [ 880.584618][T20954] wg1 speed is unknown, defaulting to 1000 [ 880.613821][T20965] netlink: 'syz.3.3766': attribute type 6 has an invalid length. [ 880.895003][T20987] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 881.822419][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3783'. [ 881.875432][T21026] --map-set only usable from mangle table [ 882.093230][T21032] veth1_to_bond: entered allmulticast mode [ 882.185621][T21028] veth1_to_bond: left allmulticast mode [ 882.279455][T21036] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 882.740596][T21045] ip6_vti0 speed is unknown, defaulting to 1000 [ 882.880423][T21051] xt_CT: No such helper "snmp" [ 883.079881][T21045] wg1 speed is unknown, defaulting to 1000 [ 883.119523][T21055] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 883.475312][T21068] __nla_validate_parse: 2 callbacks suppressed [ 883.475331][T21068] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3793'. [ 883.856839][T21075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3797'. [ 883.877805][T21076] ip6_vti0 speed is unknown, defaulting to 1000 [ 884.162021][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3800'. [ 884.245615][T21092] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3801'. [ 884.299717][T21088] bridge_slave_1 (unregistering): left allmulticast mode [ 884.313229][T21088] bridge_slave_1 (unregistering): left promiscuous mode [ 884.322571][T21088] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.620780][T21076] wg1 speed is unknown, defaulting to 1000 [ 884.859918][T21104] ip6_vti0 speed is unknown, defaulting to 1000 [ 885.188077][T21104] wg1 speed is unknown, defaulting to 1000 [ 885.772223][T21118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3807'. [ 885.815958][T21118] bridge2: entered promiscuous mode [ 885.833549][T21118] bridge2: entered allmulticast mode [ 886.438618][T21136] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3810'. [ 886.448966][T21136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3810'. [ 886.665988][T21140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3811'. [ 886.822147][T21145] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3812'. [ 887.139353][T21148] ip6_vti0 speed is unknown, defaulting to 1000 [ 887.635532][T21148] wg1 speed is unknown, defaulting to 1000 [ 888.072837][T21170] netlink: 'syz.1.3818': attribute type 11 has an invalid length. [ 888.083714][T21179] netlink: 'syz.0.3822': attribute type 8 has an invalid length. [ 888.093773][T21170] netlink: 'syz.1.3818': attribute type 11 has an invalid length. [ 888.102685][T21180] netlink: 'syz.0.3822': attribute type 8 has an invalid length. [ 888.103122][T21170] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3818'. [ 888.142080][T21177] netlink: 'syz.3.3821': attribute type 1 has an invalid length. [ 888.475570][T21198] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 888.568859][T21202] netlink: 'syz.3.3828': attribute type 1 has an invalid length. [ 888.634831][T21204] IPv6: sit3: Disabled Multicast RS [ 888.754185][T21212] __nla_validate_parse: 2 callbacks suppressed [ 888.754204][T21212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 888.846440][T21202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 889.189385][T21237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3838'. [ 889.215308][T21236] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 889.455848][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3844'. [ 889.772331][T21270] netlink: 'syz.3.3849': attribute type 1 has an invalid length. [ 889.863120][T21270] bond2: (slave gretap2): making interface the new active one [ 889.906638][T21270] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 890.009731][T21275] ip6_vti0 speed is unknown, defaulting to 1000 [ 890.040391][T21284] veth6: entered allmulticast mode [ 890.462039][T21306] syzkaller1: entered allmulticast mode [ 890.474228][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'. [ 890.484171][T21306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3857'. [ 890.624387][T21275] wg1 speed is unknown, defaulting to 1000 [ 890.625141][T21301] ip6_vti0 speed is unknown, defaulting to 1000 [ 891.319764][T21301] wg1 speed is unknown, defaulting to 1000 [ 893.180427][T21363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3871'. [ 893.432472][T21373] netlink: 'syz.4.3873': attribute type 10 has an invalid length. [ 893.482024][T21373] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 893.531608][T21376] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3875'. [ 893.543447][T21376] netlink: 'syz.0.3875': attribute type 33 has an invalid length. [ 893.552850][T21376] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3875'. [ 893.610971][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3875'. [ 893.663095][T21377] vlan3: entered promiscuous mode [ 893.695782][T21377] bridge0: entered promiscuous mode [ 893.714278][T21376] `: renamed from team0 (while UP) [ 893.766177][ T1113] bridge0: port 3(`) entered disabled state [ 893.879601][T21386] ip6_vti0 speed is unknown, defaulting to 1000 [ 893.984313][T21394] netlink: 'syz.0.3879': attribute type 10 has an invalid length. [ 893.995102][T21390] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 894.013268][T21395] netlink: 'syz.0.3879': attribute type 21 has an invalid length. [ 894.060824][T21390] team0: Device ipvlan2 is already an upper device of the team interface [ 894.131051][T21392] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 894.139425][T21392] team0: Device ipvlan2 is already an upper device of the team interface [ 894.195035][T21391] : entered promiscuous mode [ 894.203673][T21395] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3879'. [ 894.238483][T21386] wg1 speed is unknown, defaulting to 1000 [ 894.456855][T21412] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 894.480990][T21417] netlink: 'syz.4.3883': attribute type 1 has an invalid length. [ 894.508475][T21417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'. [ 894.676412][T21425] tipc: Enabling of bearer rejected, already enabled [ 894.709989][T21426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3886'. [ 894.956966][T21437] netlink: 'syz.3.3887': attribute type 12 has an invalid length. [ 895.054207][T21441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3888'. [ 895.184177][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 895.214993][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3891'. [ 895.234930][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 896.250535][T21483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3898'. [ 896.282902][T21483] Bluetooth: MGMT ver 1.23 [ 896.299882][T21483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3898'. [ 896.527395][T21496] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3901'. [ 896.777067][T21509] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 896.835229][T21510] tipc: Enabled bearer , priority 0 [ 896.859776][T21510] syzkaller0: entered promiscuous mode [ 896.879225][T21510] syzkaller0: entered allmulticast mode [ 896.995379][T21510] tipc: Resetting bearer [ 897.015159][T21508] tipc: Resetting bearer [ 897.051346][T21508] tipc: Disabling bearer [ 898.081944][T21548] tipc: Enabled bearer , priority 0 [ 898.116954][T21548] syzkaller0: entered promiscuous mode [ 898.142612][T21548] syzkaller0: entered allmulticast mode [ 898.273846][T21547] tipc: Resetting bearer [ 898.370550][T21547] tipc: Disabling bearer [ 899.283367][T21579] __nla_validate_parse: 4 callbacks suppressed [ 899.283389][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3926'. [ 899.318851][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 899.704212][T21600] netlink: 'syz.0.3932': attribute type 3 has an invalid length. [ 899.741381][T21600] netlink: 'syz.0.3932': attribute type 3 has an invalid length. [ 899.763063][T21600] lo speed is unknown, defaulting to 1000 [ 899.784996][T21601] ip6_vti0 speed is unknown, defaulting to 1000 [ 899.851691][T21600] lo speed is unknown, defaulting to 1000 [ 899.909627][T21600] lo speed is unknown, defaulting to 1000 [ 900.365151][T21601] wg1 speed is unknown, defaulting to 1000 [ 900.541123][T21620] syzkaller0: entered promiscuous mode [ 900.546659][T21620] syzkaller0: entered allmulticast mode [ 900.558565][T21620] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3935'. [ 900.726996][T21624] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 900.979395][T21600] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 901.052931][T21600] lo speed is unknown, defaulting to 1000 [ 901.085342][T21600] lo speed is unknown, defaulting to 1000 [ 901.093276][T21600] lo speed is unknown, defaulting to 1000 [ 901.155392][T21600] lo speed is unknown, defaulting to 1000 [ 901.201778][T21600] lo speed is unknown, defaulting to 1000 [ 901.210799][T21600] lo speed is unknown, defaulting to 1000 [ 901.219769][T21600] lo speed is unknown, defaulting to 1000 [ 901.229854][T21600] lo speed is unknown, defaulting to 1000 [ 901.239155][T21600] lo speed is unknown, defaulting to 1000 [ 901.247090][T21600] lo speed is unknown, defaulting to 1000 [ 901.381968][T21645] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3943'. [ 901.476458][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'. [ 901.523858][T21651] ip6tnl0: Caught tx_queue_len zero misconfig [ 901.574049][T21654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3942'. [ 901.600700][T21655] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3945'. [ 901.617247][T21655] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3945'. [ 902.049120][T21665] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3948'. [ 902.081632][T21665] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3948'. [ 903.004929][T21689] ip6_vti0 speed is unknown, defaulting to 1000 [ 903.051455][T21693] syzkaller0: entered promiscuous mode [ 903.063726][T21693] syzkaller0: entered allmulticast mode [ 903.516190][T21700] IPVS: set_ctl: invalid protocol: 40 16.0.1.0:9405 [ 903.587054][T21699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.619919][T21699] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.640112][T21699] batman_adv: batadv0: Interface activated: dummy0 [ 903.671167][T21699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.745986][T21689] wg1 speed is unknown, defaulting to 1000 [ 904.113224][T21723] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 904.125398][T21723] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 904.350030][T21728] ip6_vti0 speed is unknown, defaulting to 1000 [ 904.717138][T21689] lo speed is unknown, defaulting to 1000 [ 904.746800][T21728] wg1 speed is unknown, defaulting to 1000 [ 905.114074][T21728] lo speed is unknown, defaulting to 1000 [ 906.541323][T21810] __nla_validate_parse: 4 callbacks suppressed [ 906.541344][T21810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 906.664429][T21812] syzkaller0: entered promiscuous mode [ 906.671149][T21812] syzkaller0: entered allmulticast mode [ 906.952101][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3991'. [ 906.985696][T21821] netlink: 'syz.4.3991': attribute type 1 has an invalid length. [ 907.094897][T21834] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 907.173745][T21840] netlink: 'syz.0.3994': attribute type 10 has an invalid length. [ 907.324653][T21840] bridge0: port 3(`) entered disabled state [ 907.333341][T21840] `: left allmulticast mode [ 907.354076][T21840] team_slave_0: left allmulticast mode [ 907.361464][T21840] team_slave_1: left allmulticast mode [ 907.367263][T21840] `: left promiscuous mode [ 907.373175][T21840] team_slave_0: left promiscuous mode [ 907.379879][T21840] team_slave_1: left promiscuous mode [ 907.386801][T21840] bridge0: port 3(`) entered disabled state [ 907.522932][T21854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3995'. [ 907.743772][T21840] 8021q: adding VLAN 0 to HW filter on device ` [ 907.752305][T21840] `: entered promiscuous mode [ 907.757217][T21840] team_slave_0: entered promiscuous mode [ 907.759684][ T3433] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 907.767826][T21840] team_slave_1: entered promiscuous mode [ 907.779681][T21840] `: entered allmulticast mode [ 907.784611][T21840] team_slave_0: entered allmulticast mode [ 907.790678][T21840] team_slave_1: entered allmulticast mode [ 907.808644][T21840] bond0: (slave `): Enslaving as an active interface with an up link [ 908.022969][T21842] ip6_vti0 speed is unknown, defaulting to 1000 [ 908.151800][T21865] syzkaller0: entered promiscuous mode [ 908.159421][T21865] syzkaller0: entered allmulticast mode [ 908.200853][T21868] syzkaller0: entered promiscuous mode [ 908.206594][T21868] syzkaller0: entered allmulticast mode [ 908.499851][T21842] wg1 speed is unknown, defaulting to 1000 [ 908.505794][T21859] ip6_vti0 speed is unknown, defaulting to 1000 [ 908.816596][T21879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'. [ 908.966510][T21883] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.974458][T21883] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.131593][T21883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.148572][T21883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.276963][T21859] wg1 speed is unknown, defaulting to 1000 [ 909.284237][T21842] lo speed is unknown, defaulting to 1000 [ 909.311071][ T1130] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.337909][ T1130] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.361708][ T1130] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.375975][ T1130] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.400083][ T1130] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.420480][ T1130] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.447844][ T1130] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.456786][ T1130] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.466808][T21884] ip6_vti0 speed is unknown, defaulting to 1000 [ 909.959351][T21859] lo speed is unknown, defaulting to 1000 [ 909.959373][T21884] wg1 speed is unknown, defaulting to 1000 [ 910.273374][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 910.576081][T21929] ip6_vti0 speed is unknown, defaulting to 1000 [ 910.618222][T21930] syzkaller1: entered allmulticast mode [ 911.311699][T21884] lo speed is unknown, defaulting to 1000 [ 911.390857][T21951] ip6_vti0 speed is unknown, defaulting to 1000 [ 911.404296][T21929] wg1 speed is unknown, defaulting to 1000 [ 913.638880][T21929] lo speed is unknown, defaulting to 1000 [ 913.759149][T21951] wg1 speed is unknown, defaulting to 1000 [ 913.859330][T21964] ip6_vti0 speed is unknown, defaulting to 1000 [ 914.096136][T21977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4028'. [ 914.116996][T21978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4028'. [ 914.300074][T21985] tipc: Enabling of bearer rejected, failed to enable media [ 914.471496][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 914.481869][T21983] xt_CT: No such helper "snmp" [ 914.678496][T22001] pim6reg1: entered promiscuous mode [ 914.683859][T22001] pim6reg1: entered allmulticast mode [ 914.978783][T21964] wg1 speed is unknown, defaulting to 1000 [ 915.052856][T21951] lo speed is unknown, defaulting to 1000 [ 915.409823][T22013] No such timeout policy "syz0" [ 915.503010][T22012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 915.907027][T22030] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 915.975913][T21964] lo speed is unknown, defaulting to 1000 [ 916.363433][T22049] vlan2: entered promiscuous mode [ 916.372504][T22049] geneve1: entered promiscuous mode [ 916.380437][T22037] ip6_vti0 speed is unknown, defaulting to 1000 [ 916.765569][T22062] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4052'. [ 917.021827][T22037] wg1 speed is unknown, defaulting to 1000 [ 917.065685][T22071] ip6_vti0 speed is unknown, defaulting to 1000 [ 917.630118][T22037] lo speed is unknown, defaulting to 1000 [ 917.785521][T22071] wg1 speed is unknown, defaulting to 1000 [ 917.873069][T22090] ip6_vti0 speed is unknown, defaulting to 1000 [ 918.340938][T22090] wg1 speed is unknown, defaulting to 1000 [ 918.378974][T22071] lo speed is unknown, defaulting to 1000 [ 918.461074][T22098] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 918.801069][T22100] pim6reg: entered allmulticast mode [ 918.913355][T22102] pim6reg: left allmulticast mode [ 919.141703][T22118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4066'. [ 919.212143][T22114] ip6_vti0 speed is unknown, defaulting to 1000 [ 919.258317][T22090] lo speed is unknown, defaulting to 1000 [ 919.956699][T22131] NFSD: Failed to start, no listeners configured. [ 920.225322][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 920.353418][T22114] wg1 speed is unknown, defaulting to 1000 [ 920.452569][T22128] ip6_vti0 speed is unknown, defaulting to 1000 [ 920.483585][T22143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 920.517220][T22143] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4072'. [ 920.529437][T22143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 920.594977][T22145] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.4071'. [ 921.213319][T22114] lo speed is unknown, defaulting to 1000 [ 921.582440][T22128] wg1 speed is unknown, defaulting to 1000 [ 921.610279][T22180] netlink: 'syz.1.4081': attribute type 1 has an invalid length. [ 921.629944][T22180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4081'. [ 921.724499][T22182] vxcan2: entered allmulticast mode [ 921.847128][T22184] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4083'. [ 922.008662][T22128] lo speed is unknown, defaulting to 1000 [ 922.640899][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4089'. [ 923.660958][T22249] netlink: 'syz.4.4101': attribute type 7 has an invalid length. [ 923.762861][T22253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4102'. [ 924.092711][ T30] audit: type=1800 audit(1767081345.409:8): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4104" name="memory.events" dev="tmpfs" ino=1246 res=0 errno=0 [ 924.118120][T22266] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4107'. [ 924.195988][ T30] audit: type=1804 audit(1767081345.409:9): pid=22260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4104" name="/newroot/238/memory.events" dev="tmpfs" ino=1246 res=1 errno=0 [ 924.267072][T22270] ip6_vti0 speed is unknown, defaulting to 1000 [ 924.356671][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4108'. [ 924.731341][T22270] wg1 speed is unknown, defaulting to 1000 [ 924.888407][T22289] netlink: 'syz.1.4113': attribute type 21 has an invalid length. [ 925.376003][T22299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4116'. [ 925.410849][T22311] netlink: 'syz.1.4118': attribute type 32 has an invalid length. [ 925.435811][T22270] lo speed is unknown, defaulting to 1000 [ 925.458033][T22311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4118'. [ 925.704483][T22320] netlink: 'syz.3.4120': attribute type 23 has an invalid length. [ 925.714873][T22320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'. [ 926.159823][T22336] xt_hashlimit: overflow, try lower: 3/0 [ 926.674737][T22354] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.095033][T22378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4139'. [ 927.101037][T22354] wg1 speed is unknown, defaulting to 1000 [ 927.323122][T22379] ip6_vti0 speed is unknown, defaulting to 1000 [ 927.630642][T22354] lo speed is unknown, defaulting to 1000 [ 927.759259][T22379] wg1 speed is unknown, defaulting to 1000 [ 927.874372][T22399] vxlan0: entered promiscuous mode [ 927.880111][T22399] vxlan0: entered allmulticast mode [ 927.893762][ T8889] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.903316][ T8889] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.911869][ T8889] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 927.924226][ T8889] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 928.079641][T22403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 928.181173][T22405] tipc: Enabled bearer , priority 0 [ 928.241328][T22408] syzkaller0: entered promiscuous mode [ 928.247043][T22408] syzkaller0: entered allmulticast mode [ 928.255555][T22408] tipc: Resetting bearer [ 928.261715][T22379] lo speed is unknown, defaulting to 1000 [ 928.295733][T22408] tipc: Resetting bearer [ 930.354372][T22408] tipc: Disabling bearer [ 930.393369][ T5915] tipc: Node number set to 3603947865 [ 930.478360][T22438] nbd: device at index 4 is going down [ 930.931455][T22450] ip6_vti0 speed is unknown, defaulting to 1000 [ 931.341195][T22460] openvswitch: netlink: Message has -2 unknown bytes. [ 931.372942][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4163'. [ 931.398489][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4163'. [ 931.550999][T22475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4165'. [ 931.579349][T22475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4165'. [ 931.607519][T22475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 931.617777][T22475] netlink: 'syz.2.4165': attribute type 7 has an invalid length. [ 931.746586][T22485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4168'. [ 931.801103][T22485] netlink: 'syz.4.4168': attribute type 1 has an invalid length. [ 931.878671][T22450] wg1 speed is unknown, defaulting to 1000 [ 932.026808][T22496] ip6_vti0 speed is unknown, defaulting to 1000 [ 932.059807][T22503] tipc: Invalid UDP bearer configuration [ 932.059860][T22503] tipc: Enabling of bearer rejected, failed to enable media [ 932.100276][T22507] batadv0: entered allmulticast mode [ 932.471261][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4179'. [ 932.483368][T22523] : entered promiscuous mode [ 932.522892][T22450] lo speed is unknown, defaulting to 1000 [ 932.529775][T22523] netlink: 'syz.4.4178': attribute type 21 has an invalid length. [ 932.538738][T22523] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4178'. [ 932.721434][T22496] wg1 speed is unknown, defaulting to 1000 [ 932.733867][T22534] netlink: 'syz.1.4183': attribute type 39 has an invalid length. [ 933.049336][T22543] xt_TCPMSS: Only works on TCP SYN packets [ 933.125889][T22542] ip6gre2: entered allmulticast mode [ 933.212783][T22543] bond3 (unregistering): Released all slaves [ 933.581927][T22496] lo speed is unknown, defaulting to 1000 [ 933.893537][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4190'. [ 933.924282][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4190'. [ 934.094417][T22564] netlink: 'syz.4.4191': attribute type 5 has an invalid length. [ 934.109184][T22564] netlink: 'syz.4.4191': attribute type 5 has an invalid length. [ 934.139751][T22564] netlink: 'syz.4.4191': attribute type 1 has an invalid length. [ 934.275517][T22564] bond3: entered promiscuous mode [ 934.291516][T22564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 934.353443][T22569] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 934.449907][T22569] bond2: entered promiscuous mode [ 934.455523][T22569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 934.694963][T22579] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 934.729290][T22579] netlink: 'syz.0.4195': attribute type 7 has an invalid length. [ 934.958595][T22587] syzkaller1: entered promiscuous mode [ 934.965252][T22587] syzkaller1: entered allmulticast mode [ 934.976771][T22587] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 935.181424][T22594] bond0: Master is either lo or non-ether device [ 935.421388][T22604] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 935.439276][T22604] bridge4: entered allmulticast mode [ 935.454594][T22606] ip6gre3: entered promiscuous mode [ 935.491899][T22606] ip6gre3: entered allmulticast mode [ 935.652164][ T8906] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.670131][ T8906] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.694004][ T8906] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.767035][T22621] bond4: entered promiscuous mode [ 935.777248][T22621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 935.785868][ T8906] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 936.026264][T22634] syzkaller1: entered promiscuous mode [ 936.032591][T22634] syzkaller1: entered allmulticast mode [ 936.163529][T22645] xt_connbytes: Forcing CT accounting to be enabled [ 936.300419][T22652] gretap2: entered promiscuous mode [ 936.703738][T22670] __nla_validate_parse: 14 callbacks suppressed [ 936.703760][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'. [ 936.975759][T22682] validate_nla: 7 callbacks suppressed [ 936.975793][T22682] netlink: 'syz.1.4224': attribute type 7 has an invalid length. [ 937.309546][T22691] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 937.322039][T22691] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 937.523222][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4232'. [ 937.524135][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4234'. [ 937.555917][T22701] tipc: Enabled bearer , priority 0 [ 937.570516][T22704] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 937.581684][T22701] syzkaller0: entered promiscuous mode [ 937.598521][T22701] syzkaller0: entered allmulticast mode [ 937.692295][T22701] tipc: Resetting bearer [ 937.744087][T22701] gre1: entered allmulticast mode [ 937.765881][T22700] tipc: Resetting bearer [ 937.808151][T22700] tipc: Disabling bearer [ 937.842728][T22719] geneve2: entered promiscuous mode [ 937.908171][ T8908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.921514][T22717] netlink: 45 bytes leftover after parsing attributes in process `syz.2.4236'. [ 937.923126][ T8908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.959061][ T8908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.976406][ T8908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.119340][T22726] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4239'. [ 938.200266][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4241'. [ 938.248296][T22737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4242'. [ 938.311909][T22737] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4242'. [ 938.585251][T22751] netlink: 'syz.1.4244': attribute type 1 has an invalid length. [ 938.937645][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4246'. [ 940.659264][T22766] syzkaller1: entered promiscuous mode [ 940.664876][T22766] syzkaller1: entered allmulticast mode [ 940.769578][T22754] ip6_vti0 speed is unknown, defaulting to 1000 [ 940.810290][T11401] IPVS: starting estimator thread 0... [ 940.869936][T22788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 940.905977][T22789] IPVS: using max 25 ests per chain, 60000 per kthread [ 940.954081][T22794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4253'. [ 941.224075][T22805] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 941.294694][T22805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 941.313885][T22754] wg1 speed is unknown, defaulting to 1000 [ 941.320377][T22808] tipc: Enabled bearer , priority 0 [ 941.336533][T22805] vlan0: entered promiscuous mode [ 941.363242][T22805] bond3: entered promiscuous mode [ 941.369341][T22805] vlan0: entered allmulticast mode [ 941.374591][T22805] bond3: entered allmulticast mode [ 941.459005][T22814] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 941.994231][T22807] tipc: Disabling bearer [ 942.125458][T22754] lo speed is unknown, defaulting to 1000 [ 942.204086][T22833] ip6_vti0 speed is unknown, defaulting to 1000 [ 942.568939][ T4335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.725951][T22852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.749642][T22833] wg1 speed is unknown, defaulting to 1000 [ 943.063071][T22861] ip6_vti0 speed is unknown, defaulting to 1000 [ 943.131492][T22872] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 943.140112][T22868] mac80211_hwsim hwsim49 syzkaller0: left promiscuous mode [ 943.164909][T22868] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 943.186048][T22868] tipc: Resetting bearer [ 943.403353][T22871] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 943.415952][T22871] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 943.558596][T22833] lo speed is unknown, defaulting to 1000 [ 943.805948][T22887] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 943.821814][T22885] syz_tun: entered allmulticast mode [ 943.879293][T22887] sctp: [Deprecated]: syz.2.4277 (pid 22887) Use of int in max_burst socket option. [ 943.879293][T22887] Use struct sctp_assoc_value instead [ 944.075729][T22895] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 944.251313][T22861] wg1 speed is unknown, defaulting to 1000 [ 944.288651][T22899] ip6_vti0 speed is unknown, defaulting to 1000 [ 944.514904][T22916] __nla_validate_parse: 1 callbacks suppressed [ 944.514924][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4284'. [ 944.798455][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 945.087615][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.111532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.120107][T22861] lo speed is unknown, defaulting to 1000 [ 945.199959][T22899] wg1 speed is unknown, defaulting to 1000 [ 945.206767][T22910] ip6_vti0 speed is unknown, defaulting to 1000 [ 945.941103][T22910] wg1 speed is unknown, defaulting to 1000 [ 945.941129][T22899] lo speed is unknown, defaulting to 1000 [ 946.504450][T22955] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 946.739025][T22910] lo speed is unknown, defaulting to 1000 [ 946.812369][T22964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4296'. [ 946.873525][T22964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4296'. [ 946.957696][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 947.632568][T22977] IPv6: sit1: Disabled Multicast RS [ 947.914870][T22981] xt_hashlimit: size too large, truncated to 1048576 [ 948.339395][T22991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 948.378904][T22991] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4304'. [ 948.483069][T22993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4303'. [ 948.574844][T22993] xt_ecn: cannot match TCP bits for non-tcp packets [ 948.753522][T22998] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 948.812828][T22998] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4305'. [ 949.382971][T23015] netlink: 'syz.1.4310': attribute type 15 has an invalid length. [ 949.573582][T23024] sctp: [Deprecated]: syz.3.4313 (pid 23024) Use of int in maxseg socket option. [ 949.573582][T23024] Use struct sctp_assoc_value instead [ 949.652132][T23029] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4314'. [ 949.728811][T23029] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4314'. [ 949.854489][ T8906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.865318][ T8906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.966927][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'. [ 950.103349][T23047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4320'. [ 950.184894][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'. [ 950.233608][T23052] macvlan0: entered promiscuous mode [ 950.244160][T23052] macvlan0: entered allmulticast mode [ 950.254481][T23052] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 950.343017][T23062] netlink: 'syz.3.4324': attribute type 1 has an invalid length. [ 950.456586][T23064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4326'. [ 950.621896][T23079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4329'. [ 950.811736][T23083] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 951.496783][T23112] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 952.009474][ T8906] wlan0: Trigger new scan to find an IBSS to join [ 952.036178][T23134] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 952.060342][T23133] netlink: 'syz.0.4343': attribute type 1 has an invalid length. [ 953.092101][T23178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4353'. [ 953.131594][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'. [ 953.141847][T23189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4356'. [ 953.152291][T23189] netlink: 'syz.4.4356': attribute type 20 has an invalid length. [ 953.244240][T23178] bond5: entered promiscuous mode [ 953.271726][T23178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 953.349257][T23184] 8021q: adding VLAN 0 to HW filter on device bond6 [ 953.359617][T23184] bond6: entered promiscuous mode [ 953.365677][T23184] bond5: (slave bond6): Enslaving as an active interface with an up link [ 953.416922][T23189] netlink: 'syz.4.4356': attribute type 20 has an invalid length. [ 953.462901][ T4335] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.482580][ T4335] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.509894][ T4335] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.580947][T23194] syzkaller0: entered promiscuous mode [ 953.586485][T23194] syzkaller0: entered allmulticast mode [ 953.596461][T23204] netlink: 'syz.2.4358': attribute type 5 has an invalid length. [ 953.608283][ T4335] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.275421][ T5834] block nbd3: Receive control failed (result -32) [ 954.961367][ T34] wlan0: Trigger new scan to find an IBSS to join [ 955.928827][T23247] vlan3: entered promiscuous mode [ 955.933958][T23247] bond0: entered promiscuous mode [ 955.939899][T23247] bond_slave_0: entered promiscuous mode [ 955.945800][T23247] bond_slave_1: entered promiscuous mode [ 955.953436][T23247] team0: entered promiscuous mode [ 955.964896][T23247] team_slave_0: entered promiscuous mode [ 955.971626][T23247] team_slave_1: entered promiscuous mode [ 955.997533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 956.142744][T23253] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 956.188803][T23253] __nla_validate_parse: 6 callbacks suppressed [ 956.188825][T23253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4370'. [ 956.372963][T23277] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 956.390694][T23278] netlink: 'syz.2.4374': attribute type 1 has an invalid length. [ 956.442934][T23277] 8021q: adding VLAN 0 to HW filter on device bond4 [ 956.456601][T23271] ip6_vti0 speed is unknown, defaulting to 1000 [ 956.499721][T23285] bridge_slave_0: left allmulticast mode [ 956.505516][T23285] bridge_slave_0: left promiscuous mode [ 956.513066][T23285] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.530400][T23285] bridge_slave_1: left allmulticast mode [ 956.537972][T23285] bridge_slave_1: left promiscuous mode [ 956.543875][T23285] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.581993][T23288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4373'. [ 956.591688][T23288] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4373'. [ 956.593375][T23285] bond0: (slave bond_slave_0): Releasing backup interface [ 956.615068][T23285] bond0: (slave bond_slave_1): Releasing backup interface [ 956.631692][T23285] team0: Failed to send options change via netlink (err -105) [ 956.642536][T23285] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 956.670820][T23285] team0: Port device team_slave_0 removed [ 956.678983][T23285] team0: Failed to send options change via netlink (err -105) [ 956.686825][T23285] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 956.698217][T23285] team0: Port device team_slave_1 removed [ 956.704577][T23285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.714225][T23285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.723597][T23285] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 956.756167][T23288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4373'. [ 956.814384][T23271] wg1 speed is unknown, defaulting to 1000 [ 956.945464][T23295] veth1_to_bond: entered allmulticast mode [ 956.954909][T23294] veth1_to_bond: left allmulticast mode [ 957.157229][T23271] lo speed is unknown, defaulting to 1000 [ 957.445678][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 957.469883][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4383'. [ 957.776996][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4384'. [ 957.998183][ T8904] wlan0: Trigger new scan to find an IBSS to join [ 958.195007][T23361] Cannot find set identified by id 2 to match [ 958.571597][T23376] block nbd5: server does not support multiple connections per device. [ 958.590007][T23376] block nbd5: shutting down sockets [ 958.754852][T23389] syzkaller0: entered promiscuous mode [ 958.766008][T23389] syzkaller0: entered allmulticast mode [ 958.876880][T23392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4400'. [ 958.886217][T23392] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4400'. [ 958.910131][ T8906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.019157][T23396] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 959.073492][T23398] netlink: 'syz.2.4403': attribute type 3 has an invalid length. [ 959.102898][T23398] syz_tun: left allmulticast mode [ 959.110633][T23398] siw: device registration error -23 [ 959.745264][T23420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4410'. [ 959.759033][T23420] sctp: [Deprecated]: syz.3.4410 (pid 23420) Use of int in max_burst socket option deprecated. [ 959.759033][T23420] Use struct sctp_assoc_value instead [ 959.861538][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 959.902677][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 959.961166][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 959.988953][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.008574][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.047889][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.100413][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.117849][T23432] bond4: option fail_over_mac: invalid value (127) [ 960.153704][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.193402][T23426] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 960.269626][T23432] bond4 (unregistering): Released all slaves [ 960.853953][T23456] ip6_vti0 speed is unknown, defaulting to 1000 [ 961.548106][T23486] IPVS: length: 35 != 1272 [ 961.554042][T23486] __nla_validate_parse: 33 callbacks suppressed [ 961.554060][T23486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4428'. [ 961.632111][T23456] wg1 speed is unknown, defaulting to 1000 [ 961.759710][T23496] netlink: 'syz.2.4431': attribute type 1 has an invalid length. [ 961.941877][T23499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4433'. [ 962.005675][T23456] lo speed is unknown, defaulting to 1000 [ 962.013947][T23499] siw: device registration error -23 [ 962.021798][T23499] ip6_vti0 speed is unknown, defaulting to 1000 [ 962.396982][T23517] netlink: 'syz.1.4437': attribute type 12 has an invalid length. [ 962.461410][T23520] netlink: 'syz.1.4437': attribute type 30 has an invalid length. [ 962.842221][T23526] tipc: Enabled bearer , priority 0 [ 962.850963][T23526] syzkaller0: entered promiscuous mode [ 962.856491][T23526] syzkaller0: entered allmulticast mode [ 962.934610][T23526] tipc: Resetting bearer [ 963.252908][T23525] tipc: Resetting bearer [ 963.308442][T23525] tipc: Disabling bearer [ 963.535407][T23548] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4445'. [ 963.784387][T23563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4449'. [ 963.912374][T23574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4450'. [ 964.075166][T23581] erspan0: left promiscuous mode [ 964.149410][T23581] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.167257][T23581] net_ratelimit: 24 callbacks suppressed [ 964.167270][T23581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 964.190311][T23575] ip6_vti0 speed is unknown, defaulting to 1000 [ 964.361095][T23593] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20001 [ 964.440963][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4459'. [ 964.454779][T23575] wg1 speed is unknown, defaulting to 1000 [ 964.726227][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 964.750475][T23602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4461'. [ 964.814854][T23575] lo speed is unknown, defaulting to 1000 [ 965.194109][T23627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4467'. [ 965.401909][T23625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4466'. [ 965.663365][T23637] netlink: 'syz.2.4469': attribute type 2 has an invalid length. [ 965.704016][T23621] ip6_vti0 speed is unknown, defaulting to 1000 [ 965.859669][T23642] openvswitch: netlink: IP tunnel dst address not specified [ 965.888318][T23643] netlink: 'syz.2.4471': attribute type 1 has an invalid length. [ 966.505195][T23621] wg1 speed is unknown, defaulting to 1000 [ 966.963277][T23679] bridge_slave_0: left allmulticast mode [ 966.988210][T23679] bridge_slave_0: left promiscuous mode [ 966.996040][T23679] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.661465][T23688] netlink: 'syz.0.4481': attribute type 1 has an invalid length. [ 967.902340][T23621] lo speed is unknown, defaulting to 1000 [ 969.069388][T23693] __nla_validate_parse: 3 callbacks suppressed [ 969.069407][T23693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4482'. [ 969.401428][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4484'. [ 969.535945][T23699] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4484'. [ 969.566554][T23699] netlink: 189 bytes leftover after parsing attributes in process `syz.2.4484'. [ 969.916368][T23705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4486'. [ 970.707828][T23728] x_tables: duplicate underflow at hook 3 [ 971.011015][T23754] batadv_slave_1: entered promiscuous mode [ 971.047140][T23747] batadv_slave_1: left promiscuous mode [ 971.058656][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4497'. [ 971.389925][T23768] tun0: tun_chr_ioctl cmd 1074025675 [ 971.395294][T23768] tun0: persist enabled [ 971.400204][T23768] tun0: tun_chr_ioctl cmd 1074025675 [ 971.405540][T23768] tun0: persist disabled [ 971.667733][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4507'. [ 971.706493][T23783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4508'. [ 971.796657][T23783] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 971.808430][T23787] SET target dimension over the limit! [ 971.814217][T23788] SET target dimension over the limit! [ 971.850871][T23783] bond3 (unregistering): Released all slaves [ 971.894433][T23788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4510'. [ 972.371761][T23810] netlink: 564 bytes leftover after parsing attributes in process `syz.4.4516'. [ 972.652839][T23823] x_tables: ip_tables: osf match: only valid for protocol 6 [ 972.847145][T23831] netlink: 'syz.3.4522': attribute type 5 has an invalid length. [ 972.869053][T23831] geneve4: entered promiscuous mode [ 972.874322][T23831] geneve4: entered allmulticast mode [ 972.882284][ T60] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 972.907036][ T60] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 972.938244][ T60] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 972.980699][ T60] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 973.917495][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 974.113899][T23899] netlink: 'syz.3.4540': attribute type 12 has an invalid length. [ 974.482160][T23913] __nla_validate_parse: 7 callbacks suppressed [ 974.482181][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 974.797064][T23931] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4550'. [ 974.869142][T23934] netlink: 'syz.4.4552': attribute type 21 has an invalid length. [ 974.897227][T23934] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4552'. [ 975.093390][T23949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4555'. [ 975.108365][T23949] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4555'. [ 975.119494][T23949] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4555'. [ 975.136975][T23950] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.338631][T23965] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 975.514785][T23968] netlink: 'syz.2.4558': attribute type 11 has an invalid length. [ 975.564752][T23968] netlink: 'syz.2.4558': attribute type 7 has an invalid length. [ 975.585558][T23968] netlink: 'syz.2.4558': attribute type 8 has an invalid length. [ 975.742467][T23973] gretap2: entered promiscuous mode [ 975.851321][T23959] ip6_vti0 speed is unknown, defaulting to 1000 [ 975.851335][T23950] wg1 speed is unknown, defaulting to 1000 [ 976.082545][T23984] syzkaller0: entered promiscuous mode [ 976.101121][T23984] syzkaller0: entered allmulticast mode [ 976.173724][T23991] netlink: 1164 bytes leftover after parsing attributes in process `syz.2.4561'. [ 976.205798][T23984] tipc: Enabled bearer , priority 0 [ 976.217587][T23988] tipc: Enabled bearer , priority 0 [ 976.225305][T23988] syzkaller0: entered promiscuous mode [ 976.239939][T23988] syzkaller0: entered allmulticast mode [ 976.255072][T23988] tipc: Resetting bearer [ 976.285336][T23981] tipc: Resetting bearer [ 976.341307][T23981] tipc: Disabling bearer [ 976.383219][T23987] tipc: Resetting bearer [ 976.403926][T23987] tipc: Disabling bearer [ 976.420351][T23959] wg1 speed is unknown, defaulting to 1000 [ 976.477000][T23998] ip6_vti0 speed is unknown, defaulting to 1000 [ 976.485493][T23950] lo speed is unknown, defaulting to 1000 [ 976.581908][T24002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4565'. [ 976.605275][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4566'. [ 977.016313][T23959] lo speed is unknown, defaulting to 1000 [ 977.131252][T23998] wg1 speed is unknown, defaulting to 1000 [ 977.299140][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4571'. [ 977.665378][T24035] ip6_vti0 speed is unknown, defaulting to 1000 [ 978.298444][T24035] wg1 speed is unknown, defaulting to 1000 [ 978.298489][T23998] lo speed is unknown, defaulting to 1000 [ 978.567996][T24054] syzkaller1: entered promiscuous mode [ 978.579150][T24054] syzkaller1: entered allmulticast mode [ 978.919812][T24035] lo speed is unknown, defaulting to 1000 [ 979.553563][T24099] IPVS: length: 153 != 24 [ 979.782814][T24107] netlink: 'syz.2.4584': attribute type 12 has an invalid length. [ 979.852731][T24109] tipc: New replicast peer: 255.255.255.255 [ 979.865516][T24109] tipc: Enabled bearer , priority 10 [ 979.913770][T24109] netlink: 'syz.1.4585': attribute type 61 has an invalid length. [ 979.948312][T24109] __nla_validate_parse: 2 callbacks suppressed [ 979.948333][T24109] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4585'. [ 980.044679][T24112] sit0: entered promiscuous mode [ 980.068309][T24112] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4586'. [ 980.326525][T24122] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4589'. [ 980.403452][T24121] sctp: [Deprecated]: syz.2.4588 (pid 24121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 980.403452][T24121] Use struct sctp_sack_info instead [ 980.621788][T24130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4591'. [ 980.772977][T24127] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.090790][T24152] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 981.109737][T24151] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4596'. [ 981.126962][T24151] openvswitch: netlink: Flow actions attr not present in new flow. [ 981.179543][T24151] syzkaller1: entered promiscuous mode [ 981.185176][T24151] syzkaller1: entered allmulticast mode [ 981.273569][T24159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4599'. [ 981.294161][T24127] wg1 speed is unknown, defaulting to 1000 [ 981.372762][T24164] netlink: 'syz.0.4601': attribute type 1 has an invalid length. [ 981.393839][T24164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4601'. [ 981.448393][T24166] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 981.554269][T24168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4602'. [ 981.630367][T24170] 8021q: VLANs not supported on bond0 [ 981.754245][T24175] openvswitch: netlink: Flow actions attr not present in new flow. [ 981.854087][T24178] ip6_vti0 speed is unknown, defaulting to 1000 [ 981.931072][T24127] lo speed is unknown, defaulting to 1000 [ 982.661746][T24216] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4614'. [ 982.661783][T24217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4614'. [ 982.978519][T24178] wg1 speed is unknown, defaulting to 1000 [ 983.533610][T24238] netlink: 'syz.3.4619': attribute type 1 has an invalid length. [ 983.615875][T24246] netlink: 'syz.0.4621': attribute type 1 has an invalid length. [ 983.647102][T24242] netlink: 'syz.4.4622': attribute type 13 has an invalid length. [ 983.665651][T24238] 8021q: adding VLAN 0 to HW filter on device bond7 [ 983.700397][T24247] netlink: 'syz.0.4621': attribute type 4 has an invalid length. [ 983.898720][T24247] .`: renamed from bond0 (while UP) [ 983.956771][T24178] lo speed is unknown, defaulting to 1000 [ 984.158361][T24262] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 984.346034][T24261] tipc: Enabled bearer , priority 0 [ 984.365254][T24266] syzkaller0: entered promiscuous mode [ 984.372120][T24266] syzkaller0: entered allmulticast mode [ 984.386229][T24261] tipc: Resetting bearer [ 984.421688][T24274] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 984.459090][T24261] tipc: Disabling bearer [ 985.264597][T24302] __nla_validate_parse: 6 callbacks suppressed [ 985.264616][T24302] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4634'. [ 985.590725][T24316] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4638'. [ 985.649988][T24319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4639'. [ 985.769308][T24330] netlink: 'syz.1.4642': attribute type 6 has an invalid length. [ 985.781973][T24330] netlink: 'syz.1.4642': attribute type 7 has an invalid length. [ 985.791968][T24326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4641'. [ 985.819337][T24330] netlink: 'syz.1.4642': attribute type 8 has an invalid length. [ 985.849670][T24334] x_tables: duplicate entry at hook 3 [ 985.866246][T24330] netlink: 'syz.1.4642': attribute type 13 has an invalid length. [ 985.879868][T24323] xt_CT: No such helper "snmp" [ 986.091898][T24342] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 986.111657][T24342] bond4 (unregistering): Released all slaves [ 986.146697][T24330] ip6_vti0 speed is unknown, defaulting to 1000 [ 986.410012][T24356] netlink: 15234 bytes leftover after parsing attributes in process `syz.4.4646'. [ 986.420218][T24353] netlink: 15234 bytes leftover after parsing attributes in process `syz.4.4646'. [ 986.786932][T24330] wg1 speed is unknown, defaulting to 1000 [ 987.372628][T24383] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4651'. [ 987.429658][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4652'. [ 987.643056][T24395] sctp: [Deprecated]: syz.4.4654 (pid 24395) Use of int in max_burst socket option. [ 987.643056][T24395] Use struct sctp_assoc_value instead [ 987.752306][T24330] lo speed is unknown, defaulting to 1000 [ 987.785619][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.795808][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.811960][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.856777][T24364] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 987.896650][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.906770][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.915731][T24364] wg1 speed is unknown, defaulting to 1000 [ 987.931325][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.018157][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.027607][T24405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4656'. [ 988.047074][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.056079][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.082966][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.091333][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.100291][T24364] wg1 speed is unknown, defaulting to 1000 [ 988.426737][T24417] ip6_vti0 speed is unknown, defaulting to 1000 [ 988.999899][T24428] syzkaller0: entered promiscuous mode [ 989.006448][T24428] syzkaller0: entered allmulticast mode [ 989.176595][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4665'. [ 989.217128][T24417] wg1 speed is unknown, defaulting to 1000 [ 989.440431][T24453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 989.741676][T24474] tipc: Failed to remove unknown binding: 66,1,1/0:1353353441/1353353443 [ 989.763770][T24474] tipc: Failed to remove unknown binding: 66,1,1/0:1353353441/1353353443 [ 989.782644][T24474] tipc: Failed to remove unknown binding: 66,1,1/0:1353353441/1353353443 [ 989.879201][T24417] lo speed is unknown, defaulting to 1000 [ 989.899703][T24417] wg1 speed is unknown, defaulting to 1000 [ 990.332981][T24487] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 990.562334][T24492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4681'. [ 990.628608][T24492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4681'. [ 991.151799][T24523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4687'. [ 991.298525][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4690'. [ 991.322181][T24532] xt_TCPMSS: Only works on TCP SYN packets [ 991.360367][T24530] netlink: 'syz.4.4690': attribute type 1 has an invalid length. [ 991.369275][T24527] : entered promiscuous mode [ 991.435867][T24530] bond5: entered promiscuous mode [ 991.441578][T24530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 991.470029][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 991.493962][T24535] ip6_vti0 speed is unknown, defaulting to 1000 [ 991.519742][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4690'. [ 991.660993][T24545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4695'. [ 991.818300][T24535] wg1 speed is unknown, defaulting to 1000 [ 991.899156][T24557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4699'. [ 992.061913][T24562] netlink: 'syz.4.4701': attribute type 10 has an invalid length. [ 992.176963][T24535] lo speed is unknown, defaulting to 1000 [ 992.245997][T24567] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 992.261357][T24535] wg1 speed is unknown, defaulting to 1000 [ 992.281089][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4705'. [ 993.271728][T24088] veth9: left allmulticast mode [ 993.276656][T24088] veth9: left promiscuous mode [ 993.307087][T24088] bridge2: port 1(veth9) entered disabled state [ 994.671811][T24088] bond0 (unregistering): (slave ªªªªª»): Releasing backup interface [ 994.681194][T24088] ªªªªª»: left promiscuous mode [ 994.688403][T24088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.699720][T24088] bond_slave_1: left promiscuous mode [ 994.706726][T24088] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 994.717000][T24088] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 994.731430][T24088] bond0 (unregistering): Released all slaves [ 994.855580][T24088] bond1 (unregistering): Released all slaves [ 994.975307][T24088] bond2 (unregistering): Released all slaves [ 995.099527][T24088] bond3 (unregistering): (slave veth11): Releasing active interface [ 995.111389][T24088] bond3 (unregistering): (slave vlan3): Releasing active interface [ 995.124672][T24088] bond3 (unregistering): (slave veth13): Releasing active interface [ 995.134186][T24088] bond3 (unregistering): Released all slaves [ 995.245302][T24088] bond4 (unregistering): Released all slaves [ 995.356775][T24088] bond5 (unregistering): (slave veth15): Releasing active interface [ 995.367982][T24088] bond5 (unregistering): Released all slaves [ 995.510266][T24088] : left promiscuous mode [ 995.545105][T24630] ip6_vti0 speed is unknown, defaulting to 1000 [ 995.622878][T24088] tipc: Left network mode [ 995.902026][T24622] tipc: Resetting bearer [ 995.944259][T24622] ================================================================== [ 995.952379][T24622] BUG: KASAN: slab-out-of-bounds in ieee80211_add_virtual_monitor+0xa42/0xce0 [ 995.961277][T24622] Read of size 1 at addr ffff8880632fbd50 by task syz.4.4721/24622 [ 995.969199][T24622] [ 995.971567][T24622] CPU: 1 UID: 0 PID: 24622 Comm: syz.4.4721 Not tainted syzkaller #0 PREEMPT(full) [ 995.971596][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 995.971611][T24622] Call Trace: [ 995.971620][T24622] [ 995.971629][T24622] dump_stack_lvl+0x189/0x250 [ 995.971659][T24622] ? __virt_addr_valid+0x1c8/0x5c0 [ 995.971687][T24622] ? rcu_is_watching+0x15/0xb0 [ 995.971712][T24622] ? __kasan_check_byte+0x12/0x40 [ 995.971738][T24622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 995.971762][T24622] ? rcu_is_watching+0x15/0xb0 [ 995.971797][T24622] ? lock_release+0x4b/0x3b0 [ 995.971821][T24622] ? __virt_addr_valid+0x1c8/0x5c0 [ 995.971850][T24622] ? __virt_addr_valid+0x4a5/0x5c0 [ 995.971880][T24622] print_report+0xca/0x240 [ 995.971902][T24622] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 995.971932][T24622] kasan_report+0x118/0x150 [ 995.971958][T24622] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 995.971994][T24622] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 995.972030][T24622] ieee80211_do_stop+0x1786/0x1f70 [ 995.972069][T24622] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 995.972099][T24622] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 995.972133][T24622] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 995.972167][T24622] ? lockdep_hardirqs_on+0x98/0x140 [ 995.972193][T24622] ? wiphy_work_cancel+0x1db/0x3b0 [ 995.972227][T24622] ieee80211_stop+0x1b1/0x240 [ 995.972257][T24622] ? __pfx_ieee80211_stop+0x10/0x10 [ 995.972289][T24622] __dev_close_many+0x344/0x6b0 [ 995.972313][T24622] ? __pfx___dev_close_many+0x10/0x10 [ 995.972335][T24622] ? __mutex_trylock_common+0x153/0x260 [ 995.972366][T24622] netif_close_many+0x225/0x410 [ 995.972389][T24622] ? __pfx_netif_close_many+0x10/0x10 [ 995.972408][T24622] ? __mutex_lock+0x335/0x1350 [ 995.972436][T24622] netif_close+0x158/0x210 [ 995.972456][T24622] ? __pfx_netif_close+0x10/0x10 [ 995.972478][T24622] ? __pfx___mutex_lock+0x10/0x10 [ 995.972504][T24622] dev_close+0x10a/0x220 [ 995.972529][T24622] cfg80211_shutdown_all_interfaces+0xc4/0x200 [ 995.972560][T24622] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 995.972590][T24622] cfg80211_rfkill_set_block+0x2d/0x50 [ 995.972620][T24622] rfkill_set_block+0x1d2/0x440 [ 995.972656][T24622] rfkill_fop_write+0x44b/0x570 [ 995.972680][T24622] ? __pfx_rfkill_fop_write+0x10/0x10 [ 995.972702][T24622] ? security_kernfs_init_security+0x220/0x290 [ 995.972724][T24622] ? rw_verify_area+0x255/0x4d0 [ 995.972744][T24622] ? __pfx_rfkill_fop_write+0x10/0x10 [ 995.972767][T24622] vfs_write+0x27e/0xb30 [ 995.972801][T24622] ? __pfx_vfs_write+0x10/0x10 [ 995.972823][T24622] ? __fget_files+0x2a/0x420 [ 995.972850][T24622] ? __fget_files+0x2a/0x420 [ 995.972874][T24622] ? __fget_files+0x3a0/0x420 [ 995.972899][T24622] ? __fget_files+0x2a/0x420 [ 995.972931][T24622] ksys_write+0x145/0x250 [ 995.972952][T24622] ? __pfx_ksys_write+0x10/0x10 [ 995.972974][T24622] ? do_syscall_64+0xbe/0xf80 [ 995.972998][T24622] do_syscall_64+0xfa/0xf80 [ 995.973020][T24622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.973042][T24622] ? clear_bhb_loop+0x60/0xb0 [ 995.973066][T24622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.973085][T24622] RIP: 0033:0x7f671638f749 [ 995.973106][T24622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.973125][T24622] RSP: 002b:00007f67145f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 995.973147][T24622] RAX: ffffffffffffffda RBX: 00007f67165e5fa0 RCX: 00007f671638f749 [ 995.973164][T24622] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 995.973178][T24622] RBP: 00007f6716413f91 R08: 0000000000000000 R09: 0000000000000000 [ 995.973192][T24622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.973205][T24622] R13: 00007f67165e6038 R14: 00007f67165e5fa0 R15: 00007ffde4061f78 [ 995.973231][T24622] [ 995.973239][T24622] [ 996.352640][T24622] The buggy address belongs to the physical page: [ 996.359105][T24622] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880632fba80 pfn:0x632f8 [ 996.369281][T24622] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 996.377811][T24622] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 996.385392][T24622] page_type: f8(unknown) [ 996.389652][T24622] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 996.398257][T24622] raw: ffff8880632fba80 0000000000000000 00000000f8000000 0000000000000000 [ 996.406954][T24622] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 996.415650][T24622] head: ffff8880632fba80 0000000000000000 00000000f8000000 0000000000000000 [ 996.424460][T24622] head: 00fff00000000002 ffffea00018cbe01 00000000ffffffff 00000000ffffffff [ 996.433156][T24622] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 996.441837][T24622] page dumped because: kasan: bad access detected [ 996.448270][T24622] page_owner tracks the page as allocated [ 996.454004][T24622] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 18164, tgid 18164 (syz-executor), ts 707180206983, free_ts 703848904079 [ 996.475921][T24622] post_alloc_hook+0x234/0x290 [ 996.480796][T24622] get_page_from_freelist+0x2365/0x2440 [ 996.486453][T24622] __alloc_frozen_pages_noprof+0x181/0x370 [ 996.492278][T24622] alloc_pages_mpol+0x232/0x4a0 [ 996.497168][T24622] ___kmalloc_large_node+0x4e/0x150 [ 996.502384][T24622] __kmalloc_large_node_noprof+0x18/0x90 [ 996.508085][T24622] __kvmalloc_node_noprof+0x6e/0x920 [ 996.513485][T24622] alloc_netdev_mqs+0xa6/0x11b0 [ 996.518364][T24622] ieee80211_if_add+0x45c/0x1370 [ 996.523327][T24622] ieee80211_register_hw+0x35d9/0x4110 [ 996.528808][T24622] mac80211_hwsim_new_radio+0x2f76/0x5320 [ 996.534549][T24622] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 996.539682][T24622] genl_family_rcv_msg_doit+0x215/0x300 [ 996.545248][T24622] genl_rcv_msg+0x60e/0x790 [ 996.549771][T24622] netlink_rcv_skb+0x208/0x470 [ 996.554582][T24622] genl_rcv+0x28/0x40 [ 996.558578][T24622] page last free pid 18273 tgid 18273 stack trace: [ 996.565090][T24622] __free_frozen_pages+0xbc8/0xd30 [ 996.570218][T24622] __put_partials+0x146/0x170 [ 996.574915][T24622] put_cpu_partial+0x1f2/0x2d0 [ 996.579699][T24622] __slab_free+0x288/0x2a0 [ 996.584228][T24622] qlist_free_all+0x97/0x100 [ 996.588840][T24622] kasan_quarantine_reduce+0x148/0x160 [ 996.594318][T24622] __kasan_slab_alloc+0x22/0x80 [ 996.599191][T24622] kmem_cache_alloc_noprof+0x37d/0x710 [ 996.604676][T24622] mas_alloc_nodes+0x291/0x350 [ 996.609472][T24622] mas_preallocate+0x2e0/0x670 [ 996.614258][T24622] mmap_region+0xf65/0x1d10 [ 996.618874][T24622] do_mmap+0xc45/0x10d0 [ 996.623049][T24622] vm_mmap_pgoff+0x2a6/0x4d0 [ 996.627676][T24622] ksys_mmap_pgoff+0x51f/0x760 [ 996.632466][T24622] do_syscall_64+0xfa/0xf80 [ 996.636983][T24622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.642895][T24622] [ 996.645233][T24622] Memory state around the buggy address: [ 996.650904][T24622] ffff8880632fbc00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 996.658980][T24622] ffff8880632fbc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 996.667050][T24622] >ffff8880632fbd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 996.675220][T24622] ^ [ 996.681909][T24622] ffff8880632fbd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 996.689985][T24622] ffff8880632fbe00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 996.698072][T24622] ================================================================== [ 996.755225][T24622] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 996.762491][T24622] CPU: 1 UID: 0 PID: 24622 Comm: syz.4.4721 Not tainted syzkaller #0 PREEMPT(full) [ 996.771897][T24622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 996.781997][T24622] Call Trace: [ 996.785330][T24622] [ 996.788297][T24622] dump_stack_lvl+0x99/0x250 [ 996.792934][T24622] ? __asan_memcpy+0x40/0x70 [ 996.797565][T24622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 996.802822][T24622] ? __pfx__printk+0x10/0x10 [ 996.807470][T24622] vpanic+0x237/0x6d0 [ 996.811491][T24622] ? __pfx_vpanic+0x10/0x10 [ 996.816030][T24622] ? preempt_schedule_common+0x83/0xd0 [ 996.821503][T24622] ? preempt_schedule+0xae/0xc0 [ 996.826363][T24622] panic+0xb9/0xc0 [ 996.830092][T24622] ? __pfx_panic+0x10/0x10 [ 996.834619][T24622] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 996.840994][T24622] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 996.847250][T24622] check_panic_on_warn+0x89/0xb0 [ 996.852236][T24622] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 996.858416][T24622] end_report+0x6f/0x140 [ 996.862705][T24622] kasan_report+0x129/0x150 [ 996.867242][T24622] ? ieee80211_add_virtual_monitor+0xa42/0xce0 [ 996.873433][T24622] ieee80211_add_virtual_monitor+0xa42/0xce0 [ 996.879533][T24622] ieee80211_do_stop+0x1786/0x1f70 [ 996.884682][T24622] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 996.890083][T24622] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 996.895568][T24622] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 996.901488][T24622] ? lockdep_hardirqs_on+0x98/0x140 [ 996.906712][T24622] ? wiphy_work_cancel+0x1db/0x3b0 [ 996.911857][T24622] ieee80211_stop+0x1b1/0x240 [ 996.916560][T24622] ? __pfx_ieee80211_stop+0x10/0x10 [ 996.921787][T24622] __dev_close_many+0x344/0x6b0 [ 996.926665][T24622] ? __pfx___dev_close_many+0x10/0x10 [ 996.932093][T24622] ? __mutex_trylock_common+0x153/0x260 [ 996.937664][T24622] netif_close_many+0x225/0x410 [ 996.942540][T24622] ? __pfx_netif_close_many+0x10/0x10 [ 996.947926][T24622] ? __mutex_lock+0x335/0x1350 [ 996.952720][T24622] netif_close+0x158/0x210 [ 996.957156][T24622] ? __pfx_netif_close+0x10/0x10 [ 996.962126][T24622] ? __pfx___mutex_lock+0x10/0x10 [ 996.967193][T24622] dev_close+0x10a/0x220 [ 996.971477][T24622] cfg80211_shutdown_all_interfaces+0xc4/0x200 [ 996.977754][T24622] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 996.983948][T24622] cfg80211_rfkill_set_block+0x2d/0x50 [ 996.989473][T24622] rfkill_set_block+0x1d2/0x440 [ 996.994357][T24622] rfkill_fop_write+0x44b/0x570 [ 996.999248][T24622] ? __pfx_rfkill_fop_write+0x10/0x10 [ 997.004637][T24622] ? security_kernfs_init_security+0x220/0x290 [ 997.010809][T24622] ? rw_verify_area+0x255/0x4d0 [ 997.015687][T24622] ? __pfx_rfkill_fop_write+0x10/0x10 [ 997.021120][T24622] vfs_write+0x27e/0xb30 [ 997.025481][T24622] ? __pfx_vfs_write+0x10/0x10 [ 997.030278][T24622] ? __fget_files+0x2a/0x420 [ 997.034916][T24622] ? __fget_files+0x2a/0x420 [ 997.039529][T24622] ? __fget_files+0x3a0/0x420 [ 997.044231][T24622] ? __fget_files+0x2a/0x420 [ 997.048846][T24622] ksys_write+0x145/0x250 [ 997.053197][T24622] ? __pfx_ksys_write+0x10/0x10 [ 997.058072][T24622] ? do_syscall_64+0xbe/0xf80 [ 997.062783][T24622] do_syscall_64+0xfa/0xf80 [ 997.067305][T24622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.073400][T24622] ? clear_bhb_loop+0x60/0xb0 [ 997.078105][T24622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.084015][T24622] RIP: 0033:0x7f671638f749 [ 997.088453][T24622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.108171][T24622] RSP: 002b:00007f67145f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 997.116615][T24622] RAX: ffffffffffffffda RBX: 00007f67165e5fa0 RCX: 00007f671638f749 [ 997.124605][T24622] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 997.132598][T24622] RBP: 00007f6716413f91 R08: 0000000000000000 R09: 0000000000000000 [ 997.140595][T24622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.148582][T24622] R13: 00007f67165e6038 R14: 00007f67165e5fa0 R15: 00007ffde4061f78 [ 997.156591][T24622] [ 997.160226][T24622] Kernel Offset: disabled [ 997.164558][T24622] Rebooting in 86400 seconds..