last executing test programs: 3.921294491s ago: executing program 4 (id=1353): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0xffffffff}, 0x8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x4000, 0x800, 0x0, 0x3}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0xfffffffffffffe12, 0x3, 0xef}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x0, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0xfb}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x8d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x82}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x0, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x0, 0x1, 0x2}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000900), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4044) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={&(0x7f00000003c0)="97", &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r8}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x28}}, 0x8004014) 3.325067576s ago: executing program 4 (id=1358): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) (async) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000010901080000000021000000120080090800034000000008080005400000001a100002000c000280"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000700000000040014001a8010000480"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x1592e566}], 0x2}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x2000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 3.299041407s ago: executing program 3 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x301}, 0x14}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES8=r0], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) read$nci(r3, &(0x7f0000000200)=""/100, 0x64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061114c000000000018000000ffffffff00001a001c9fff7f9500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 3.277102695s ago: executing program 0 (id=1360): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200710000000000040a00000000000000000000008040000000000000000008000000000000000001000203000000004400d566ba07ac0084"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup, r3, 0x13, 0x10}, 0x20) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7, 0x200000}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200710000000000040a00000000000000000000008040000000000000000008000000000000000001000203000000004400d566ba07ac0084"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup, r3, 0x13, 0x10}, 0x20) (async) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7, 0x200000}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) (async) 3.123841425s ago: executing program 2 (id=1361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1802000003000000000000000300000085000000170000008500000011000000950000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000cb000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x38, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000300), 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r7, 0x42093, 0x4}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x2, 0x0, r1, 0x101, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.053058089s ago: executing program 4 (id=1363): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000440)={0x24, @none={0x0, 0xffff}}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8463}], 0x1, 0x0, 0x0, 0x0) close(r1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 2.851858959s ago: executing program 0 (id=1364): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x21902}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x21902}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) 2.833393761s ago: executing program 1 (id=1365): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001340)={0x64, r2, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x44044) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x4}]}}}]}, 0x3c}}, 0x0) 2.562077835s ago: executing program 0 (id=1366): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) close(0xffffffffffffffff) 2.514264806s ago: executing program 2 (id=1367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) shutdown(r0, 0x0) 2.400030965s ago: executing program 0 (id=1368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c060}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r7], 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 2.387710621s ago: executing program 1 (id=1369): unshare(0x8040480) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x40, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devpts_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'team_slave_1\x00', @random="013701369eff"}) 2.292190927s ago: executing program 1 (id=1370): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd35, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6, 0x10}, {0x9}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}}, 0xc000) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) (async) close(r2) (async) r6 = socket$kcm(0x29, 0x5, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000060000000085000000070000009500"/40], &(0x7f0000000200)='GPL\x00', 0x1000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001006010000000000000000000000000a50000000060a0b160000000000000000020000081c000480180001800d00010073796e7072e10ea6e39b706f787900000000040002800900010073797a30000000000900020073797a320000000006000740818100001400000011000100000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendfile(r6, r7, 0x0, 0xffffffff000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r10, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000041b1a801800022447e93e4247c720958c44e16bf4663e0d4cd344b7b24e62cc6175425ce298396b5f904166707ef9090d6e8b2dbd66ff0839b7b492e0b9837c3261fdf5c18b9f82cda2d1ea8af8e4fc668798afe4fe5eb5fe842ecafd18c0e0cb0cf9ff042e76fd4ea6bfdfd01b0c6e982a37a65f0e22b249e21809645c8204e1d831f2368c19501af960e4205911087400e54df2256ae915b29d3fa43c01bd7823034cb41ea7b5180f1637832cae0d1e5ea8d6f4c8030d7df58ab7f237725cdf4a07000000000000001ed5c5c7a5b8e1fb4e0de2caff0625326a57104200"/248, @ANYRESOCT=r7, @ANYRES16=0x0], 0x44}}, 0x815) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.203462779s ago: executing program 3 (id=1371): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010001b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.134449116s ago: executing program 4 (id=1372): r0 = socket(0xa, 0x80805, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4008}, [@generic={0x0, 0x1, 0x1, 0xa0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket(0x1a, 0xa, 0x6) pipe(0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}, 0x1, 0x2}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000000c0)='f', 0x1}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="a41500d40f870153ee4fce193c25ab26263ea88ba244b08d18ae8faf7d8f03eb931e4c6ea59abefa0deafe4aad080951eb6cb2248f9b7b5030c0f25523f7bc7fce26e21d9cb2f496e56ba52ad15cb9df02350b229f699b58695e87994fa6b72e71c4975fb27f21c231144f4550e312fc00a115a5b8b43c9e4f8051144f3d3bb7587a1bc3e4adef44dcbac98f8c11846f30dc605a1991f3737be04d1b71392453c03acc93aa1b287e3cca9dec1ee42f5936d4e98371fa29c513e6", 0xba}, {&(0x7f00000006c0)="2048ce86e9f504a0a1212621677c30c5d24967e23f30ea1eea02186558c83aa6c66c40f6ece5b43b75977f42ac35bc44c304b341eb8107d6fb5aa637ea922ff6420f895fe5c1a33585e220ad1d953c6b3c7699e001c74dd310cb8391884aede6d5ac2a591ff8d889073136cda13303085bd54422c5f8dca2a8b25a763fffc22ce50f971082", 0xd1}, {&(0x7f00000004c0)}, {&(0x7f0000000840)="df95a61cebf6e329f0d892a38b6c4e2dda56fd33dffffbeb6c5987c08bc0f11a84f65754db76a11ae552c913a3c2dc357e680dd41c69f27992aeadef928cb0c5bd431311743055a91788205b173bf6b44d9c80fbdf49189ce18b199e4e72ca0d8875b43007836926da48b6a97a77dd119dc8902eb14695ea303925f52a433be4f9036086e8207f6dbc85f142373ad61cd2ec3fa2347f77f1a171a78893b22c1578f1bbe3b093b6d191ab4175ccd904cc21fa942b809a3681fef688e553b42dbdf617bd28", 0xc4}, {0x0}, {0x0}], 0x8, 0x0, 0x0, 0x900}, 0x60) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000706010200000000000000000a0000050e0001000700", @ANYRES64=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000180)={r2, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0xc082, 0x0, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f0000000080)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d3000000000000008"], 0x34}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000000c80)={@none, 0xfff, 0x6, 0x8, 0x5, 0x2, "3de3ec9ae3c724fe2f9bd0af27c8d617197ef4b2ed8bd6e0f603e646d7cb8a65f1c191f9f4a5810a2565ececbd771600ffd1edb59212f2874b480287ec294e84af5ce61f642cbd53aea036944ca0eefae708aad5e03d91cc8eccfd4ec4665065f52089208b99ebf8fd14645a3919cb804846ecde861b5e51324e355bc43721f9"}) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) 2.062539764s ago: executing program 3 (id=1373): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macvtap0\x00', 0x20}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x6, 0x3, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8b4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c00", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x80, 0xfffffffffffffff8, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x0, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x5b10df4d84c3f683}, 0x240448c8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x0, 0x0, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@remote, @dev={0xac, 0x14, 0x14, 0xa}, 0xffffff00, 0x0, 0x0, 0xf, {@mac=@remote, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x18, 0x3ff, 0x1, 0x4, 0x1, 0x8, 'syzkaller1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f06cc6001e11", @mac=@multicast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="1b00be002004", @local, @local, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460) 2.015872297s ago: executing program 1 (id=1374): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000efff"], 0x14}, 0x1, 0x0, 0x0, 0x4000055}, 0xc4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0xfffffffd, 0x40000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="180000000000000000000000000000006119040000000000950000000000000090"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f00000000c0)=0x7, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) setsockopt$inet_group_source_req(r3, 0x0, 0x3, &(0x7f0000000600)={0xe, {{0x2, 0x4e20, @private=0xa010101}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1a, 0x6, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0xb}, @call={0x85, 0x0, 0x0, 0x89}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc2d00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x21, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000100)=0x80000001, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESDEC=r0], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) 1.949151542s ago: executing program 0 (id=1375): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0xffffffffffff1399, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x9, 0x80}, 0xfffffffc}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffb, 0x4, 0x3, 0x0, 0x6, 0x800}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) (async) connect$inet(r3, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_newneigh={0x50, 0x1c, 0x400, 0x70bd28, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, [@NDA_SRC_VNI={0x8, 0xb, 0x10002}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FDB_EXT_ATTRS={0x24, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c0}, 0x0) 1.922885726s ago: executing program 3 (id=1376): r0 = socket(0x28, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce1c, @multicast2}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x6, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, @can={0x1d, r2}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x7, 0xfffffffffffffffd, 0x3f0}) socket(0x28, 0x5, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce1c, @multicast2}, 0x10) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) (async) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x6, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, @can={0x1d, r2}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x7, 0xfffffffffffffffd, 0x3f0}) (async) 1.616093023s ago: executing program 3 (id=1377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x0, 0x0, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x2, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x2e, 0x2, 0x2}, 0x0, 0xf8, 0x220, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2000, 0x2}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x4, 'system_u:object_r:systemd_logind_sessions_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async, rerun: 32) r1 = socket$inet(0x2, 0x5, 0x5) (rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000440), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0x80000080, 0x2, 0x6, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x7a, 0x7, 0x8, 0x10, 0x3, 0x5a5, 'vcan0\x00', 'bridge0\x00', {}, {}, 0x0, 0x300}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x7, 0x1}}}, {{@arp={@remote, @empty, 0xff000000, 0xffffffff, 0x5, 0x0, {@mac=@broadcast, {[0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff]}}, 0x9, 0x401, 0x9, 0x1000, 0x3, 0xff, 'wg1\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x4b}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2b}, @loopback, 0xff, 0xffffffff, 0xe, 0xc, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0xff]}}, {@empty, {[0xff]}}, 0xfff, 0x6, 0x4, 0x4, 0x2, 0xd, 'ip6gre0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @multicast1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.610604384s ago: executing program 4 (id=1378): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ff800000000500030080ffffff05000300050000000500036c1dff00000500030080ffffff0800020003"], 0x50}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getqdisc={0x2c, 0x26, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0x1ffe9}, {0xfff3, 0xb}, {0x3, 0x3}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xd}, {0xfff1, 0x4}}}, 0x24}}, 0x0) 1.571732917s ago: executing program 2 (id=1379): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x2010, r2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20040) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x300, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x3c}}, 0x20000040) 1.140156293s ago: executing program 4 (id=1380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0, @ANYRES8, @ANYRESHEX=r0, @ANYBLOB="496db22c6f2eb6587fd416e95698c16ece4eadb108585233bf83878f6b601c5389c3ea3f7a3dfe66d20def755a88dca1698a2ff41c463ebad90ca3f8a1298cd7f87dc919168fcab54834e365039bfb433de8fe83fcd91b6db8e20ecc86e6fd73186325eeeb40409290e789ad63eeea85b5deae4136eb3e53ed23dac9a308b12a35f540badf236ce948d5f93a585c485659c15b81f7bdfacae989d20030d5f9ca523e5bdba71503667d3efea5df913d37cf894afb94d7d78a742e8c", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES16=0x0], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01080000000000000000020000000900010073797a30000000000c000240000000000000000104000480080007006e617d00140000001100010000000000000000000000000a"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x4, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="0000000021040259a4ce78b0a0a43100"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x20000090) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xcb, 0x4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x23, 0x80000, 0x5ca5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe05ad120008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x2d, 0x2, 0x0) 1.115777242s ago: executing program 2 (id=1381): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 1.000568852s ago: executing program 1 (id=1382): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="e644d375bc66b49f05a6e337546149889940139223b2225606e63d8267b0ec053eb622e6e6daca08be95c2e834e4a8d585eb8d9dfca63fdfe063ade4c8650f61a1dd69aaf6bd195305076e130161000084fb6f0f393cb9b6c17aa0b46c122040febdb29fa2fa6b5d2ade0211ebd9ebb02920b0e3474967c462611b87b5526d4626f6412c1fd5f124e0f3b55f5b8624865730b2c2a24ab2f26a0e52d01be58937dd0dd0ae4a7a594c9acd88a86f433ec15bbded006a16705edef56347a077c92b75203bc8719fb42f0ff8959073e855e27df4921d6343bfba84376bd826ea29cab888dc4a231bbb14cb983185878208a992a4"], &(0x7f0000000100)='syzkaller\x00', 0x814, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept(r1, 0x0, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="19fd9bed22ac2a90d79729758c8eec869f68cc1cb5ef9a2b0f9efd6cf7828e49625b6a74403aa1a11329ff614cfb541aee3bb1de75901f0d44a30d7b651c6cb50594c012cf6cf0d736b1d8071d01c8093f87bd95554dd0832726e46f997c2d55c36a9f5562b9f882c8cd13d63719c6f50fe9f8b568afa7e1c8c4dc2da3e90caa9a72772d3f7058c2c0ee41599cd19d0ef13242b7456d49c487c3aede74eec7e347e07d7e8c0e7578cc5b2c11", 0xac}, {&(0x7f00000002c0)="3009e8e4c2c988ca4cd4d6736eacbb5dc9dc23db", 0xffffff0a}], 0x2, 0x0, 0x0, 0x4000411}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000100001042abd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="8031050000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000ffff7f00000104001200050016000100000008001500488103a0"], 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x40) 835.898881ms ago: executing program 2 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) listen(r2, 0xda90) (async) r3 = socket(0x2, 0x80805, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) unshare(0x2020600) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0xffffff24, 0xb3, 0x1000}, 0xc) (async) accept$inet(r2, &(0x7f0000000000), 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="840a00000000000061116800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9}, 0x94) 581.129603ms ago: executing program 3 (id=1384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="851000000400000095000000000000001800000000000000000000000000000085100000feffffff85100000fcffffffbed0bdab650cad59d65151fee70f82a3f6557714fe5e41bab7e71295d860479226d814cf6824add1168e6fecd68f924a4140559333b8a01a7d29f7fc53446f2b6946868ce2b5a7d17f25d191677abf2277c3bbaca4e797604ad39458a2603d4eb1606a933038df12e38a534683da3627f16042868afb126a25546a4f120ac79efa2705"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000000)="09000000010017", 0x7) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/cgroup\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0xffffffffffffff8e, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x9}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB='\t\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fcdbdf251900000008000300", @ANYRES32=r10, @ANYBLOB="05001e000500000005001d0008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYBLOB="000829bd7000fddb52a3045a00e607000100600000000c009d0005000000520000000c406f1a74b4767591e52e86591983ca0099000800a4b334e3f65586a69a1bba00005d000000000000000000000000000089d3a138d9f83591d3e70a1c01b184edfcbf83fc2e1519ad635b9d41b40076b6b1c5454639cb0182ddd8c1ca81108e508594cd6efa957ba397e1db85e26f58062691df3e62a216b0682e1c8238c0446b08cf59e8135e99a2547a5ce75d7de80949d7c0980773bd368e58210bdfd3821f3b8128cabebc2c0a1521e4f6031030afa398f74d3ae7863be4959bf85457ffa9f478a859063ec1844e97c2bf3fba5e1531e03c02", @ANYRES32=r4, @ANYBLOB="080001006b0000000800db00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="0c009900000000000e000000"], 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x8044) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c01b00002e000b0000000000000000000200000008000300040001000c0001"], 0x1bc0}}, 0x8000) 523.698194ms ago: executing program 0 (id=1385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 303.604589ms ago: executing program 2 (id=1386): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'gre0\x00'}) (async) sendmsg$nl_route_sched(r1, 0x0, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 32) r3 = socket$inet_icmp(0x2, 0x2, 0x1) (rerun: 32) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @broadcast, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xd9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x128, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x18}, {0x1}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:dhcp_etc_t:s0\x00'}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00, 0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0x9b6e3a8ecd17349e}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x228, 0x268, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x23472cfe, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a0eb26d22d902635a617f10effdb49c4b218e23b8f151bcf7f66d1cac68d"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5e8) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x841) (async, rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a0102000000000000000001"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x64}}, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (rerun: 64) 0s ago: executing program 1 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r3, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, 0x0, 0x0) unshare(0x2c060000) (async) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r10, 0xf501, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 75.504051][ T5620] cgroup: Unknown subsys name 'net' [ 75.614162][ T5620] cgroup: Unknown subsys name 'cpuset' [ 75.623114][ T5620] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.239863][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.347804][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.360786][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.369524][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.379136][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.387767][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.501412][ T4949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.511381][ T4949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.520685][ T4949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.531878][ T4949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.544700][ T4949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.604073][ T4949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.621398][ T5647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.630718][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.643832][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.654084][ T5649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.664783][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.666051][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.674487][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.681081][ T5649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.688317][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.696077][ T5649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.703719][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.711448][ T5649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.717548][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.734425][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.209833][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.218233][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.226506][ T5632] bridge_slave_0: entered allmulticast mode [ 81.235267][ T5632] bridge_slave_0: entered promiscuous mode [ 81.277544][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.284882][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.293120][ T5632] bridge_slave_1: entered allmulticast mode [ 81.301203][ T5632] bridge_slave_1: entered promiscuous mode [ 81.410181][ T5633] Bluetooth: hci0: command tx timeout [ 81.502707][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.560543][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.585867][ T5633] Bluetooth: hci1: command tx timeout [ 81.624229][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.631580][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.638922][ T5642] bridge_slave_0: entered allmulticast mode [ 81.646282][ T5642] bridge_slave_0: entered promiscuous mode [ 81.700118][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.707523][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.714940][ T5642] bridge_slave_1: entered allmulticast mode [ 81.723618][ T5642] bridge_slave_1: entered promiscuous mode [ 81.732493][ T5632] team0: Port device team_slave_0 added [ 81.774756][ T5632] team0: Port device team_slave_1 added [ 81.809306][ T50] Bluetooth: hci3: command tx timeout [ 81.815684][ T5647] Bluetooth: hci4: command tx timeout [ 81.821736][ T5633] Bluetooth: hci2: command tx timeout [ 81.872512][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.893550][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.900793][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.926858][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.957052][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.973342][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.980427][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.006416][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.017867][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.025476][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.032877][ T5648] bridge_slave_0: entered allmulticast mode [ 82.040354][ T5648] bridge_slave_0: entered promiscuous mode [ 82.082695][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.090244][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.097586][ T5648] bridge_slave_1: entered allmulticast mode [ 82.105087][ T5648] bridge_slave_1: entered promiscuous mode [ 82.177177][ T5642] team0: Port device team_slave_0 added [ 82.204497][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.212550][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.220248][ T5638] bridge_slave_0: entered allmulticast mode [ 82.227326][ T5638] bridge_slave_0: entered promiscuous mode [ 82.247504][ T5642] team0: Port device team_slave_1 added [ 82.253320][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.260634][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.267794][ T5641] bridge_slave_0: entered allmulticast mode [ 82.275222][ T5641] bridge_slave_0: entered promiscuous mode [ 82.286203][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.299649][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.322727][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.330202][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.338070][ T5638] bridge_slave_1: entered allmulticast mode [ 82.345842][ T5638] bridge_slave_1: entered promiscuous mode [ 82.386698][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.393982][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.401623][ T5641] bridge_slave_1: entered allmulticast mode [ 82.408870][ T5641] bridge_slave_1: entered promiscuous mode [ 82.443641][ T5632] hsr_slave_0: entered promiscuous mode [ 82.450604][ T5632] hsr_slave_1: entered promiscuous mode [ 82.479779][ T5648] team0: Port device team_slave_0 added [ 82.488376][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.500599][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.507622][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.534079][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.557738][ T5648] team0: Port device team_slave_1 added [ 82.565774][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.585536][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.592773][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.619837][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.633964][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.681865][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.735038][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.742506][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.768545][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.782177][ T5638] team0: Port device team_slave_0 added [ 82.812248][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.819593][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.845666][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.859417][ T5638] team0: Port device team_slave_1 added [ 82.884290][ T5641] team0: Port device team_slave_0 added [ 82.925281][ T5641] team0: Port device team_slave_1 added [ 82.973012][ T5642] hsr_slave_0: entered promiscuous mode [ 82.979670][ T5642] hsr_slave_1: entered promiscuous mode [ 82.985787][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 82.991860][ T5642] Cannot create hsr debugfs directory [ 83.010840][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.017925][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.044238][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.055918][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.063248][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.089682][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.102650][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.109670][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.135845][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.167353][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.174527][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.204268][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.289781][ T5648] hsr_slave_0: entered promiscuous mode [ 83.296132][ T5648] hsr_slave_1: entered promiscuous mode [ 83.302731][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 83.308490][ T5648] Cannot create hsr debugfs directory [ 83.421842][ T5641] hsr_slave_0: entered promiscuous mode [ 83.428611][ T5641] hsr_slave_1: entered promiscuous mode [ 83.434972][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 83.440878][ T5641] Cannot create hsr debugfs directory [ 83.453741][ T5638] hsr_slave_0: entered promiscuous mode [ 83.460438][ T5638] hsr_slave_1: entered promiscuous mode [ 83.466609][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 83.472460][ T5638] Cannot create hsr debugfs directory [ 83.489208][ T5633] Bluetooth: hci0: command tx timeout [ 83.649339][ T5633] Bluetooth: hci1: command tx timeout [ 83.738946][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.753490][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.796857][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.808731][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.867913][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.877994][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.886865][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.898292][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.906187][ T50] Bluetooth: hci3: command tx timeout [ 83.909810][ T5633] Bluetooth: hci2: command tx timeout [ 83.911687][ T5647] Bluetooth: hci4: command tx timeout [ 84.077378][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.087640][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.096024][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.106848][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.116141][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.126522][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.135996][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.145773][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.265865][ T5641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.277750][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.291781][ T5641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.304855][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.320434][ T5641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.331032][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.353619][ T5641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.363791][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.470894][ T5648] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.481650][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.490472][ T5648] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.502173][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.510554][ T5648] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.521509][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.535435][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.544999][ T5648] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.555137][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.655642][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.681631][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.704184][ T5638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.715173][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.723728][ T5638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.734160][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.742356][ T5638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.755406][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.767803][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.775186][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.790126][ T5638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.801098][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.823405][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.830563][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.891511][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.947525][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.954709][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.998751][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.005901][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.054264][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.107373][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.133426][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.186187][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.193481][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.246170][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.253620][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.283260][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.327076][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.334323][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.392887][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.423259][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.430674][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.555581][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.571369][ T5647] Bluetooth: hci0: command tx timeout [ 85.636198][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.643811][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.694390][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.701652][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.730142][ T5647] Bluetooth: hci1: command tx timeout [ 85.969702][ T5647] Bluetooth: hci3: command tx timeout [ 85.971005][ T50] Bluetooth: hci2: command tx timeout [ 85.975732][ T5647] Bluetooth: hci4: command tx timeout [ 86.019488][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.224268][ T5632] veth0_vlan: entered promiscuous mode [ 86.298817][ T5632] veth1_vlan: entered promiscuous mode [ 86.488432][ T5632] veth0_macvtap: entered promiscuous mode [ 86.522804][ T5632] veth1_macvtap: entered promiscuous mode [ 86.552259][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.645649][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.711524][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.775558][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.811333][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.837904][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.873133][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.204575][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.259381][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.303586][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.396428][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.465605][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.493590][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.510508][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.634376][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.659386][ T5647] Bluetooth: hci0: command tx timeout [ 87.729524][ T5641] veth0_vlan: entered promiscuous mode [ 87.761518][ T5648] veth0_vlan: entered promiscuous mode [ 87.798569][ T5641] veth1_vlan: entered promiscuous mode [ 87.812386][ T5647] Bluetooth: hci1: command tx timeout [ 87.864172][ T5638] veth0_vlan: entered promiscuous mode [ 87.882497][ T5642] veth0_vlan: entered promiscuous mode [ 87.910912][ T5648] veth1_vlan: entered promiscuous mode [ 87.945350][ T5638] veth1_vlan: entered promiscuous mode [ 87.953621][ T5642] veth1_vlan: entered promiscuous mode [ 87.970652][ T5826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'. [ 88.051684][ T5633] Bluetooth: hci3: command tx timeout [ 88.053473][ T50] Bluetooth: hci4: command tx timeout [ 88.057206][ T5647] Bluetooth: hci2: command tx timeout [ 88.078662][ T5641] veth0_macvtap: entered promiscuous mode [ 88.113584][ T5641] veth1_macvtap: entered promiscuous mode [ 88.178947][ T5648] veth0_macvtap: entered promiscuous mode [ 88.227572][ T5648] veth1_macvtap: entered promiscuous mode [ 88.250396][ T5638] veth0_macvtap: entered promiscuous mode [ 88.262787][ T5642] veth0_macvtap: entered promiscuous mode [ 88.282835][ T5638] veth1_macvtap: entered promiscuous mode [ 88.297228][ T5642] veth1_macvtap: entered promiscuous mode [ 88.310354][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.363922][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.404252][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.423305][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.440718][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.460501][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.471729][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.483166][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.492157][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.504039][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.536203][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.549701][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.572754][ T1006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609403][ T1006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.629557][ T1006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.651413][ T1006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.675827][ T1006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.684824][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.710968][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.720430][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.792843][ T1006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.810784][ T1006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.863461][ T1006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.928988][ T1006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.986954][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.999810][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.057043][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.072664][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.147939][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.165379][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.191924][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.203867][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.286582][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.304742][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.365744][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.397381][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.487011][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.504859][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.507977][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.537216][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.558617][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.597066][ T5647] block nbd0: Receive control failed (result -1) [ 90.173673][ T5873] Bluetooth: MGMT ver 1.23 [ 90.386663][ T5878] netlink: 'syz.0.16': attribute type 3 has an invalid length. [ 90.406501][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14'. [ 90.419188][ T5878] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 90.437814][ T5878] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16'. [ 90.572574][ T5875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.863475][ T5902] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET) [ 91.073722][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 91.425232][ T5908] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 91.577106][ T5909] netlink: 'syz.1.23': attribute type 4 has an invalid length. [ 91.590747][ T24] cfg80211: failed to load regulatory.db [ 91.896176][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 92.138824][ T5922] tap0: tun_chr_ioctl cmd 2147767520 [ 92.225034][ T5926] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 92.393685][ T5926] syz_tun: entered promiscuous mode [ 92.826285][ T5941] tipc: Started in network mode [ 92.874558][ T5941] tipc: Node identity ac14140f, cluster identity 4711 [ 92.901947][ T5941] tipc: New replicast peer: 255.255.255.255 [ 92.924390][ T5941] tipc: Enabled bearer , priority 10 [ 93.078593][ T5947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 93.118200][ T5956] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 93.147762][ T5956] bond1 (unregistering): Released all slaves [ 93.343331][ T5967] sctp: [Deprecated]: syz.2.38 (pid 5967) Use of int in maxseg socket option. [ 93.343331][ T5967] Use struct sctp_assoc_value instead [ 93.657522][ T5981] netlink: 128 bytes leftover after parsing attributes in process `syz.0.43'. [ 94.040696][ T5853] tipc: Node number set to 2886997007 [ 94.231316][ T6006] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 94.251765][ T6006] netlink: 'syz.4.47': attribute type 2 has an invalid length. [ 94.268474][ T6006] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 94.277708][ T6006] netlink: 'syz.4.47': attribute type 2 has an invalid length. [ 94.364953][ T6008] netlink: 'syz.0.48': attribute type 30 has an invalid length. [ 94.568569][ T6017] x_tables: duplicate underflow at hook 2 [ 94.892334][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.011157][ T6033] Zero length message leads to an empty skb [ 95.215056][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.267567][ T6048] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.60'. [ 95.314760][ T6040] netlink: 200 bytes leftover after parsing attributes in process `syz.2.56'. [ 95.326103][ T6053] IPVS: length: 120 != 24 [ 95.390570][ T6050] dvmrp0: entered allmulticast mode [ 95.695799][ T6065] netlink: 48 bytes leftover after parsing attributes in process `syz.4.64'. [ 95.874369][ T6077] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.927575][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 96.027228][ T6082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.146934][ T6090] netlink: 'syz.0.69': attribute type 3 has an invalid length. [ 96.395064][ T6096] xt_hashlimit: size too large, truncated to 1048576 [ 96.457178][ T6099] xt_hashlimit: size too large, truncated to 1048576 [ 96.479700][ T6099] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 96.505060][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 96.514214][ T6107] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 96.544096][ T6108] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 96.998027][ T6117] ipt_REJECT: TCP_RESET invalid for non-tcp [ 97.096290][ T6114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.177234][ T6118] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 97.210863][ T6118] batman_adv: batadv0: Adding interface: gretap1 [ 97.218643][ T6118] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.246870][ T6118] batman_adv: batadv0: Interface activated: gretap1 [ 97.310898][ T6114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.486942][ T6136] sctp: [Deprecated]: syz.4.83 (pid 6136) Use of int in maxseg socket option. [ 97.486942][ T6136] Use struct sctp_assoc_value instead [ 97.486948][ T6114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.547581][ T6133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.82'. [ 97.597159][ T6114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.704237][ T6141] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.84'. [ 97.748635][ T6141] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 97.779722][ T6141] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 97.819768][ T6141] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 97.877297][ T6141] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.955307][ T6141] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.994134][ T3326] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.034684][ T3326] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.089589][ T3326] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.195146][ T1354] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.433499][ T1354] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.456997][ T1354] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.488111][ T1354] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.545067][ T6173] syzkaller0: entered promiscuous mode [ 98.563222][ T6173] syzkaller0: entered allmulticast mode [ 98.583114][ T1354] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.697638][ T6176] bond1: entered promiscuous mode [ 98.718253][ T6176] bond1: entered allmulticast mode [ 98.735078][ T6176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.226333][ T6198] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 99.379337][ T6211] __nla_validate_parse: 4 callbacks suppressed [ 99.379358][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.104'. [ 99.503514][ T6219] Bluetooth: MGMT ver 1.23 [ 99.766451][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 99.803584][ T6225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.864326][ T6225] netlink: 'syz.0.107': attribute type 1 has an invalid length. [ 99.874893][ T6225] netlink: 224 bytes leftover after parsing attributes in process `syz.0.107'. [ 100.205326][ T6240] pim6reg: entered allmulticast mode [ 100.417914][ T5815] IPVS: starting estimator thread 0... [ 100.520268][ T6247] IPVS: using max 26 ests per chain, 62400 per kthread [ 100.694526][ T6253] xt_bpf: check failed: parse error [ 101.512670][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 101.566363][ T6276] bond1: Invalid ad_actor_system MAC address. [ 101.591700][ T6276] bond1: option ad_actor_system: invalid value (7) [ 101.626535][ T6276] bond1 (unregistering): Released all slaves [ 101.987237][ T6286] netlink: 'syz.3.121': attribute type 5 has an invalid length. [ 102.301890][ T6293] netlink: 'syz.3.123': attribute type 5 has an invalid length. [ 102.319278][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.378590][ T6293] ip6erspan0: entered promiscuous mode [ 102.772873][ T6311] netlink: 'syz.0.125': attribute type 8 has an invalid length. [ 103.266063][ T6329] bridge2: entered promiscuous mode [ 103.278284][ T6329] bridge2: entered allmulticast mode [ 103.584184][ T6344] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.767011][ T5853] IPVS: starting estimator thread 0... [ 103.880414][ T6352] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.892498][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 104.005958][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 104.076386][ T6356] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 104.076584][ T6361] netlink: 260 bytes leftover after parsing attributes in process `syz.0.133'. [ 104.106737][ T6356] netlink: 96 bytes leftover after parsing attributes in process `syz.3.132'. [ 104.112320][ T6363] can: request_module (can-proto-4) failed. [ 104.122131][ T6356] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 104.152784][ T6356] netlink: 'syz.3.132': attribute type 8 has an invalid length. [ 104.161114][ T6356] netlink: 606 bytes leftover after parsing attributes in process `syz.3.132'. [ 104.634949][ T6380] __nla_validate_parse: 1 callbacks suppressed [ 104.634970][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 104.645585][ T6375] syzkaller0: entered promiscuous mode [ 104.696368][ T6375] syzkaller0: entered allmulticast mode [ 104.707295][ T6380] netlink: 84 bytes leftover after parsing attributes in process `syz.0.136'. [ 104.736498][ T6380] netlink: 'syz.0.136': attribute type 1 has an invalid length. [ 104.808734][ T6385] netlink: 'syz.4.137': attribute type 3 has an invalid length. [ 105.146256][ T6386] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 105.858233][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 105.893764][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 106.559904][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 107.139728][ T6461] netlink: 'syz.0.154': attribute type 29 has an invalid length. [ 107.161816][ T6461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 107.185340][ T6461] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 107.638960][ T6488] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 108.024181][ T6510] netlink: 'syz.2.169': attribute type 13 has an invalid length. [ 108.055070][ T6505] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 108.064871][ T6510] netlink: 'syz.2.169': attribute type 17 has an invalid length. [ 108.141869][ T6505] bond2: entered allmulticast mode [ 108.236435][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.167'. [ 108.480263][ T6524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.172'. [ 108.663655][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 108.713164][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 108.956365][ T6509] bond2: (slave ip6gretap1): making interface the new active one [ 108.967606][ T6509] ip6gretap1: entered allmulticast mode [ 108.986408][ T6509] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 109.076306][ T6505] veth3: entered promiscuous mode [ 109.107130][ T6505] bond2: (slave veth3): Enslaving as an active interface with a down link [ 109.153403][ T6517] bond2: left allmulticast mode [ 109.163209][ T6517] ip6gretap1: left allmulticast mode [ 109.181712][ T6517] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.218620][ T6538] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 109.542332][ T6555] xt_TCPMSS: Only works on TCP SYN packets [ 110.148626][ T6575] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 110.168144][ T6575] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 110.563734][ T6593] bond1 (unregistering): Released all slaves [ 110.651113][ T6593] __nla_validate_parse: 3 callbacks suppressed [ 110.651219][ T6593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.186'. [ 111.041385][ T6605] workqueue: name exceeds WQ_NAME_LEN. Truncating to: çþÏ€Ôxµ…üô–)%ë ]ÓÙ.˜>„n÷6‡# [ 111.465106][ T6625] syzkaller0: entered promiscuous mode [ 111.487531][ T6625] syzkaller0: entered allmulticast mode [ 111.532117][ T6625] tipc: Started in network mode [ 111.548018][ T6625] tipc: Node identity ac14140f, cluster identity 4711 [ 111.571010][ T6625] tipc: New replicast peer: 255.255.255.255 [ 111.592255][ T6625] tipc: Enabled bearer , priority 10 [ 111.687973][ T6625] tipc: Enabled bearer , priority 0 [ 111.717987][ T6625] tipc: Resetting bearer [ 111.740048][ T6625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.748657][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 111.756353][ T6625] IPv6: NLM_F_CREATE should be set when creating new route [ 111.787440][ T6624] tipc: Resetting bearer [ 111.867033][ T6624] tipc: Disabling bearer [ 111.926421][ T6649] netlink: 6308 bytes leftover after parsing attributes in process `syz.2.202'. [ 112.177049][ T6665] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 112.228122][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 112.712726][ T5752] tipc: Node number set to 2886997007 [ 112.755668][ T6683] batadv0: entered promiscuous mode [ 112.894871][ T6690] netlink: 96 bytes leftover after parsing attributes in process `syz.3.210'. [ 113.013275][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 113.038783][ T6693] nbd: must specify a size in bytes for the device [ 113.905646][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 114.328414][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 114.763152][ T6740] netlink: 192 bytes leftover after parsing attributes in process `syz.4.223'. [ 114.795403][ T6750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.224'. [ 115.464876][ T6773] syzkaller0: entered promiscuous mode [ 115.487989][ T6773] syzkaller0: entered allmulticast mode [ 115.514830][ T6774] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 115.624073][ T6777] raw_sendmsg: syz.3.233 forgot to set AF_INET. Fix it! [ 115.681833][ T6777] bond1: ARP target 9.0.0.0 is already present [ 115.704843][ T6777] bond1: option arp_ip_target: invalid value (9) [ 115.728647][ T6777] bond1 (unregistering): Released all slaves [ 115.728763][ T6783] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 115.830061][ T6783] bond1: entered promiscuous mode [ 115.836660][ T6783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.972268][ T6783] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.996172][ T6783] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 116.008182][ T6783] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 116.025894][ T6783] bond1: (slave vti0): making interface the new active one [ 116.046166][ T6783] vti0: entered promiscuous mode [ 116.079124][ T6783] bond1: (slave vti0): Enslaving as an active interface with an up link [ 116.292374][ T6797] geneve3: entered promiscuous mode [ 116.866219][ T6830] x_tables: duplicate underflow at hook 1 [ 116.904117][ T6833] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.250'. [ 117.171384][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 117.201895][ T6839] netlink: 'syz.4.249': attribute type 13 has an invalid length. [ 117.223040][ T6839] netlink: 'syz.4.249': attribute type 17 has an invalid length. [ 117.517765][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 117.985861][ T6853] bond1: left promiscuous mode [ 118.005954][ T6853] vti0: left promiscuous mode [ 118.042929][ T6817] lo: entered allmulticast mode [ 118.458875][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'. [ 118.472877][ T6883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'. [ 118.752152][ T6894] Cannot find set identified by id 0 to match [ 118.808068][ T6894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 118.921060][ T6903] trusted_key: syz.4.266 sent an empty control message without MSG_MORE. [ 119.404248][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 119.426032][ T6921] hsr_slave_0: left promiscuous mode [ 119.432652][ T6921] hsr_slave_1: left promiscuous mode [ 119.525502][ T6927] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 119.542908][ T6927] netlink: 'syz.1.274': attribute type 2 has an invalid length. [ 119.668489][ T6932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 121.842205][ T6934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 121.852672][ T6935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.276'. [ 121.981949][ T6970] bond2 (unregistering): Released all slaves [ 122.040392][ T6975] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.283'. [ 122.052356][ T6975] netlink: 'syz.3.283': attribute type 1 has an invalid length. [ 122.108858][ T6977] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.121056][ T6977] netlink: 35 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.137814][ T6977] netlink: 'syz.2.285': attribute type 5 has an invalid length. [ 122.147387][ T6977] netlink: 35 bytes leftover after parsing attributes in process `syz.2.285'. [ 122.157612][ T6972] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 122.296728][ T6975] bond1: entered promiscuous mode [ 122.320994][ T6975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.374841][ T6989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.284'. [ 122.418395][ T6980] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.449576][ T6980] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 122.467751][ T6980] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 122.496925][ T7003] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.284'. [ 122.531468][ T7000] netlink: 60 bytes leftover after parsing attributes in process `syz.4.284'. [ 123.295154][ T7030] tipc: Started in network mode [ 123.303292][ T7030] tipc: Node identity ceb6bdd216c4, cluster identity 4711 [ 123.318720][ T7030] tipc: Enabled bearer , priority 0 [ 123.338272][ T7030] syzkaller0: entered promiscuous mode [ 123.351696][ T7030] syzkaller0: entered allmulticast mode [ 123.392479][ T7030] tipc: Resetting bearer [ 123.445463][ T7030] netlink: 96 bytes leftover after parsing attributes in process `syz.3.295'. [ 123.595645][ T7028] tipc: Resetting bearer [ 123.630442][ T7028] tipc: Disabling bearer [ 123.726260][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.299'. [ 123.956910][ T7047] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.300'. [ 123.983276][ T7047] openvswitch: netlink: Flow key attr not present in new flow. [ 124.163420][ T7058] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 124.333294][ T7058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.023525][ T7089] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.946079][ T7136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 127.404289][ T7155] __nla_validate_parse: 6 callbacks suppressed [ 127.404311][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'. [ 127.585786][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 128.142626][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 128.162002][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.340'. [ 128.164178][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 128.186616][ T7202] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 128.225415][ T3301] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 128.293513][ T7199] syzkaller1: entered promiscuous mode [ 128.299988][ T5647] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.337795][ T7199] syzkaller1: entered allmulticast mode [ 128.778381][ T7184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.072458][ T7224] netlink: 'syz.3.346': attribute type 3 has an invalid length. [ 129.300729][ T7220] syz.2.348 (7220) used greatest stack depth: 17408 bytes left [ 129.326792][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 129.445112][ T7241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.353'. [ 130.988290][ T7286] netlink: 88 bytes leftover after parsing attributes in process `syz.4.365'. [ 131.019279][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 131.041395][ T7288] xt_TCPMSS: Only works on TCP SYN packets [ 131.066939][ T7286] netlink: 'syz.4.365': attribute type 2 has an invalid length. [ 131.082519][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 131.147587][ T7290] veth0: entered promiscuous mode [ 131.298006][ T7289] veth0: left promiscuous mode [ 131.313779][ T7301] geneve2: entered promiscuous mode [ 132.417299][ T7342] syzkaller0: entered promiscuous mode [ 132.433092][ T7336] rdma_rxe: rxe_newlink: failed to add bond0 [ 132.446350][ T7342] syzkaller0: entered allmulticast mode [ 132.913015][ T7363] __nla_validate_parse: 4 callbacks suppressed [ 132.913039][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 133.105480][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114844][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282386][ T7386] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 133.312591][ T7386] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 133.345962][ T7386] netlink: 252 bytes leftover after parsing attributes in process `syz.0.392'. [ 133.407563][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 133.439017][ T7386] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 133.448310][ T7386] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 133.458538][ T7386] netlink: 252 bytes leftover after parsing attributes in process `syz.0.392'. [ 133.471770][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 133.634387][ T7398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.681348][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.693541][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 133.740837][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.399'. [ 133.753370][ T5645] IPVS: starting estimator thread 0... [ 133.817475][ T5645] hid-generic 0005:0007:0007.0001: unknown main item tag 0x0 [ 133.851197][ T5645] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 133.869800][ T7406] IPVS: using max 33 ests per chain, 79200 per kthread [ 134.123258][ T7416] fido_id[7416]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 134.198864][ T7423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.217498][ T7423] batadv_slave_1: entered promiscuous mode [ 134.567153][ T7440] bridge4: entered promiscuous mode [ 134.576384][ T7440] bridge4: entered allmulticast mode [ 134.594645][ T807] IPVS: starting estimator thread 0... [ 134.603785][ T7440] team0: Port device bridge4 added [ 134.699167][ T7445] IPVS: using max 27 ests per chain, 64800 per kthread [ 134.891238][ T7459] netlink: 'syz.3.413': attribute type 12 has an invalid length. [ 135.016872][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 135.408312][ T7481] netlink: 204 bytes leftover after parsing attributes in process `syz.1.420'. [ 135.464103][ T7481] netlink: 84 bytes leftover after parsing attributes in process `syz.1.420'. [ 135.486960][ T7483] netlink: zone id is out of range [ 135.710682][ T7498] ipip0: entered promiscuous mode [ 135.970742][ T7514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 136.975459][ T7546] netlink: 'syz.2.438': attribute type 31 has an invalid length. [ 136.993291][ T7546] netlink: 'syz.2.438': attribute type 31 has an invalid length. [ 139.816033][ T7597] __nla_validate_parse: 11 callbacks suppressed [ 139.816055][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 139.876205][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 139.888242][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.450'. [ 139.970585][ T7601] netlink: 256 bytes leftover after parsing attributes in process `syz.0.451'. [ 139.989913][ T7601] unsupported nlmsg_type 40 [ 140.004979][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 140.034427][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 140.044566][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.074171][ T7609] vlan2: entered allmulticast mode [ 140.079863][ T7609] bond0: entered allmulticast mode [ 140.085019][ T7609] bond_slave_0: entered allmulticast mode [ 140.090970][ T7609] bond_slave_1: entered allmulticast mode [ 140.098142][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.098583][ T7611] netlink: 14 bytes leftover after parsing attributes in process `syz.1.453'. [ 140.115088][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.142167][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.184985][ T7611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.194933][ T7611] bond_slave_0: left allmulticast mode [ 140.207439][ T7611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.217653][ T7611] bond_slave_1: left allmulticast mode [ 140.230515][ T7611] bond0 (unregistering): Released all slaves [ 140.244698][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.262207][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.278068][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.294047][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.311112][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.349765][ T7607] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 140.499818][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 140.551950][ T7576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.664840][ T7619] bond2: option arp_interval: invalid value (18446744073709551615) [ 140.674573][ T7619] bond2: option arp_interval: allowed values 0 - 2147483647 [ 140.747596][ T7619] bond2 (unregistering): Released all slaves [ 141.221073][ T7645] netlink: 256 bytes leftover after parsing attributes in process `syz.1.462'. [ 141.295801][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 141.936936][ T7671] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 142.501198][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.539618][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.562600][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.572828][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.587596][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561e4c00: rx timeout, send abort [ 142.599410][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.641934][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.680561][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.884001][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 142.900443][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 143.096319][ T7715] xt_hashlimit: size too large, truncated to 1048576 [ 143.106924][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 143.130261][ T7717] x_tables: duplicate underflow at hook 2 [ 143.213544][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 143.242710][ T7720] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 143.315306][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.436184][ T7719] bridge_slave_0 (unregistering): left allmulticast mode [ 143.473411][ T7719] bridge_slave_0 (unregistering): left promiscuous mode [ 143.483640][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.716543][ T7696] tipc: Enabling of bearer rejected, failed to enable media [ 143.991883][ T7745] netlink: 'syz.0.488': attribute type 13 has an invalid length. [ 144.958417][ T7789] syzkaller0: entered promiscuous mode [ 144.976755][ T7789] syzkaller0: entered allmulticast mode [ 145.024345][ T7802] __nla_validate_parse: 13 callbacks suppressed [ 145.024365][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.501'. [ 145.044323][ T7794] syzkaller0: entered promiscuous mode [ 145.052947][ T7794] syzkaller0: entered allmulticast mode [ 145.065792][ T7806] netlink: 'syz.3.503': attribute type 11 has an invalid length. [ 145.102456][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 145.506626][ T7815] syzkaller1: entered promiscuous mode [ 145.533691][ T7815] syzkaller1: entered allmulticast mode [ 145.626270][ T7824] x_tables: duplicate underflow at hook 2 [ 145.748642][ T7826] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 145.837183][ T7826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.931773][ T7828] bond2: (slave veth3): Enslaving as an active interface with a down link [ 146.020273][ T7828] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 146.044735][ T7826] bond2: (slave dummy0): making interface the new active one [ 146.059801][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 146.073596][ T7826] dummy0: entered promiscuous mode [ 146.081437][ T7826] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 146.100140][ T7828] bond2: (slave dummy0): Releasing active interface [ 146.355050][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.511'. [ 146.794858][ T7859] nbd3: detected capacity change from 0 to 63 [ 146.828035][ T7857] nbd: nbd3 already in use [ 146.845276][ T7870] xt_bpf: check failed: parse error [ 146.873656][ T7870] netlink: 44 bytes leftover after parsing attributes in process `syz.0.517'. [ 146.903487][ T7870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.517'. [ 146.923038][ T5647] block nbd3: Receive control failed (result -104) [ 146.928888][ T7870] netlink: 'syz.0.517': attribute type 6 has an invalid length. [ 146.971347][ T7870] netlink: 'syz.0.517': attribute type 5 has an invalid length. [ 147.008356][ T7870] netlink: 43 bytes leftover after parsing attributes in process `syz.0.517'. [ 147.077319][ T7874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.518'. [ 147.457825][ T7883] team_slave_1: Caught tx_queue_len zero misconfig [ 147.667087][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 147.668650][ T7891] netlink: 'syz.2.524': attribute type 62 has an invalid length. [ 147.703282][ T7885] 8021q: VLANs not supported on ip6gre0 [ 147.854252][ T7898] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.211298][ T7922] netlink: 44 bytes leftover after parsing attributes in process `syz.2.531'. [ 148.498695][ T7917] syzkaller0: entered promiscuous mode [ 148.509954][ T7917] syzkaller0: entered allmulticast mode [ 148.583229][ T30] audit: type=1804 audit(1781356287.464:2): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.534" name="/newroot/108/memory.events" dev="tmpfs" ino=568 res=1 errno=0 [ 148.649506][ T30] audit: type=1800 audit(1781356287.464:3): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.534" name="memory.events" dev="tmpfs" ino=568 res=0 errno=0 [ 148.689252][ T30] audit: type=1804 audit(1781356287.474:4): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.534" name="/newroot/108/memory.events" dev="tmpfs" ino=568 res=1 errno=0 [ 148.906234][ T7944] netlink: 'syz.1.539': attribute type 1 has an invalid length. [ 151.195834][ T7944] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 151.196708][ T7950] ip6tnl0: Caught tx_queue_len zero misconfig [ 151.298343][ T7955] __nla_validate_parse: 2 callbacks suppressed [ 151.298364][ T7955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 151.317749][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 151.367222][ T7965] net_ratelimit: 22 callbacks suppressed [ 151.367261][ T7965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.592635][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 151.876981][ T7994] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 152.035919][ T7997] netlink: 232 bytes leftover after parsing attributes in process `syz.0.550'. [ 152.074531][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.550'. [ 152.482261][ T8005] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 152.628483][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.556'. [ 152.803652][ T8022] xt_hashlimit: max too large, truncated to 1048576 [ 152.848431][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 152.866727][ T8028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.560'. [ 153.196573][ T8047] x_tables: ip_tables: ah match: only valid for protocol 51 [ 153.232364][ T8043] syzkaller0: entered promiscuous mode [ 153.245522][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.559'. [ 153.256381][ T8043] syzkaller0: entered allmulticast mode [ 153.478923][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.565'. [ 153.490551][ T8051] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20001 [ 153.511577][ T8053] netlink: 'syz.3.565': attribute type 8 has an invalid length. [ 153.616729][ T8058] openvswitch: netlink: nsh attr 4 is out of range max 3 [ 153.636740][ T8058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.722302][ T8061] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 153.758523][ T8061] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 153.862527][ T8064] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 153.893704][ T8068] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 153.924745][ T8069] vti0: entered promiscuous mode [ 154.031483][ T8073] ip6t_REJECT: ECHOREPLY is not supported [ 154.078429][ T8064] bond0: entered promiscuous mode [ 154.114960][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.495293][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.504015][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.531998][ T8098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.566838][ T8098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.292413][ T8133] tipc: Started in network mode [ 155.317381][ T8133] tipc: Node identity ea7dc1218974, cluster identity 4711 [ 155.340252][ T8133] tipc: Enabled bearer , priority 0 [ 155.523231][ T8152] netlink: zone id is out of range [ 155.587317][ T8133] tipc: Disabling bearer [ 155.956665][ T8171] Bluetooth: MGMT ver 1.23 [ 155.986476][ T8171] netlink: 'syz.1.598': attribute type 2 has an invalid length. [ 156.983364][ T8214] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 157.113102][ T8223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.135209][ T5645] team_slave_0: entered promiscuous mode [ 157.142229][ T5645] team_slave_1: entered promiscuous mode [ 157.186429][ T8223] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 157.209790][ T8223] __nla_validate_parse: 5 callbacks suppressed [ 157.209810][ T8223] netlink: 224 bytes leftover after parsing attributes in process `syz.2.612'. [ 157.363530][ T8234] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 157.383945][ T8233] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 157.438968][ T8235] netlink: 'syz.2.612': attribute type 10 has an invalid length. [ 157.499433][ T8235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.523954][ T8235] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 157.562247][ T8239] netlink: 104 bytes leftover after parsing attributes in process `syz.4.616'. [ 157.800554][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.617'. [ 157.810402][ T8245] tunl0: Caught tx_queue_len zero misconfig [ 158.325558][ T8253] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.333788][ T8253] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.253918][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.322955][ T8253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.780247][ T8253] batman_adv: batadv0: Interface deactivated: gretap1 [ 159.946628][ T8253] vti0: left promiscuous mode [ 160.112918][ T8288] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 160.155304][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.185926][ T3326] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.201845][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 160.222996][ T3326] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.242587][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 160.265080][ T3326] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.360222][ T3326] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.492280][ T8294] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 160.703809][ T8291] syzkaller0: entered promiscuous mode [ 160.726057][ T8291] syzkaller0: entered allmulticast mode [ 161.038223][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 163.113197][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.138085][ T8313] bridge_slave_0 (unregistering): left allmulticast mode [ 163.147299][ T8313] bridge_slave_0 (unregistering): left promiscuous mode [ 163.155238][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.211936][ T8321] ip6gre1: entered promiscuous mode [ 163.224739][ T8321] ip6gre1: entered allmulticast mode [ 163.286668][ T8336] netlink: 68 bytes leftover after parsing attributes in process `syz.2.641'. [ 163.324590][ T8336] tipc: Enabled bearer , priority 0 [ 163.395964][ T8335] tipc: Disabling bearer [ 163.820111][ T8343] syzkaller0: entered promiscuous mode [ 163.844595][ T8343] syzkaller0: entered allmulticast mode [ 164.872933][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.654'. [ 166.723913][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 166.733424][ T8344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.645'. [ 167.061133][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 167.667615][ T8443] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 167.795784][ T8443] bond1: entered promiscuous mode [ 167.801779][ T8443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.234369][ T8461] blkio.reset_stats is deprecated [ 168.315525][ T8465] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 168.338163][ T8466] netlink: 'syz.4.676': attribute type 12 has an invalid length. [ 168.366776][ T8466] netlink: 'syz.4.676': attribute type 11 has an invalid length. [ 168.377493][ T8466] netlink: 212004 bytes leftover after parsing attributes in process `syz.4.676'. [ 168.409595][ T8465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.625528][ T8470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.945325][ T8489] netlink: 200 bytes leftover after parsing attributes in process `syz.2.682'. [ 169.193238][ T8498] tun0: tun_chr_ioctl cmd 1074025675 [ 169.208433][ T8498] tun0: persist disabled [ 169.284044][ T8509] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 134217731, id = 0 [ 169.344250][ T8505] tun0: tun_chr_ioctl cmd 1074025675 [ 169.363741][ T8505] tun0: persist enabled [ 169.566532][ T30] audit: type=1800 audit(1781356308.444:5): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.678" name="memory.events" dev="tmpfs" ino=690 res=0 errno=0 [ 170.116066][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 170.142054][ T8544] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 170.148748][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 170.171239][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 170.252504][ T8549] netlink: 14 bytes leftover after parsing attributes in process `syz.4.697'. [ 170.487128][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.504598][ T8558] netlink: 67 bytes leftover after parsing attributes in process `syz.0.702'. [ 170.543318][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.560949][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.638948][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.676727][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.713934][ T8557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.725916][ T8557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.748241][ T8557] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 170.774697][ T8557] veth1_macvtap: left promiscuous mode [ 170.786094][ T8557] veth0_macvtap: left promiscuous mode [ 170.793638][ T8557] veth0_macvtap: entered promiscuous mode [ 170.803081][ T8557] veth1_macvtap: entered promiscuous mode [ 170.822062][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.831049][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.840985][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.851953][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.870030][ T8557] batman_adv: batadv0: Interface activated: gretap1 [ 170.954906][ T8557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.972744][ T8565] netlink: 'syz.1.704': attribute type 12 has an invalid length. [ 170.985171][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.000098][ T8575] netlink: 'syz.2.706': attribute type 21 has an invalid length. [ 171.033755][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.057352][ T8560] bridge_slave_0: left allmulticast mode [ 171.065412][ T8565] netlink: 'syz.1.704': attribute type 11 has an invalid length. [ 171.075598][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 171.091630][ T8560] bridge_slave_0: left promiscuous mode [ 171.103206][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'. [ 171.110825][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.115075][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.122851][ T8579] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 171.132142][ T8565] netlink: 182716 bytes leftover after parsing attributes in process `syz.1.704'. [ 171.159267][ T8560] bridge_slave_1: left allmulticast mode [ 171.165372][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.172698][ T8560] bridge_slave_1: left promiscuous mode [ 171.172989][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.228048][ T8560] bond0: (slave bond_slave_0): Releasing backup interface [ 171.230335][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.244367][ T8581] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 171.259779][ T3301] bond1: (slave bridge2): link status up again after 0 ms [ 171.279491][ T8560] bond0: (slave bond_slave_1): Releasing backup interface [ 171.281057][ T3301] bond1: (slave bridge2): link status up again after 0 ms [ 171.318189][ T8560] team0: Port device team_slave_0 removed [ 171.330893][ T13] bond1: (slave bridge2): link status up again after 0 ms [ 171.343997][ T8560] team0: Port device team_slave_1 removed [ 171.359652][ T3301] bond1: (slave bridge2): link status up again after 0 ms [ 171.507500][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.514800][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.545642][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.553133][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.659191][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.674699][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.695047][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.714325][ T8575] netlink: 164 bytes leftover after parsing attributes in process `syz.2.706'. [ 171.908882][ T10] syz1: Port: 1 Link DOWN [ 172.022769][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.147474][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.191816][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.201152][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 172.803860][ T8635] netlink: 'syz.1.722': attribute type 1 has an invalid length. [ 172.849362][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.172243][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.244188][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.283492][ T8649] bridge_slave_0 (unregistering): left allmulticast mode [ 173.291538][ T8649] bridge_slave_0 (unregistering): left promiscuous mode [ 173.298751][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.355623][ T8656] xt_hashlimit: size too large, truncated to 1048576 [ 173.447577][ T8645] xt_bpf: check failed: parse error [ 173.575276][ T8657] syzkaller0: entered promiscuous mode [ 173.600911][ T8657] syzkaller0: entered allmulticast mode [ 174.046510][ T8653] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 174.721431][ T8681] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 174.730313][ T8673] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 174.878160][ T8702] __nla_validate_parse: 6 callbacks suppressed [ 174.878182][ T8702] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.736'. [ 174.885209][ T8703] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.736'. [ 174.896188][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 176.502205][ T13] net_ratelimit: 41 callbacks suppressed [ 176.502227][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 176.504235][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 176.609375][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.713027][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 176.869381][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 176.999334][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 177.159615][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 177.253398][ T1653] block nbd3: Possible stuck request ffff888027d8e000: control (read@0,1024B). Runtime 30 seconds [ 177.268102][ T1653] block nbd3: Possible stuck request ffff888027d8e1c0: control (read@1024,1024B). Runtime 30 seconds [ 177.280790][ T1653] block nbd3: Possible stuck request ffff888027d8e380: control (read@2048,1024B). Runtime 30 seconds [ 177.291974][ T1653] block nbd3: Possible stuck request ffff888027d8e540: control (read@3072,1024B). Runtime 30 seconds [ 177.521436][ T8739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.660910][ T8739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.829238][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 177.942226][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 178.042206][ T8753] netlink: 192 bytes leftover after parsing attributes in process `syz.0.753'. [ 178.079177][ T1105] bond1: (slave bridge2): failed to get link speed/duplex [ 178.180632][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'. [ 178.249323][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 178.270796][ T8753] smbdirect: ib_dev[syz1] removed [ 178.377654][ T8759] netlink: 393 bytes leftover after parsing attributes in process `syz.3.755'. [ 178.391863][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 178.995901][ T10] IPVS: starting estimator thread 0... [ 179.013994][ T8790] netlink: 180 bytes leftover after parsing attributes in process `syz.4.764'. [ 179.029838][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.764'. [ 179.081571][ T8790] netlink: 256 bytes leftover after parsing attributes in process `syz.4.764'. [ 179.119765][ T8791] IPVS: using max 34 ests per chain, 81600 per kthread [ 180.236704][ T8834] netlink: 'syz.0.775': attribute type 10 has an invalid length. [ 180.289588][ T8833] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 180.299531][ T8833] netlink: 'syz.0.775': attribute type 3 has an invalid length. [ 180.348187][ T8833] __nla_validate_parse: 3 callbacks suppressed [ 180.348208][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 181.549306][ T3274] net_ratelimit: 20 callbacks suppressed [ 181.549330][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 181.669463][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 181.779330][ T1105] bond1: (slave bridge2): failed to get link speed/duplex [ 181.890456][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 182.000398][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 182.110685][ T1105] bond1: (slave bridge2): failed to get link speed/duplex [ 182.220346][ T1105] bond1: (slave bridge2): failed to get link speed/duplex [ 182.330594][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 182.442784][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 182.554459][ T8809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.563411][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 182.825475][ T8855] netlink: 128 bytes leftover after parsing attributes in process `syz.2.779'. [ 182.993182][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.019810][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 183.165654][ T8861] syzkaller0: entered promiscuous mode [ 183.179938][ T8861] syzkaller0: entered allmulticast mode [ 183.238823][ T8868] : renamed from veth0_to_bond (while UP) [ 185.690932][ T8892] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 185.848018][ T8892] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.908749][ T8895] bond3: (slave ip6erspan0): making interface the new active one [ 185.920869][ T8895] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 186.154825][ T8913] netlink: 'syz.2.791': attribute type 11 has an invalid length. [ 186.209234][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.338095][ T30] audit: type=1107 audit(1781356325.214:6): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 186.530276][ T8921] netlink: 11232 bytes leftover after parsing attributes in process `syz.1.793'. [ 186.620365][ T59] net_ratelimit: 7 callbacks suppressed [ 186.620389][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 186.629150][ T8921] openvswitch: netlink: Flow key attr not present in new flow. [ 186.664531][ T8926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.801243][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 186.951015][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 187.080207][ T8957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.799'. [ 187.284013][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.801'. [ 187.294610][ T8964] netlink: 28 bytes leftover after parsing attributes in process `syz.4.801'. [ 187.385753][ T8956] ip6erspan0: left promiscuous mode [ 187.406930][ T8956] bond1: left promiscuous mode [ 187.433953][ T8956] geneve2: left promiscuous mode [ 187.533327][ T8969] batadv0: Caught tx_queue_len zero misconfig [ 188.349191][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 188.414099][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 188.511588][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 188.584519][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 189.631174][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 189.810130][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 189.970995][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 190.060736][ T9059] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 190.457742][ T9083] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 190.483997][ T9083] netlink: 96 bytes leftover after parsing attributes in process `syz.2.822'. [ 190.505271][ T9083] netlink: 658 bytes leftover after parsing attributes in process `syz.2.822'. [ 190.531648][ T9083] netlink: 1 bytes leftover after parsing attributes in process `syz.2.822'. [ 190.660594][ T9087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 190.670550][ T9074] netlink: 'syz.1.825': attribute type 3 has an invalid length. [ 191.057712][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 191.393592][ T9118] syzkaller1: entered allmulticast mode [ 191.448974][ T9123] netlink: 'syz.2.837': attribute type 6 has an invalid length. [ 191.476799][ T9115] bridge0: entered allmulticast mode [ 191.479689][ T9123] netlink: 'syz.2.837': attribute type 5 has an invalid length. [ 191.729802][ T1006] net_ratelimit: 6 callbacks suppressed [ 191.729823][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 191.870610][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 192.009544][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 192.136221][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 192.279559][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 192.409428][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 192.539481][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 192.636360][ T9167] sctp: [Deprecated]: syz.1.849 (pid 9167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.636360][ T9167] Use struct sctp_sack_info instead [ 192.679441][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 192.688828][ T9172] nft_compat: unsupported protocol 5 [ 192.789487][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 192.909134][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 193.982132][ T9211] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 195.076025][ T9256] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 195.144798][ T9262] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 195.190149][ T9256] dummy0: left promiscuous mode [ 195.209695][ T9256] team0: Port device dummy0 added [ 195.217158][ T9256] dummy0: entered promiscuous mode [ 195.266477][ T9262] team0: Port device dummy0 removed [ 195.290830][ T9262] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 195.316707][ T9262] dummy0: left promiscuous mode [ 195.465903][ T9267] batadv0: entered promiscuous mode [ 195.798668][ T9275] IPVS: set_ctl: invalid protocol: 29 10.1.1.0:20000 [ 195.974594][ T9290] __nla_validate_parse: 4 callbacks suppressed [ 195.974615][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.880'. [ 196.799497][ T3301] net_ratelimit: 19 callbacks suppressed [ 196.799519][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 196.855478][ T9320] tipc: Enabled bearer , priority 0 [ 196.959951][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 196.975648][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 196.991619][ T9329] syzkaller0: entered promiscuous mode [ 197.016298][ T9329] syzkaller0: entered allmulticast mode [ 197.025145][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 197.060006][ T9329] tipc: Resetting bearer [ 197.091186][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 197.229774][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 197.265934][ T9320] tipc: Resetting bearer [ 197.364606][ T9320] tipc: Disabling bearer [ 197.482097][ T3350] bond1: (slave bridge2): failed to get link speed/duplex [ 197.619224][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 197.718474][ T9356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.900'. [ 197.749852][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 197.780759][ T9360] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.899'. [ 197.931204][ T9370] vlan2: entered promiscuous mode [ 197.936438][ T9370] bridge0: entered promiscuous mode [ 197.949335][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 197.975052][ T9369] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 198.022878][ T9369] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 198.075330][ T9376] SET target dimension over the limit! [ 198.082163][ T9369] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 198.099950][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 198.174075][ T9369] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 198.246293][ T9380] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 199.035562][ T9405] bridge4: left allmulticast mode [ 199.052453][ T9405] ipip0: left promiscuous mode [ 199.366748][ T3301] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 199.400353][ T3301] bond2: (slave veth3): making interface the new active one [ 199.458370][ T3301] bond2: active interface up! [ 199.474676][ T9427] netlink: 100 bytes leftover after parsing attributes in process `syz.1.913'. [ 199.519318][ T9427] netlink: 100 bytes leftover after parsing attributes in process `syz.1.913'. [ 199.954553][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.983654][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 199.994004][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.036943][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.060640][ T9453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.919'. [ 200.070191][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.078081][ T5752] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.149357][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.299287][ T5752] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.308501][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 200.365728][ T9457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.619982][ T5752] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.691956][ T5752] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.968385][ T9491] netlink: 'syz.1.930': attribute type 322 has an invalid length. [ 201.348896][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.934'. [ 201.409219][ T9514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.934'. [ 201.730115][ T5647] Bluetooth: hci1: command 0x0406 tx timeout [ 201.745482][ T9529] netlink: 220 bytes leftover after parsing attributes in process `syz.4.938'. [ 201.796763][ T9529] netlink: 120 bytes leftover after parsing attributes in process `syz.4.938'. [ 201.857958][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.938'. [ 201.919921][ T3326] net_ratelimit: 18 callbacks suppressed [ 201.919942][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 201.956863][ T9534] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 202.059388][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 202.095399][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 202.332329][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 202.469368][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 202.603381][ T59] bond1: (slave bridge2): failed to get link speed/duplex [ 202.672154][ T9573] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 202.739943][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 202.939279][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 203.080228][ T3274] bond1: (slave bridge2): failed to get link speed/duplex [ 203.083914][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 203.236688][ T9593] netlink: 32 bytes leftover after parsing attributes in process `syz.4.954'. [ 203.270102][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 203.438413][ T9602] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.959'. [ 203.454117][ T9602] netlink: 'syz.1.959': attribute type 11 has an invalid length. [ 203.469835][ T3326] bond1: (slave bridge2): failed to get link speed/duplex [ 203.492814][ T9601] netlink: 'syz.1.959': attribute type 11 has an invalid length. [ 203.522509][ T9604] sctp: [Deprecated]: syz.0.960 (pid 9604) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.522509][ T9604] Use struct sctp_sack_info instead [ 204.283170][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.574594][ T9636] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.600291][ T9636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.068368][ T9658] syzkaller0: entered promiscuous mode [ 205.083066][ T9658] syzkaller0: entered allmulticast mode [ 205.129527][ T29] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 205.129546][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.133255][ T59] wlan1: Trigger new scan to find an IBSS to join [ 206.854352][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.859234][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 206.941320][ T59] net_ratelimit: 126 callbacks suppressed [ 206.941344][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 206.970327][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.010318][ T1006] bond1: (slave bridge2): link status up again after 0 ms [ 207.029168][ T1006] bond1: (slave bridge2): link status up again after 0 ms [ 207.049231][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.069219][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.089522][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.113386][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.145830][ T3326] bond1: (slave bridge2): link status up again after 0 ms [ 207.184731][ T59] bond1: (slave bridge2): link status up again after 0 ms [ 207.334424][ T1653] block nbd3: Possible stuck request ffff888027d8e000: control (read@0,1024B). Runtime 60 seconds [ 207.346008][ T1653] block nbd3: Possible stuck request ffff888027d8e1c0: control (read@1024,1024B). Runtime 60 seconds [ 207.359516][ T1653] block nbd3: Possible stuck request ffff888027d8e380: control (read@2048,1024B). Runtime 60 seconds [ 207.370712][ T1653] block nbd3: Possible stuck request ffff888027d8e540: control (read@3072,1024B). Runtime 60 seconds [ 207.901233][ T9713] __nla_validate_parse: 3 callbacks suppressed [ 207.901263][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 208.197724][ T9734] netlink: 64 bytes leftover after parsing attributes in process `syz.3.990'. [ 208.210324][ T9735] netlink: 52 bytes leftover after parsing attributes in process `syz.1.988'. [ 208.262613][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 208.595115][ T9746] vlan2: entered promiscuous mode [ 208.615085][ T9746] bridge0: entered promiscuous mode [ 208.740109][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 208.838902][ T9765] netlink: 'syz.4.998': attribute type 10 has an invalid length. [ 209.108447][ T9783] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1002'. [ 209.171018][ T59] wlan1: Trigger new scan to find an IBSS to join [ 209.640081][ T9809] xt_socket: unknown flags 0x8 [ 209.781367][ T9815] sctp: [Deprecated]: syz.3.1010 (pid 9815) Use of int in maxseg socket option. [ 209.781367][ T9815] Use struct sctp_assoc_value instead [ 209.815493][ T9809] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1009'. [ 210.263433][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1013'. [ 210.586904][ T9841] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1015'. [ 210.624305][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1015'. [ 212.063146][ T3301] net_ratelimit: 42 callbacks suppressed [ 212.063170][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 212.123747][ T9901] batadv0: entered promiscuous mode [ 212.129439][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 212.149806][ T9901] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 212.176799][ T9909] veth0_to_team: Caught tx_queue_len zero misconfig [ 212.259605][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 212.419780][ T13] bond1: (slave bridge2): failed to get link speed/duplex [ 212.449786][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 212.539825][ T3301] bond1: (slave bridge2): failed to get link speed/duplex [ 212.670523][ T1006] bond1: (slave bridge2): failed to get link speed/duplex [ 212.782218][ T9934] netlink: 'syz.0.1038': attribute type 3 has an invalid length. [ 213.132513][ T9960] __nla_validate_parse: 10 callbacks suppressed [ 213.132534][ T9960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1041'. [ 213.134256][ T9955] wlan1: Creating new IBSS network, BSSID 06:b5:41:7b:a5:fb [ 213.437318][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 213.470592][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 213.487782][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 213.589209][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 213.649796][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 213.729346][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 213.790284][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 213.886837][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1048'. [ 213.984308][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 214.598770][T10009] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.1052'. [ 214.826431][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 215.066456][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 215.127993][T10016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 215.170356][T10020] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20003 [ 215.423778][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1059'. [ 215.833232][T10050] netlink: 'syz.1.1065': attribute type 30 has an invalid length. [ 215.911562][T10050] bond5: option arp_missed_max: invalid value (0) [ 215.926922][T10050] bond5: option arp_missed_max: allowed values 1 - 255 [ 215.941356][T10050] bond5 (unregistering): Released all slaves [ 216.213370][T10066] nft_compat: unsupported protocol 0 [ 216.256983][T10069] batadv0: entered promiscuous mode [ 216.378950][T10070] veth0: entered promiscuous mode [ 216.396442][T10070] macsec1: entered promiscuous mode [ 216.504133][T10073] ip6gre2: entered promiscuous mode [ 216.527966][T10073] ip6gre2: entered allmulticast mode [ 216.874284][T10093] netlink: 'syz.4.1077': attribute type 11 has an invalid length. [ 217.102349][ T72] net_ratelimit: 17 callbacks suppressed [ 217.102372][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 217.757285][T10119] netlink: 'syz.0.1081': attribute type 11 has an invalid length. [ 217.999165][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 218.027702][T10125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.109900][ T48] bond1: (slave bridge2): link status up again after 0 ms [ 218.138666][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 218.161637][ T807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 218.350038][T10129] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 218.621010][T10138] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 218.717247][T10157] __nla_validate_parse: 15 callbacks suppressed [ 218.717271][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'. [ 218.764505][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1089'. [ 218.837518][T10147] netlink: 'syz.3.1091': attribute type 10 has an invalid length. [ 218.851350][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 218.851451][ T8257] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 219.001543][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 219.150809][T10166] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1093'. [ 219.192527][T10166] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1093'. [ 219.228061][T10166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 219.259674][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 219.450981][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 219.734407][T10205] IPv6: syztnl1: Disabled Multicast RS [ 219.787451][T10201] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 219.870050][T10211] FAULT_INJECTION: forcing a failure. [ 219.870050][T10211] name failslab, interval 1, probability 0, space 0, times 1 [ 219.902771][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.4.1106 Not tainted syzkaller #0 PREEMPT(full) [ 219.902799][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 219.902811][T10211] Call Trace: [ 219.902819][T10211] [ 219.902827][T10211] dump_stack_lvl+0xe8/0x150 [ 219.902859][T10211] should_fail_ex+0x40c/0x560 [ 219.902896][T10211] should_failslab+0xa8/0x100 [ 219.902930][T10211] __kmalloc_noprof+0xe8/0x750 [ 219.902957][T10211] ? __pfx_dynamic_dname+0x10/0x10 [ 219.902976][T10211] ? tomoyo_encode+0x2ad/0x570 [ 219.903012][T10211] tomoyo_encode+0x2ad/0x570 [ 219.903048][T10211] tomoyo_realpath_from_path+0x5fa/0x640 [ 219.903090][T10211] ? tomoyo_path_number_perm+0x219/0x5f0 [ 219.903117][T10211] tomoyo_path_number_perm+0x246/0x5f0 [ 219.903146][T10211] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.903170][T10211] ? __lock_acquire+0x683/0x2cd0 [ 219.903208][T10211] ? hook_file_ioctl+0x1f0/0x5c0 [ 219.903257][T10211] ? __fget_files+0x2a/0x420 [ 219.903286][T10211] ? __fget_files+0x2a/0x420 [ 219.903308][T10211] ? __fget_files+0x3a2/0x420 [ 219.903331][T10211] ? __fget_files+0x2a/0x420 [ 219.903359][T10211] security_file_ioctl+0xc3/0x2a0 [ 219.903386][T10211] __se_sys_ioctl+0x47/0x170 [ 219.903416][T10211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.903438][T10211] do_syscall_64+0x174/0x580 [ 219.903460][T10211] ? trace_irq_disable+0x3b/0x140 [ 219.903490][T10211] ? clear_bhb_loop+0x40/0x90 [ 219.903524][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.903544][T10211] RIP: 0033:0x7f8dce19ce59 [ 219.903561][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.903577][T10211] RSP: 002b:00007f8dcefc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.903598][T10211] RAX: ffffffffffffffda RBX: 00007f8dce415fa0 RCX: 00007f8dce19ce59 [ 219.903612][T10211] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 219.903624][T10211] RBP: 00007f8dcefc7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.903635][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.903646][T10211] R13: 00007f8dce416038 R14: 00007f8dce415fa0 R15: 00007ffc03bebe08 [ 219.903680][T10211] [ 219.904938][T10211] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.415303][T10235] netlink: 'syz.3.1111': attribute type 11 has an invalid length. [ 220.505853][T10239] netlink: 'syz.3.1111': attribute type 11 has an invalid length. [ 220.564835][T10243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1110'. [ 220.645846][T10244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.786115][T10244] veth0_to_team: entered promiscuous mode [ 220.817897][T10255] team_slave_0: left promiscuous mode [ 220.834843][T10255] team_slave_1: left promiscuous mode [ 221.154585][T10255] team0 (unregistering): Failed to send options change via netlink (err -105) [ 221.180936][T10255] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 221.198863][T10255] team0 (unregistering): Port device team_slave_0 removed [ 221.222146][T10255] team0 (unregistering): Failed to send options change via netlink (err -105) [ 221.238750][T10255] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 221.251496][T10255] team0 (unregistering): Port device team_slave_1 removed [ 221.268920][T10255] team0 (unregistering): Failed to send options change via netlink (err -105) [ 221.278687][T10255] team0 (unregistering): Failed to send port change of device bridge4 via netlink (err -105) [ 221.304905][T10255] team0 (unregistering): Port device bridge4 removed [ 221.536555][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1123'. [ 221.580141][T10273] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1123'. [ 221.611719][T10273] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1123'. [ 221.626501][T10276] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 221.687313][T10276] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 221.692783][T10279] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1124'. [ 221.719204][T10274] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 221.731905][T10286] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 221.743050][T10274] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 222.209461][ T9952] net_ratelimit: 7 callbacks suppressed [ 222.209483][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 222.311684][T10307] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 222.408949][T10307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.551887][T10309] bond5: (slave veth7): Enslaving as an active interface with an up link [ 222.691177][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 222.810494][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 222.940188][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 222.997107][T10339] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 223.080787][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 223.306538][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.338287][T10354] netlink: 'syz.0.1144': attribute type 4 has an invalid length. [ 223.395616][T10353] pimreg: entered allmulticast mode [ 223.485255][T10363] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 223.518976][T10363] bond4 (unregistering): Released all slaves [ 223.597458][T10348] pimreg: left allmulticast mode [ 223.621528][T10374] netlink: 'syz.1.1147': attribute type 21 has an invalid length. [ 223.742056][T10376] hsr0: entered promiscuous mode [ 223.776369][T10381] __nla_validate_parse: 77 callbacks suppressed [ 223.776390][T10381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'. [ 223.800809][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 223.953829][T10384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.039328][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 224.152588][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 224.871660][T10424] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 225.038622][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 225.080765][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 225.200297][T10424] bond5: entered allmulticast mode [ 225.237787][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 225.266989][T10427] bond5: (slave ip6gretap1): making interface the new active one [ 225.281843][T10427] ip6gretap1: entered allmulticast mode [ 225.294960][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 225.316795][T10427] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.352574][T10432] veth7: entered promiscuous mode [ 225.373526][T10432] bond5: (slave veth7): Enslaving as an active interface with a down link [ 225.445403][T10433] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.465024][T10435] bond5: left allmulticast mode [ 225.470569][T10435] ip6gretap1: left allmulticast mode [ 225.477364][T10435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.492090][T10437] ipvlan3: entered allmulticast mode [ 225.497657][T10437] bond4: entered allmulticast mode [ 225.622851][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 225.634403][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1167'. [ 225.634514][T10464] netlink: 'syz.0.1166': attribute type 61 has an invalid length. [ 225.948102][T10438] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.442326][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 226.486694][T10488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 226.513616][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 226.565722][T10488] gre1: entered promiscuous mode [ 227.063985][T10516] veth1_to_bond: entered allmulticast mode [ 227.114938][T10516] veth1_to_bond (unregistering): left allmulticast mode [ 227.158539][T10516] bond0: (slave bond_slave_1): Releasing backup interface [ 227.340179][ T36] net_ratelimit: 16 callbacks suppressed [ 227.340200][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 227.495980][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 227.569364][ T8509] IPVS: ip_vs_send_async error -1 [ 227.629265][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 227.736998][T10540] erspan0: entered promiscuous mode [ 227.771342][T10540] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 227.830022][ T9959] bond1: (slave bridge2): failed to get link speed/duplex [ 227.908435][T10540] erspan0: left promiscuous mode [ 227.961710][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 228.099263][T10557] validate_nla: 4 callbacks suppressed [ 228.099359][T10557] netlink: 'syz.1.1198': attribute type 1 has an invalid length. [ 228.124647][ T9959] bond1: (slave bridge2): failed to get link speed/duplex [ 228.319328][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 228.914710][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 229.062986][T10563] : option downdelay: invalid value (18446744073709547007) [ 229.073463][T10563] : option downdelay: allowed values 0 - 2147483647 [ 229.085590][T10563]  (unregistering): Released all slaves [ 229.127008][T10595] tipc: Enabled bearer , priority 0 [ 229.135118][T10595] syzkaller0: entered promiscuous mode [ 229.141921][T10595] syzkaller0: entered allmulticast mode [ 229.195614][T10595] tipc: Resetting bearer [ 229.208868][T10594] tipc: Resetting bearer [ 229.246885][T10594] tipc: Disabling bearer [ 229.279944][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 229.410679][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 229.682894][T10587] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.070382][T10607] __nla_validate_parse: 7 callbacks suppressed [ 230.070428][T10607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1211'. [ 230.208072][T10638] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 230.374902][T10638] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.427116][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 230.437976][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1223'. [ 230.477169][T10649] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 230.496879][T10649] netlink: 'syz.2.1223': attribute type 4 has an invalid length. [ 230.505467][T10649] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1223'. [ 230.628954][T10654] Cannot find del_set index 4 as target [ 230.731545][ T5647] Bluetooth: hci4: link tx timeout [ 230.745121][ T5647] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 230.775490][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 231.105194][T10675] xt_hashlimit: size too large, truncated to 1048576 [ 231.452449][T10685] SET target dimension over the limit! [ 232.088065][T10711] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1239'. [ 232.198062][T10713] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1240'. [ 232.274292][T10713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.344521][T10713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.399836][T10720] xt_NFQUEUE: number of total queues is 0 [ 232.493977][T10713] 8021q: adding VLAN 0 to HW filter on device eth0 [ 232.509711][T10713] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.524300][T10713] 8021q: adding VLAN 0 to HW filter on device eth2 [ 232.536646][T10713] 8021q: adding VLAN 0 to HW filter on device eth3 [ 232.587842][T10713] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.701391][ T1354] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 232.715777][T10731] tc_dump_action: action bad kind [ 232.770323][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 232.772967][ T1354] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 232.860087][ T12] net_ratelimit: 24 callbacks suppressed [ 232.860196][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 232.979881][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 233.120313][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 233.131263][T10747] netlink: 'syz.3.1252': attribute type 1 has an invalid length. [ 233.139472][T10747] nbd: couldn't find device at index -427251215 [ 233.200049][T10750] rdma_rxe: rxe_newlink: failed to add bond0 [ 233.208351][T10750] netlink: 'syz.2.1248': attribute type 84 has an invalid length. [ 233.259210][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 233.345968][T10754] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1253'. [ 233.379168][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 233.490875][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'. [ 233.528693][T10758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1253'. [ 233.572702][ T36] bond1: (slave bridge2): failed to get link speed/duplex [ 233.673678][T10776] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 233.722794][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 233.869115][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 234.021646][ T9959] bond1: (slave bridge2): failed to get link speed/duplex [ 234.172160][ T48] bond1: (slave bridge2): failed to get link speed/duplex [ 234.612405][T10814] tipc: Enabling of bearer rejected, already enabled [ 234.645759][T10820] netlink: 'syz.0.1271': attribute type 1 has an invalid length. [ 234.753997][T10820] bond4: entered promiscuous mode [ 234.761426][T10820] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.946256][T10825] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.971761][T10825] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 235.002343][T10825] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 235.017134][T10825] bond4: (slave ipip0): making interface the new active one [ 235.025883][T10825] ipip0: entered promiscuous mode [ 235.039874][T10825] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 235.272584][T10846] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 235.440969][T10846] bond7: entered promiscuous mode [ 235.465248][T10846] 8021q: adding VLAN 0 to HW filter on device bond7 [ 235.488606][T10863] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 235.505080][T10865] __nla_validate_parse: 7 callbacks suppressed [ 235.505101][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 235.524259][T10863] netlink: 'syz.0.1281': attribute type 6 has an invalid length. [ 235.555014][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 235.565483][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1281'. [ 235.575581][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 235.608316][T10867] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1282'. [ 235.665427][T10872] sctp: [Deprecated]: syz.3.1283 (pid 10872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.665427][T10872] Use struct sctp_sack_info instead [ 235.686307][T10874] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 235.793995][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 235.809930][T10878] xt_ecn: cannot match TCP bits for non-tcp packets [ 235.888366][T10874] 8021q: adding VLAN 0 to HW filter on device bond8 [ 235.914063][T10876] bond8: entered allmulticast mode [ 235.981723][T10889] netlink: 'syz.4.1288': attribute type 1 has an invalid length. [ 235.993333][T10884] bond8: (slave dummy0): making interface the new active one [ 236.002042][T10884] dummy0: entered allmulticast mode [ 236.020370][T10884] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 236.134463][T10889] bond2: entered promiscuous mode [ 236.140108][T10889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.281364][T10889] bond2: (slave bridge3): making interface the new active one [ 236.310943][T10889] bridge3: entered promiscuous mode [ 236.331652][T10889] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 236.343369][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1291'. [ 236.449706][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.564237][T10909] bond0: entered allmulticast mode [ 236.590316][T10909] dvmrp8: entered allmulticast mode [ 236.655494][T10907] bond0: left allmulticast mode [ 237.041247][T10925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1295'. [ 237.090384][T10928] sctp: [Deprecated]: syz.2.1297 (pid 10928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.090384][T10928] Use struct sctp_sack_info instead [ 237.131477][T10933] veth1_to_team: Caught tx_queue_len zero misconfig [ 237.138382][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1298'. [ 237.411887][ T1653] block nbd3: Possible stuck request ffff888027d8e000: control (read@0,1024B). Runtime 90 seconds [ 237.423306][ T1653] block nbd3: Possible stuck request ffff888027d8e1c0: control (read@1024,1024B). Runtime 90 seconds [ 237.436160][ T1653] block nbd3: Possible stuck request ffff888027d8e380: control (read@2048,1024B). Runtime 90 seconds [ 237.447782][ T1653] block nbd3: Possible stuck request ffff888027d8e540: control (read@3072,1024B). Runtime 90 seconds [ 237.553938][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1303'. [ 237.897494][ T1354] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.907377][ T1354] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.917853][ T1354] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.055200][T10965] net_ratelimit: 18 callbacks suppressed [ 238.055223][T10965] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 238.081228][ T1354] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.689606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.749205][ T9955] bond1: (slave bridge2): failed to get link speed/duplex [ 240.908403][T10989] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 240.962661][T10990] __nla_validate_parse: 7 callbacks suppressed [ 240.962682][T10990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1313'. [ 240.982310][ T72] bond1: (slave bridge2): failed to get link speed/duplex [ 241.013785][T10994] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1315'. [ 241.137538][T10997] netlink: 'syz.0.1316': attribute type 1 has an invalid length. [ 241.174027][T10999] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1317'. [ 241.175578][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'. [ 241.199722][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'. [ 241.221774][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 241.760392][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 243.138315][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.960873][T10997] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 244.104845][T11022] netlink: 'syz.2.1323': attribute type 1 has an invalid length. [ 244.108033][T11017] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 244.114071][T11022] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1323'. [ 244.149778][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 244.260459][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 244.299674][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'. [ 244.389685][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 244.449332][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 244.517511][T11035] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 244.536433][ T1354] bond1: (slave bridge2): failed to get link speed/duplex [ 244.671899][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 244.859120][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 245.025035][T11062] ÿÿ: renamed from gre0 (while UP) [ 245.037746][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 245.135998][T11062] ÿÿ: entered promiscuous mode [ 245.143431][T11062] ÿÿ: entered allmulticast mode [ 245.197424][T11062] A link change request failed with some changes committed already. Interface ÿÿ may have been left with an inconsistent configuration, please check. [ 245.291129][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 245.632980][ T9955] bond1: (slave bridge2): failed to get link speed/duplex [ 245.771089][ T9955] bond1: (slave bridge2): failed to get link speed/duplex [ 246.646511][T11116] pimreg: entered allmulticast mode [ 246.701196][T11113] __nla_validate_parse: 3 callbacks suppressed [ 246.701217][T11113] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1347'. [ 247.374542][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 247.414416][T11132] ip6gre2: entered promiscuous mode [ 247.426056][T11132] ip6gre2: entered allmulticast mode [ 247.557264][T11157] bridge6: entered promiscuous mode [ 247.663800][T11166] tc_dump_action: action bad kind [ 247.693489][T11166] netlink: 'syz.3.1359': attribute type 1 has an invalid length. [ 247.719413][T11166] netlink: 'syz.3.1359': attribute type 6 has an invalid length. [ 247.737918][T11166] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1359'. [ 247.813472][T11177] Unsupported ieee802154 address type: 0 [ 247.816705][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1359'. [ 248.233694][T11190] bond9 (unregistering): Released all slaves [ 248.474178][T11204] tipc: Started in network mode [ 248.478558][T11209] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 248.498513][T11204] tipc: Node identity b20a2874d60e, cluster identity 4711 [ 248.538430][T11204] tipc: Enabled bearer , priority 0 [ 248.586967][T11213] syzkaller0: entered promiscuous mode [ 248.615929][T11213] syzkaller0: entered allmulticast mode [ 248.642556][T11204] tipc: Resetting bearer [ 248.646646][T11215] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.1370'. [ 248.667812][T11203] tipc: Resetting bearer [ 248.732395][T11203] tipc: Disabling bearer [ 248.806590][T11222] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 248.836321][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1372'. [ 248.855702][T11222] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 249.162894][ T12] net_ratelimit: 19 callbacks suppressed [ 249.162917][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 249.329243][ T12] bond1: (slave bridge2): failed to get link speed/duplex [ 249.414258][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1378'. [ 249.474634][T11257] nbd: socks must be embedded in a SOCK_ITEM attr [ 249.497386][T11257] block nbd1: shutting down sockets [ 249.530317][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 249.660004][ T9952] bond1: (slave bridge2): failed to get link speed/duplex [ 249.779166][ T9955] bond1: (slave bridge2): failed to get link speed/duplex [ 249.793809][T11262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 249.838752][T11262] netlink: 'syz.4.1380': attribute type 17 has an invalid length. [ 249.986642][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1380'. [ 250.003343][T11272] netlink: 'syz.1.1382': attribute type 5 has an invalid length. [ 250.153606][T11262] hsr0: left promiscuous mode [ 250.215471][T11262] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 250.404749][T11262] geneve3: left promiscuous mode [ 250.441681][T11262] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 250.524469][T11262] bond1: left promiscuous mode [ 250.563320][T11262] gre1: left promiscuous mode [ 250.568733][T11262] bond2: left promiscuous mode [ 250.601863][T11262] bridge3: left promiscuous mode [ 250.648413][T11272] gtp1: entered promiscuous mode [ 250.668139][T11272] gtp1: entered allmulticast mode [ 250.711228][T11285] lo: left allmulticast mode [ 251.139764][T11285] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.266247][T11285] batadv0: left promiscuous mode [ 251.498426][T11285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.818046][T11285] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 251.876497][T11285] ------------[ cut here ]------------ [ 251.883895][T11285] !chanctx_conf [ 251.883915][T11285] WARNING: net/mac80211/tx.c:6467 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#1: syz.3.1384/11285 [ 251.898729][T11285] Modules linked in: [ 251.904108][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.3.1384 Not tainted syzkaller #0 PREEMPT(full) [ 251.913627][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 251.923751][T11285] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 251.929875][T11285] Code: 81 80 f6 e9 b1 fe ff ff e8 c5 34 a4 f6 90 0f 0b 90 e9 e2 fe ff ff e8 b7 34 a4 f6 90 0f 0b 90 e9 2a fe ff ff e8 a9 34 a4 f6 90 <0f> 0b 90 e8 10 b5 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 251.949809][T11285] RSP: 0018:ffffc9000cc5e4b8 EFLAGS: 00010246 [ 251.955983][T11285] RAX: ffffffff8b210b87 RBX: ffffffff8b2107ff RCX: 0000000000080000 [ 251.964026][T11285] RDX: ffffc9000d8b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 251.972058][T11285] RBP: 00000000ffffffff R08: ffffffff8b2107ff R09: 0000000000000000 [ 251.980090][T11285] R10: 0000000000000000 R11: ffffffff8e95c780 R12: ffff88805714ce80 [ 251.988126][T11285] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 251.996267][T11285] FS: 00007f8f8beed6c0(0000) GS:ffff88812539d000(0000) knlGS:0000000000000000 [ 252.005402][T11285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.012521][T11285] CR2: 00007f1917649af4 CR3: 00000000564f4000 CR4: 00000000003526f0 [ 252.020586][T11285] Call Trace: [ 252.023943][T11285] [ 252.027396][T11285] mesh_plink_frame_tx+0x73d/0xc30 [ 252.032654][T11285] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 252.038357][T11285] ? hwmp_route_info_get+0x1430/0x1580 [ 252.043888][T11285] mesh_plink_deactivate+0x18b/0x2f0 [ 252.049623][T11285] mesh_sta_cleanup+0x42/0x150 [ 252.054579][T11285] cleanup_single_sta+0x3ff/0x660 [ 252.059815][T11285] __sta_info_flush+0x5bb/0x700 [ 252.064786][T11285] ? __pfx___sta_info_flush+0x10/0x10 [ 252.070266][T11285] ieee80211_do_stop+0x3cd/0x2220 [ 252.075484][T11285] ? rcu_is_watching+0x15/0xb0 [ 252.080373][T11285] ? __mutex_lock+0x30f/0x1590 [ 252.085238][T11285] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 252.090786][T11285] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.096655][T11285] ieee80211_stop+0x1af/0x220 [ 252.101421][T11285] ? __pfx_ieee80211_stop+0x10/0x10 [ 252.106662][T11285] __dev_close_many+0x366/0x6e0 [ 252.111710][T11285] ? __pfx___dev_close_many+0x10/0x10 [ 252.117194][T11285] ? __dev_change_flags+0x2e2/0x820 [ 252.122615][T11285] __dev_change_flags+0x3f5/0x820 [ 252.127772][T11285] ? __pfx___dev_change_flags+0x10/0x10 [ 252.133390][T11285] ? do_setlink+0x3c9f/0x4670 [ 252.138336][T11285] netif_change_flags+0x7c/0x1b0 [ 252.143353][T11285] do_setlink+0xdd6/0x4670 [ 252.147822][T11285] ? __pfx_do_setlink+0x10/0x10 [ 252.152754][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.157957][T11285] ? ktime_get+0x45/0x220 [ 252.162347][T11285] ? ktime_get+0x45/0x220 [ 252.166709][T11285] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 252.172950][T11285] ? ktime_get+0x1f5/0x220 [ 252.177428][T11285] ? irqentry_exit+0x218/0x8e0 [ 252.182305][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.187791][T11285] ? irqentry_exit+0x218/0x8e0 [ 252.192605][T11285] ? trace_irq_disable+0x3b/0x140 [ 252.197725][T11285] rtnl_newlink+0x148e/0x1bd0 [ 252.202519][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.207579][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.213874][T11285] ? kasan_quarantine_put+0xbb/0x1f0 [ 252.219285][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.224532][T11285] ? nlmon_xmit+0xb0/0x100 [ 252.229087][T11285] ? kmem_cache_free+0x182/0x650 [ 252.234103][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.239568][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 252.244817][T11285] ? __local_bh_enable_ip+0xd0/0x130 [ 252.250320][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.255682][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 252.260899][T11285] ? __local_bh_enable_ip+0xd0/0x130 [ 252.266363][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 252.271570][T11285] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 252.276737][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.282244][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.287346][T11285] rtnetlink_rcv_msg+0x802/0xc00 [ 252.292379][T11285] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 252.297541][T11285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.303108][T11285] ? ref_tracker_free+0x689/0x830 [ 252.308386][T11285] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.313942][T11285] netlink_rcv_skb+0x226/0x4a0 [ 252.318840][T11285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.324430][T11285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.330323][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.335675][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.340960][T11285] netlink_unicast+0x7bb/0x940 [ 252.345869][T11285] netlink_sendmsg+0x813/0xb40 [ 252.350721][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.356057][T11285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.361153][T11285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.366492][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.371840][T11285] ____sys_sendmsg+0x9b9/0xa20 [ 252.376719][T11285] ? __might_fault+0xaf/0x130 [ 252.381477][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.386826][T11285] ? import_iovec+0x73/0xa0 [ 252.391627][T11285] ___sys_sendmsg+0x2a5/0x360 [ 252.396455][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.401524][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.406766][T11285] ? futex_wake+0x4d7/0x5b0 [ 252.411394][T11285] ? __fget_files+0x2a/0x420 [ 252.416042][T11285] ? __fget_files+0x3a2/0x420 [ 252.420789][T11285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.425769][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.431296][T11285] ? rcu_is_watching+0x15/0xb0 [ 252.436100][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.442221][T11285] do_syscall_64+0x174/0x580 [ 252.446907][T11285] ? trace_irq_disable+0x3b/0x140 [ 252.451994][T11285] ? clear_bhb_loop+0x40/0x90 [ 252.456720][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.462720][T11285] RIP: 0033:0x7f8f8af9ce59 [ 252.467165][T11285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.486860][T11285] RSP: 002b:00007f8f8beed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.495395][T11285] RAX: ffffffffffffffda RBX: 00007f8f8b215fa0 RCX: 00007f8f8af9ce59 [ 252.503457][T11285] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 252.511513][T11285] RBP: 00007f8f8b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 252.519567][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.527669][T11285] R13: 00007f8f8b216038 R14: 00007f8f8b215fa0 R15: 00007ffc82214608 [ 252.535795][T11285] [ 252.538858][T11285] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.546230][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.3.1384 Not tainted syzkaller #0 PREEMPT(full) [ 252.555686][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.565762][T11285] Call Trace: [ 252.569057][T11285] [ 252.572269][T11285] vpanic+0x56c/0xa60 [ 252.576487][T11285] ? __pfx__printk+0x10/0x10 [ 252.581091][T11285] ? __pfx_vpanic+0x10/0x10 [ 252.585613][T11285] ? is_bpf_text_address+0x292/0x2b0 [ 252.590932][T11285] ? is_bpf_text_address+0x26/0x2b0 [ 252.596157][T11285] panic+0xc5/0xd0 [ 252.599897][T11285] ? __pfx_panic+0x10/0x10 [ 252.604447][T11285] __warn+0x315/0x4c0 [ 252.608452][T11285] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.613861][T11285] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.619337][T11285] __report_bug+0x28e/0x530 [ 252.623929][T11285] ? ___sys_sendmsg+0x2a5/0x360 [ 252.628800][T11285] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 252.633937][T11285] ? do_syscall_64+0x174/0x580 [ 252.638806][T11285] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.644201][T11285] ? __pfx___report_bug+0x10/0x10 [ 252.649251][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.654253][T11285] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.659634][T11285] report_bug+0x16a/0x220 [ 252.663988][T11285] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.669363][T11285] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 252.674758][T11285] handle_bug+0x9c/0x200 [ 252.679104][T11285] exc_invalid_op+0x1a/0x50 [ 252.683634][T11285] asm_exc_invalid_op+0x1a/0x20 [ 252.688507][T11285] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 252.694494][T11285] Code: 81 80 f6 e9 b1 fe ff ff e8 c5 34 a4 f6 90 0f 0b 90 e9 e2 fe ff ff e8 b7 34 a4 f6 90 0f 0b 90 e9 2a fe ff ff e8 a9 34 a4 f6 90 <0f> 0b 90 e8 10 b5 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 252.714212][T11285] RSP: 0018:ffffc9000cc5e4b8 EFLAGS: 00010246 [ 252.720292][T11285] RAX: ffffffff8b210b87 RBX: ffffffff8b2107ff RCX: 0000000000080000 [ 252.728280][T11285] RDX: ffffc9000d8b9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 252.736264][T11285] RBP: 00000000ffffffff R08: ffffffff8b2107ff R09: 0000000000000000 [ 252.744249][T11285] R10: 0000000000000000 R11: ffffffff8e95c780 R12: ffff88805714ce80 [ 252.752240][T11285] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 252.760676][T11285] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 252.766003][T11285] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 252.771464][T11285] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 252.776890][T11285] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 252.782506][T11285] mesh_plink_frame_tx+0x73d/0xc30 [ 252.787646][T11285] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 252.793428][T11285] ? hwmp_route_info_get+0x1430/0x1580 [ 252.798920][T11285] mesh_plink_deactivate+0x18b/0x2f0 [ 252.804261][T11285] mesh_sta_cleanup+0x42/0x150 [ 252.809060][T11285] cleanup_single_sta+0x3ff/0x660 [ 252.814104][T11285] __sta_info_flush+0x5bb/0x700 [ 252.818978][T11285] ? __pfx___sta_info_flush+0x10/0x10 [ 252.824568][T11285] ieee80211_do_stop+0x3cd/0x2220 [ 252.829641][T11285] ? rcu_is_watching+0x15/0xb0 [ 252.834426][T11285] ? __mutex_lock+0x30f/0x1590 [ 252.839264][T11285] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 252.844755][T11285] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 252.850594][T11285] ieee80211_stop+0x1af/0x220 [ 252.855283][T11285] ? __pfx_ieee80211_stop+0x10/0x10 [ 252.860504][T11285] __dev_close_many+0x366/0x6e0 [ 252.865378][T11285] ? __pfx___dev_close_many+0x10/0x10 [ 252.870767][T11285] ? __dev_change_flags+0x2e2/0x820 [ 252.875991][T11285] __dev_change_flags+0x3f5/0x820 [ 252.881038][T11285] ? __pfx___dev_change_flags+0x10/0x10 [ 252.886608][T11285] ? do_setlink+0x3c9f/0x4670 [ 252.891296][T11285] netif_change_flags+0x7c/0x1b0 [ 252.896270][T11285] do_setlink+0xdd6/0x4670 [ 252.900715][T11285] ? __pfx_do_setlink+0x10/0x10 [ 252.905570][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.910533][T11285] ? ktime_get+0x45/0x220 [ 252.914882][T11285] ? ktime_get+0x45/0x220 [ 252.919225][T11285] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 252.925394][T11285] ? ktime_get+0x1f5/0x220 [ 252.929849][T11285] ? irqentry_exit+0x218/0x8e0 [ 252.934620][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.939826][T11285] ? irqentry_exit+0x218/0x8e0 [ 252.944597][T11285] ? trace_irq_disable+0x3b/0x140 [ 252.949658][T11285] rtnl_newlink+0x148e/0x1bd0 [ 252.954457][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.959502][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.965607][T11285] ? kasan_quarantine_put+0xbb/0x1f0 [ 252.970919][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.976149][T11285] ? nlmon_xmit+0xb0/0x100 [ 252.980592][T11285] ? kmem_cache_free+0x182/0x650 [ 252.985557][T11285] ? __lock_acquire+0x683/0x2cd0 [ 252.990592][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 252.995717][T11285] ? __local_bh_enable_ip+0xd0/0x130 [ 253.001020][T11285] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.006230][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 253.011386][T11285] ? __local_bh_enable_ip+0xd0/0x130 [ 253.016678][T11285] ? __dev_queue_xmit+0x29b/0x37f0 [ 253.021832][T11285] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 253.027013][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.032098][T11285] ? __pfx_rtnl_newlink+0x10/0x10 [ 253.037168][T11285] rtnetlink_rcv_msg+0x802/0xc00 [ 253.042145][T11285] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 253.047271][T11285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.052744][T11285] ? ref_tracker_free+0x689/0x830 [ 253.057789][T11285] ? __pfx_ref_tracker_free+0x10/0x10 [ 253.063180][T11285] netlink_rcv_skb+0x226/0x4a0 [ 253.067956][T11285] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 253.073434][T11285] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.078763][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.083977][T11285] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.089212][T11285] netlink_unicast+0x7bb/0x940 [ 253.094058][T11285] netlink_sendmsg+0x813/0xb40 [ 253.098874][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.104188][T11285] ? aa_sock_msg_perm+0xf1/0x1b0 [ 253.109152][T11285] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.114890][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.120192][T11285] ____sys_sendmsg+0x9b9/0xa20 [ 253.124981][T11285] ? __might_fault+0xaf/0x130 [ 253.129692][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.135011][T11285] ? import_iovec+0x73/0xa0 [ 253.139643][T11285] ___sys_sendmsg+0x2a5/0x360 [ 253.144330][T11285] ? __lock_acquire+0x683/0x2cd0 [ 253.149373][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.154591][T11285] ? futex_wake+0x4d7/0x5b0 [ 253.159135][T11285] ? __fget_files+0x2a/0x420 [ 253.163781][T11285] ? __fget_files+0x3a2/0x420 [ 253.168518][T11285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 253.173507][T11285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.179003][T11285] ? rcu_is_watching+0x15/0xb0 [ 253.183812][T11285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.189917][T11285] do_syscall_64+0x174/0x580 [ 253.194523][T11285] ? trace_irq_disable+0x3b/0x140 [ 253.199565][T11285] ? clear_bhb_loop+0x40/0x90 [ 253.204257][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.210159][T11285] RIP: 0033:0x7f8f8af9ce59 [ 253.214586][T11285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.234225][T11285] RSP: 002b:00007f8f8beed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.242658][T11285] RAX: ffffffffffffffda RBX: 00007f8f8b215fa0 RCX: 00007f8f8af9ce59 [ 253.250652][T11285] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 253.258663][T11285] RBP: 00007f8f8b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 253.266661][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.274651][T11285] R13: 00007f8f8b216038 R14: 00007f8f8b215fa0 R15: 00007ffc82214608 [ 253.282666][T11285] [ 253.286187][T11285] Kernel Offset: disabled [ 253.290556][T11285] Rebooting in 86400 seconds..