last executing test programs: 17.838137785s ago: executing program 2 (id=2897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x134, 0x1, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xa2d4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x81}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x38}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1f94}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb48}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000001340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000002c0)={0x1018, 0x2f, 0x100, 0x70bd2d, 0x25dfdbfb, {0x5}, [@nested={0x1004, 0x121, 0x0, 0x1, [@generic="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"]}]}, 0x1018}, 0x1, 0x0, 0x0, 0x20000840}, 0x4048095) sendmsg$nl_generic(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x30, 0x3b, 0x4, 0x70bd2a, 0x25dfdbff, {0xd}, [@typed={0x4, 0x136}, @typed={0x5, 0xe8, 0x0, 0x0, @str='\x00'}, @nested={0x10, 0xa0, 0x0, 0x1, [@nested={0x4, 0x2}, @nested={0x4, 0xff}, @nested={0x4, 0x25}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044814}, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000001480)='vxcan1\x00') bind$l2tp6(r1, &(0x7f00000014c0)={0xa, 0x0, 0x1, @private2, 0xbe, 0x2}, 0x20) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001a00)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f0000001540)={0x460, 0x13, 0x200, 0x70bd28, 0x25dfdbfc, {0x2c, 0x5d, 0x5, 0x2, {0x4e24, 0x4e22, [0xa706, 0x7fff, 0x3, 0x5], [0x2, 0x0, 0x9, 0x65], 0x0, [0xfffffe00, 0x7]}, 0xfffffff7}, [@INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "75aceaf447a13e1d43ab610c4251bb1391de16b5d78295d7af36fde8e04e9ad390dfad706321a5362e72ecabef76d61c6dcfa1a93385986c1f73ae448c7eeee2f940b811443514e65e8cfe1f3ba1741fc1616a3b5e3dd584224dcc2f6efae89fb7dc332777660a7a9d7e381b16d405931789cef427bde131e21b5686f42358c740bd20bcc6f0b2835d0af6c2d410fcc4b6a550e0f0d52d31cc10b89526cf9ff33eaea4b87d52205b53d7a9a3cbb5bafe091b9907274888e3364db9b4f514e0c43e02775b2e992908e2"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "0133238c3682fbbd6c1081fc8c7b0eacc903960a8d58c0495f7770f2ef662b201817656c1599b098b712f59465c7c356a2d4449cf19fcb13792aa3e7875dab1439b687c57559eb9bf02edd2dacb6ebd7d193605424f6b61c471f3a715e2813cc0b776baa6eef0930b0f0298bd0c9e03293a3acfcb292ad267d1cc1979fd45a6a4b4115f1cc1ba31311f7ac91a61ad99727faf3416e37a97c5dc2ab5d794cf93773bb1524a82d77d9af8d41359e2912e9759bede1dfee8855881c60a20199db16bd1cd183241a7c4797cc1d8a5c6aac"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "9b5831af908d17eebb4596e080be0ca3d80cc0285ebfca2db2035e0377c0ad589f989109d9e40995fdecb9c28dd12276eb25fcf776f808b78aaae0a94825d5ab7d6f97f19f4668154c9ef8baa002152557178867a2725815e7eab015135d089c16d3b59574b7c8bbf9d96ba54cd08190372c043fdb3415737bba58a7b4605bc8a12b553a3b0852510725a199c400c6cac9cb36ccc84dba95036b3db25ce51e0e63fd39c0d82ea21f63d15ff193c84d6d22796020b3bbe18a84bf24dff72b09396e59c156bc59b9d4f7d6ec290510a819f1cd802c93c0"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "52698587c9d2ad08227aed2515002e56453c96156486f575fccba42f8087be0ffdd5e2c7592e62a624cb3cc5fddfcc162abc288a1370dc53fc5dbd86e8a4e44ebdb3e68309e3865da697dae002b797758d45b4d51581ca7324306bfeb855b4fa80ae8de9669ea95a026cbbdcc8866f964e9906c581aba0630157dc8ee4ec91366944bb92787772db3f4b1523cba2e9ba31ad6430e59fb6ece22e6bbed0da9da9a7c32baf2a6034e75d4dd4a4e34abb8cca4197ddc45f9766bc3895cd5fb4eea52fcf8d1f8a132b"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "23845418c9fbb8bffbb44bb56d946ae3ba7434352fbaed3936f38bc49a433e3598f8db66bda163250a4aef34e90670bfcea77f895a359ecf0d15a067051fbc5194f24332fdd77591f9839d32ad4ab7064793d20341ee28c38b041237946b7889ead2ff24efa1fe6b6d405a52b571579e9507c6096b2b603390cd9ffe59d7097f1f17a063e25b14fbe393149fdc3604f2eb2d32626e24a35d6b0ae7d4c73104d9ce12d0cb03d2a765ae3676778cc926881d50c1837a6fa11db25a31f1194597d47b"}]}, 0x460}, 0x1, 0x0, 0x0, 0x80}, 0x20040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000001a80), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x20000000) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001b80)=0x1, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c00), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001cc0)={'ip6gre0\x00', &(0x7f0000001c40)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x4, 0x3ff, 0xa, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x40, 0x1, 0x2, 0x5b158a67}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000001dc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x80, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x80}, 0x1, 0x0, 0x0, 0x200080c0}, 0x80004) pipe(&(0x7f0000001e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r6, &(0x7f0000002080)={&(0x7f0000001e40), 0xc, &(0x7f0000002040)={&(0x7f0000001e80)={0x1c0, 0x35, 0x8, 0x70bd28, 0x25dfdbfb, {0xc}, [@generic="44079397f446b45d2247142e65189b1df07f9c5d9703ff47ad36981622a710b30bf05c0d1b3de6a80d3813df9a04b065b71f4e53592c6d22f0f5d50a3a36239e79dd67adf001a1cad212868f7abe95f23fc44bd12f5020abaf194fecf5f8e7e0c1cbe93580debd0c598320191eb06cd32187ac9c108450bcf776a6fc7b88c493ffe0c56c56a74a4b1b1ac05cd2315f1cd7e684040d73d2be483c12aaf9053920f2cdb5fdb8ccaadbe7eca5f35c8e260b70c0f33214addd30f1a6c18c63d5ad695050cd7f44967f7d38953fc65018eef2ed83fec8bd9e241746", @generic="646e4960cf4fe4c8ddc4f20d0e20c85f28157e21c811a99f428a978b0bbb5a0420434601a176797932ba6c731dd1c6dac712f22f87cc6dccbe8f96646ec46bc0e53231bb0d282e6628c231275705645c12d5b2991c397b1b1af2ef6bc53becd040fa974804a86b35bd6315d748d79ec1bfc8c324e97dffaa205ffb2553fc6567962c368ca4ca5c2ae2d5feebd785e1a44637ac39a7c7201db0fe8bc28f6b7d2670ad5e0c015d407627d6604aad6e9b3c43e4fdaf0f7e9f639ffcd7fe66a0", @nested={0x8, 0x4a, 0x0, 0x1, [@nested={0x4, 0xe7}]}, @typed={0xc, 0x10d, 0x0, 0x0, @u64=0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008001}, 0x4040000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x20, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x54eb}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000002200), 0xffffffffffffffff) r11 = socket(0xa, 0xa, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r9, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002280)={0xd4, r10, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3425}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x804) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r13, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002540)={'vxcan1\x00'}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000025c0), r6) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000026c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x44, r14, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xd2, 0x1}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x24050001) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002780)={0x294, r14, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x73}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x3f, 0xc5, "2b65054fda4c859f88d2f0509d00a45054b212b9959429bc51b789ec0f473c02989db8e7d5ee9cf3f333ad4799b67693645e22432798c19b32c1ea"}, @NL80211_ATTR_VENDOR_DATA={0xc0, 0xc5, "ec12ca0fff3433349f549065d82f0812742e215de44e779d4a8bc2172f1e37273874f4911fcbe4fc45fb79f259bdc586c66713194b8befeeb7d775e20d8f412cc78cb244066d0fd3de7fd7f2c299bfaeaa919811f1cc21b7a94f3786a38298417e30b045d0030cd87bb1a02f6ae6fbe0d3af3e53d0876ac71ec7ba0fd12245e2169286f858f97ad3e05512f34ade6dc8bddf04bdb62c9ff4c1c26d5f4f523d7c813789dd4ef1aba4dca6044801094b932aa672daec75b9f6ab68104f"}, @NL80211_ATTR_VENDOR_DATA={0xda, 0xc5, "60acaae23d84e8f6159213f0139a34d9b7d5a7fa5e9d78dae1f7bdf0d29b571ee69f09203b7fbacf488496b53aba04dfe2c61a263a297d9fa1d3ba0365f5cb79c8b87a60163a7feb615d51a5122ee957c34c63311c6b5a397ff85a953b82d1657732ee15f3ea5d0922657732c39ecf8beabb11ac7b1bb7668661207c553db801d0ac4cbdc72dd215cacb5d87e9285628a135ec4e1c011b6d4bfa0ad8ac0f3d9cb6f072db587218d8a288b76d16050bcb06aff2c136fc09a387c153bcd79b0864b320712479e42c8e7bd6e55ae9bacc465555b65f3604"}, @NL80211_ATTR_VENDOR_DATA={0x7f, 0xc5, "e080e2d12c2ea5e7e4da9997a7449b7c22e57fca5ed7055d4a9e6ae1a983508a13e1c6ff5caf507a0f21fbdd81acefb6c769f4dfb99c9e032a7ebde7e3bd8452f156bbb3be12ddc9a1c8ca4c35e3244063ff271a7939c67254c628571e92196c487ee745894e883e807a663489ab53cc2410739ffb9af84e59b500"}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000101}, 0x0) 17.042329224s ago: executing program 2 (id=2904): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x4, 0x8, 0x8200, 0xfff, 0x913c, 0x6, 0x8, 0x100, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x4371, 0x2}, &(0x7f0000000140)=0x8) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r1, 0xda9, 0xa, [0x2, 0x101, 0xa57, 0x1, 0x6, 0x6, 0x5, 0x0, 0x8, 0x9d42]}, 0x1c) (async) r4 = accept4$inet(r3, 0x0, &(0x7f00000001c0), 0x80800) recvfrom$inet(r4, &(0x7f0000000200)=""/194, 0xc2, 0x100, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x30, &(0x7f0000000340)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x7, @private=0xa010101}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f00000003c0)=0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000400)={r1, 0x8}, 0x8) (async) sendmsg$inet_sctp(r3, &(0x7f0000000880)={&(0x7f0000000440)=@in6={0xa, 0x4e22, 0x3, @empty, 0x6}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000480)="9fad9ee167c674cfdb5dd114fc4345889bcf69a27b72074c523141854771e59b815de5fc208ceb18e977c21878a42f738dd1b44653c2aac4e6b1faa194331749ee99004b4bffe0c43c735100e05c1fc8598434371fee3f3c0b045c9ee062e1dc94489de7ff15361171c4b422434370928ba232909d85a9af2db7c6aab5cb4795c382107c5ea011b8b71a37daaaf6691e8a88b5f02b36cfbe1be67d13c190dcbb4eb627a9aaeedbf7039fc001c0d30718fc70e58ee2066cf051d5265f0fee9208297e847f29e2ee6abac491f6ad3a1bb6cbbedeb56771", 0xd6}, {&(0x7f0000000580)="e14025dbb4d29456c65ab2470268", 0xe}, {&(0x7f00000005c0)="29bed26eb3f46a83afb8c8f7e447df5994265e9dc8bef7724fcdae719c1ab250fe6d9f99b7b6388861a38f78f7a24e295b200abeeaaded331ed4bee13aac1aa8e5bd1c5ad1695bbce149bed20dc986e18f457229a650f88ab40dd318586105f63b999d886c8de6", 0x67}, {&(0x7f0000000640)="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", 0xfc}, {&(0x7f0000000740)="c923205397f30c7b77714e5e0b3b856672c2f4cf22a6a3dca004cef3466796b63b66141f9eb0a077b737d06cd4547e049d9b093d", 0x34}], 0x5, &(0x7f0000000800)=[@sndinfo={0x20, 0x84, 0x2, {0x1ff, 0x2, 0x7, 0x7, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x1, 0x8206, 0xff, 0xbe, 0x9, 0x8001, 0x8107, r1}}], 0x70, 0x4000004}, 0x0) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f00000008c0), 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffff000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ac0)={r5, &(0x7f0000000980)="06970ab400a9f910a0a12a6ae2f3952dfb4b12cb17da556bf7b9b8efaee23bc0", &(0x7f00000009c0)=""/232}, 0x20) (async) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x4, 0xa, 0xb1, 0x8, 0x58, @loopback, @mcast1, 0x7800, 0x10, 0x0, 0x1}}) sendmsg$ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000001400)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000c40)={0x74c, r7, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_SOPASS={0xc3, 0x3, "e855e889c9cd5c6b5a474d924137a1c97f95e0e896871bf48245427accb84db91f98d49d3ed879af206fa8a5f1d3a94d6eac57e40b22c1f372e527a7b8714fa39b9eaad0a53ca7fb48bcf11008f772347dafcfadf14c8a7c090e5bede28ca1a9f963919bc175d4fab4c1000683f463fa6d9a898c0793632342cd210a34b039cc17e7cf95b6eb755d618c689389c4bd18ebc87914b43ae0d8a2501c591b1a0bdb3fec6c7d2d79b6da0673b326ee53b6789ad526a1b1ec540b744801b601ccf6"}, @ETHTOOL_A_WOL_MODES={0x368, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "9da9b08288a37992f13a62ece97c312760ae8340ffbb2295e6434c7c1d20ba3e48aff4f0bbd51176dc6109b42e17ec4eb5d1f19b910b0df1d940b2f4d15ffa182c68a6dfaebf553507c46f237281ed647b625c18fc7de0e1d8eb6ac00f8bd40e444d049f744641fb11791e724e21c90be494804fe395f81554ae508ccaf0bf82b06a3ddf7d296b88a4406fa4bdec1d4ea1bcfe90cc40ee1c4d480ed1b698c279fd3b264b95aec97820860011d55e0940dc92305bd375e1dc564cc52cc5e169099dbd6216f57773f56b61ac847c38c733f0666f7d39255f6498ba4516d6377e44348b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.-}\')^;\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*+/@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(.!)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x545b3c22}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(^#%,\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "e781389b492e11f9ee1980418b639cdc9ea60680c5ee8f5021d8e0e58c3cfc980f78ae924cd7895a96a9b1ca264e3a84cc46a6f5e28731d5980fadea8394ea6149c7f367d1c04748d17ab8ef9c9e3dfebeec7ad1263f2df06d4303b4882cbd1f16328293ebe4028179c0ed655fb39d5bedfca23bdfd07db65fbcedcf7b42c5f77e92861425"}, @ETHTOOL_A_BITSET_VALUE={0xc0, 0x4, "260daf8a410b5938004a1b62d46f7511aa8f6533e2db3035a0c3a050aa57855c7258bee54d0e198ec1901edb56ebed022af3f8c5ed3d20176bcec3fda3783836acc53a7f8029f4a596e1f1cec8406b5210ed79646472e4e6f1e42c246777049afa1b4e80b0961f61120b41c300e66461e6a45a266f296ea70313f48cdd89be8a2f03b3096a690351b0a1e69df25c9a8a7df8be48eea991eaa2fe13f00c163ba3bfcf659bce477ab720b9c0ab55640401f739af2e83f81213d3d50c2c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "b257984b7981c16f586e1de3593f4b930a204bc066672456cc1c4f691763bfe58e154a045275d710089e7777e309934a1dd7dbd92ecd37b6dea0d739fcea1921db89ff4a0ff095db04940d6d2bfdd1c8dfb039c83a3524695ea2fb30f6f8478cd85090c1d016e9daf54a0eb37b8ed8c109fe07106d4decebad054153df3f2f12fc89e6a63a05ea9ddbf5b227ffc88060edbf91f93aa6cb21f121872fb925a0830d"}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "620162bac09b4a47f8729af7959c1fd39129dbbe7c3a34fddf451d55314ab79dab672afe6893ef8a0138fcd78024a4532eca3ca6d85187923cc9aa7a120140b0a2c3dbbff478064f7ffe3dfe04119eec2c6fc8420364146c369215ff98f105bf733e901fed9eda214822f3e3fce856206875d9330c72a9602474efac88bcff769d045e6826f372f96897593b983ed6421db6fd81ffa8b9a1a3f8075b6fc48f17ffa94671988144bb94daca259e870dae8256d5bb4d9b1c6b14"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x30, 0x4, "03e57c312ade3131ee94afd87a4ad664cb7f71c12bdbe0aea77ece239796307c1043d6db3fce8ad338f57197"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "df9e53c2da21c7ef56756f41f3fd53beea1dfe766d6774b43f3303adfa3d47760af9eae88ac2a8efaabffd971d949b67bc8704250ab8b7bc1db5e54224f7b0aa08599cebd9f89d3d0c60fe495baf4c14d932be96834bff715f4ed87a7f77fd13f13692f0166c8d21e24716f3626b3f07d6ecc357c5f515916fb8ab2010469905caeef8f129ce8e"}]}, 0x74c}, 0x1, 0x0, 0x0, 0x40801}, 0x4004094) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001440)={r1, 0xfffffffe, 0x1, 0x8}, &(0x7f0000001480)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000014c0)={r2, 0x4}, 0x8) (async) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001500)={0x1, {{0x2, 0x4e20, @remote}}, 0x0, 0x5, [{{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e24, @private=0xa010100}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}}, {{0x2, 0x4e20, @multicast2}}]}, 0x310) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000001840)={r9, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x734, 0x4, 0x8001, 0x7, 0x40, 0x3, 0x1}, 0x9c) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001900), &(0x7f0000001940)=0x4) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, 0x3fa, 0x4, 0x70bd27, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x4000810) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={r4, 0x20, &(0x7f0000001b80)={&(0x7f0000001a80)=""/168, 0xa8, 0x0, &(0x7f0000001b40)=""/55, 0x37}}, 0x10) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x18, r7, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0xc0) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001d00)={'nicvf0\x00', {0x2, 0x4e24, @private=0xa010101}}) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001d40)={r1, 0x7, 0x30}, &(0x7f0000001d80)=0xc) 7.207401469s ago: executing program 3 (id=2997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x208, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x230}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x884) 6.910963089s ago: executing program 3 (id=3001): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) (async) listen(r2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x4) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) (async) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r5, 0x0) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) r6 = accept$alg(r0, 0x0, 0x0) recvmsg(r6, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) (async) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) (async) sendmmsg$inet(r6, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffff6f81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}}, 0x0) 6.555795012s ago: executing program 3 (id=3005): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000016c0)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x4000014) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r5 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000002e24be00000000000000711aa893bf00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0) (async) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff03"], 0x82) (async) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000002695641aeaf4a86dd60cb800000383afffc020000000000000000000000000000ff020000000000000000000000000001040190780900000060f9906308003a01fc000000000000000000000000000001ff020000000000000000000000000001af340000000000001e19dcd457d7d81fa95440ee66b26e98b3b47ce0aa7d92a3ae73a3c001a30aeec3c47ace9375e92095fefedba35d48ddf6edf15ba891c45fe3561b8dd55ff31debbdb4e339114a40604afca8bfb99c6af202ae8e2e20f0c3ae267814e92c9f760b05c6598639584f"], 0x0) 5.832075525s ago: executing program 3 (id=3011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x208, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xa0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_DESC={0x120, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab1b75d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8df}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x802}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x343}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}]}], {0x14, 0x10}}, 0x230}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x884) 5.507598521s ago: executing program 3 (id=3014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001800800010005000000080002800400018065b32cae25e7d457e9b65dad6af2b10d237517047fdac286576694aa8df796f69df85b4d1b1f4a855850fb87da00"/154], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x40884) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="130f00000000000000000700000010000280040002000000020004000400", @ANYRES8=r1], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) 4.82014295s ago: executing program 3 (id=3024): r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) accept(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT=r2], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendto(r3, &(0x7f0000000000)="67c946635385704c6ef569fa1557b6a0f5eae98571e6fcb0d24de9e46c50589fb2420e2974c3a915bc41ec02722b551e1130acc8791ede92aea31a79f555690130a106c16cc028fd5bc95aa43ddcb8be6e15c95b85", 0x55, 0x0, &(0x7f0000000080)=@l2={0x1f, 0x2, @none, 0xffae, 0x2}, 0x80) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r4, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) 4.27242598s ago: executing program 2 (id=2909): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, 0x0, 0x20040000) 4.133867294s ago: executing program 1 (id=3032): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797a30000000000900020073797ab200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="5ebd3f3fdb6e2091702c6bb64fea58578232df3ab205f583437aade0844c63049ff5ebf583a9dc6f285a4ac2f579f02329b53796dc03def3eda2fd3c664a1fdd16fd0ab1427a33ebf2fff87a85882f11e08532a35d2ef2"], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, 0xffffffffffffffff, 0xffffe000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.234801008s ago: executing program 4 (id=3036): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0xa801, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x1, 0x1}}, @common=@set={{0x40}, {{0x0, [0x0, 0x4, 0x4, 0x3, 0x4, 0x5], 0x4, 0x6}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 3.107542131s ago: executing program 0 (id=3037): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r4, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f00000003c0)="001a33853b9495921ef3eac372a908a1c1daafc4", 0x14, 0x8004, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xeb, 0x6, @local}, 0x14) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="002119", 0x3}], 0x1, 0x7, 0x9) sendmmsg$inet_sctp(r0, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 3.069721266s ago: executing program 4 (id=3038): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYBLOB="0000000000000000c2ab619788682ceef19d4b716570000000000000000000000000181990aff8a0a7005cb55ed3a2001bedfa173f9359b8b81b3a7166728b57e11b3aba9e23bc28b34c9907d3a0b5e678ef4d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) 2.928271323s ago: executing program 1 (id=3039): r0 = socket$inet6(0x10, 0x5, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0xffeffffc}, {0x16, 0x0, 0x3, 0x1}]}, 0x10) sendto$inet6(r0, &(0x7f00000013c0)="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", 0x1006, 0x801, &(0x7f0000001380)={0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="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", 0x1b0, 0x4000861, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xc258189, @private1, 0x8}, 0x1c) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) 2.886870907s ago: executing program 4 (id=3040): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x260, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xfffe, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x230, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x10000}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x4e, 0x1, 0x14, 0xc, 0x15, 0x7}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4040010}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r10, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002abd7000fcdbdf251e00000008000300", @ANYRES32=r11, @ANYBLOB="1cf52f800c00038008000100030000000c0002000203aa00080000aa"], 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r14, 0x891c, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r13, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r13, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0000380004803295"], 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x3}, 0x100, './file0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) 2.254927314s ago: executing program 0 (id=3041): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000ffff7d51481500f02cf3106aa9c54bc4d3401068c07184df211dc2b178e460adc3ec6437188de5289113f863216dfc4963ffbe9941e795", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x2, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x4, 0x0, 0xfffffffffffffe64) shutdown(r1, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000044c353271d8820", @ANYRES16=0x0, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000140)={r1, &(0x7f0000000040)='%!\xc8\x00', 0x10000, &(0x7f0000000080)={@align=0x9, {0x9, 0x10, 0x0, 0x7}}, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x5}) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2b70696473202d6d656d06e5676f720200"], 0xe) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x128, 0x1170, 0x1398, 0x128, 0x1170, 0x2b0, 0x1398, 0x1398, 0x2b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0xffffffff], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {}, 0x2b, 0x3b, 0x3}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x2, 0x9, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x43c) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000008000100000000000000000071100600000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x9, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8}]}}]}, 0x48}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETLINK(r11, 0x400454cd, 0x118) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) 2.1453747s ago: executing program 0 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r1, 0x5d21e47b77c36add, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}]}, 0x3c}, 0x1, 0x620b}, 0x0) 1.150505014s ago: executing program 1 (id=3043): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 64) r0 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@initdev, @loopback, 0x0}, &(0x7f0000000100)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2a0, r2, 0x300, 0x7fff, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x268, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd9, 0x4, "a0358b6235aa542f2610850107b3b6a83dde0ac4e785579b3ef198fb1c98688580f3d55e738f02a641a53f191bd1c6ba690fad4c07ce9d3094dc5d0608dce8f83bd6cce26fbc33d2a11b9b59897083947ad5c85435dbd37933339cd4ca5daabd871f0f0ca1eaad914c5c553dc533c7cc62a6f6761f939fefe134fa147a9c41329af2e692ac0033e112cdd93e0d3f7b8f96a65cd54ab814eb9fea39dabf8bc4a7c890d3624731f484494e69d5ff8278b714d034bd21505e02726acd9806a1b2767c2388e08e6312655e3a6abc2e04451623c91feec2"}, @ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "ad0f571f185543cf39d4bea2deed20cad44a074b44af4a07ddef1e36ef613201517a882e78176f38492cc9eb31bc9347f862b3408edc22f1757a5935cb7a14f972c64feeb4d2529ef9c4600e5cd285a0e50e1cf178542d7cae62937f00a89cba543a9219622901c8a78471b5759afb84b14f182c0f15480d163338051e3694d24ba971edfb38"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x87, 0x5, "a67c3f6c362130b0df7f78b056fb66c4a888e84c559c62cb387579e6698da1ca6a3a815df1521469681fb8b8d4f05c2af00d95319c3e1d448baffb42a76f17fbc2cf7e458f2055a7068b4ae4ecf237d27fca74ddfc5575f9c7dff22c797eabed1fe7a7522d70834c7bce3498d6e6cfc4c35197c7385be75b03f3b379c3ce5ac808f18d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x87{#*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYRESOCT=0x0], 0x44}}, 0x0) 1.108413535s ago: executing program 0 (id=3044): socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000001000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) 1.072837149s ago: executing program 2 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20040041) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)=ANY=[@ANYBLOB="280000002d000100000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="040000800c0001800800000000000000"], 0x28}], 0x1}, 0x0) 1.072336941s ago: executing program 4 (id=3046): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000c00), 0x0, 0x0) r2 = socket(0x10, 0x1, 0x613) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x29e0de92}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r5, &(0x7f0000001040)=[{&(0x7f0000000a40)="99e1f77a27f789c8dbbe0d2338a9e4caf077d9e9abc5c03ec36ff949d077f1039b2d38f094b06371dc72d1b61c4c541b4a0829cd1a8072637ccce6f229f97c689431adeb51506705ff0cb8d03bc1e9c0925c2abfd4bcb15b1647135aa2834cd864aeabe2d721ee5e674e66ce4b", 0x6d}, {&(0x7f0000000f40)="256dfed8c5b764e94262fe192ed7fcfa9bbbe18422cea197d1f078b1b3f62823ea624498452aefb03f9026fd0c8d0f2723be3b050eeedf50320309cd832ac5a7138ec8a1a1e9389ab0ff19abdb39168775aab7b32215873ddc84360fe1ff40cceb3f8a142dfe8f5e1c8118f0919f5c563210a538fa1a48a5239457cc69515b96f3f21005dac2cee7228012d60b312acb93d610", 0x93}, {&(0x7f0000001000)="e20c14", 0x3}], 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r9, 0x2799f5eec7981083, 0x70bd26, 0x25dfdafc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0xf6}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x49080) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc0000600000008000200050000001400075e9a2bf23a65c931b4b79bd0949de3830016fba0007e14fc88fab1a5fa24f2ea2ed951a2ba9d2ddb9e6d2b88c014dce953b8e69314eb96e64c5b23caad63816259ab1ef0db8e74bfe9157b55ce5bbd6b7d575e2918d08292e4e39f3055a62935225ce5dca417d8c9e0bd611a0efa315d3f61b43964fc3449782300c25a803eec81a6602377b62a33cb4e0daa512c783f4c59c255b756be46ac9ee96fd397", @ANYRES16=r7], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x4040000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c0000000906010800000000000073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb05001500090000000500070088000000060005584e2200009826cc1ddc0afa0c9ee2b31707000000eac7765a6455279472020700128dbb85c835bb04687fdcbe1183230a70e69a58db5b4855916c266a87f928bdec2d5ef770d8fdc94ca1fa24311674dc5999b95a91edbca44159237debe56368bf61827fad1a7534dc9e6143637d825f934e494e9acb91691a6ae1720dd4840fdbc4a37756"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname$netlink(r10, &(0x7f00000001c0), &(0x7f0000001140)=0xc) sendmsg$802154_raw(r12, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)="e846ab8e", 0x4}, 0x1, 0x0, 0x0, 0x80}, 0x14000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 475.284852ms ago: executing program 0 (id=3047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x34000, 0x0}}], 0x2, 0x40) 395.721532ms ago: executing program 2 (id=3048): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a090400000000000000000200000028000480240001800b00010072656a65637400001400028005000200cf00000008000140000000020900010073797a30000000000900020073797ab200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100766c616e000000001400028006000100020000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="5ebd3f3fdb6e2091702c6bb64fea58578232df3ab205f583437aade0844c63049ff5ebf583a9dc6f285a4ac2f579f02329b53796dc03def3eda2fd3c664a1fdd16fd0ab1427a33ebf2fff87a85882f11e08532a35d2ef2"], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_sfeatures}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x1852, 0xffffffffffffffff, 0xffffe000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 395.263297ms ago: executing program 1 (id=3049): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYBLOB="0000000000000000c2ab619788682ceef19d4b716570000000000000000000000000181990aff8a0a7005cb55ed3a2001bedfa173f9359b8b81b3a7166728b57e11b3aba9e23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x0, 0x6}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840000000a0601010000000000000000010000000900020073797a310000000005000100070000000800094000000008540008"], 0x84}}, 0x0) 393.491882ms ago: executing program 4 (id=3050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 393.228385ms ago: executing program 1 (id=3051): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 392.761176ms ago: executing program 4 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x0, 0x8, 0x25ff, 0x8, {{0x26, 0x4, 0x3, 0x4, 0x98, 0x64, 0x0, 0x7, 0x2f, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x2c, 0x99, 0x1, 0x7, [{@broadcast, 0x7fff}, {@private=0xa010100, 0x857b}, {@loopback, 0x101}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x10f4}, {@remote, 0x366}]}, @lsrr={0x83, 0xb, 0x3f, [@multicast1, @rand_addr=0x64010100]}, @ssrr={0x89, 0x17, 0xe1, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote]}, @ssrr={0x89, 0x17, 0x66, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @remote]}, @lsrr={0x83, 0x1b, 0x23, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @rand_addr=0x64010101]}, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @broadcast}, &(0x7f0000000340)=0xc) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x1d, 0x17, 0x9}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'pimreg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x1, 0x7800, 0x0, 0xb, {{0x1f, 0x4, 0x1, 0x9, 0x7c, 0x64, 0x0, 0x80, 0x4, 0x0, @remote, @private=0xa010100, {[@rr={0x7, 0x7, 0x8d, [@broadcast]}, @rr={0x7, 0x1b, 0xe4, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @loopback, @local]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x5, [@dev={0xac, 0x14, 0x14, 0x3d}, @local, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0x0, [{@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0xfff}, {@broadcast, 0x8}, {@broadcast, 0x7}, {@multicast2, 0x3}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0x3, 0x6, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x67, 0x0, 0xa, 0x4, 0x0, @local, @broadcast, {[@rr={0x7, 0x17, 0xce, [@multicast1, @loopback, @remote, @multicast1, @remote]}, @rr={0x7, 0x17, 0x86, [@loopback, @multicast2, @private=0xa010100, @rand_addr=0x64010101, @multicast1]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 392.587761ms ago: executing program 1 (id=3053): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf25030000000c0005002001000000000000340007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="1c0007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018006000100", @ANYRES32=r5, @ANYBLOB="080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000f9"], 0x20}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) 293.151565ms ago: executing program 2 (id=3054): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000b6ffffffb702000008000000b703000084200000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, 0x0, 0x20040000) 0s ago: executing program 0 (id=3055): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001a40), 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffff, 0x6, 0x2, 0x3}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d80)={0x0, 0xb0000000000, 0x3, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001180)={0x1, 0x4, {0x4, @struct={0x4, 0xc}, r2, 0x6, 0xbb6, 0x2, 0xffffffff, 0x8000000000000001, 0x2, @usage=0x3, 0x0, 0x6, [0xfe4, 0x5, 0x401, 0xed3e, 0x6, 0x5]}, {0xb634, @struct={0x7, 0x3}, r3, 0x5, 0x8, 0x7fff, 0xffffffff, 0x2, 0x0, @struct={0xfffffffc, 0x6}, 0xef, 0x66, [0x9025, 0x4, 0x3, 0x2, 0x3, 0x400]}, {0x3, @struct={0xffffffff, 0x80000000}, r4, 0x9, 0x9, 0x2, 0x4, 0x0, 0x4, @struct={0xe, 0x2}, 0x7, 0x1000, [0x0, 0x6, 0x7, 0x8, 0xff, 0x5]}, {0xb, 0xffffffffffffff7f, 0x200}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): 1 has an invalid length. [ 216.819567][ T86] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.861607][T10849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1408'. [ 217.123269][T10847] 8021q: adding VLAN 0 to HW filter on device bond14 [ 217.215396][T10853] macvlan2: entered promiscuous mode [ 217.260302][T10853] macvlan2: entered allmulticast mode [ 217.289815][T10853] bond14: entered promiscuous mode [ 217.312660][T10853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.537385][T10853] bond14: left promiscuous mode [ 217.636710][ T5288] veth0_vlan: left promiscuous mode [ 217.655966][ T42] veth0_vlan: entered promiscuous mode [ 217.704166][T10883] batman_adv: batadv0: Adding interface: wlan0 [ 217.721034][T10883] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.746617][T10883] batman_adv: batadv0: Interface activated: wlan0 [ 217.812429][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 217.910168][T10893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1416'. [ 217.956139][T10893] bond15: entered promiscuous mode [ 217.966001][T10893] bond15: entered allmulticast mode [ 217.972341][T10893] 8021q: adding VLAN 0 to HW filter on device bond15 [ 218.073245][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 218.082230][T10902] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.103137][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1422'. [ 218.135888][T10904] bond15: option fail_over_mac: invalid value (16) [ 218.149963][T10906] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 218.166725][T10904] bond15 (unregistering): Released all slaves [ 218.277098][T10904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 218.289617][T10904] batman_adv: batadv0: Adding interface: gretap2 [ 218.295979][T10904] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.321491][T10904] batman_adv: batadv0: Interface activated: gretap2 [ 218.460002][T10925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.503515][T10928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1427'. [ 219.032233][T10945] xfrm0 speed is unknown, defaulting to 1000 [ 219.092019][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1433'. [ 219.356754][T10959] bond15: option fail_over_mac: invalid value (16) [ 219.365047][T10959] bond15 (unregistering): Released all slaves [ 219.974377][T10875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.474421][T10979] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1442'. [ 220.824393][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1446'. [ 220.830794][T10983] syzkaller0: entered promiscuous mode [ 220.841143][T10983] syzkaller0: entered allmulticast mode [ 220.938260][T10999] bond16: option fail_over_mac: invalid value (16) [ 220.953988][T10999] bond16 (unregistering): Released all slaves [ 221.165202][T11000] 8021q: adding VLAN 0 to HW filter on device bond12 [ 221.309662][T11020] netlink: 'syz.2.1450': attribute type 1 has an invalid length. [ 222.430693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.186636][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 223.571430][T11054] netlink: zone id is out of range [ 223.579108][T11054] netlink: zone id is out of range [ 223.606826][T11054] netlink: get zone limit has 4 unknown bytes [ 223.609124][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 223.644162][T11064] bridge0: port 1(ipvlan2) entered blocking state [ 223.712381][T11064] bridge0: port 1(ipvlan2) entered disabled state [ 223.731565][T11064] ipvlan2: entered allmulticast mode [ 223.740233][T11064] bridge0: entered allmulticast mode [ 223.756750][T11064] ipvlan2: left allmulticast mode [ 223.763770][T11064] bridge0: left allmulticast mode [ 223.792974][T11072] set match dimension is over the limit! [ 223.860340][T11069] bond13: option fail_over_mac: invalid value (16) [ 223.868156][T11069] bond13 (unregistering): Released all slaves [ 223.952971][T11078] netlink: 'syz.4.1464': attribute type 5 has an invalid length. [ 224.037582][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1466'. [ 224.101946][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1466'. [ 224.122161][T11089] bond15: entered promiscuous mode [ 224.127347][T11089] bond15: entered allmulticast mode [ 224.132834][T11089] 8021q: adding VLAN 0 to HW filter on device bond15 [ 224.415839][T11101] FAULT_INJECTION: forcing a failure. [ 224.415839][T11101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.434764][T11101] CPU: 0 UID: 0 PID: 11101 Comm: syz.2.1472 Not tainted syzkaller #0 PREEMPT(full) [ 224.434791][T11101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 224.434802][T11101] Call Trace: [ 224.434809][T11101] [ 224.434818][T11101] dump_stack_lvl+0xe8/0x150 [ 224.434846][T11101] should_fail_ex+0x40c/0x560 [ 224.434876][T11101] _copy_from_user+0x2d/0xb0 [ 224.434897][T11101] ___sys_sendmsg+0x1c6/0x360 [ 224.434918][T11101] ? __lock_acquire+0x683/0x2cf0 [ 224.434942][T11101] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.434995][T11101] ? __fget_files+0x2a/0x420 [ 224.435013][T11101] ? __fget_files+0x3a2/0x420 [ 224.435041][T11101] __x64_sys_sendmsg+0x1b1/0x290 [ 224.435065][T11101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.435099][T11101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.435117][T11101] do_syscall_64+0x174/0x580 [ 224.435132][T11101] ? trace_irq_disable+0x3b/0x140 [ 224.435148][T11101] ? clear_bhb_loop+0x40/0x90 [ 224.435169][T11101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.435186][T11101] RIP: 0033:0x7f28fad9ce59 [ 224.435203][T11101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.435218][T11101] RSP: 002b:00007f28fbd00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.435238][T11101] RAX: ffffffffffffffda RBX: 00007f28fb015fa0 RCX: 00007f28fad9ce59 [ 224.435251][T11101] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 000000000000000a [ 224.435261][T11101] RBP: 00007f28fbd00090 R08: 0000000000000000 R09: 0000000000000000 [ 224.435272][T11101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.435282][T11101] R13: 00007f28fb016038 R14: 00007f28fb015fa0 R15: 00007ffe25c1d448 [ 224.435310][T11101] [ 224.775979][T11103] set match dimension is over the limit! [ 224.955098][ T29] audit: type=1804 audit(1782790830.777:4): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1476" name="/newroot/304/cgroup.controllers" dev="tmpfs" ino=1567 res=1 errno=0 [ 225.004857][ T29] audit: type=1800 audit(1782790830.807:5): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1476" name="cgroup.controllers" dev="tmpfs" ino=1567 res=0 errno=0 [ 225.804753][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1483'. [ 225.959527][ T5636] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 225.964607][T11154] bond16: option fail_over_mac: invalid value (16) [ 225.969295][ T5636] Bluetooth: hci0: command 0x080f tx timeout [ 225.982105][T11154] bond16 (unregistering): Released all slaves [ 226.082055][T11052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.178644][T11160] netlink: 'syz.4.1486': attribute type 30 has an invalid length. [ 226.401948][T11160] bond16: option arp_missed_max: invalid value (0) [ 226.408749][T11160] bond16: option arp_missed_max: allowed values 1 - 255 [ 226.417852][T11160] bond16 (unregistering): Released all slaves [ 226.523023][T11183] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 226.811716][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 226.829177][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 226.831506][T11200] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 226.867022][T11196] bond16: option fail_over_mac: invalid value (16) [ 226.875773][T11196] bond16 (unregistering): Released all slaves [ 227.013426][T11210] sctp: [Deprecated]: syz.1.1501 (pid 11210) Use of int in max_burst socket option deprecated. [ 227.013426][T11210] Use struct sctp_assoc_value instead [ 227.849966][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'. [ 228.126256][T11253] syzkaller0: entered promiscuous mode [ 228.132895][T11253] syzkaller0: entered allmulticast mode [ 229.557389][ T5636] Bluetooth: hci0: command 0x080f tx timeout [ 229.747922][T11219] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.763959][T11251] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 229.781476][T11251] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1512'. [ 229.816868][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1512'. [ 230.105938][T11268] bond13: option fail_over_mac: invalid value (16) [ 230.144912][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 230.155406][T11268] bond13 (unregistering): Released all slaves [ 230.287248][T11294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1521'. [ 230.686063][T11306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1526'. [ 230.795340][T11316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1529'. [ 231.423762][T11344] bond16: option fail_over_mac: invalid value (16) [ 231.435321][T11344] bond16 (unregistering): Released all slaves [ 231.608420][T11352] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 231.618079][T11352] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 231.628358][T11352] netlink: 'syz.4.1537': attribute type 1 has an invalid length. [ 231.636226][T11352] netlink: 'syz.4.1537': attribute type 2 has an invalid length. [ 231.788421][T11357] set match dimension is over the limit! [ 232.120380][ T5640] Bluetooth: hci3: command 0x0405 tx timeout [ 233.683091][T11315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.734031][T11359] netlink: 'syz.4.1538': attribute type 11 has an invalid length. [ 233.963450][T11381] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1541'. [ 234.025695][T11386] netlink: 'syz.0.1542': attribute type 1 has an invalid length. [ 234.181755][T11405] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1545'. [ 234.424684][T11409] bond16: option fail_over_mac: invalid value (16) [ 234.454414][T11409] bond16 (unregistering): Released all slaves [ 234.490577][T11419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1546'. [ 234.541015][T11422] set match dimension is over the limit! [ 234.760818][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 234.786349][T11437] netlink: 'syz.2.1554': attribute type 10 has an invalid length. [ 234.806268][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'. [ 234.862755][T11440] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 235.758756][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 236.121629][T11472] bond15: option fail_over_mac: invalid value (16) [ 236.134788][T11472] bond15 (unregistering): Released all slaves [ 236.188812][T11480] ip6t_srh: unknown srh invflags 4000 [ 236.244822][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 236.254105][T11483] netlink: 'syz.2.1565': attribute type 10 has an invalid length. [ 236.262571][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1565'. [ 237.191198][T11505] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1569'. [ 237.530642][T11434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.799002][T11514] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 237.840777][T11513] ip6gretap1: entered promiscuous mode [ 237.847684][T11513] ip6gretap1: entered allmulticast mode [ 237.875774][T11513] bond16: (slave ip6gretap1): making interface the new active one [ 237.888951][T11516] netlink: 'syz.4.1572': attribute type 4 has an invalid length. [ 237.945404][T11513] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.968659][T11513] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 237.978682][T11513] bond16: (slave ip6gretap1): Enslaving as an active interface with an up link [ 238.157914][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 238.169092][T11525] netlink: 'syz.3.1576': attribute type 10 has an invalid length. [ 238.183525][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 238.193766][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 238.447388][T11533] netlink: 'syz.3.1579': attribute type 4 has an invalid length. [ 238.480894][T11533] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1579'. [ 238.531645][T11536] bond13: option fail_over_mac: invalid value (16) [ 238.559072][T11536] bond13 (unregistering): Released all slaves [ 238.568446][T11541] netlink: 'syz.3.1579': attribute type 3 has an invalid length. [ 238.714386][T11535] tipc: Started in network mode [ 238.727701][T11535] tipc: Node identity 0eed87bd254e, cluster identity 4711 [ 238.768042][T11535] tipc: Enabled bearer , priority 0 [ 238.812707][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 238.967268][T11542] syzkaller0: entered promiscuous mode [ 238.973308][T11542] syzkaller0: entered allmulticast mode [ 238.980325][T11542] tipc: Resetting bearer [ 239.116030][T11569] netlink: 'syz.1.1589': attribute type 10 has an invalid length. [ 239.167530][T11038] tipc: Resetting bearer [ 239.175165][T11529] tipc: Resetting bearer [ 241.075242][T11529] tipc: Disabling bearer [ 241.148092][ T10] tipc: Node number set to 732137405 [ 241.371003][T11585] xt_hashlimit: size too large, truncated to 1048576 [ 241.454918][T11593] __nla_validate_parse: 3 callbacks suppressed [ 241.454964][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 241.830707][T11604] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1600'. [ 241.873070][T11604] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 241.873070][T11604] Please contact the netfilter-devel mailing list or update your nftables rules. [ 242.046128][T11623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 242.059263][T11623] netlink: 'syz.1.1606': attribute type 10 has an invalid length. [ 242.060833][T11617] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 242.067414][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1606'. [ 242.076035][T11617] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 242.574878][T11642] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1613'. [ 242.848470][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1617'. [ 242.857588][T11655] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 242.865517][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1617'. [ 242.945286][T11653] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1616'. [ 242.958294][T11657] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1618'. [ 242.973113][T11653] netlink: 'syz.1.1616': attribute type 10 has an invalid length. [ 243.048807][T11660] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 243.051962][T11653] team0: Port device dummy0 added [ 243.076134][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 243.088792][T11653] netlink: 'syz.1.1616': attribute type 10 has an invalid length. [ 243.099985][T11663] netlink: 'syz.2.1620': attribute type 24 has an invalid length. [ 243.110933][T11660] bond16: entered promiscuous mode [ 243.129516][T11660] 8021q: adding VLAN 0 to HW filter on device bond16 [ 243.142442][T11653] team0: Port device dummy0 removed [ 243.188876][T11660] 8021q: adding VLAN 0 to HW filter on device bond16 [ 243.199841][T11660] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 243.210391][T11660] bond16: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 243.223074][T11660] bond16: (slave vti0): making interface the new active one [ 243.256900][T11660] vti0: entered promiscuous mode [ 243.275806][T11660] vti0: left promiscuous mode [ 243.478073][T11677] netlink: 'syz.0.1625': attribute type 1 has an invalid length. [ 243.506927][T11677] 8021q: adding VLAN 0 to HW filter on device bond13 [ 243.553140][T11677] macvlan3: entered promiscuous mode [ 243.573027][T11677] macvlan3: entered allmulticast mode [ 243.590902][T11677] bond13: entered promiscuous mode [ 243.596805][T11677] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 243.624530][T11677] bond13: left promiscuous mode [ 243.636013][T11685] netlink: 'syz.1.1628': attribute type 10 has an invalid length. [ 244.862088][T11734] block nbd1: Unsupported socket: should be TCP or UNIX. [ 244.937007][T11734] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 245.000696][T11740] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 245.035307][T11740] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 245.132509][T11740] 8021q: adding VLAN 0 to HW filter on device bond17 [ 245.484527][T11764] ipt_REJECT: TCP_RESET invalid for non-tcp [ 245.661237][T11768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.041432][T11826] xt_TCPMSS: Only works on TCP SYN packets [ 248.050645][T11043] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 249.116370][T11787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.542502][T11841] __nla_validate_parse: 9 callbacks suppressed [ 249.542550][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1667'. [ 250.102890][T11873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 250.293582][T11880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1678'. [ 250.570649][T11044] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.593097][T11044] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.599937][T11896] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1684'. [ 250.626724][T11900] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1685'. [ 250.692130][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.743425][T11905] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 250.775203][T11905] 8021q: adding VLAN 0 to HW filter on device bond29 [ 250.829651][T11908] tipc: Enabled bearer , priority 0 [ 250.912890][ T42] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 250.962839][T11908] syzkaller0: entered promiscuous mode [ 250.968923][T11908] syzkaller0: entered allmulticast mode [ 250.975498][T11908] tipc: Resetting bearer [ 250.993060][T11905] bond29: (slave geneve3): making interface the new active one [ 251.064470][T11905] bond29: (slave geneve3): Enslaving as an active interface with an up link [ 251.074637][T11908] tipc: Enabling of bearer rejected, already enabled [ 251.091050][T11906] tipc: Resetting bearer [ 251.106636][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 251.133364][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'. [ 251.580753][ T5762] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.354442][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880377b2000: rx timeout, send abort [ 252.365717][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880377b2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.420599][T11942] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 253.138241][T11906] tipc: Disabling bearer [ 253.221752][T11942] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 253.457410][T11954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.720804][T11962] batadv_slave_0: entered promiscuous mode [ 253.835828][T11962] batadv_slave_0: left promiscuous mode [ 254.003219][T11956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.039941][T11956] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 254.196944][T11956] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.286639][T11956] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 254.397348][T11998] netlink: 'syz.2.1714': attribute type 1 has an invalid length. [ 254.407789][T11956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.433180][T11956] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 254.442681][T11998] 8021q: adding VLAN 0 to HW filter on device bond30 [ 254.495118][T11998] macvlan2: entered promiscuous mode [ 254.511691][T11956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.526370][T11956] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 254.548644][T11998] macvlan2: entered allmulticast mode [ 254.579304][T11998] bond30: entered promiscuous mode [ 254.589406][T11998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.602688][T11998] bond30: left promiscuous mode [ 254.700771][T12010] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 254.948661][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.977948][T11956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.984440][T11956] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 255.221459][T12029] netlink: 'syz.4.1722': attribute type 3 has an invalid length. [ 255.238752][T12029] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1722'. [ 256.890734][T11956] batman_adv: batadv0: Interface deactivated: wlan0 [ 257.490987][T12059] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1729'. [ 258.133206][T12048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1727'. [ 258.269205][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1736'. [ 258.687846][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1742'. [ 258.696211][T12110] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 258.704452][T12110] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 258.732194][T12110] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 258.739950][T12110] netlink: 'syz.4.1744': attribute type 2 has an invalid length. [ 258.976571][T12127] set match dimension is over the limit! [ 259.127637][T12135] tipc: Enabled bearer , priority 11 [ 259.470579][T12152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1757'. [ 259.549111][T12153] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 259.729592][T12164] set match dimension is over the limit! [ 259.863367][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1764'. [ 260.175827][ T5762] tipc: Node number set to 1886237588 [ 260.529610][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 260.673589][T12216] Bluetooth: MGMT ver 1.23 [ 260.688826][T12216] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1776'. [ 260.846113][T12231] xt_CONNSECMARK: invalid mode: 0 [ 261.722668][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 261.731666][T12273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 261.766850][T12277] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1790'. [ 261.886026][T12284] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 261.916098][T12281] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.926631][T12281] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.300833][T12284] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 262.309651][T12295] vcan0: tx address claim with dlc 1 [ 262.448144][T12319] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 262.513375][T12321] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 263.425629][T12363] set match dimension is over the limit! [ 263.440501][T12366] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1808'. [ 263.475572][T12366] Cannot find del_set index 3 as target [ 263.697114][T12382] netlink: 'syz.0.1813': attribute type 1 has an invalid length. [ 263.786757][T12374] "syz.1.1810" (12374) uses obsolete ecb(arc4) skcipher [ 263.806786][T12382] 8021q: adding VLAN 0 to HW filter on device bond14 [ 263.846316][T12391] bond14: (slave geneve3): making interface the new active one [ 263.859163][T12391] bond14: (slave geneve3): Enslaving as an active interface with an up link [ 263.890003][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 264.243735][T12411] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 264.369842][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 264.487589][T12430] netlink: 'syz.0.1823': attribute type 3 has an invalid length. [ 264.628373][T12430] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 264.637252][T12430] netlink: 'syz.0.1823': attribute type 7 has an invalid length. [ 264.726171][T12430] netlink: 'syz.0.1823': attribute type 8 has an invalid length. [ 264.733946][T12430] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1823'. [ 264.831367][T12430] NCSI netlink: No device for ifindex 65584 [ 264.841499][T12444] IPVS: length: 28 != 8 [ 265.590666][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1839'. [ 265.600324][T12485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1839'. [ 265.818112][T12498] netlink: 'syz.1.1843': attribute type 8 has an invalid length. [ 265.880779][T12494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1842'. [ 266.295028][T12515] syzkaller0: entered promiscuous mode [ 266.306183][T12515] syzkaller0: entered allmulticast mode [ 267.031339][T12556] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1858'. [ 267.046686][ T5288] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 267.073805][T12556] netlink: 'syz.1.1858': attribute type 11 has an invalid length. [ 267.104502][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 267.150541][T12556] netlink: 'syz.1.1858': attribute type 11 has an invalid length. [ 267.192896][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'. [ 267.619686][T12582] netlink: 'syz.4.1863': attribute type 12 has an invalid length. [ 267.790866][T12597] netlink: 'syz.3.1868': attribute type 24 has an invalid length. [ 268.092190][T12616] netlink: 'syz.4.1872': attribute type 1 has an invalid length. [ 268.140506][T12616] 8021q: adding VLAN 0 to HW filter on device bond18 [ 268.541532][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 268.550434][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 268.571816][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1872'. [ 268.882098][T12625] bond18: (slave geneve2): making interface the new active one [ 268.892620][T12625] bond18: (slave geneve2): Enslaving as an active interface with an up link [ 268.941479][T12658] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1881'. [ 269.115305][T12625] syz.4.1872 (12625) used greatest stack depth: 18624 bytes left [ 269.442660][T12683] bond18: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 269.525233][T12683] bond18 (unregistering): Released all slaves [ 269.877624][T12693] 8021q: adding VLAN 0 to HW filter on device bond15 [ 270.034271][T12701] set match dimension is over the limit! [ 270.035205][T12695] bond15: (slave macvlan2): Opening slave failed [ 270.271344][T12705] nbd: device at index 64 is going down [ 270.811533][T12739] __nla_validate_parse: 4 callbacks suppressed [ 270.811552][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 270.839919][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'. [ 270.865336][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 270.896253][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 270.975714][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 270.989565][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 271.001154][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 271.029634][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 271.156787][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1906'. [ 271.294043][T12743] syzkaller0: entered promiscuous mode [ 271.366878][T12743] syzkaller0: entered allmulticast mode [ 271.522338][T12775] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 271.530237][T12773] netlink: 'syz.2.1912': attribute type 1 has an invalid length. [ 271.898022][T12786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.011302][T12796] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1924'. [ 272.029210][T12795] netlink: 'syz.0.1923': attribute type 2 has an invalid length. [ 272.078906][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 272.151637][T12805] netlink: 'syz.1.1927': attribute type 2 has an invalid length. [ 272.190134][T12805] : entered promiscuous mode [ 272.266350][T12810] netlink: 'syz.3.1931': attribute type 7 has an invalid length. [ 272.274552][T12810] netlink: 'syz.3.1931': attribute type 8 has an invalid length. [ 272.471071][T12818] bond16: entered promiscuous mode [ 272.487509][T12818] bond16: entered allmulticast mode [ 272.493243][T12818] 8021q: adding VLAN 0 to HW filter on device bond16 [ 272.619009][T12833] netlink: 'syz.2.1938': attribute type 5 has an invalid length. [ 272.633387][T12833] geneve4: entered promiscuous mode [ 272.638832][T12833] geneve4: entered allmulticast mode [ 272.647431][ T6557] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 272.664189][ T6557] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 272.690024][ T6557] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 272.720594][ T6557] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 272.991795][T12854] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 273.399421][T12854] veth9: entered promiscuous mode [ 273.515357][T12876] bond19: entered promiscuous mode [ 273.538170][T12876] bond19: entered allmulticast mode [ 273.543808][T12876] 8021q: adding VLAN 0 to HW filter on device bond19 [ 273.640735][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.982741][T12908] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 274.190126][T12920] bond0: (slave gre0): refused to change device type [ 274.214276][T12922] netlink: 'syz.0.1962': attribute type 1 has an invalid length. [ 274.273278][T12924] bond19: entered promiscuous mode [ 274.278478][T12924] bond19: entered allmulticast mode [ 274.283959][T12924] 8021q: adding VLAN 0 to HW filter on device bond19 [ 274.477563][T12930] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 274.754779][T12937] syzkaller0: entered promiscuous mode [ 274.783295][T12937] syzkaller0: entered allmulticast mode [ 274.849261][T12945] xt_CONNSECMARK: invalid mode: 0 [ 274.961996][T12945] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 274.982371][T12955] bond20: entered promiscuous mode [ 274.988445][T12955] bond20: entered allmulticast mode [ 274.996475][T12955] 8021q: adding VLAN 0 to HW filter on device bond20 [ 275.616071][T12995] bond21: entered promiscuous mode [ 275.621940][T12995] bond21: entered allmulticast mode [ 275.631799][T12995] 8021q: adding VLAN 0 to HW filter on device bond21 [ 275.759061][T13010] xt_hashlimit: overflow, rate too high: 0 [ 275.835212][T13012] __nla_validate_parse: 41 callbacks suppressed [ 275.835230][T13012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 275.883503][T13014] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 275.892216][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1995'. [ 275.938503][T13019] 8021q: adding VLAN 0 to HW filter on device bond15 [ 275.947412][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1996'. [ 275.957336][T13019] macvlan3: entered promiscuous mode [ 275.963262][T13019] macvlan3: entered allmulticast mode [ 275.970442][T13019] bond15: entered promiscuous mode [ 275.976730][T13019] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 276.002171][T13025] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1997'. [ 276.011523][T13025] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.019480][T13025] IPv6: Can't replace route, no match found [ 276.050057][T13019] bond15: left promiscuous mode [ 276.150328][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 276.173379][T13035] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 276.412011][T13035] bond31: option packets_per_slave: invalid value (18446744073709551615) [ 276.440999][T13035] bond31: option packets_per_slave: allowed values 0 - 65535 [ 276.452079][T13035] bond31 (unregistering): Released all slaves [ 276.462256][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 276.586065][T13054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2002'. [ 276.596125][T13054] bond22: entered promiscuous mode [ 276.601329][T13054] bond22: entered allmulticast mode [ 276.607386][T13054] 8021q: adding VLAN 0 to HW filter on device bond22 [ 276.678729][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 276.692481][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 276.822083][T13076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 276.934604][T13080] bond20: option fail_over_mac: invalid value (16) [ 276.943272][T13080] bond20 (unregistering): Released all slaves [ 277.007316][T13088] validate_nla: 1 callbacks suppressed [ 277.007328][T13088] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 277.033087][T13088] 8021q: adding VLAN 0 to HW filter on device bond23 [ 277.054329][T13088] macvlan2: entered promiscuous mode [ 277.059647][T13088] macvlan2: entered allmulticast mode [ 277.066026][T13088] bond23: entered promiscuous mode [ 277.071665][T13088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.095681][T13088] bond23: left promiscuous mode [ 277.292014][T13099] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 277.663779][T13117] bond24: option fail_over_mac: invalid value (16) [ 277.671504][T13117] bond24 (unregistering): Released all slaves [ 277.810062][T13120] raw_sendmsg: syz.0.2027 forgot to set AF_INET. Fix it! [ 278.203228][T13151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.232462][T13151] netlink: 'syz.1.2039': attribute type 5 has an invalid length. [ 278.242245][T13151] openvswitch: netlink: IP tunnel dst address not specified [ 278.391618][T13161] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 278.487068][ T29] audit: type=1804 audit(1782790884.287:6): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2044" name="/newroot/434/cgroup.controllers" dev="tmpfs" ino=2216 res=1 errno=0 [ 278.519823][ T29] audit: type=1800 audit(1782790884.327:7): pid=13169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2044" name="cgroup.controllers" dev="tmpfs" ino=2216 res=0 errno=0 [ 278.711712][T13184] 8021q: adding VLAN 0 to HW filter on device bond16 [ 278.810985][T13184] bond16: (slave macvlan3): Opening slave failed [ 279.115111][T13198] bond17: entered promiscuous mode [ 279.127318][T13198] bond17: entered allmulticast mode [ 279.143523][T13198] 8021q: adding VLAN 0 to HW filter on device bond17 [ 279.400178][T13203] nbd: nbd64 already in use [ 279.406115][T13209] netlink: 'syz.1.2055': attribute type 11 has an invalid length. [ 279.902866][T13239] bond20: entered promiscuous mode [ 279.908093][T13239] bond20: entered allmulticast mode [ 279.913641][T13239] 8021q: adding VLAN 0 to HW filter on device bond20 [ 280.107879][T13244] 8021q: adding VLAN 0 to HW filter on device bond21 [ 280.126223][T13244] bond21: (slave macvlan3): Opening slave failed [ 280.300435][T13261] netlink: 'syz.2.2071': attribute type 4 has an invalid length. [ 280.382632][T13264] bond31 (unregistering): Released all slaves [ 280.910553][T13290] __nla_validate_parse: 32 callbacks suppressed [ 280.910588][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2079'. [ 280.939853][T13294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2080'. [ 280.949850][T13282] bond22: entered promiscuous mode [ 280.967572][T13282] bond22: entered allmulticast mode [ 280.973596][T13282] 8021q: adding VLAN 0 to HW filter on device bond22 [ 281.102170][T13300] set match dimension is over the limit! [ 281.115313][T13281] pim6reg: entered allmulticast mode [ 281.310735][T13308] gtp0: entered promiscuous mode [ 281.315729][T13308] gtp0: entered allmulticast mode [ 281.333217][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 281.427956][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2090'. [ 281.448629][T13312] 8021q: adding VLAN 0 to HW filter on device bond24 [ 281.477616][T13325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2091'. [ 281.536842][T13318] bond24: (slave macvlan2): Opening slave failed [ 281.549887][T13328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 281.621621][T13332] set match dimension is over the limit! [ 281.642533][T13328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2092'. [ 281.656048][T13328] bond18: entered promiscuous mode [ 281.661299][T13328] bond18: entered allmulticast mode [ 281.667008][T13328] 8021q: adding VLAN 0 to HW filter on device bond18 [ 281.863547][T13337] can: request_module (can-proto-0) failed. [ 282.114370][T13359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2101'. [ 282.126594][T13362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 282.226288][T13369] Cannot find del_set index 3 as target [ 282.294776][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2106'. [ 282.328223][T13374] bond25: entered promiscuous mode [ 282.331741][T13377] netlink: 'syz.2.2108': attribute type 1 has an invalid length. [ 282.333436][T13374] bond25: entered allmulticast mode [ 282.346627][T13374] 8021q: adding VLAN 0 to HW filter on device bond25 [ 282.379877][T13379] 8021q: adding VLAN 0 to HW filter on device bond23 [ 282.434116][T13377] 8021q: adding VLAN 0 to HW filter on device bond31 [ 282.455566][T13379] bond23: (slave macvlan3): Opening slave failed [ 282.583070][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.823238][T13399] tipc: Failed to obtain node identity [ 282.835272][T13399] tipc: Enabling of bearer rejected, failed to enable media [ 282.947365][T13407] openvswitch: netlink: Message has 512 unknown bytes. [ 283.360923][T13426] bond19: entered promiscuous mode [ 283.366291][T13426] bond19: entered allmulticast mode [ 283.372486][T13426] 8021q: adding VLAN 0 to HW filter on device bond19 [ 283.627978][T13440] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 283.688232][T13440] 8021q: adding VLAN 0 to HW filter on device bond24 [ 284.418969][T13456] openvswitch: netlink: Message has 8 unknown bytes. [ 285.841110][T13467] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 285.856914][T13467] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 285.864970][T13467] gretap0: entered promiscuous mode [ 285.871227][T13467] gretap0: entered allmulticast mode [ 285.929967][T13470] __nla_validate_parse: 8 callbacks suppressed [ 285.929983][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2131'. [ 285.961388][T13470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2131'. [ 285.971072][T13470] bond17: entered promiscuous mode [ 285.976228][T13470] bond17: entered allmulticast mode [ 285.981851][T13470] 8021q: adding VLAN 0 to HW filter on device bond17 [ 286.014767][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 286.054982][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 286.066041][T13476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'. [ 286.140324][T13478] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 286.456047][T13441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.684869][T13484] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 286.694196][T13488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 286.717990][T13486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2137'. [ 286.780071][T13484] 8021q: adding VLAN 0 to HW filter on device bond20 [ 286.931980][T13502] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2140'. [ 286.956098][T13505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 286.967206][T13506] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2143'. [ 287.078680][T13508] xt_hashlimit: size too large, truncated to 1048576 [ 287.209727][T13518] netlink: 'syz.3.2147': attribute type 32 has an invalid length. [ 287.338575][T13518] bond26: option coupled_control: invalid value (192) [ 287.368936][T13518] bond26 (unregistering): Released all slaves [ 287.635748][T13532] can: request_module (can-proto-0) failed. [ 287.880264][T13546] syzkaller0: entered promiscuous mode [ 287.885785][T13546] syzkaller0: entered allmulticast mode [ 288.055181][T13557] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 288.090377][T13557] 8021q: adding VLAN 0 to HW filter on device bond26 [ 288.470158][T13567] netlink: 'syz.2.2160': attribute type 6 has an invalid length. [ 288.527713][T13569] bond27: (slave bridge15): Enslaving as an active interface with an up link [ 290.073092][T13524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.403869][T13595] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 290.498084][T13602] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 291.015984][T13595] 8021q: adding VLAN 0 to HW filter on device bond21 [ 291.050829][T13602] 8021q: adding VLAN 0 to HW filter on device bond18 [ 291.064841][T13607] macvlan3: entered promiscuous mode [ 291.070160][T13607] macvlan3: entered allmulticast mode [ 291.076396][T13607] bond18: entered promiscuous mode [ 291.081919][T13607] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 291.115296][T13607] bond18: left promiscuous mode [ 291.155160][T13614] xt_hashlimit: size too large, truncated to 1048576 [ 291.370579][T13621] set match dimension is over the limit! [ 291.534405][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 291.606863][T13627] __nla_validate_parse: 13 callbacks suppressed [ 291.606882][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2179'. [ 291.959966][T13642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2185'. [ 292.007198][T13642] netlink: 'syz.0.2185': attribute type 2 has an invalid length. [ 292.021361][T13650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.038519][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2188'. [ 292.047628][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2185'. [ 292.131264][T13656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2190'. [ 292.230373][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2188'. [ 292.284021][T13665] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 292.367747][T13669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2193'. [ 292.377000][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 292.407675][T13672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 292.418624][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 292.437540][T13665] 8021q: adding VLAN 0 to HW filter on device bond28 [ 292.604323][T13671] bond19: entered promiscuous mode [ 292.645117][T13671] 8021q: adding VLAN 0 to HW filter on device bond19 [ 292.705512][T13680] bridge8: entered promiscuous mode [ 292.714088][T13680] bond19: (slave bridge8): Enslaving as an active interface with an up link [ 292.920932][T13692] tipc: Enabled bearer , priority 0 [ 292.986743][T13684] syzkaller0: entered promiscuous mode [ 292.992311][T13684] syzkaller0: entered allmulticast mode [ 292.998577][T13684] tipc: Resetting bearer [ 293.032480][T13682] tipc: Resetting bearer [ 293.219930][T13707] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 293.244135][T13707] netlink: 'syz.0.2204': attribute type 3 has an invalid length. [ 295.307379][T13682] tipc: Disabling bearer [ 295.427711][T13719] xfrm0 speed is unknown, defaulting to 1000 [ 295.511311][T13731] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 295.580373][T13735] netlink: zone id is out of range [ 295.655252][T13743] FAULT_INJECTION: forcing a failure. [ 295.655252][T13743] name failslab, interval 1, probability 0, space 0, times 0 [ 295.675327][T13747] netlink: 'syz.4.2216': attribute type 3 has an invalid length. [ 295.685711][T13747] netlink: 'syz.4.2216': attribute type 2 has an invalid length. [ 295.699131][T13747] netlink: 'syz.4.2216': attribute type 9 has an invalid length. [ 295.707461][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.2.2214 Not tainted syzkaller #0 PREEMPT(full) [ 295.707483][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.707505][T13743] Call Trace: [ 295.707512][T13743] [ 295.707520][T13743] dump_stack_lvl+0xe8/0x150 [ 295.707549][T13743] should_fail_ex+0x40c/0x560 [ 295.707580][T13743] should_failslab+0xa8/0x100 [ 295.707603][T13743] __kmalloc_noprof+0xfe/0x720 [ 295.707632][T13743] ? sock_kmalloc+0xd6/0x160 [ 295.707650][T13743] ? sock_kmalloc+0xd6/0x160 [ 295.707676][T13743] sock_kmalloc+0xd6/0x160 [ 295.707700][T13743] ____sys_sendmsg+0x1be/0x850 [ 295.707734][T13743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.707763][T13743] ? import_iovec+0x73/0xa0 [ 295.707786][T13743] ___sys_sendmsg+0x2a5/0x360 [ 295.707802][T13743] ? __lock_acquire+0x683/0x2cf0 [ 295.707826][T13743] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.707851][T13743] ? kstrtouint+0x6e/0xe0 [ 295.707900][T13743] ? __fget_files+0x2a/0x420 [ 295.707918][T13743] ? __fget_files+0x3a2/0x420 [ 295.707945][T13743] __sys_sendmmsg+0x273/0x4d0 [ 295.707971][T13743] ? __pfx___sys_sendmmsg+0x10/0x10 [ 295.708001][T13743] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 295.708043][T13743] ? ksys_write+0x242/0x270 [ 295.708067][T13743] ? __pfx_ksys_write+0x10/0x10 [ 295.708096][T13743] __x64_sys_sendmmsg+0xa0/0xc0 [ 295.708117][T13743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.708137][T13743] do_syscall_64+0x174/0x580 [ 295.708153][T13743] ? trace_irq_disable+0x3b/0x140 [ 295.708170][T13743] ? clear_bhb_loop+0x40/0x90 [ 295.708193][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.708212][T13743] RIP: 0033:0x7f28fad9ce59 [ 295.708228][T13743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.708244][T13743] RSP: 002b:00007f28fbcdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 295.708264][T13743] RAX: ffffffffffffffda RBX: 00007f28fb016090 RCX: 00007f28fad9ce59 [ 295.708278][T13743] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000005 [ 295.708290][T13743] RBP: 00007f28fbcdf090 R08: 0000000000000000 R09: 0000000000000000 [ 295.708301][T13743] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 295.708312][T13743] R13: 00007f28fb016128 R14: 00007f28fb016090 R15: 00007ffe25c1d448 [ 295.708342][T13743] [ 295.712646][T13731] 8021q: adding VLAN 0 to HW filter on device bond29 [ 296.143435][T13719] ±’ŖØśrBŗ“ speed is unknown, defaulting to 1000 [ 296.626079][T13770] __nla_validate_parse: 14 callbacks suppressed [ 296.626099][T13770] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2221'. [ 296.635801][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2223'. [ 296.795370][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2224'. [ 296.854986][T13781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 297.066590][T13785] xt_CT: No such helper "snmp" [ 297.196448][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2230'. [ 299.016042][T13795] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 299.143992][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2232'. [ 299.164185][T13802] netlink: 'syz.4.2233': attribute type 1 has an invalid length. [ 299.384079][T13816] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2232'. [ 299.387866][T13802] 8021q: adding VLAN 0 to HW filter on device bond26 [ 299.540971][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 299.644306][T13813] bond30: (slave bridge16): Enslaving as an active interface with an up link [ 299.706986][T13816] bond30: entered promiscuous mode [ 299.712150][T13816] bridge16: entered promiscuous mode [ 299.717625][T13816] bond30: entered allmulticast mode [ 299.722883][T13816] bridge16: entered allmulticast mode [ 299.730353][T13816] 8021q: adding VLAN 0 to HW filter on device bond30 [ 299.879589][T13822] syzkaller0: entered promiscuous mode [ 299.885124][T13822] syzkaller0: entered allmulticast mode [ 299.959248][T13836] tipc: Started in network mode [ 299.964115][T13836] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 299.972969][T13836] tipc: Enabling of bearer rejected, failed to enable media [ 302.232154][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 302.278837][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 302.322351][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 302.373649][T13866] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 302.446729][T13866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2250'. [ 302.457245][T13871] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.2251'. [ 302.519307][T13861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2248'. [ 302.545455][T13876] netlink: 'syz.1.2252': attribute type 1 has an invalid length. [ 302.554668][T13872] netlink: 1788 bytes leftover after parsing attributes in process `syz.4.2251'. [ 302.572452][T13871] IPVS: set_ctl: invalid protocol: 60 172.20.20.48:20000 [ 302.596584][T13869] bond31: (slave bridge17): Enslaving as an active interface with an up link [ 302.668247][T13861] bond31: entered promiscuous mode [ 302.684340][T13861] bridge17: entered promiscuous mode [ 302.694365][T13861] bond31: entered allmulticast mode [ 302.704817][T13861] bridge17: entered allmulticast mode [ 302.732862][T13861] 8021q: adding VLAN 0 to HW filter on device bond31 [ 302.844728][T13876] 8021q: adding VLAN 0 to HW filter on device bond22 [ 302.874798][T13876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 303.036438][T13873] syzkaller1: entered promiscuous mode [ 303.043890][T13873] syzkaller1: entered allmulticast mode [ 303.268245][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 303.277424][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2261'. [ 303.485000][T13921] bond20: option fail_over_mac: invalid value (16) [ 303.493828][T13921] bond20 (unregistering): Released all slaves [ 303.558445][T13930] bond32: (slave bridge10): Enslaving as an active interface with an up link [ 303.574516][T13924] bond32: entered promiscuous mode [ 303.579667][T13924] bridge10: entered promiscuous mode [ 303.585259][T13924] bond32: entered allmulticast mode [ 303.590480][T13924] bridge10: entered allmulticast mode [ 303.597129][T13924] 8021q: adding VLAN 0 to HW filter on device bond32 [ 303.905542][T13945] set match dimension is over the limit! [ 304.027677][T13953] ¾x9’: renamed from bridge_slave_0 (while UP) [ 304.155925][T13959] bond32: (slave bridge18): Enslaving as an active interface with an up link [ 304.185029][T13959] bond32: entered promiscuous mode [ 304.190198][T13959] bridge18: entered promiscuous mode [ 304.195783][T13959] bond32: entered allmulticast mode [ 304.200997][T13959] bridge18: entered allmulticast mode [ 304.207301][T13959] 8021q: adding VLAN 0 to HW filter on device bond32 [ 304.524596][T13977] set match dimension is over the limit! [ 304.790399][T13978] A link change request failed with some changes committed already. Interface 26±’ŖØśrBŗ“ may have been left with an inconsistent configuration, please check. [ 305.083415][T13988] bond27: (slave bridge13): Enslaving as an active interface with an up link [ 305.096902][T13988] bond27: entered promiscuous mode [ 305.102044][T13988] bridge13: entered promiscuous mode [ 305.107488][T13988] bond27: entered allmulticast mode [ 305.112703][T13988] bridge13: entered allmulticast mode [ 305.119176][T13988] 8021q: adding VLAN 0 to HW filter on device bond27 [ 305.914945][T14022] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 306.046325][T14024] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 307.588699][T14024] workqueue: Failed to create a rescuer kthread for wq "bond33": -EINTR [ 307.797398][T14035] __nla_validate_parse: 15 callbacks suppressed [ 307.797418][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2302'. [ 307.819695][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 307.868451][T14032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 307.890993][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'. [ 308.037764][T14035] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2302'. [ 308.124119][T14045] bond23: (slave bridge9): Enslaving as an active interface with an up link [ 308.138790][T14035] bond23: entered promiscuous mode [ 308.144098][T14035] bridge9: entered promiscuous mode [ 308.152059][T14035] bond23: entered allmulticast mode [ 308.157629][T14035] bridge9: entered allmulticast mode [ 308.165653][T14035] 8021q: adding VLAN 0 to HW filter on device bond23 [ 308.505061][T14071] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 308.514657][T14071] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.672195][T14077] netlink: 'syz.1.2313': attribute type 1 has an invalid length. [ 308.708230][T14077] 8021q: adding VLAN 0 to HW filter on device bond24 [ 308.743961][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 308.865941][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 308.923850][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 308.940482][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 309.011956][T14080] vcan0: tx address claim with dlc 0 [ 309.357993][T14104] FAULT_INJECTION: forcing a failure. [ 309.357993][T14104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.388795][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.0.2320 Not tainted syzkaller #0 PREEMPT(full) [ 309.388829][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.388840][T14104] Call Trace: [ 309.388848][T14104] [ 309.388856][T14104] dump_stack_lvl+0xe8/0x150 [ 309.388884][T14104] should_fail_ex+0x40c/0x560 [ 309.388915][T14104] _copy_from_iter+0x3b0/0x1660 [ 309.388955][T14104] ? __pfx__copy_from_iter+0x10/0x10 [ 309.388984][T14104] ? alloc_pages_noprof+0x13b/0x2a0 [ 309.389008][T14104] ? skb_page_frag_refill+0x119/0x460 [ 309.389041][T14104] kcm_sendmsg+0xe32/0x2ad0 [ 309.389100][T14104] ? __pfx_kcm_sendmsg+0x10/0x10 [ 309.389126][T14104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 309.389154][T14104] ? __pfx_kcm_sendmsg+0x10/0x10 [ 309.389174][T14104] sock_sendmsg_nosec+0x13a/0x180 [ 309.389203][T14104] ____sys_sendmsg+0x54e/0x850 [ 309.389229][T14104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.389260][T14104] ? import_iovec+0x73/0xa0 [ 309.389283][T14104] ___sys_sendmsg+0x2a5/0x360 [ 309.389301][T14104] ? __lock_acquire+0x683/0x2cf0 [ 309.389331][T14104] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.389355][T14104] ? kstrtouint+0x6e/0xe0 [ 309.389404][T14104] ? __fget_files+0x2a/0x420 [ 309.389421][T14104] ? __fget_files+0x3a2/0x420 [ 309.389449][T14104] __sys_sendmmsg+0x273/0x4d0 [ 309.389476][T14104] ? __pfx___sys_sendmmsg+0x10/0x10 [ 309.389506][T14104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.389548][T14104] ? ksys_write+0x242/0x270 [ 309.389573][T14104] ? __pfx_ksys_write+0x10/0x10 [ 309.389600][T14104] __x64_sys_sendmmsg+0xa0/0xc0 [ 309.389620][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.389639][T14104] do_syscall_64+0x174/0x580 [ 309.389656][T14104] ? trace_irq_disable+0x3b/0x140 [ 309.389674][T14104] ? clear_bhb_loop+0x40/0x90 [ 309.389697][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.389715][T14104] RIP: 0033:0x7fb406b9ce59 [ 309.389731][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.389746][T14104] RSP: 002b:00007fb407af3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 309.389765][T14104] RAX: ffffffffffffffda RBX: 00007fb406e16090 RCX: 00007fb406b9ce59 [ 309.389778][T14104] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000005 [ 309.389789][T14104] RBP: 00007fb407af3090 R08: 0000000000000000 R09: 0000000000000000 [ 309.389806][T14104] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 309.389817][T14104] R13: 00007fb406e16128 R14: 00007fb406e16090 R15: 00007ffe4e8541d8 [ 309.389846][T14104] [ 309.760416][T14111] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2326'. [ 310.018215][T14125] bridge11: entered promiscuous mode [ 310.023588][T14125] bridge11: entered allmulticast mode [ 310.032173][T14125] team0: Port device bridge11 added [ 310.045422][T14126] bridge12: entered promiscuous mode [ 310.051861][T14126] bridge12: entered allmulticast mode [ 310.060434][T14126] team0: Port device bridge12 added [ 310.065983][T14129] tipc: Enabled bearer , priority 10 [ 310.079514][T14125] bridge0: port 3(team0) entered blocking state [ 310.086205][T14125] bridge0: port 3(team0) entered disabled state [ 310.093515][T14125] team0: entered allmulticast mode [ 310.098684][T14125] team_slave_0: entered allmulticast mode [ 310.134697][T14125] team_slave_1: entered allmulticast mode [ 310.144695][T14125] team0: entered promiscuous mode [ 310.150842][T14125] team_slave_0: entered promiscuous mode [ 310.157108][T14125] team_slave_1: entered promiscuous mode [ 310.429650][T14143] bond20: (slave bridge9): Enslaving as an active interface with an up link [ 310.524902][T14141] bond20: entered promiscuous mode [ 310.530323][T14141] bridge9: entered promiscuous mode [ 310.536926][T14141] bond20: entered allmulticast mode [ 310.542176][T14141] bridge9: entered allmulticast mode [ 310.549407][T14141] 8021q: adding VLAN 0 to HW filter on device bond20 [ 312.937926][T14199] __nla_validate_parse: 12 callbacks suppressed [ 312.937959][T14199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2354'. [ 313.014506][T14195] bond21: (slave bridge10): Enslaving as an active interface with an up link [ 313.080579][T14199] bond21: entered promiscuous mode [ 313.085742][T14199] bridge10: entered promiscuous mode [ 313.091403][T14199] bond21: entered allmulticast mode [ 313.096617][T14199] bridge10: entered allmulticast mode [ 313.103478][T14199] 8021q: adding VLAN 0 to HW filter on device bond21 [ 313.244852][T14207] syzkaller0: entered promiscuous mode [ 313.250363][T14207] syzkaller0: entered allmulticast mode [ 313.392173][T14225] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2363'. [ 313.415671][T14225] vlan5: entered allmulticast mode [ 313.958445][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 313.967346][T14248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2368'. [ 313.976385][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2368'. [ 314.229865][T14266] IPv6: addrconf: prefix option has invalid lifetime [ 314.845815][T14290] vti0: entered promiscuous mode [ 315.034210][T14303] pim6reg: left allmulticast mode [ 315.036997][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 315.111834][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'. [ 315.184597][T14314] vlan5: entered promiscuous mode [ 315.198850][T14314] bridge0: entered promiscuous mode [ 315.364090][T14327] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2392'. [ 315.393065][T14317] tipc: Enabling of bearer rejected, failed to enable media [ 315.494744][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2391'. [ 315.641594][T14343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2395'. [ 315.734358][T14343] bond26: invalid ARP target 0.0.0.0 specified for addition [ 315.741703][T14343] bond26: option arp_ip_target: invalid value (0) [ 315.749894][T14343] bond26 (unregistering): Released all slaves [ 315.813480][T14353] veth0: entered promiscuous mode [ 315.824632][T14352] veth0: left promiscuous mode [ 316.615639][T14398] xt_ecn: cannot match TCP bits for non-tcp packets [ 316.657952][T14398] netlink: 'syz.3.2412': attribute type 21 has an invalid length. [ 316.682347][T14398] netlink: 'syz.3.2412': attribute type 22 has an invalid length. [ 316.735391][T14398] netlink: 'syz.3.2412': attribute type 23 has an invalid length. [ 316.771697][T14398] netlink: 'syz.3.2412': attribute type 25 has an invalid length. [ 316.780988][T14398] netlink: 'syz.3.2412': attribute type 26 has an invalid length. [ 316.815937][T14406] sock: sock_timestamping_bind_phc: sock not bind to device [ 316.883114][T14403] xfrm0 speed is unknown, defaulting to 1000 [ 317.106797][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 317.478703][T14424] set match dimension is over the limit! [ 317.843842][T14403] ±’ŖØśrBŗ“ speed is unknown, defaulting to 1000 [ 318.273537][T14436] __nla_validate_parse: 2 callbacks suppressed [ 318.273556][T14436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 318.568803][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 318.938227][T14459] netlink: 'syz.1.2428': attribute type 9 has an invalid length. [ 319.354242][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2436'. [ 319.439045][T14487] 8021q: adding VLAN 0 to HW filter on device bond22 [ 319.790918][T14499] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 319.818292][T14499] bond23 (unregistering): Released all slaves [ 319.872059][T14503] ipt_REJECT: TCP_RESET invalid for non-tcp [ 319.909821][T14496] netlink: 'syz.4.2438': attribute type 29 has an invalid length. [ 319.925493][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2438'. [ 319.940831][T14485] xfrm0 speed is unknown, defaulting to 1000 [ 320.062195][T14506] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2441'. [ 320.311715][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.366658][T14485] ±’ŖØśrBŗ“ speed is unknown, defaulting to 1000 [ 320.670925][T14531] netlink: 'syz.2.2450': attribute type 83 has an invalid length. [ 320.811181][T14538] bond0: left promiscuous mode [ 320.816050][T14538] bond0: left allmulticast mode [ 321.093079][T14551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 321.102066][T14551] block nbd1: Unsupported socket: should be TCP or UNIX. [ 321.330497][T14564] netlink: 'syz.1.2459': attribute type 12 has an invalid length. [ 321.464277][T14572] openvswitch: netlink: IP tunnel dst address not specified [ 322.016953][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 322.425759][T14610] netlink: 'syz.2.2475': attribute type 1 has an invalid length. [ 322.433571][T14610] netlink: 'syz.2.2475': attribute type 7 has an invalid length. [ 322.441302][T14610] netlink: 'syz.2.2475': attribute type 8 has an invalid length. [ 322.449033][T14610] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2475'. [ 322.458067][T14610] NCSI netlink: No device for ifindex 65584 [ 322.645073][T14614] netlink: 'syz.4.2476': attribute type 4 has an invalid length. [ 322.668524][T14614] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2476'. [ 322.762195][T14614] .`: renamed from bond0 (while UP) [ 322.908793][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'. [ 323.099245][T14628] netlink: 'syz.1.2479': attribute type 2 has an invalid length. [ 323.356346][T14644] __nla_validate_parse: 1 callbacks suppressed [ 323.356368][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 323.385794][T14644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 323.423172][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2489'. [ 323.432743][T14648] netlink: 'syz.1.2488': attribute type 1 has an invalid length. [ 323.583826][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2492'. [ 323.674777][T14658] 8021q: adding VLAN 0 to HW filter on device bond33 [ 324.004879][T14681] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1500) ! [ 324.014485][T14681] syzkaller0: entered promiscuous mode [ 324.020126][T14681] syzkaller0: entered allmulticast mode [ 324.157502][T14687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2502'. [ 324.226166][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2503'. [ 324.242502][T14687] 8021q: adding VLAN 0 to HW filter on device bond26 [ 324.321211][T14690] bond23: entered promiscuous mode [ 324.326828][T14690] 8021q: adding VLAN 0 to HW filter on device bond23 [ 324.340745][T14687] bond26: (slave macvlan2): Opening slave failed [ 324.363023][T14690] bridge11: entered promiscuous mode [ 324.369088][T14690] bond23: (slave bridge11): Enslaving as an active interface with an up link [ 324.495265][T14701] syzkaller0: entered promiscuous mode [ 324.512254][T14701] syzkaller0: entered allmulticast mode [ 324.537499][T14702] netlink: 'syz.3.2505': attribute type 2 has an invalid length. [ 324.572126][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2508'. [ 324.693790][T14711] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2509'. [ 324.695215][T14715] veth1_virt_wifi: entered promiscuous mode [ 324.709299][T14715] veth1_virt_wifi: entered allmulticast mode [ 324.788095][T14719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2514'. [ 324.950614][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2518'. [ 325.039191][T14730] bond34: entered promiscuous mode [ 325.061848][T14730] 8021q: adding VLAN 0 to HW filter on device bond34 [ 325.090610][T14736] C: renamed from 26±’ŖØśrBŗ“ [ 325.106613][T14736] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 325.143961][T14737] bridge20: entered promiscuous mode [ 325.159183][T14737] bond34: (slave bridge20): Enslaving as an active interface with an up link [ 325.285585][T14746] 8021q: adding VLAN 0 to HW filter on device bond27 [ 325.333910][T14745] tipc: Resetting bearer [ 325.458358][T14742] bond27: (slave macvlan2): Opening slave failed [ 325.622443][T14765] xt_hashlimit: size too large, truncated to 1048576 [ 325.628077][T14766] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 325.867998][T14784] openvswitch: netlink: VXLAN extension 1536 out of range max 1 [ 326.053615][T14796] netlink: 'syz.3.2538': attribute type 10 has an invalid length. [ 326.075417][T14793] bond28: entered promiscuous mode [ 326.080982][T14793] 8021q: adding VLAN 0 to HW filter on device bond28 [ 326.103119][T14793] bridge10: entered promiscuous mode [ 326.109152][T14793] bond28: (slave bridge10): Enslaving as an active interface with an up link [ 326.592812][T14815] 8021q: adding VLAN 0 to HW filter on device bond35 [ 326.693127][T14820] bond35: (slave macvlan3): Opening slave failed [ 327.060127][T14849] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 327.277933][T14873] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 327.299115][T14871] x_tables: duplicate underflow at hook 2 [ 327.308609][T14876] syzkaller0: entered promiscuous mode [ 327.322217][T14876] syzkaller0: entered allmulticast mode [ 327.579556][T14884] nbd: device at index 64 is going down [ 327.678689][T14888] tap0: tun_chr_ioctl cmd 1074025672 [ 327.684017][T14888] tap0: ignored: set checksum disabled [ 327.931331][T14890] udevd[14890]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 328.092880][T14910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.111094][T14910] bond0: (slave macvlan3): Opening slave failed [ 328.274517][T14923] netlink: 'syz.0.2569': attribute type 1 has an invalid length. [ 328.318191][T14928] __nla_validate_parse: 20 callbacks suppressed [ 328.318209][T14928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2570'. [ 328.322031][T14923] 8021q: adding VLAN 0 to HW filter on device bond24 [ 328.345982][T14928] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.354072][T14928] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.394485][T14923] bond24: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 328.424891][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2569'. [ 328.448846][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2572'. [ 328.470960][T14923] macvlan3: entered promiscuous mode [ 328.478349][T14923] macvlan3: entered allmulticast mode [ 328.520949][T14923] bond24: entered promiscuous mode [ 328.533872][T14923] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 328.544084][T14923] bond24: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 328.561137][T14923] bond24: left promiscuous mode [ 328.626790][T14937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2572'. [ 328.635792][T14937] nbd: device at index 64 is going down [ 328.663098][T14933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2572'. [ 329.002856][T14961] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 329.184173][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2583'. [ 329.300919][T14979] 8021q: adding VLAN 0 to HW filter on device bond25 [ 329.373314][T14983] bond25: (slave macvlan3): Opening slave failed [ 329.401419][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.486129][T14994] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 329.501097][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2589'. [ 329.834208][T15003] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2592'. [ 329.937896][T15010] netlink: 'syz.0.2594': attribute type 13 has an invalid length. [ 329.952702][T15014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2596'. [ 329.996919][T15015] bond28: option fail_over_mac: invalid value (16) [ 330.006610][T15015] bond28 (unregistering): Released all slaves [ 330.038480][ T6571] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 330.460983][T15043] netlink: 'syz.1.2602': attribute type 21 has an invalid length. [ 330.686327][T15054] netlink: 'syz.1.2605': attribute type 3 has an invalid length. [ 330.873830][T15061] bond29: option fail_over_mac: invalid value (16) [ 330.885886][T15061] bond29 (unregistering): Released all slaves [ 332.922253][T15014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.177256][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2610'. [ 333.376121][T15087] __nla_validate_parse: 1 callbacks suppressed [ 333.376139][T15087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2616'. [ 333.410840][T15082] bond29: entered promiscuous mode [ 333.416915][T15082] 8021q: adding VLAN 0 to HW filter on device bond29 [ 333.441138][T15085] bridge11: entered promiscuous mode [ 333.447457][T15085] bond29: (slave bridge11): Enslaving as an active interface with an up link [ 333.519711][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2615'. [ 333.601252][T15088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2615'. [ 333.786597][T15099] bond28: option fail_over_mac: invalid value (16) [ 333.789323][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 333.840254][T15099] bond28 (unregistering): Released all slaves [ 334.029396][T15122] x_tables: duplicate underflow at hook 1 [ 334.868637][T15157] xfrm0 speed is unknown, defaulting to 1000 [ 335.129623][T15157] C speed is unknown, defaulting to 1000 [ 335.333877][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2649'. [ 335.619068][T15187] netlink: 'syz.3.2652': attribute type 5 has an invalid length. [ 335.635339][T15190] IPVS: Unknown mcast interface: pim6reg1 [ 335.725773][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2655'. [ 335.746509][T15194] bond26: entered promiscuous mode [ 335.751967][T15194] 8021q: adding VLAN 0 to HW filter on device bond26 [ 335.807933][T15194] bridge12: entered promiscuous mode [ 335.814117][T15194] bond26: (slave bridge12): Enslaving as an active interface with an up link [ 335.975744][T15204] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 336.088558][T15208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 336.099530][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2659'. [ 336.137839][T15208] xfrm1: entered promiscuous mode [ 336.143042][T15208] xfrm1: entered allmulticast mode [ 336.815070][T15240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 336.819069][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2669'. [ 336.836072][T15241] netlink: 'syz.3.2670': attribute type 30 has an invalid length. [ 336.934975][T15247] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 336.959141][T15240] bond0: entered allmulticast mode [ 336.964339][T15240] batadv0: entered allmulticast mode [ 337.102024][T15255] 8021q: adding VLAN 0 to HW filter on device bond33 [ 337.136929][T15255] bond33: (slave macvlan2): Opening slave failed [ 337.469082][T15283] bond34: entered promiscuous mode [ 337.493507][T15283] macvlan2: entered promiscuous mode [ 337.498860][T15283] macvlan2: entered allmulticast mode [ 337.505398][T15283] bond34: (slave macvlan2): Opening slave failed [ 337.525136][T15280] syzkaller1: entered promiscuous mode [ 337.530642][T15280] syzkaller1: entered allmulticast mode [ 337.704715][T15294] set match dimension is over the limit! [ 337.891469][ T29] audit: type=1107 audit(1782790943.697:8): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='kŹŒéfĀصóI‰Ūļ'²pe»×³G’ ńqné« żR' [ 338.133629][T15313] 8021q: adding VLAN 0 to HW filter on device .` [ 338.160979][T15313] bond7: left promiscuous mode [ 338.167157][T15313] bond9: left promiscuous mode [ 338.173141][T15313] bond10: left promiscuous mode [ 338.177995][T15313] bridge5: left promiscuous mode [ 338.184174][T15313] bond11: left promiscuous mode [ 338.189028][T15313] bridge7: left promiscuous mode [ 338.240299][T15313] bond15: left promiscuous mode [ 338.248587][T15313] 8021q: adding VLAN 0 to HW filter on device bond16 [ 338.257188][T15313] 8021q: adding VLAN 0 to HW filter on device bond17 [ 338.289388][T15313] bond19: left promiscuous mode [ 338.294661][T15313] bond20: left promiscuous mode [ 338.299930][T15313] bond21: left promiscuous mode [ 338.321506][T15313] bond22: left promiscuous mode [ 338.329303][T15313] bond25: left promiscuous mode [ 338.337227][T15313] .`: entered promiscuous mode [ 338.342416][T15313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.351938][T15313] bond27: left promiscuous mode [ 338.356801][T15313] bridge13: left promiscuous mode [ 338.420971][T11038] bond12: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 338.435583][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 338.445384][T11038] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 338.762095][T15330] __nla_validate_parse: 7 callbacks suppressed [ 338.762122][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2697'. [ 338.887399][T15336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2699'. [ 338.977927][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 339.159776][T11038] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 339.912698][T15371] xt_hashlimit: size too large, truncated to 1048576 [ 340.199353][T11038] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 340.233739][T11038] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 340.717829][T15410] nftables ruleset with unbound set [ 340.811172][T15418] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 340.848814][T15415] can: request_module (can-proto-0) failed. [ 340.855828][T15418] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 340.955518][T15428] netlink: 'syz.4.2729': attribute type 83 has an invalid length. [ 341.000363][ T5762] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 341.114049][T15432] set match dimension is over the limit! [ 341.190323][T15437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2733'. [ 341.207938][T15439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2730'. [ 341.293410][T15437] bond27: entered promiscuous mode [ 341.307637][T15437] 8021q: adding VLAN 0 to HW filter on device bond27 [ 341.405479][T15444] bridge13: entered promiscuous mode [ 341.439884][T15444] bond27: (slave bridge13): Enslaving as an active interface with an up link [ 341.605285][T15453] bond0: option ad_select: unable to set because the bond device is up [ 341.722566][T15460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2744'. [ 341.731498][T15460] netlink: 'syz.4.2744': attribute type 10 has an invalid length. [ 341.779255][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2744'. [ 341.842323][T15470] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2743'. [ 341.891425][T15472] IPv6: sit3: Disabled Multicast RS [ 341.929058][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2745'. [ 341.999338][T15473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2742'. [ 342.115542][T15483] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 342.174557][T15483] 8021q: adding VLAN 0 to HW filter on device bond35 [ 342.265949][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 342.490811][T15491] pim6reg527: entered allmulticast mode [ 342.838661][T15507] syzkaller0: entered promiscuous mode [ 342.866050][T15507] syzkaller0: entered allmulticast mode [ 343.053774][T15521] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 343.100481][ T5636] block nbd1: Receive control failed (result -32) [ 343.125549][T15521] 8021q: adding VLAN 0 to HW filter on device bond30 [ 343.172908][T15524] bond36: entered promiscuous mode [ 343.185511][T15524] bond36: entered allmulticast mode [ 343.195848][T15524] 8021q: adding VLAN 0 to HW filter on device bond36 [ 343.207557][T15530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.364258][T15534] netlink: 'syz.0.2765': attribute type 10 has an invalid length. [ 343.380426][T15534] bond0 (unregistering): Released all slaves [ 343.760445][T15546] 8021q: adding VLAN 0 to HW filter on device bond36 [ 343.794056][T15551] bond36: (slave macvlan2): Opening slave failed [ 343.841709][T15543] __nla_validate_parse: 7 callbacks suppressed [ 343.841728][T15543] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2770'. [ 344.062743][T15568] xt_l2tp: missing protocol rule (udp|l2tpip) [ 344.116648][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2777'. [ 344.118245][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 344.155278][T15574] netlink: 'syz.4.2779': attribute type 1 has an invalid length. [ 344.205443][T15576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2777'. [ 344.262411][T15574] 8021q: adding VLAN 0 to HW filter on device bond28 [ 344.275549][T15576] bond37: entered promiscuous mode [ 344.280854][T15576] bond37: entered allmulticast mode [ 344.286352][T15576] 8021q: adding VLAN 0 to HW filter on device bond37 [ 344.297742][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2779'. [ 344.383834][T15578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2781'. [ 344.483427][T11042] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.512151][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.512183][T11042] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.529223][T15596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2785'. [ 344.646511][T15604] set match dimension is over the limit! [ 344.647081][T15596] 8021q: adding VLAN 0 to HW filter on device bond38 [ 344.686796][T15602] bond38: (slave macvlan2): Opening slave failed [ 344.705565][T15600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2786'. [ 344.869034][T15621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 344.924175][T15624] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2793'. [ 344.936436][T15624] bond31: entered promiscuous mode [ 344.942545][T15624] bond31: entered allmulticast mode [ 344.949366][T15624] 8021q: adding VLAN 0 to HW filter on device bond31 [ 344.977944][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 344.983467][T15632] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2794'. [ 345.013467][T15632] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 345.038208][T15627] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 345.091029][T15640] netlink: 'syz.1.2797': attribute type 1 has an invalid length. [ 345.189757][T15640] 8021q: adding VLAN 0 to HW filter on device bond32 [ 345.216280][ T5762] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 345.650463][ T5640] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.669637][ T5640] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.678265][ T5640] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.742926][ T5640] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.754778][ T5640] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.837255][T15670] 8021q: adding VLAN 0 to HW filter on device bond39 [ 345.931488][T15678] bond39: (slave macvlan2): Opening slave failed [ 346.260956][T15695] netlink: 'syz.0.2809': attribute type 7 has an invalid length. [ 346.281293][T15695] netlink: 'syz.0.2809': attribute type 8 has an invalid length. [ 346.303506][T15695] erspan0: entered promiscuous mode [ 346.312081][T15695] 0Ŗī{X¹¦: entered promiscuous mode [ 346.325666][T15695] erspan0: left promiscuous mode [ 346.331360][T15695] 0Ŗī{X¹¦: left promiscuous mode [ 346.343031][T15700] netlink: 'syz.3.2810': attribute type 1 has an invalid length. [ 346.347490][T15669] xfrm0 speed is unknown, defaulting to 1000 [ 346.374631][T15700] 8021q: adding VLAN 0 to HW filter on device bond37 [ 346.395267][T15700] bond37: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.491127][T15700] macvlan3: entered promiscuous mode [ 346.496459][T15700] macvlan3: entered allmulticast mode [ 346.594700][T15669] C speed is unknown, defaulting to 1000 [ 346.793126][T15712] openvswitch: netlink: Missing key (keys=40, expected=80) [ 347.023557][T15718] netlink: 'syz.3.2817': attribute type 1 has an invalid length. [ 347.386606][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.393948][T15669] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.401658][T15669] bridge_slave_0: entered allmulticast mode [ 347.409885][T15669] bridge_slave_0: entered promiscuous mode [ 347.425139][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.452201][T15669] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.459881][T15669] bridge_slave_1: entered allmulticast mode [ 347.467010][T15669] bridge_slave_1: entered promiscuous mode [ 347.544195][T15669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.565799][T15669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.608605][T15669] team0: Port device team_slave_0 added [ 347.617152][T15669] team0: Port device team_slave_1 added [ 347.663087][T15669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.670063][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.695945][T15669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.708211][T15669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.715168][T15669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.741021][T15669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.799658][T15759] tipc: Enabled bearer , priority 0 [ 347.812302][T15669] hsr_slave_0: entered promiscuous mode [ 347.818983][T15669] hsr_slave_1: entered promiscuous mode [ 347.819814][ T5640] Bluetooth: hci5: command tx timeout [ 347.825431][T15669] debugfs: 'hsr0' already exists in 'hsr' [ 347.825448][T15669] Cannot create hsr debugfs directory [ 348.444343][T15669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.457018][T15669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.499384][T15796] FAULT_INJECTION: forcing a failure. [ 348.499384][T15796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.513287][T15796] CPU: 0 UID: 0 PID: 15796 Comm: syz.0.2835 Not tainted syzkaller #0 PREEMPT(full) [ 348.513313][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.513324][T15796] Call Trace: [ 348.513408][T15796] [ 348.513484][T15796] dump_stack_lvl+0xe8/0x150 [ 348.513630][T15796] should_fail_ex+0x40c/0x560 [ 348.513745][T15796] _copy_from_user+0x2d/0xb0 [ 348.513796][T15796] ___sys_sendmsg+0x1c6/0x360 [ 348.513908][T15796] ? __lock_acquire+0x683/0x2cf0 [ 348.513981][T15796] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.514035][T15796] ? __fget_files+0x2a/0x420 [ 348.514082][T15796] ? __fget_files+0x3a2/0x420 [ 348.514110][T15796] __x64_sys_sendmsg+0x1b1/0x290 [ 348.514134][T15796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.514172][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.514215][T15796] do_syscall_64+0x174/0x580 [ 348.514293][T15796] ? trace_irq_disable+0x3b/0x140 [ 348.514325][T15796] ? clear_bhb_loop+0x40/0x90 [ 348.514349][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.514367][T15796] RIP: 0033:0x7fb406b9ce59 [ 348.514415][T15796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.514466][T15796] RSP: 002b:00007fb407ad2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.514515][T15796] RAX: ffffffffffffffda RBX: 00007fb406e16180 RCX: 00007fb406b9ce59 [ 348.514528][T15796] RDX: 0000000000000884 RSI: 0000200000000240 RDI: 0000000000000007 [ 348.514540][T15796] RBP: 00007fb407ad2090 R08: 0000000000000000 R09: 0000000000000000 [ 348.514552][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.514563][T15796] R13: 00007fb406e16218 R14: 00007fb406e16180 R15: 00007ffe4e8541d8 [ 348.514593][T15796] [ 348.676920][T15784] bond38: entered promiscuous mode [ 348.696856][T15784] bond38: entered allmulticast mode [ 348.702491][T15784] 8021q: adding VLAN 0 to HW filter on device bond38 [ 348.724313][T15792] bond0: (slave bridge14): Enslaving as an active interface with an up link [ 348.831178][T15669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.848631][T15669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.869417][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.984596][T15798] bridge22: entered promiscuous mode [ 348.990095][T15798] bridge22: entered allmulticast mode [ 348.999105][T15798] bond38: (slave bridge22): Enslaving as an active interface with an up link [ 349.225252][T15826] netlink: 'syz.3.2844': attribute type 30 has an invalid length. [ 349.390782][T15669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.401481][T15669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.528347][T15845] __nla_validate_parse: 15 callbacks suppressed [ 349.528396][T15845] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2852'. [ 349.659536][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 349.741120][T15850] bond40: (slave bridge13): Enslaving as an active interface with an up link [ 349.822643][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2854'. [ 349.847447][T15850] bond40: entered promiscuous mode [ 349.852620][T15850] bridge13: entered promiscuous mode [ 349.905120][T15850] bond40: entered allmulticast mode [ 349.910375][T15850] bridge13: entered allmulticast mode [ 349.918321][T15850] 8021q: adding VLAN 0 to HW filter on device bond40 [ 349.927802][ T5640] Bluetooth: hci5: command tx timeout [ 350.054202][T15669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.081597][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 350.106800][T15669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.142192][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 350.144974][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 350.163117][T15847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2853'. [ 350.197733][T15669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.216771][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 350.230647][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 350.265855][T15669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.280945][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 350.339891][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 350.543285][T15888] xt_hashlimit: size too large, truncated to 1048576 [ 350.668860][T15892] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2864'. [ 350.720793][T15669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.738090][T15892] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2864'. [ 350.787383][T15898] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 350.826607][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.919403][T15892] bridge_slave_0 (unregistering): left allmulticast mode [ 350.939241][T15892] bridge_slave_0 (unregistering): left promiscuous mode [ 350.965026][T15892] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.040429][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2869'. [ 351.093298][T15669] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.115619][T15908] netlink: 'syz.1.2865': attribute type 11 has an invalid length. [ 351.129418][T15913] bond28: (slave bridge15): Enslaving as an active interface with an up link [ 351.139189][T15913] FAULT_INJECTION: forcing a failure. [ 351.139189][T15913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.152249][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.0.2869 Not tainted syzkaller #0 PREEMPT(full) [ 351.152274][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.152284][T15913] Call Trace: [ 351.152292][T15913] [ 351.152299][T15913] dump_stack_lvl+0xe8/0x150 [ 351.152338][T15913] should_fail_ex+0x40c/0x560 [ 351.152370][T15913] _copy_from_iter+0x1d3/0x1660 [ 351.152514][T15913] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 351.152561][T15913] ? rcu_is_watching+0x15/0xb0 [ 351.152594][T15913] ? trace_kmem_cache_alloc+0x29/0xe0 [ 351.152619][T15913] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 351.152642][T15913] ? __pfx__copy_from_iter+0x10/0x10 [ 351.152664][T15913] ? __alloc_skb+0x276/0x7a0 [ 351.152711][T15913] ? __alloc_skb+0x276/0x7a0 [ 351.152740][T15913] ? netlink_sendmsg+0x650/0xb40 [ 351.152819][T15913] ? skb_put+0x112/0x210 [ 351.152839][T15913] netlink_sendmsg+0x6c0/0xb40 [ 351.152867][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.152891][T15913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 351.152971][T15913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.152990][T15913] sock_sendmsg_nosec+0x13a/0x180 [ 351.153017][T15913] ____sys_sendmsg+0x54e/0x850 [ 351.153040][T15913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.153068][T15913] ? import_iovec+0x73/0xa0 [ 351.153091][T15913] ___sys_sendmsg+0x2a5/0x360 [ 351.153110][T15913] ? __lock_acquire+0x683/0x2cf0 [ 351.153134][T15913] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.153187][T15913] ? __fget_files+0x2a/0x420 [ 351.153204][T15913] ? __fget_files+0x3a2/0x420 [ 351.153228][T15913] __x64_sys_sendmsg+0x1b1/0x290 [ 351.153251][T15913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.153285][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.153306][T15913] do_syscall_64+0x174/0x580 [ 351.153323][T15913] ? trace_irq_disable+0x3b/0x140 [ 351.153341][T15913] ? clear_bhb_loop+0x40/0x90 [ 351.153363][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.153381][T15913] RIP: 0033:0x7fb406b9ce59 [ 351.153400][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.153415][T15913] RSP: 002b:00007fb407b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.153434][T15913] RAX: ffffffffffffffda RBX: 00007fb406e15fa0 RCX: 00007fb406b9ce59 [ 351.153448][T15913] RDX: 0000000000000884 RSI: 0000200000000240 RDI: 0000000000000007 [ 351.153460][T15913] RBP: 00007fb407b14090 R08: 0000000000000000 R09: 0000000000000000 [ 351.153471][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.153482][T15913] R13: 00007fb406e16038 R14: 00007fb406e15fa0 R15: 00007ffe4e8541d8 [ 351.153511][T15913] [ 351.163005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.432187][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.497298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.504481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.756013][T15932] bond41: (slave bridge14): Enslaving as an active interface with an up link [ 351.770401][T15932] bond41: entered promiscuous mode [ 351.775635][T15932] bridge14: entered promiscuous mode [ 351.781746][T15932] bond41: entered allmulticast mode [ 351.787230][T15932] bridge14: entered allmulticast mode [ 351.793912][T15932] 8021q: adding VLAN 0 to HW filter on device bond41 [ 351.913427][T15943] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 351.966565][ T5640] Bluetooth: hci5: command tx timeout [ 352.036860][T15951] tipc: Started in network mode [ 352.041772][T15951] tipc: Node identity f2701b66310a, cluster identity 5 [ 352.048972][T15951] tipc: Enabled bearer , priority 0 [ 352.058362][T15951] syzkaller0: entered promiscuous mode [ 352.094252][T15951] syzkaller0: entered allmulticast mode [ 352.160146][T15951] tipc: Resetting bearer [ 352.264720][T15951] tipc: Disabling bearer [ 352.302240][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 352.360613][T15970] 8021q: adding VLAN 0 to HW filter on device bond39 [ 352.395694][T15669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.619100][T15991] netlink: 'syz.0.2890': attribute type 10 has an invalid length. [ 352.834965][T15669] veth0_vlan: entered promiscuous mode [ 352.885838][T15669] veth1_vlan: entered promiscuous mode [ 352.913957][T16006] bond29: entered promiscuous mode [ 352.919131][T16006] bond29: entered allmulticast mode [ 352.924655][T16006] 8021q: adding VLAN 0 to HW filter on device bond29 [ 352.956075][T15669] veth0_macvtap: entered promiscuous mode [ 353.002619][T15669] veth1_macvtap: entered promiscuous mode [ 353.027143][T15669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.043265][T15669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.064710][ T6557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.075390][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.084129][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.095769][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.037419][ T5640] Bluetooth: hci5: command tx timeout [ 355.395272][T15999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 355.682359][T16029] __nla_validate_parse: 10 callbacks suppressed [ 355.682380][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'. [ 355.704778][T16029] netlink: 'syz.1.2900': attribute type 10 has an invalid length. [ 355.726508][T16029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 355.770178][T16034] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2901'. [ 355.831571][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 355.882665][T11042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.892665][T11042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.901396][T16039] xfrm0 speed is unknown, defaulting to 1000 [ 355.928642][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 356.077640][T11042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.102487][T11042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.508605][T16069] netlink: 'syz.3.2908': attribute type 1 has an invalid length. [ 356.532478][T16069] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2908'. [ 356.650207][T16076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 356.682603][T16076] netlink: 'syz.0.2911': attribute type 10 has an invalid length. [ 356.714746][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'. [ 356.874690][T16082] FAULT_INJECTION: forcing a failure. [ 356.874690][T16082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.897486][T16082] CPU: 0 UID: 0 PID: 16082 Comm: syz.4.2914 Not tainted syzkaller #0 PREEMPT(full) [ 356.897513][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.897525][T16082] Call Trace: [ 356.897532][T16082] [ 356.897540][T16082] dump_stack_lvl+0xe8/0x150 [ 356.897570][T16082] should_fail_ex+0x40c/0x560 [ 356.897601][T16082] _copy_from_user+0x2d/0xb0 [ 356.897622][T16082] ___sys_sendmsg+0x1c6/0x360 [ 356.897643][T16082] ? __lock_acquire+0x683/0x2cf0 [ 356.897668][T16082] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.897722][T16082] ? __fget_files+0x2a/0x420 [ 356.897741][T16082] ? __fget_files+0x3a2/0x420 [ 356.897768][T16082] __x64_sys_sendmsg+0x1b1/0x290 [ 356.897789][T16082] ? net_tx_action+0x5bb/0xc30 [ 356.897932][T16082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.897961][T16082] ? handle_softirqs+0x70f/0x840 [ 356.898010][T16082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.898033][T16082] do_syscall_64+0x174/0x580 [ 356.898054][T16082] ? clear_bhb_loop+0x40/0x90 [ 356.898077][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.898095][T16082] RIP: 0033:0x7f9cd0b9ce59 [ 356.898113][T16082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.898129][T16082] RSP: 002b:00007f9cd1984028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.898149][T16082] RAX: ffffffffffffffda RBX: 00007f9cd0e15fa0 RCX: 00007f9cd0b9ce59 [ 356.898163][T16082] RDX: 000000000400c840 RSI: 00002000000001c0 RDI: 0000000000000005 [ 356.898175][T16082] RBP: 00007f9cd1984090 R08: 0000000000000000 R09: 0000000000000000 [ 356.898186][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.898197][T16082] R13: 00007f9cd0e16038 R14: 00007f9cd0e15fa0 R15: 00007ffc47154d68 [ 356.898227][T16082] [ 357.110362][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2915'. [ 357.149750][T16090] netlink: 'syz.3.2917': attribute type 178 has an invalid length. [ 357.254095][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.271134][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.281583][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.291204][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.298936][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.315647][T16098] netlink: 'syz.4.2918': attribute type 15 has an invalid length. [ 357.325276][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2918'. [ 357.401128][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 357.419230][T11042] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 357.454207][T11042] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 357.473835][T11042] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 357.512103][T11042] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 357.746961][T11042] smc: removing ib device syz0 [ 358.009767][T16137] netlink: 'syz.3.2925': attribute type 10 has an invalid length. [ 358.033816][T11042] smbdirect: ib_dev[syz0] removed [ 358.361542][T16149] FAULT_INJECTION: forcing a failure. [ 358.361542][T16149] name failslab, interval 1, probability 0, space 0, times 0 [ 358.375249][T16149] CPU: 1 UID: 0 PID: 16149 Comm: syz.0.2928 Not tainted syzkaller #0 PREEMPT(full) [ 358.375275][T16149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.375287][T16149] Call Trace: [ 358.375295][T16149] [ 358.375302][T16149] dump_stack_lvl+0xe8/0x150 [ 358.375333][T16149] should_fail_ex+0x40c/0x560 [ 358.375363][T16149] should_failslab+0xa8/0x100 [ 358.375413][T16149] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 358.375440][T16149] ? local_lock_release+0x9c/0x160 [ 358.375470][T16149] ? __alloc_skb+0x1d7/0x7a0 [ 358.375486][T16149] ? __alloc_skb+0x1d7/0x7a0 [ 358.375509][T16149] __alloc_skb+0x1d7/0x7a0 [ 358.375531][T16149] netlink_sendmsg+0x5d4/0xb40 [ 358.375561][T16149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.375587][T16149] ? aa_sock_msg_perm+0xf1/0x1b0 [ 358.375615][T16149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.375636][T16149] sock_sendmsg_nosec+0x13a/0x180 [ 358.375664][T16149] ____sys_sendmsg+0x54e/0x850 [ 358.375690][T16149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.375719][T16149] ? import_iovec+0x73/0xa0 [ 358.375743][T16149] ___sys_sendmsg+0x2a5/0x360 [ 358.375762][T16149] ? __lock_acquire+0x683/0x2cf0 [ 358.375792][T16149] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.375847][T16149] ? __fget_files+0x2a/0x420 [ 358.375864][T16149] ? __fget_files+0x3a2/0x420 [ 358.375892][T16149] __x64_sys_sendmsg+0x1b1/0x290 [ 358.375915][T16149] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.375952][T16149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.375971][T16149] do_syscall_64+0x174/0x580 [ 358.375988][T16149] ? trace_irq_disable+0x3b/0x140 [ 358.376007][T16149] ? clear_bhb_loop+0x40/0x90 [ 358.376030][T16149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.376047][T16149] RIP: 0033:0x7fb406b9ce59 [ 358.376065][T16149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.376081][T16149] RSP: 002b:00007fb407b14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.376101][T16149] RAX: ffffffffffffffda RBX: 00007fb406e15fa0 RCX: 00007fb406b9ce59 [ 358.376115][T16149] RDX: 000000000400c840 RSI: 00002000000001c0 RDI: 0000000000000005 [ 358.376127][T16149] RBP: 00007fb407b14090 R08: 0000000000000000 R09: 0000000000000000 [ 358.376138][T16149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.376149][T16149] R13: 00007fb406e16038 R14: 00007fb406e15fa0 R15: 00007ffe4e8541d8 [ 358.376180][T16149] [ 358.764073][T16152] Cannot find set identified by id 0 to match [ 358.951672][T16162] netlink: 'syz.0.2931': attribute type 1 has an invalid length. [ 359.024731][T16161] netlink: 'syz.4.2930': attribute type 1 has an invalid length. [ 359.024942][T16085] xfrm0 speed is unknown, defaulting to 1000 [ 359.053467][T16161] netlink: 'syz.4.2930': attribute type 2 has an invalid length. [ 359.126268][T11043] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 359.135215][T11043] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 359.163997][T11043] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 359.173188][T11043] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 359.421487][ T5636] Bluetooth: hci1: command tx timeout [ 359.552834][T16182] netlink: 'syz.3.2935': attribute type 10 has an invalid length. [ 360.092489][T16085] C speed is unknown, defaulting to 1000 [ 360.228202][T16206] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 360.791289][T16223] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 360.799059][T16223] __nla_validate_parse: 8 callbacks suppressed [ 360.799084][T16223] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2946'. [ 361.051928][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'. [ 361.159599][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 361.248624][T16237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2948'. [ 361.356955][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 361.502818][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 361.571977][ T5636] Bluetooth: hci1: command tx timeout [ 361.762011][T16250] IPVS: persistence engine module ip_vs_pe_A not found [ 361.832264][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.843841][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.852560][T16085] bridge_slave_0: entered allmulticast mode [ 361.862401][T16085] bridge_slave_0: entered promiscuous mode [ 361.871461][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.878792][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.891385][T16085] bridge_slave_1: entered allmulticast mode [ 361.919488][T16268] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 361.925820][T16085] bridge_slave_1: entered promiscuous mode [ 362.099727][T16268] bond33: entered promiscuous mode [ 362.107133][T16268] 8021q: adding VLAN 0 to HW filter on device bond33 [ 362.131202][T16275] 8021q: adding VLAN 0 to HW filter on device bond33 [ 362.159374][T16275] bond33: (slave vti0): The slave device specified does not support setting the MAC address [ 362.169679][T16275] bond33: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 362.185500][T16275] bond33: (slave vti0): making interface the new active one [ 362.187187][T16283] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 362.193567][T16275] vti0: entered promiscuous mode [ 362.211435][T16275] bond33: (slave vti0): Enslaving as an active interface with an up link [ 362.254804][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.279818][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 362.323095][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.333273][T16286] netlink: 'syz.0.2956': attribute type 10 has an invalid length. [ 362.333300][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 362.472740][T16085] team0: Port device team_slave_0 added [ 362.483464][T16085] team0: Port device team_slave_1 added [ 362.503170][T16297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 362.596696][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.613942][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.673294][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2959'. [ 362.675356][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.776867][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.783850][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.852465][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.943391][T16315] syzkaller0: entered promiscuous mode [ 362.950302][T16315] syzkaller0: entered allmulticast mode [ 362.991393][T16085] hsr_slave_0: entered promiscuous mode [ 362.998154][T16085] hsr_slave_1: entered promiscuous mode [ 363.004553][T16085] debugfs: 'hsr0' already exists in 'hsr' [ 363.033636][T16085] Cannot create hsr debugfs directory [ 363.600988][T16334] h: entered promiscuous mode [ 363.638906][ T5636] Bluetooth: hci1: command tx timeout [ 364.107257][T16085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.125937][T16085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.155979][T16085] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.239230][T16365] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 364.247285][T16365] netlink: 'syz.3.2974': attribute type 4 has an invalid length. [ 364.296510][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.306047][T16354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.517833][T16380] netlink: 'syz.4.2977': attribute type 5 has an invalid length. [ 364.552853][T16085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.573527][T16085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.585651][T16085] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 364.586337][T16384] netlink: 'syz.3.2979': attribute type 39 has an invalid length. [ 364.706201][T16387] macsec1: entered promiscuous mode [ 364.711604][T16387] bridge0: entered promiscuous mode [ 364.717245][T16387] macsec1: entered allmulticast mode [ 364.722654][T16387] bridge0: entered allmulticast mode [ 364.732399][T16387] bridge0: port 3(macsec1) entered blocking state [ 364.749007][T16387] bridge0: port 3(macsec1) entered disabled state [ 364.770864][T16387] bridge0: left allmulticast mode [ 364.776237][T16387] bridge0: left promiscuous mode [ 364.932256][T16085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.943109][T16085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.998206][T16085] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 365.219123][T16085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.229429][T16085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.239696][T16085] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 365.717294][T16434] syzkaller0: entered promiscuous mode [ 365.725217][T16434] syzkaller0: entered allmulticast mode [ 365.769475][ T5636] Bluetooth: hci1: command tx timeout [ 365.939371][T16085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.950523][T16085] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 365.959867][T16451] tipc: Enabling of bearer rejected, already enabled [ 365.978936][T16085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.989129][T16085] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 365.997111][T16085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.009709][T16085] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.018882][T16085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.030448][T16085] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.133091][T16470] __nla_validate_parse: 17 callbacks suppressed [ 366.133111][T16470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2997'. [ 366.230427][T16473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3000'. [ 366.253197][T16476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2999'. [ 366.379137][T16476] bond35: (slave bridge12): Enslaving as an active interface with an up link [ 366.449469][T16476] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2999'. [ 366.597234][T16476] bond35: entered promiscuous mode [ 366.610312][T16476] bridge12: entered promiscuous mode [ 366.649846][T16476] bond35: entered allmulticast mode [ 366.674104][T16476] bridge12: entered allmulticast mode [ 366.690326][T16476] 8021q: adding VLAN 0 to HW filter on device bond35 [ 366.703402][T16085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.730645][T16085] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.752903][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.760101][T11042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.805843][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.813033][T11042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.265935][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 367.321322][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 367.556084][T16531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 367.636913][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 367.779886][T16548] netlink: 'syz.3.3014': attribute type 2 has an invalid length. [ 367.950475][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 368.011553][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.074770][T16085] veth0_vlan: entered promiscuous mode [ 368.095706][T16085] veth1_vlan: entered promiscuous mode [ 368.157876][T16085] veth0_macvtap: entered promiscuous mode [ 368.171674][T16085] veth1_macvtap: entered promiscuous mode [ 368.234731][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.255924][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.285042][T16566] bond36 (unregistering): Released all slaves [ 368.339610][ T6571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.349599][ T6571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.366253][ T6571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.466639][ T6557] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.618297][ T8521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.622233][T16585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 368.633779][ T8521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.768744][T16585] bond42: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 368.780800][T16585] bond42 (unregistering): Released all slaves [ 368.804359][T16587] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3026'. [ 368.812378][T11043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.827585][T11043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.774655][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.790927][ T5640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.803885][ T5640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.816006][ T5640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.824849][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.124023][T16627] Cannot find set identified by id 0 to match [ 370.347752][T16631] bridge16: entered promiscuous mode [ 370.357786][T16631] bridge16: entered allmulticast mode [ 370.539320][T16641] syzkaller0: entered promiscuous mode [ 370.546028][T16641] syzkaller0: entered allmulticast mode [ 370.612067][T16617] xfrm0 speed is unknown, defaulting to 1000 [ 370.898712][T16617] C speed is unknown, defaulting to 1000 [ 371.064532][T16653] netlink: 'syz.0.3041': attribute type 15 has an invalid length. [ 371.361831][T16617] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.369081][T16617] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.376359][T16617] bridge_slave_0: entered allmulticast mode [ 371.384302][T16617] bridge_slave_0: entered promiscuous mode [ 371.412172][T16617] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.419332][T16617] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.426609][T16617] bridge_slave_1: entered allmulticast mode [ 371.434366][T16617] bridge_slave_1: entered promiscuous mode [ 371.474775][T16617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.487652][T16617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.547803][T16617] team0: Port device team_slave_0 added [ 371.556393][T16617] team0: Port device team_slave_1 added [ 371.588716][T16617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.595684][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.637041][T16617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.649688][T16617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.656643][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.682520][T16617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.756428][T16617] hsr_slave_0: entered promiscuous mode [ 371.763149][T16617] hsr_slave_1: entered promiscuous mode [ 371.769525][T16617] debugfs: 'hsr0' already exists in 'hsr' [ 371.775261][T16617] Cannot create hsr debugfs directory [ 371.908204][ T5640] Bluetooth: hci2: command tx timeout [ 372.008650][T16617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.019817][T16617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.080422][T16614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.264042][T16664] __nla_validate_parse: 2 callbacks suppressed [ 372.264061][T16664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 372.393731][T16668] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3046'. [ 372.444785][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 372.497224][T16617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.507528][T16617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.581152][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 372.809820][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'. [ 372.820046][T16690] block nbd0: reconnected socket [ 372.825015][T16690] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 372.832838][T16690] nbd: error processing sock list [ 372.838807][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'. [ 372.901494][T16617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.912666][T16617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.951076][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3052'. [ 372.954837][T16691] bond1: option fail_over_mac: invalid value (16) [ 372.961144][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 373.011276][T16691] bond1 (unregistering): Released all slaves [ 373.104230][T16690] 8021q: adding VLAN 0 to HW filter on device bond36 [ 373.190116][T16617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.222904][T16617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.237316][ T5640] block nbd0: Receive control failed (result -32) [ 373.279575][T16617] [ 373.281933][T16617] ====================================================== [ 373.288958][T16617] WARNING: possible circular locking dependency detected [ 373.296112][T16617] syzkaller #0 Not tainted [ 373.300550][T16617] ------------------------------------------------------ [ 373.307563][T16617] syz-executor/16617 is trying to acquire lock: [ 373.313796][T16617] ffff88801be9d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 373.323755][T16617] [ 373.323755][T16617] but task is already holding lock: [ 373.331119][T16617] ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 373.339961][T16617] [ 373.339961][T16617] which lock already depends on the new lock. [ 373.339961][T16617] [ 373.350357][T16617] [ 373.350357][T16617] the existing dependency chain (in reverse order) is: [ 373.359365][T16617] [ 373.359365][T16617] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 373.366701][T16617] __mutex_lock+0x19d/0x1550 [ 373.371851][T16617] get_device_parent+0x16f/0x3a0 [ 373.377307][T16617] device_add+0x2d4/0xb80 [ 373.382157][T16617] device_create+0x269/0x300 [ 373.387272][T16617] msr_device_create+0x33/0x50 [ 373.392594][T16617] cpuhp_invoke_callback+0x434/0x810 [ 373.398395][T16617] cpuhp_thread_fun+0x362/0x780 [ 373.403773][T16617] smpboot_thread_fn+0x57c/0xa80 [ 373.406123][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 373.409240][T16617] kthread+0x388/0x470 [ 373.409261][T16617] ret_from_fork+0x514/0xb70 [ 373.409310][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.409332][T16617] [ 373.409332][T16617] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 373.409363][T16617] cpuhp_thread_fun+0x127/0x780 [ 373.409379][T16617] smpboot_thread_fn+0x57c/0xa80 [ 373.409405][T16617] kthread+0x388/0x470 [ 373.409422][T16617] ret_from_fork+0x514/0xb70 [ 373.409439][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.409459][T16617] [ 373.409459][T16617] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 373.472693][T16617] cpus_read_lock+0x42/0x160 [ 373.477805][T16617] static_key_slow_inc+0x12/0x30 [ 373.483289][T16617] nbd_genl_reconfigure+0x1301/0x1e80 [ 373.489237][T16617] genl_family_rcv_msg_doit+0x233/0x340 [ 373.495309][T16617] genl_rcv_msg+0x614/0x7a0 [ 373.500329][T16617] netlink_rcv_skb+0x226/0x4a0 [ 373.505614][T16617] genl_rcv+0x28/0x40 [ 373.510128][T16617] netlink_unicast+0x7bb/0x940 [ 373.515406][T16617] netlink_sendmsg+0x813/0xb40 [ 373.520686][T16617] sock_sendmsg_nosec+0x13a/0x180 [ 373.526231][T16617] ____sys_sendmsg+0x54e/0x850 [ 373.531511][T16617] ___sys_sendmsg+0x2a5/0x360 [ 373.536717][T16617] __x64_sys_sendmsg+0x1b1/0x290 [ 373.542171][T16617] do_syscall_64+0x174/0x580 [ 373.547269][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.553675][T16617] [ 373.553675][T16617] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 373.561313][T16617] __mutex_lock+0x19d/0x1550 [ 373.566412][T16617] nbd_queue_rq+0x373/0x1150 [ 373.571522][T16617] blk_mq_dispatch_rq_list+0x499/0x1990 [ 373.577698][T16617] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 373.584566][T16617] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.591061][T16617] blk_mq_run_work_fn+0x16c/0x300 [ 373.596613][T16617] process_scheduled_works+0xa8e/0x14e0 [ 373.602686][T16617] worker_thread+0xa47/0xfb0 [ 373.607792][T16617] kthread+0x388/0x470 [ 373.612373][T16617] ret_from_fork+0x514/0xb70 [ 373.617476][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.622757][T16617] [ 373.622757][T16617] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 373.629967][T16617] __mutex_lock+0x19d/0x1550 [ 373.635079][T16617] nbd_queue_rq+0xc1/0x1150 [ 373.640099][T16617] blk_mq_dispatch_rq_list+0x499/0x1990 [ 373.646169][T16617] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 373.653018][T16617] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 373.659520][T16617] blk_mq_run_work_fn+0x16c/0x300 [ 373.665077][T16617] process_scheduled_works+0xa8e/0x14e0 [ 373.671155][T16617] worker_thread+0xa47/0xfb0 [ 373.676272][T16617] kthread+0x388/0x470 [ 373.680855][T16617] ret_from_fork+0x514/0xb70 [ 373.685960][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.691242][T16617] [ 373.691242][T16617] -> #5 (set->srcu){.+.+}-{0:0}: [ 373.698361][T16617] __synchronize_srcu+0xc9/0x2f0 [ 373.703819][T16617] elevator_switch+0x1e8/0x7b0 [ 373.709197][T16617] elevator_change+0x2fa/0x480 [ 373.714476][T16617] elevator_set_default+0x375/0x440 [ 373.720200][T16617] blk_register_queue+0x3f3/0x4e0 [ 373.725795][T16617] __add_disk+0x6cb/0xe30 [ 373.730655][T16617] add_disk_fwnode+0xfb/0x4b0 [ 373.735851][T16617] nbd_dev_add+0x733/0xb60 [ 373.740779][T16617] nbd_init+0x15f/0x1e0 [ 373.745572][T16617] do_one_initcall+0x250/0x870 [ 373.750851][T16617] do_initcall_level+0x10a/0x1a0 [ 373.756383][T16617] do_initcalls+0x59/0xa0 [ 373.761227][T16617] kernel_init_freeable+0x29d/0x3e0 [ 373.766941][T16617] kernel_init+0x1d/0x1d0 [ 373.771848][T16617] ret_from_fork+0x514/0xb70 [ 373.776948][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.782233][T16617] [ 373.782233][T16617] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 373.790046][T16617] __mutex_lock+0x19d/0x1550 [ 373.795148][T16617] elevator_change+0x1af/0x480 [ 373.800432][T16617] elevator_set_none+0xb5/0x140 [ 373.805805][T16617] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 373.812128][T16617] nbd_start_device+0x189/0xb30 [ 373.817490][T16617] nbd_genl_connect+0x1597/0x1c10 [ 373.823025][T16617] genl_family_rcv_msg_doit+0x233/0x340 [ 373.829087][T16617] genl_rcv_msg+0x614/0x7a0 [ 373.834113][T16617] netlink_rcv_skb+0x226/0x4a0 [ 373.839385][T16617] genl_rcv+0x28/0x40 [ 373.843882][T16617] netlink_unicast+0x7bb/0x940 [ 373.849154][T16617] netlink_sendmsg+0x813/0xb40 [ 373.854429][T16617] sock_sendmsg_nosec+0x13a/0x180 [ 373.859966][T16617] ____sys_sendmsg+0x54e/0x850 [ 373.865240][T16617] ___sys_sendmsg+0x2a5/0x360 [ 373.870429][T16617] __x64_sys_sendmsg+0x1b1/0x290 [ 373.875876][T16617] do_syscall_64+0x174/0x580 [ 373.880977][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.887384][T16617] [ 373.887384][T16617] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 373.896001][T16617] blk_alloc_queue+0x544/0x690 [ 373.901286][T16617] __blk_mq_alloc_disk+0x194/0x390 [ 373.906911][T16617] nbd_dev_add+0x494/0xb60 [ 373.911842][T16617] nbd_init+0x15f/0x1e0 [ 373.916517][T16617] do_one_initcall+0x250/0x870 [ 373.921793][T16617] do_initcall_level+0x10a/0x1a0 [ 373.927246][T16617] do_initcalls+0x59/0xa0 [ 373.932106][T16617] kernel_init_freeable+0x29d/0x3e0 [ 373.937821][T16617] kernel_init+0x1d/0x1d0 [ 373.942663][T16617] ret_from_fork+0x514/0xb70 [ 373.947772][T16617] ret_from_fork_asm+0x1a/0x30 [ 373.953067][T16617] [ 373.953067][T16617] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 373.960278][T16617] fs_reclaim_acquire+0x71/0x100 [ 373.965735][T16617] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 373.971993][T16617] alloc_inode+0xb8/0x1b0 [ 373.976850][T16617] iget_locked+0x131/0x6a0 [ 373.981783][T16617] kernfs_get_inode+0x4f/0x770 [ 373.987066][T16617] kernfs_get_tree+0x5cd/0x980 [ 373.992360][T16617] vfs_get_tree+0x92/0x2a0 [ 373.997313][T16617] do_new_mount+0x319/0xdc0 [ 374.002337][T16617] __se_sys_mount+0x31d/0x420 [ 374.007527][T16617] do_syscall_64+0x174/0x580 [ 374.012631][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.019035][T16617] [ 374.019035][T16617] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 374.027030][T16617] down_write+0x96/0x200 [ 374.031791][T16617] kernfs_remove_by_name_ns+0x4e/0x140 [ 374.037777][T16617] device_links_driver_bound+0x4ab/0x1440 [ 374.044066][T16617] driver_bound+0xd8/0x2e0 [ 374.049022][T16617] really_probe+0x774/0xae0 [ 374.054102][T16617] __driver_probe_device+0x1e8/0x360 [ 374.059930][T16617] driver_probe_device+0x4f/0x240 [ 374.065476][T16617] __device_attach_driver+0x270/0x410 [ 374.071376][T16617] bus_for_each_drv+0x258/0x2f0 [ 374.076748][T16617] __device_attach+0x2c4/0x450 [ 374.082035][T16617] device_initial_probe+0xa1/0xd0 [ 374.087577][T16617] bus_probe_device+0x12a/0x220 [ 374.092939][T16617] device_add+0x7d7/0xb80 [ 374.097784][T16617] faux_device_create_with_groups+0x1a5/0x2b0 [ 374.104460][T16617] regulator_dummy_init+0x19/0x40 [ 374.110115][T16617] regulator_init+0xca/0x110 [ 374.115226][T16617] do_one_initcall+0x250/0x870 [ 374.120511][T16617] do_initcall_level+0x10a/0x1a0 [ 374.125965][T16617] do_initcalls+0x59/0xa0 [ 374.130816][T16617] kernel_init_freeable+0x29d/0x3e0 [ 374.136539][T16617] kernel_init+0x1d/0x1d0 [ 374.141389][T16617] ret_from_fork+0x514/0xb70 [ 374.146496][T16617] ret_from_fork_asm+0x1a/0x30 [ 374.151778][T16617] [ 374.151778][T16617] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 374.160377][T16617] __lock_acquire+0x1520/0x2cf0 [ 374.165750][T16617] lock_acquire+0x106/0x350 [ 374.170766][T16617] down_read+0x4a/0x330 [ 374.175437][T16617] kernfs_remove+0x35/0x80 [ 374.180365][T16617] __kobject_del+0xe0/0x310 [ 374.185467][T16617] kobject_del+0x45/0x60 [ 374.190239][T16617] cleanup_glue_dir+0x1a3/0x220 [ 374.195616][T16617] device_del+0x77d/0x8f0 [ 374.200465][T16617] unregister_netdevice_many_notify+0x1be4/0x2150 [ 374.207402][T16617] unregister_netdevice_queue+0x2f5/0x340 [ 374.213642][T16617] nsim_destroy+0x26d/0x800 [ 374.218768][T16617] __nsim_dev_port_del+0x14e/0x200 [ 374.224392][T16617] nsim_dev_reload_destroy+0x288/0x490 [ 374.230363][T16617] nsim_drv_remove+0x58/0x170 [ 374.235548][T16617] device_release_driver_internal+0x48b/0x880 [ 374.242137][T16617] bus_remove_device+0x444/0x560 [ 374.247588][T16617] device_del+0x524/0x8f0 [ 374.252431][T16617] device_unregister+0x21/0xf0 [ 374.257711][T16617] del_device_store+0x2b5/0x370 [ 374.263146][T16617] kernfs_fop_write_iter+0x3a4/0x540 [ 374.268949][T16617] vfs_write+0x612/0xba0 [ 374.273706][T16617] ksys_write+0x150/0x270 [ 374.278549][T16617] do_syscall_64+0x174/0x580 [ 374.283652][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.290062][T16617] [ 374.290062][T16617] other info that might help us debug this: [ 374.290062][T16617] [ 374.300276][T16617] Chain exists of: [ 374.300276][T16617] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 374.300276][T16617] [ 374.313663][T16617] Possible unsafe locking scenario: [ 374.313663][T16617] [ 374.321130][T16617] CPU0 CPU1 [ 374.326553][T16617] ---- ---- [ 374.331920][T16617] lock(gdp_mutex); [ 374.335811][T16617] lock(cpuhp_state-up); [ 374.342679][T16617] lock(gdp_mutex); [ 374.349096][T16617] rlock(&root->kernfs_supers_rwsem); [ 374.354557][T16617] [ 374.354557][T16617] *** DEADLOCK *** [ 374.354557][T16617] [ 374.362692][T16617] 8 locks held by syz-executor/16617: [ 374.368053][T16617] #0: ffff888035e0e450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 374.377020][T16617] #1: ffff888038e5c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 374.386784][T16617] #2: ffff8880291b2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 374.396794][T16617] #3: ffffffff8f667720 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 374.407063][T16617] #4: ffff88807a79d128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 374.417609][T16617] #5: ffff88807a79c258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 374.427626][T16617] #6: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x800 [ 374.436590][T16617] #7: ffffffff8f3a25c0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 374.445749][T16617] [ 374.445749][T16617] stack backtrace: [ 374.451636][T16617] CPU: 0 UID: 0 PID: 16617 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 374.451656][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.451673][T16617] Call Trace: [ 374.451681][T16617] [ 374.451688][T16617] dump_stack_lvl+0xe8/0x150 [ 374.451711][T16617] print_circular_bug+0x2e1/0x300 [ 374.451733][T16617] check_noncircular+0x12e/0x150 [ 374.451754][T16617] __lock_acquire+0x1520/0x2cf0 [ 374.451776][T16617] ? irqentry_exit+0x218/0x8f0 [ 374.451800][T16617] ? lockdep_hardirqs_on+0x7a/0x110 [ 374.451821][T16617] ? irqentry_exit+0x218/0x8f0 [ 374.451843][T16617] ? trace_irq_disable+0x3b/0x140 [ 374.451859][T16617] ? kernfs_remove+0x35/0x80 [ 374.451876][T16617] lock_acquire+0x106/0x350 [ 374.451889][T16617] ? kernfs_remove+0x35/0x80 [ 374.451911][T16617] down_read+0x4a/0x330 [ 374.451925][T16617] ? kernfs_remove+0x35/0x80 [ 374.451944][T16617] kernfs_remove+0x35/0x80 [ 374.451960][T16617] __kobject_del+0xe0/0x310 [ 374.451979][T16617] kobject_del+0x45/0x60 [ 374.451995][T16617] cleanup_glue_dir+0x1a3/0x220 [ 374.452015][T16617] device_del+0x77d/0x8f0 [ 374.452037][T16617] ? __pfx_device_del+0x10/0x10 [ 374.452052][T16617] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 374.452139][T16617] ? netdev_unregister_kobject+0x347/0x450 [ 374.452224][T16617] unregister_netdevice_many_notify+0x1be4/0x2150 [ 374.452251][T16617] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 374.452272][T16617] ? __mutex_lock+0x30d/0x1550 [ 374.452293][T16617] unregister_netdevice_queue+0x2f5/0x340 [ 374.452312][T16617] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 374.452335][T16617] nsim_destroy+0x26d/0x800 [ 374.452360][T16617] __nsim_dev_port_del+0x14e/0x200 [ 374.452376][T16617] nsim_dev_reload_destroy+0x288/0x490 [ 374.452395][T16617] nsim_drv_remove+0x58/0x170 [ 374.452410][T16617] ? __pfx_nsim_bus_remove+0x10/0x10 [ 374.452431][T16617] device_release_driver_internal+0x48b/0x880 [ 374.452455][T16617] bus_remove_device+0x444/0x560 [ 374.452472][T16617] ? __pfx_bus_remove_device+0x10/0x10 [ 374.452489][T16617] ? kernfs_remove_by_name_ns+0x101/0x140 [ 374.452508][T16617] device_del+0x524/0x8f0 [ 374.452526][T16617] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 374.452582][T16617] ? __pfx_device_del+0x10/0x10 [ 374.452601][T16617] ? sysfs_file_kobj+0x1a/0x230 [ 374.452625][T16617] device_unregister+0x21/0xf0 [ 374.452642][T16617] del_device_store+0x2b5/0x370 [ 374.452666][T16617] ? __pfx_del_device_store+0x10/0x10 [ 374.452688][T16617] ? sysfs_file_kobj+0x1e4/0x230 [ 374.452708][T16617] ? sysfs_kf_write+0x166/0x260 [ 374.452732][T16617] ? __pfx_sysfs_kf_write+0x10/0x10 [ 374.452753][T16617] kernfs_fop_write_iter+0x3a4/0x540 [ 374.452773][T16617] vfs_write+0x612/0xba0 [ 374.452795][T16617] ? __pfx_vfs_write+0x10/0x10 [ 374.452813][T16617] ? do_sys_openat2+0x14e/0x200 [ 374.452826][T16617] ? kmem_cache_free+0x182/0x650 [ 374.452840][T16617] ? fd_install+0x94/0x3d0 [ 374.452868][T16617] ksys_write+0x150/0x270 [ 374.452887][T16617] ? __pfx_ksys_write+0x10/0x10 [ 374.452906][T16617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.452924][T16617] do_syscall_64+0x174/0x580 [ 374.452938][T16617] ? clear_bhb_loop+0x40/0x90 [ 374.452956][T16617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.452971][T16617] RIP: 0033:0x7fc47ad5d68e [ 374.452987][T16617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 374.453001][T16617] RSP: 002b:00007ffe3194b9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.453019][T16617] RAX: ffffffffffffffda RBX: 000055556746b500 RCX: 00007fc47ad5d68e [ 374.453030][T16617] RDX: 0000000000000001 RSI: 00007ffe3194ba80 RDI: 0000000000000005 [ 374.453039][T16617] RBP: 00007fc47ae336f2 R08: 0000000000000000 R09: 0000000000000000 [ 374.453051][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.453060][T16617] R13: 00007ffe3194ba80 R14: 00007fc47bb44620 R15: 0000000000000003 [ 374.453078][T16617] [ 374.940791][ T5640] Bluetooth: hci2: command tx timeout [ 374.957903][ T6571] team0: left allmulticast mode [ 374.962972][ T6571] team_slave_0: left allmulticast mode [ 374.968944][ T6571] team_slave_1: left allmulticast mode [ 374.974440][ T6571] team0: left promiscuous mode [ 374.979288][ T6571] team_slave_0: left promiscuous mode [ 374.984823][ T6571] team_slave_1: left promiscuous mode [ 374.991420][ T6571] bridge0: port 3(team0) entered disabled state [ 375.000801][ T6571] bridge_slave_1: left allmulticast mode [ 375.007091][ T6571] bridge_slave_1: left promiscuous mode [ 375.012956][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.039575][ T6571] pim6reg527: left allmulticast mode [ 375.045031][ T6571] dvmrp0: left allmulticast mode [ 375.051874][ T6571] batman_adv: batadv0: Interface deactivated: gretap1 [ 375.172889][ T6571] batman_adv: batadv0: Removing interface: gretap1 [ 375.215667][ T6571] bond29 (unregistering): (slave geneve3): Releasing active interface [ 375.270359][ T6571] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 375.278871][ T6571] bridge1 (unregistering): left promiscuous mode [ 375.288589][ T6571] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 375.297049][ T6571] bridge2 (unregistering): left promiscuous mode [ 375.319579][ T6571] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 375.328055][ T6571] bridge4 (unregistering): left promiscuous mode [ 375.337722][ T6571] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 375.346210][ T6571] bridge5 (unregistering): left promiscuous mode [ 375.368080][ T6571] bond13 (unregistering): (slave bridge6): Releasing backup interface [ 375.378284][ T6571] bridge6 (unregistering): left promiscuous mode [ 375.394527][ T6571] bond16 (unregistering): (slave bridge7): Releasing backup interface [ 375.407823][ T6571] bridge7 (unregistering): left promiscuous mode [ 375.421230][ T6571] bond18 (unregistering): (slave bridge8): Releasing backup interface [ 375.434092][ T6571] bridge8 (unregistering): left promiscuous mode [ 375.452741][ T6571] bond32 (unregistering): (slave bridge10): Releasing backup interface [ 375.462386][ T6571] bridge10 (unregistering): left promiscuous mode [ 375.469362][ T6571] bridge10 (unregistering): left allmulticast mode [ 375.493640][ T6571] team0: Port device bridge11 removed [ 375.505755][ T6571] team0: Port device bridge12 removed [ 375.518189][ T6571] bond40 (unregistering): (slave bridge13): Releasing backup interface [ 375.531480][ T6571] bridge13 (unregistering): left promiscuous mode [ 375.540981][ T6571] bridge13 (unregistering): left allmulticast mode [ 375.553183][ T6571] bond41 (unregistering): (slave bridge14): Releasing backup interface [ 375.564846][ T6571] bridge14 (unregistering): left promiscuous mode [ 375.572486][ T6571] bridge14 (unregistering): left allmulticast mode [ 375.586280][ T6571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.605279][ T6571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.617341][ T6571] bond0 (unregistering): Released all slaves [ 375.629428][ T6571] bond1 (unregistering): Released all slaves [ 375.647694][ T6571] bond2 (unregistering): Released all slaves [ 375.673397][ T6571] bond3 (unregistering): Released all slaves [ 375.690077][ T6571] bond4 (unregistering): Released all slaves [ 375.705481][ T6571] bond5 (unregistering): Released all slaves [ 375.724704][ T6571] bond6 (unregistering): Released all slaves [ 375.756868][ T6571] bond7 (unregistering): Released all slaves [ 375.772439][ T6571] bond8 (unregistering): Released all slaves [ 375.788827][ T6571] bond9 (unregistering): Released all slaves [ 375.817390][ T6571] bond10 (unregistering): Released all slaves [ 375.833218][ T6571] bond11 (unregistering): Released all slaves [ 375.850298][ T6571] bond12 (unregistering): Released all slaves [ 375.879143][ T6571] bond13 (unregistering): Released all slaves [ 375.894536][ T6571] bond14 (unregistering): Released all slaves [ 375.915180][ T6571] bond15 (unregistering): Released all slaves [ 375.940876][ T6571] bond16 (unregistering): Released all slaves [ 375.959098][ T6571] bond17 (unregistering): Released all slaves [ 375.983701][ T6571] bond18 (unregistering): Released all slaves [ 376.000174][ T6571] bond19 (unregistering): Released all slaves [ 376.016762][ T6571] bond20 (unregistering): Released all slaves [ 376.028187][ T6571] bond21 (unregistering): Released all slaves [ 376.039574][ T6571] bond22 (unregistering): Released all slaves [ 376.050892][ T6571] bond23 (unregistering): Released all slaves [ 376.063102][ T6571] bond24 (unregistering): Released all slaves [ 376.075605][ T6571] bond25 (unregistering): Released all slaves [ 376.088322][ T6571] bond26 (unregistering): Released all slaves [ 376.100720][ T6571] bond27 (unregistering): Released all slaves [ 376.113470][T16698] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.163299][ T6571] bond28 (unregistering): Released all slaves [ 376.178199][ T6571] bond29 (unregistering): Released all slaves [ 376.190817][ T6571] bond30 (unregistering): Released all slaves [ 376.206466][ T6571] bond31 (unregistering): Released all slaves [ 376.225187][ T6571] bond32 (unregistering): Released all slaves [ 376.238176][ T6571] bond33 (unregistering): Released all slaves [ 376.250666][ T6571] bond34 (unregistering): Released all slaves [ 376.262722][ T6571] bond35 (unregistering): Released all slaves [ 376.274836][ T6571] bond36 (unregistering): Released all slaves [ 376.287662][ T6571] bond37 (unregistering): Released all slaves [ 376.300163][ T6571] bond38 (unregistering): Released all slaves [ 376.312806][ T6571] bond39 (unregistering): Released all slaves [ 376.372778][ T6571] bond40 (unregistering): Released all slaves [ 376.392054][ T6571] bond41 (unregistering): Released all slaves [ 376.509048][T16617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.547572][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 376.577972][T16617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.612744][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.627989][T16617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.653081][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 376.672303][T16617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.693287][T16617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.707714][ T6571] tipc: Left network mode [ 376.817184][ T6571] batman_adv: batadv0: Removing interface: wlan0 [ 376.857414][T16617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.885455][T16617] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.900908][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.908503][ T8521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.926356][T11038] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.933941][T11038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.008923][ T5640] Bluetooth: hci2: command tx timeout [ 377.458363][T16617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.520599][T16617] veth0_vlan: entered promiscuous mode [ 377.535605][T16617] veth1_vlan: entered promiscuous mode [ 377.574703][T16617] veth0_macvtap: entered promiscuous mode [ 377.590039][T16617] veth1_macvtap: entered promiscuous mode [ 377.612712][T16617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.630487][T16617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.653101][ T6557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.666142][ T6557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.678954][ T6557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.690366][ T6557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.734248][T16617] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht' [ 377.773981][ T8521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.776304][T16617] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 377.790957][ T8521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.827428][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.835953][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.332280][ T6571] hsr_slave_0: left promiscuous mode [ 378.347844][ T6571] hsr_slave_1: left promiscuous mode [ 378.354282][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.363542][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.373608][ T6571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.381825][ T6571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.397047][ T6571] veth1_macvtap: left promiscuous mode [ 378.402959][ T6571] veth0_macvtap: left promiscuous mode [ 378.409853][ T6571] veth1_vlan: left promiscuous mode [ 378.415488][ T6571] veth0_vlan: left promiscuous mode [ 378.521021][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.734110][ T6571] team0 (unregistering): Port device team_slave_1 removed [ 378.761339][ T6571] team0 (unregistering): Port device team_slave_0 removed [ 378.930162][T11039] smbdirect: ib_dev[syś2] removed [ 379.084921][ T5640] Bluetooth: hci2: command tx timeout [ 379.208661][ T6571] IPVS: stop unused estimator thread 0...